c19bc3fcf9720c5575a3cb642b096aa7

Sharing

Copy URL Twitter E-mail

General

Target

c19bc3fcf9720c5575a3cb642b096aa7
Size

453KB
MD5

c19bc3fcf9720c5575a3cb642b096aa7
SHA1

bf0d5bb8a186e47cc2460b93df07f47f60a3c48f
SHA256

07534227c02f18f7cc59473a86191dba69a7a8b7372b5e79a0d25665fc9e4c14
SHA512

c22c0b0c0a4db926ccb12ffd721ad3e3ff96eca8b9801f9ccc8f311b530fbf038e7fe2909491a47018311aad0a5c35fc63d7e6ba74fd2694278a812d67934436
SSDEEP

12288:1oG/ylTFVui2xunKrDr1hO43q05sqZPhBUq:1oG/2uZGer1hO4usZBj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c19bc3fcf9720c5575a3cb642b096aa7

Files

c19bc3fcf9720c5575a3cb642b096aa7
.exe windows:5 windows x86 arch:x86

e93aec73a95d6745e536340798c2872e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
malloc
_initterm
free
_vsnprintf
wcslen
qsort
_except_handler3
_vsnwprintf

user32

EndDeferWindowPos
GetUpdateRect
GetSysColorBrush
SendDlgItemMessageW
ClientToScreen
GetCursorPos
SetParent
GetDC
CreateIconIndirect
GetIconInfo
LoadImageW
CopyImage
InflateRect
GetWindow
LoadStringA
GetWindowTextA
LoadIconW
SetDlgItemTextW
GetDlgItemTextW
GetSysColor
FillRect
DrawFocusRect
CreatePopupMenu
AppendMenuW
TrackPopupMenu
DestroyMenu
ChildWindowFromPointEx
GetFocus
LoadCursorW
SetCursor
EndDialog
GetWindowDC
ReleaseDC
InvalidateRect
GetClientRect
DeferWindowPos
CheckDlgButton
EnableWindow
ShowWindow
SetWindowTextW
GetWindowTextW
MessageBeep
GetWindowTextLengthW
SetWindowPos
GetSystemMetrics
SetPropW
SendMessageW
PostMessageW
GetParent
RemovePropW
CallWindowProcW
GetPropW
SetFocus
GetDlgCtrlID
GetWindowRect
MapWindowPoints
EnumChildWindows
GetDlgItem
SetWindowLongW
DestroyIcon
LoadStringW
ScreenToClient
GetWindowLongW
SetWindowContextHelpId
WinHelpW
DestroyWindow
BeginDeferWindowPos
MessageBoxA
DialogBoxParamW
DialogBoxIndirectParamW
ReleaseCapture
GetCapture
CheckRadioButton
CreateWindowExW

gdi32

SetTextColor
DeleteObject
SetBkMode
DeleteDC
CreateCompatibleDC
TextOutW
SelectObject
GetTextMetricsW
CreateSolidBrush
StretchDIBits
CreateCompatibleBitmap
Rectangle
GetStockObject
BitBlt
SetStretchBltMode
GetObjectW
GetBitmapBits
StretchBlt
CreateBitmap
SetDIBitsToDevice
MoveToEx
SetTextAlign
SetBkColor
IntersectClipRect
CreateFontIndirectW
GetTextExtentPointW

kernel32

CreateMutexW
ReleaseActCtx
ReleaseMutex
WaitForSingleObject
GetCurrentThreadId
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
CloseHandle
LoadResource
LockResource
FreeResource
MultiByteToWideChar
GetModuleFileNameW
LoadLibraryW
GetProcAddress
FreeLibrary
lstrcmpA
lstrcmpW
LocalFree
LocalAlloc
lstrlenA
lstrlenW
IsBadWritePtr
GetModuleFileNameA
DeactivateActCtx
ActivateActCtx
SetLastError
GetLastError
AddRefActCtx
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleW
CreateActCtxW
GetWindowsDirectoryW
lstrcpynW
SearchPathW
FindClose
FindFirstFileW
FindResourceW

