c1c1b19835fa09dcc2ff5d80cdc3a422

Sharing

Copy URL

Twitter E-mail

General

Target

c1c1b19835fa09dcc2ff5d80cdc3a422
Size

2.2MB
MD5

c1c1b19835fa09dcc2ff5d80cdc3a422
SHA1

c9f3d99f8835d4c685382101851615046db90b3d
SHA256

12ecc6148f29cbc2c73f35ff5b75081e9ddb30f6b3456f5eff726658eab7bbba
SHA512

996b00b99809d86561172f07031787c5ea031fdc4973c817b48600901d7d1a53eeebf0d1bea4f25d6cf7e021b54f2b8fcc502507feee21af2d9c156c6ab0fdcc
SSDEEP

49152:9DmN13o0VJvbp+vRRIyYBwHwbnZ2D9HaXl:9I5+vQzBEYn8da1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1c1b19835fa09dcc2ff5d80cdc3a422

Files

c1c1b19835fa09dcc2ff5d80cdc3a422
.exe windows:4 windows x86 arch:x86

8a1d8aa4a50b788313c26c8acc27907b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
__p___initenv
_acmdln
__set_app_type
wcsncat
__setusermatherr
memcmp
_splitpath
__p__fmode
malloc
_initterm
_XcptFilter
signal
_controlfp
__getmainargs
_vsnprintf
_chdir
_exit
_amsg_exit
exit
_except_handler3
__dllonexit
free
_adjust_fdiv
memset
_onexit

shlwapi

StrChrA
PathFindExtensionW
PathFindFileNameW
UrlUnescapeW
PathFileExistsW
PathRemoveBackslashW
PathMatchSpecW
PathCompactPathW
PathStripToRootW
PathIsUNCW
PathCompactPathExW

shell32

SHGetMalloc
SHGetPathFromIDListW
ShellExecuteA
SHGetPathFromIDListA
DragQueryFileA
ShellExecuteW
SHFileOperationA
ShellExecuteExW
SHGetSpecialFolderLocation
DragQueryFileW
CommandLineToArgvW
SHGetDesktopFolder

comctl32

InitCommonControlsEx
CreateStatusWindowW
ImageList_LoadImageW
ImageList_ReplaceIcon
ImageList_GetImageCount
ImageList_Destroy
CreateToolbarEx
ImageList_SetImageCount

winspool.drv

ClosePrinter
OpenPrinterW
DeviceCapabilitiesW

kernel32

GetCurrentThreadId
VirtualFree
GetStartupInfoA
FindClose
GetCurrentProcess
EnterCriticalSection
LoadLibraryA
InitializeCriticalSection
GetFileType
Sleep
GetACP
SetLastError
QueryPerformanceCounter
VirtualAlloc
SetHandleCount
WriteFile
FreeLibrary
GetSystemTimeAsFileTime
TlsGetValue
DeleteCriticalSection
GetProcAddress
SetUnhandledExceptionFilter
DisableThreadLibraryCalls
LCMapStringA
GetModuleFileNameA
UnhandledExceptionFilter
TerminateProcess
InterlockedExchange
CloseHandle
WaitForSingleObject
GetLocalTime
InterlockedIncrement
GetCurrentProcessId
GetModuleHandleA
InterlockedDecrement
CreateFileW

gdi32

GetPixel
GetMapMode
DeleteObject
LineTo
PtVisible
CombineRgn
SetTextJustification
SetPixel
CreatePalette
SetTextColor
Ellipse
GetDeviceCaps
CreateRectRgnIndirect
GetTextExtentPointW
SetWindowOrgEx
SelectObject
DeleteDC
CreateBitmap

advapi32

GetExplicitEntriesFromAclW
RegSetValueExW
RegCloseKey
RegOpenKeyA
GetSidIdentifierAuthority
EqualSid
RegDeleteValueA
RegQueryValueExA
RegEnumKeyExW
RegOpenKeyExA
OpenProcessToken
RegCreateKeyExA
LsaClose

oleaut32

VariantCopyInd
SysAllocStringLen
SafeArrayCreate
LoadTypeLi
VariantClear
SafeArrayPutElement
RegisterTypeLi
VariantChangeTypeEx
GetActiveObject
SysStringLen

user32

SendMessageW
MessageBoxW
GetDlgItem
SetWindowLongW
GetDC
ShowWindow
EnableWindow
IsWindow
GetSystemMetrics
DestroyWindow
GetWindowRect
SetWindowPos

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8a1d8aa4a50b788313c26c8acc27907b

Headers

File Characteristics

Imports

msvcrt

shlwapi

shell32

comctl32

winspool.drv

kernel32

gdi32

advapi32

oleaut32

user32

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.bss Size: 100KB - Virtual size: 100KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 524B

.rsrc Size: 20KB - Virtual size: 16KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.bss
Size: 100KB - Virtual size: 100KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 524B

.rsrc
Size: 20KB - Virtual size: 16KB