3546a2c286eebe6de6cc4d605cd080db4cf3dce0292a9f46a9db0bfaa8f8d539

Sharing

Copy URL Twitter E-mail

General

Target

3546a2c286eebe6de6cc4d605cd080db4cf3dce0292a9f46a9db0bfaa8f8d539
Size

1.1MB
MD5

9ca1393746a50f9abe00c193e9f8bc96
SHA1

d7f9477de6e436d02e9c6571ea73cc8ed70191ae
SHA256

3546a2c286eebe6de6cc4d605cd080db4cf3dce0292a9f46a9db0bfaa8f8d539
SHA512

9405c1d2a5c6778d52fb9bef9fbed7cce48ec2ec75a909e6a8c7cdbd944799379c5d41b24c8385bf5501ecbc1abf727b918d07eb6ba8dde86c3ef152d8e34554
SSDEEP

12288:WqP4d3+UiOWBh/OCz4VK1T0i1VLBdEdgFi2KnKAH4k9h0ubR39DiuVg9hGi:WzBa1FLBdEdg9tAHt9h9bRNDTb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3546a2c286eebe6de6cc4d605cd080db4cf3dce0292a9f46a9db0bfaa8f8d539

Files

3546a2c286eebe6de6cc4d605cd080db4cf3dce0292a9f46a9db0bfaa8f8d539
.exe windows:4 windows x86 arch:x86

2b7fa1022e67fd2981feef50c76db52a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\work\code\SVN2\PCLoader\PCLoader2.0\bin\PCLoader.pdb

Imports

crashrpt1402

ord27
ord16
ord9
ord8
ord11
ord12
ord24

kernel32

SetFileAttributesA
GetFileAttributesA
GetFileTime
GetTickCount
RtlUnwind
HeapAlloc
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
SetStdHandle
GetFileType
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
GetProcessHeap
GetStartupInfoA
SetFileTime
ExitThread
CreateThread
HeapSize
GetACP
FatalAppExitA
VirtualFree
HeapDestroy
HeapCreate
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetHandleCount
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
SetConsoleCtrlHandler
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
SetEnvironmentVariableA
InterlockedCompareExchange
LocalFileTimeToFileTime
FileTimeToLocalFileTime
SetErrorMode
GetShortPathNameA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
MoveFileA
GetOEMCP
GetCPInfo
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
SystemTimeToFileTime
FileTimeToSystemTime
GetThreadLocale
GetAtomNameA
GlobalFlags
SuspendThread
ResumeThread
SetThreadPriority
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
GetCurrentProcessId
InterlockedDecrement
GetModuleFileNameW
GlobalSize
GlobalAlloc
MulDiv
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
SetLastError
lstrcmpW
GetModuleHandleA
GetProcAddress
GetVersionExA
GlobalLock
GlobalUnlock
GlobalFree
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WaitForSingleObject
ResetEvent
SetEvent
CreateEventA
lstrcpynA
FreeResource
GetCurrentThreadId
FormatMessageA
LocalFree
CreateFileA
CloseHandle
GetStdHandle
Sleep
GetLastError
lstrlenA
lstrcmpiA
lstrcmpiW
GetStringTypeExA
GetStringTypeExW
lstrlenW
CompareStringA
CompareStringW
GetEnvironmentVariableA
MultiByteToWideChar
GetEnvironmentVariableW
GetVersion
InterlockedExchange
GetCommandLineA
FreeLibrary
GetCurrentDirectoryA
LoadLibraryA
GetModuleFileNameA
LoadResource
LockResource
SizeofResource
FindResourceA
WideCharToMultiByte
GetPrivateProfileIntA
GetPrivateProfileStringA
SetCurrentDirectoryA
WritePrivateProfileSectionA
WritePrivateProfileStringA
CopyFileA
ExitProcess
CreateFileW