advapi32

RegQueryValueExW
RegCloseKey
RegSetValueExW
RegCreateKeyW

msimg32

TransparentBlt

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

shlwapi

wnsprintfW
ord215
ord346

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.9e3c
Size: 199KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1o2p
Size: 199KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.16as
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aeas
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.k1kl
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ps1i
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.t3ta
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ksi1
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.12i1
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.123f
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eaa
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ze
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.1teaX
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.134
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.724
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.182
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.381
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.832
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ii32
Size: 512B - Virtual size: 238B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.i832
Size: 512B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.i833
Size: 512B - Virtual size: 218B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.i803
Size: 512B - Virtual size: 222B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.i804
Size: 512B - Virtual size: 246B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.1928
Size: 512B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.1hgh
Size: 512B - Virtual size: 222B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.10gh
Size: 512B - Virtual size: 226B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.9102
Size: 512B - Virtual size: 262B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.4578
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e93aec73a95d6745e536340798c2872e

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

user32

gdi32

kernel32

advapi32

msimg32

version

shlwapi

Sections

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 2KB - Virtual size: 2KB

.9e3c Size: 199KB - Virtual size: 198KB

.1o2p Size: 199KB - Virtual size: 198KB

.16as Size: 512B - Virtual size: 216B

.aeas Size: 512B - Virtual size: 216B

.k1kl Size: 512B - Virtual size: 216B

.ps1i Size: 512B - Virtual size: 216B

.t3ta Size: 512B - Virtual size: 216B

.ksi1 Size: 512B - Virtual size: 216B

.12i1 Size: 512B - Virtual size: 216B

.123f Size: 512B - Virtual size: 216B

.eaa Size: 512B - Virtual size: 216B

.ze Size: 512B - Virtual size: 216B

.1teaX Size: 512B - Virtual size: 216B

.134 Size: 512B - Virtual size: 216B

.724 Size: 512B - Virtual size: 216B

.182 Size: 512B - Virtual size: 216B

.381 Size: 512B - Virtual size: 216B

.832 Size: 512B - Virtual size: 216B

.ii32 Size: 512B - Virtual size: 238B

.i832 Size: 512B - Virtual size: 202B

.i833 Size: 512B - Virtual size: 218B

.i803 Size: 512B - Virtual size: 222B

.i804 Size: 512B - Virtual size: 246B

.1928 Size: 512B - Virtual size: 202B

.1hgh Size: 512B - Virtual size: 222B

.10gh Size: 512B - Virtual size: 226B

.9102 Size: 512B - Virtual size: 262B

.4578 Size: 512B - Virtual size: 196B

.rsrc Size: 16KB - Virtual size: 16KB

.reloc Size: 512B - Virtual size: 312B

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 2KB - Virtual size: 2KB

.9e3c
Size: 199KB - Virtual size: 198KB

.1o2p
Size: 199KB - Virtual size: 198KB

.16as
Size: 512B - Virtual size: 216B

.aeas
Size: 512B - Virtual size: 216B

.k1kl
Size: 512B - Virtual size: 216B

.ps1i
Size: 512B - Virtual size: 216B

.t3ta
Size: 512B - Virtual size: 216B

.ksi1
Size: 512B - Virtual size: 216B

.12i1
Size: 512B - Virtual size: 216B

.123f
Size: 512B - Virtual size: 216B

.eaa
Size: 512B - Virtual size: 216B

.ze
Size: 512B - Virtual size: 216B

.1teaX
Size: 512B - Virtual size: 216B

.134
Size: 512B - Virtual size: 216B

.724
Size: 512B - Virtual size: 216B

.182
Size: 512B - Virtual size: 216B

.381
Size: 512B - Virtual size: 216B

.832
Size: 512B - Virtual size: 216B

.ii32
Size: 512B - Virtual size: 238B

.i832
Size: 512B - Virtual size: 202B

.i833
Size: 512B - Virtual size: 218B

.i803
Size: 512B - Virtual size: 222B

.i804
Size: 512B - Virtual size: 246B

.1928
Size: 512B - Virtual size: 202B

.1hgh
Size: 512B - Virtual size: 222B

.10gh
Size: 512B - Virtual size: 226B

.9102
Size: 512B - Virtual size: 262B

.4578
Size: 512B - Virtual size: 196B

.rsrc
Size: 16KB - Virtual size: 16KB

.reloc
Size: 512B - Virtual size: 312B