c3d83a804ef69ffc8e1d1c0cd6860266

Sharing

Copy URL

Twitter E-mail

General

Target

c3d83a804ef69ffc8e1d1c0cd6860266
Size

2.1MB
MD5

c3d83a804ef69ffc8e1d1c0cd6860266
SHA1

3851e01fb94e01a587ab96c9ec1232b4482179e3
SHA256

aebdca242faa2ab7e15a4c8c6fc877a7c46c869a32890c413130b2e57e82afba
SHA512

b9b2a35c42b5b41aefae03bf155c4b3d177a0dc9222ad266c8a34ae1c7da9626136b5bac41d9f5c17113bcfd7588d0d59cece5f4ef9510a615def6a1b02cc61e
SSDEEP

49152:qZHIfPg2ph0DkQn8Ao5iz6uDtgeEEpEIXj5463CwugwC0ZSSnGB:4IfPgs0rnuQ6uxt/+IXjzyjgwXd+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SpamKiller2908.exe

Files

c3d83a804ef69ffc8e1d1c0cd6860266
.zip
Readme.txt
SpamKiller2908.exe
.exe windows:1 windows x86 arch:x86

6e0d0bdd8113be9002fdcfef3cba4bd9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

CloseHandle
CreateDirectoryA
CreateFileA
CreateProcessA
DebugBreak
DeleteFileA
DeleteFileW
EnterCriticalSection
ExitProcess
FileTimeToDosDateTime
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FreeLibrary
FreeResource
GetACP
GetCPInfo
GetCommandLineA
GetCurrentDirectoryA
GetCurrentThreadId
GetDateFormatA
GetDiskFreeSpaceA
GetDriveTypeA
GetEnvironmentStrings
GetEnvironmentVariableA
GetFileAttributesA
GetFileTime
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcAddress
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetTimeZoneInformation
GetUserDefaultLCID
GetVersion
GetVersionExA
GetVolumeInformationA
GlobalMemoryStatus
InitializeCriticalSection
IsBadReadPtr
IsBadWritePtr
LeaveCriticalSection
LoadLibraryA
LoadResource
LocalAlloc
LocalFree
LockResource
MultiByteToWideChar
RaiseException
ReadFile
RemoveDirectoryA
RtlUnwind
SetConsoleCtrlHandler
SetCurrentDirectoryA
SetEnvironmentVariableA
SetErrorMode
SetFileAttributesA
SetFilePointer
SetFileTime
SetHandleCount
SizeofResource
SystemTimeToFileTime
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteFile
_lclose
_lcreat
_lwrite
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA

gdi32

CreateSolidBrush
DeleteObject
PatBlt
SelectObject

user32

BeginPaint
DefWindowProcA
DestroyWindow
DispatchMessageA
EndDialog
EndPaint
EnumThreadWindows
FillRect
FrameRect
GetClientRect
GetDlgItem
GetDlgItemTextA
GetPropA
GetSysColor
GetSystemMetrics
GetWindowRect
InflateRect
InvalidateRect
MessageBoxA
PeekMessageA
PostQuitMessage
RegisterWindowMessageA
RemovePropA
SendDlgItemMessageA
SetDlgItemTextA
SetPropA
SetWindowPos
SetWindowWord
ShowWindow
TranslateMessage
UnregisterClassA
UpdateWindow
wsprintfA

Exports

Exports

@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6e0d0bdd8113be9002fdcfef3cba4bd9

Headers

File Characteristics

Imports

kernel32

gdi32

user32

Exports

Exports

Sections

.text Size: 82KB - Virtual size: 84KB

.data Size: 20KB - Virtual size: 24KB

.tls Size: 512B - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.idata Size: 3KB - Virtual size: 4KB

.edata Size: 512B - Virtual size: 4KB

.rsrc Size: 9KB - Virtual size: 12KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 82KB - Virtual size: 84KB

.data
Size: 20KB - Virtual size: 24KB

.tls
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.idata
Size: 3KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 9KB - Virtual size: 12KB

.reloc
Size: 4KB - Virtual size: 4KB