user32

TranslateAcceleratorA
SetMenu
BringWindowToTop
CreatePopupMenu
InsertMenuItemA
LoadAcceleratorsA
ReuseDDElParam
UnpackDDElParam
GetDCEx
LockWindowUpdate
UnregisterClassA
DeleteMenu
WaitMessage
DestroyIcon
CharNextA
CopyAcceleratorTableA
IsRectEmpty
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
SetParent
UnionRect
RegisterClipboardFormatA
PostThreadMessageA
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
GetMenu
GetMenuItemID
MessageBoxA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SystemParametersInfoA
GetWindowPlacement
GetWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetCursorPos
GetKeyNameTextA
LoadCursorA
GetFocus
GetSubMenu
GetDesktopWindow
IntersectRect
SetWindowsHookExA
TrackPopupMenuEx
UnhookWindowsHookEx
CallNextHookEx
GetMenuItemCount
GetMenuStringA
GrayStringA
DrawTextExA
TabbedTextOutA
SetCursor
GetWindowLongA
FrameRect
InflateRect
FillRect
GetSysColor
OffsetRect
DrawStateA
DrawFocusRect
GetActiveWindow
GetCapture
SetCapture
PtInRect
ReleaseCapture
LoadImageA
RedrawWindow
DestroyCursor
GetCaretPos
GetKeyState
TranslateMessage
DispatchMessageA
UpdateWindow
GetParent
ClientToScreen
ScreenToClient
MoveWindow
PostQuitMessage
IsWindowVisible
IsIconic
GetSystemMetrics
DrawIcon
GetSystemMenu
AppendMenuA
SetWindowTextA
SetTimer
SendMessageA
EnableWindow
DrawTextA
CopyRect
PostMessageA
EndPaint
GetWindowRect
MessageBoxExA
MapWindowPoints
PeekMessageA
InvalidateRect
CharUpperA
CharUpperW
CharLowerA
CharLowerW
LoadStringA
LoadIconA
GetClientRect
LoadMenuA
SetWindowPos
GetSysColorBrush
GetDialogBaseUnits
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
GetMessageA
ValidateRect
GetWindowThreadProcessId
DestroyMenu
GetMenuItemInfoA
CreateWindowExA
MapVirtualKeyA
BeginPaint
GetWindowDC
ReleaseDC
GetDC
WindowFromPoint
SetRect
SetRectEmpty
IsZoomed
InsertMenuA
RemoveMenu
ScrollWindowEx
ShowWindow
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
KillTimer
GetForegroundWindow
GetWindowTextA

gdi32

CreateBitmap
GetDeviceCaps
CopyMetaFileA
CreateDCA
GetTextMetricsA
GetBkColor
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
LineTo
MoveToEx
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
SetArcDirection
SetColorAdjustment
SelectClipRgn
GetClipRgn
CreateRectRgn
SelectClipPath
GetViewportExtEx
GetObjectA
GetPixel
StartDocA
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ArcTo
PolyDraw
PolylineTo
PolyBezierTo
ExtSelectClipRgn
DeleteDC
CreateDIBPatternBrushPt
CreatePatternBrush
GetStockObject
SelectPalette
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
CreatePen
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreateRectRgnIndirect
PatBlt
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
GetCharWidthA
StretchDIBits
GetTextColor
GetRgnBox
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
Rectangle
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
DeleteObject
GetTextExtentPoint32A
CreateFontA
CreateFontIndirectA
GetWindowExtEx
SelectObject

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegCreateKeyA
RegCloseKey
RegOpenKeyExA
RegSetValueA
RegOpenKeyA
RegQueryValueExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegEnumValueA
RegDeleteValueA

shell32

DragFinish
ExtractIconA
SHGetFileInfoA
DragQueryFileA

shlwapi

PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathIsDirectoryA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

CoRegisterClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleRun
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoDisconnectObject
StringFromGUID2
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
CoRevokeClassObject
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
CoUninitialize
CoInitializeEx
OleIsCurrentClipboard
OleSetClipboard
OleFlushClipboard
CoRegisterMessageFilter
CreateStreamOnHGlobal
OleDuplicateData

oleaut32

SysFreeString
SysAllocStringByteLen
SysStringByteLen
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
SysReAllocStringLen
VarDateFromStr
VarBstrFromCy
VarBstrFromDec
VarDecFromStr
VarCyFromStr
VarBstrFromDate
OleCreateFontIndirect
SysAllocString
LoadTypeLi
SysStringLen

conexe

SetStartInfo
StartConTask
StopConTask

Sections

.text
Size: 824KB - Virtual size: 822KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 172KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 24KB - Virtual size: 462KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2b7fa1022e67fd2981feef50c76db52a

Headers

File Characteristics

PDB Paths

Imports

crashrpt1402

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

conexe

Sections

.text Size: 824KB - Virtual size: 822KB

.rdata Size: 172KB - Virtual size: 170KB

.data Size: 24KB - Virtual size: 462KB

.rsrc Size: 52KB - Virtual size: 48KB

.text
Size: 824KB - Virtual size: 822KB

.rdata
Size: 172KB - Virtual size: 170KB

.data
Size: 24KB - Virtual size: 462KB

.rsrc
Size: 52KB - Virtual size: 48KB