c378f5ad7e73a43c80c099df4a5522c2

Sharing

Copy URL Twitter E-mail

General

Target

c378f5ad7e73a43c80c099df4a5522c2
Size

341KB
MD5

c378f5ad7e73a43c80c099df4a5522c2
SHA1

1241f9390ad2389378f4f2e139a090e9b3d6c7d9
SHA256

a1dfed08543654673ec4d6e555b64dfa635c6e5a78ace5212845e81b308d39ca
SHA512

728a7f02c932543a9857c987322a33eacfaef037ee22ab41740c14175e0aa2e9734d7e2c6fecb60503ac004fdc9149949f3fde499dfa77ce7c251b237d9f3fb5
SSDEEP

6144:LoNuBzRKgmVnmcK96tQqtDW1kTILaZJVAgiOvXqbpu9WcHAJzpYH+kDyW4S:jRKgmt9K96tO16nD7vXcpTcHAJVYH+Wf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c378f5ad7e73a43c80c099df4a5522c2

Files

c378f5ad7e73a43c80c099df4a5522c2
.exe windows:4 windows x86 arch:x86

1978e339b96b476487ca7378ceed2799

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeEndPeriod
timeBeginPeriod
mciSendCommandA
mciGetErrorStringA
timeGetTime
timeGetDevCaps
timeKillEvent
timeSetEvent

kernel32

GetCPInfo
GetOEMCP
RtlUnwind
HeapAlloc
HeapFree
TerminateProcess
GetStartupInfoA
GetCommandLineA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetSystemTimeAsFileTime
RaiseException
CreateThread
ExitThread
HeapSize
HeapReAlloc
TlsGetValue
GetProcessVersion
ExitProcess
GetCurrentThreadId
VirtualAlloc
SetHandleCount
GetStdHandle
GetFileType
SetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
LocalReAlloc
TlsSetValue
GlobalFlags
TlsAlloc
LocalAlloc
SetErrorMode
SetThreadPriority
IsBadWritePtr
LocalFree
IsBadReadPtr
SetEndOfFile
FlushFileBuffers
ReadFile
SetFilePointer
WriteFile
CreateFileA
GetCurrentProcess
GetLastError
lstrcpynA
GetACP
GetVersion
GetFullPathNameA
GlobalGetAtomNameA
GetDriveTypeA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
WideCharToMultiByte
lstrlenA
OutputDebugStringA
InterlockedDecrement
InterlockedIncrement
SetLastError
LoadLibraryA
FreeLibrary
lstrcmpA
GetModuleFileNameA
lstrcpyA
lstrcatA
SetFileAttributesA
GetTempFileNameA
DeleteFileA
GetFileAttributesA
GetTempPathA
GetModuleHandleA
GetProcAddress
GlobalReAlloc
GlobalAlloc
GlobalHandle
GlobalLock
GlobalUnlock
GlobalFree
SuspendThread
Sleep
EnterCriticalSection
LeaveCriticalSection
SetEvent
DeleteCriticalSection
InitializeCriticalSection
CreateEventA
ResumeThread
GetShortPathNameA
CreateProcessA
WaitForSingleObject
CloseHandle
MultiByteToWideChar
HeapCreate
HeapDestroy
VirtualFree

user32

GetWindowTextA
IsWindowVisible
AdjustWindowRectEx
SetFocus
GetFocus
GetSysColor
MapWindowPoints
IsWindowEnabled
GetNextDlgTabItem
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
GetCursorPos
ValidateRect
GetActiveWindow
GetClassNameA
PtInRect
GetSysColorBrush
DestroyMenu
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetDlgCtrlID
GetKeyState
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
IsIconic
GetWindowPlacement
GetSystemMetrics
DrawTextA
TabbedTextOutA
ClientToScreen
SystemParametersInfoA
CreateWindowExA
LoadIconA
BeginPaint
EndPaint
PostQuitMessage
SetForegroundWindow
SendMessageA
DefWindowProcA
CreateDialogParamA
ShowWindow
SetDlgItemTextA
SendDlgItemMessageA
DestroyWindow
SetWindowTextA
PeekMessageA
TranslateMessage
DispatchMessageA
MessageBoxA
CopyRect
UpdateWindow
EnableWindow
GetParent
ShowCursor
GetAsyncKeyState
GetClientRect
SetRect
GetWindowLongA
InvalidateRect
OffsetRect
GetDC
GetWindowRect
ReleaseDC
MsgWaitForMultipleObjects
PostMessageA
SetTimer
KillTimer
wsprintfA
GetMessageA
LoadStringA
RegisterClassA
LoadCursorA
GrayStringA

gdi32

CreateCompatibleDC
BitBlt
StretchBlt
GetStockObject
CreateDIBSection
DeleteDC
StretchDIBits
SetBrushOrgEx
SetStretchBltMode
PatBlt
CreateDIBitmap
EnumFontFamiliesA
GetTextExtentPoint32A
GetTextMetricsA
CreateFontIndirectA
TextOutA
SetTextColor
GetCharABCWidthsA
SetTextAlign
SetBkMode
SaveDC
RestoreDC
SetBkColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
CreateCompatibleBitmap
SelectObject
GetDeviceCaps
PtVisible
ExtTextOutA
Escape
RectVisible
GetObjectA
CreateBitmap
DeleteObject

comdlg32

GetOpenFileNameA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA

comctl32

ord17

ole32

CoCreateInstance
CoInitialize
CoUninitialize
StgOpenStorage
StgIsStorageFile

Sections

.text
Size: 288KB - Virtual size: 287KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

IS_MMX_T
Size: 4KB - Virtual size: 46B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

QMAD_TEX
Size: 4KB - Virtual size: 165B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1978e339b96b476487ca7378ceed2799

Headers

File Characteristics

Imports

winmm

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

ole32

Sections

.text Size: 288KB - Virtual size: 287KB

IS_MMX_T Size: 4KB - Virtual size: 46B

.rdata Size: 28KB - Virtual size: 24KB

.data Size: 52KB - Virtual size: 2.7MB

QMAD_TEX Size: 4KB - Virtual size: 165B

.rsrc Size: 12KB - Virtual size: 11KB

.text
Size: 288KB - Virtual size: 287KB

IS_MMX_T
Size: 4KB - Virtual size: 46B

.rdata
Size: 28KB - Virtual size: 24KB

.data
Size: 52KB - Virtual size: 2.7MB

QMAD_TEX
Size: 4KB - Virtual size: 165B

.rsrc
Size: 12KB - Virtual size: 11KB