dc3d64b89c2dcbc29a7e1aa185a2c2d2a76ae8e12abddc270636eb3f783a9d95

Sharing

Copy URL Twitter E-mail

General

Target

dc3d64b89c2dcbc29a7e1aa185a2c2d2a76ae8e12abddc270636eb3f783a9d95
Size

2.5MB
MD5

900d1d570a1277c6cf2ccd84fb63c146
SHA1

6dfa2601b264cde8f3dc23352009e5806551e67a
SHA256

dc3d64b89c2dcbc29a7e1aa185a2c2d2a76ae8e12abddc270636eb3f783a9d95
SHA512

ce82a10998f161110f1ff997d23f412320ef566db016947472e8e4d926bdd2a6920d0cfe0a1c877b1fa8186d3ddfaef81386baca00bdcda91834cde70fcfdade
SSDEEP

49152:DfHPTnstZjmqnFH70Ap+6M5+q2JhveTZGGLzQ/A437zs8d:DfHPTstZjDnFgS+6M5+q2JhveTZGGn1w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc3d64b89c2dcbc29a7e1aa185a2c2d2a76ae8e12abddc270636eb3f783a9d95

Files

dc3d64b89c2dcbc29a7e1aa185a2c2d2a76ae8e12abddc270636eb3f783a9d95
.exe windows:4 windows x86 arch:x86

3699d1678f127cf94b4e1a526b0271fb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msacm32

acmStreamPrepareHeader
acmStreamUnprepareHeader
acmStreamConvert
acmStreamSize
acmStreamClose
acmStreamOpen
acmFormatEnumW
acmFormatDetailsW
acmFormatTagEnumW
acmDriverDetailsW
acmDriverClose
acmDriverOpen
acmDriverEnum

winmm

waveOutClose
waveOutWrite
waveOutUnprepareHeader
waveOutRestart
waveOutReset
waveOutPrepareHeader
waveOutPause
waveOutOpen
waveOutGetPosition
waveOutGetNumDevs

mpr

WNetCloseEnum

kernel32

GetStartupInfoA
GetProcAddress
GetModuleFileNameW
GetPrivateProfileStringW
lstrlenW
lstrcmpiW
GetSystemTimeAsFileTime
GetTickCount
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetModuleHandleA
GetCommandLineA
GetLastError
WriteFile
WriteConsoleW
WriteConsoleA
LoadLibraryA

user32

DrawFocusRect
DrawIconEx
DrawStateW
DrawTextExW
DrawTextW
EnableMenuItem
EnableWindow
EndDialog
EndPaint
FillRect
FindWindowExW
FindWindowW
FrameRect
GetActiveWindow
GetAsyncKeyState
GetCapture
GetClassNameA
GetClassNameW
GetClientRect
GetClipboardData
GetDC
GetDesktopWindow
GetDlgCtrlID
GetDlgItemInt
GetDlgItemTextW
GetFocus
GetForegroundWindow
GetIconInfo
GetKeyboardState
GetKeyNameTextW
GetKeyState
GetMenuItemCount
GetMenuItemInfoW
GetMessagePos
GetMessageW
GetParent
GetPropW
GetScrollInfo
GetSubMenu
GetSysColorBrush
GetSystemMetrics
GetWindowDC
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
DrawEdge
InflateRect
InsertMenuItemW
InsertMenuW
InvalidateRect
DispatchMessageW
IsClipboardFormatAvailable
IsDialogMessageW
IsDlgButtonChecked
IsIconic
IsWindow
IsWindowEnabled
IsWindowVisible
IsZoomed
keybd_event
KillTimer
LoadCursorW
LoadStringW
MapDialogRect
GetWindowThreadProcessId
MapWindowPoints
MessageBoxW
ModifyMenuW
MoveWindow
MsgWaitForMultipleObjects
OpenClipboard
PeekMessageW
PostMessageW
PostQuitMessage
RedrawWindow
RegisterClassW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropW
ScreenToClient
ScrollWindowEx
SendDlgItemMessageW
SetActiveWindow
SetCapture
SetClassLongW
SetCursor
SetDlgItemInt
SetDlgItemTextW
SetFocus
SetMenu
SetMenuDefaultItem
SetMenuItemInfoW
SetPropW
SetScrollInfo
SetTimer
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowsHookExW
SetWindowTextW
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TranslateMessage
UnhookWindowsHookEx
UpdateWindow
WaitForInputIdle
WindowFromDC
WindowFromPoint
wsprintfW
DialogBoxParamW
DialogBoxIndirectParamW
DestroyWindow
DestroyMenu
DeleteMenu
DefWindowProcW
CreateWindowExW
CreatePopupMenu
CreateDialogParamW
CreateDialogIndirectParamW
CopyImage
CloseClipboard
ClientToScreen
CheckMenuItem
CheckDlgButton
CharUpperW
CallWindowProcW
CallNextHookEx
BeginPaint
AppendMenuW
LoadImageW
SendMessageW
DestroyIcon
IsCharAlphaW
MapVirtualKeyW

comdlg32

GetOpenFileNameW
GetSaveFileNameW

shell32

DragFinish
CommandLineToArgvW
ShellExecuteW
ShellExecuteExW
ShellExecuteA
Shell_NotifyIconW
DragQueryPoint
DragQueryFileW
DragAcceptFiles
StrCmpNIW

ole32

CoAddRefServerProcess
CoCreateInstance
CoGetMalloc
CoInitialize
CoRegisterClassObject
CoResumeClassObjects
CoRevokeClassObject
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CreateStreamOnHGlobal

shlwapi

SHDeleteKeyW
SHDeleteEmptyKeyW
PathCompactPathExW
PathFindFileNameW
PathRemoveArgsW
PathRemoveBlanksW

msvcrt

exit
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_initterm
__getmainargs
_acmdln
__setusermatherr
_XcptFilter
_except_handler3
_exit

Sections

.text
Size: 740KB - Virtual size: 739KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 576KB - Virtual size: 576KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdr3
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3699d1678f127cf94b4e1a526b0271fb

Headers

File Characteristics

Imports

msacm32

winmm

mpr

kernel32

user32

comdlg32

shell32

ole32

shlwapi

msvcrt

Sections

.text Size: 740KB - Virtual size: 739KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 576KB - Virtual size: 576KB

.xdr3 Size: 1.2MB - Virtual size: 1.2MB

.text
Size: 740KB - Virtual size: 739KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 576KB - Virtual size: 576KB

.xdr3
Size: 1.2MB - Virtual size: 1.2MB