c4baefd1fbe581df984e463b63806be5

Sharing

Copy URL Twitter E-mail

General

Target

c4baefd1fbe581df984e463b63806be5
Size

240KB
MD5

c4baefd1fbe581df984e463b63806be5
SHA1

eae9b7a7624ff4c7a18b7c55c705c2c522923f96
SHA256

768bc00a962e8a39014340069b48c223c8742f382c705509d95ee23ab268270c
SHA512

21f46be9578f56863e3fa3375a10ad1ae14d00da3b1870f180c58196ebeb25109189aedc73cb6f459e4bb2008cafdbdb55315892496ae742a029fe47a3bcc603
SSDEEP

6144:gYNTWjxqhNCC0Tk+147C3lAQZ2xlZch/p/9G92OiT:gYNTWjxqhNzuk+147C7w2/pKC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4baefd1fbe581df984e463b63806be5

Files

c4baefd1fbe581df984e463b63806be5
.exe windows:4 windows x86 arch:x86

61f9e6411605ef4f9285854edddbae6e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadReadPtr
SetUnhandledExceptionFilter
WriteFile
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
TerminateProcess
IsBadCodePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
HeapFree
RtlUnwind
HeapReAlloc
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
GetLastError
SetConsoleCtrlHandler
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
FindResourceA
LoadResource
LockResource
FreeResource
LoadLibraryA
MulDiv
GetCurrentProcess
GetSystemPowerStatus
GetProcessTimes
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDateFormatA
GetSystemTime
IsBadWritePtr
GetStringTypeW

user32

EndDeferWindowPos
BeginDeferWindowPos
AdjustWindowRect
ReleaseDC
GetWindowDC
GetDesktopWindow
ShowCaret
LockWindowUpdate
CreateCaret
LoadBitmapA
GetFocus
CopyRect
SystemParametersInfoA
SetFocus
UnionRect
SubtractRect
UnhookWindowsHookEx
SetWindowsHookExA
GetKeyState
CallNextHookEx
DrawMenuBar
CreatePopupMenu
AppendMenuA
TrackPopupMenuEx
DestroyMenu
GetDoubleClickTime
SetDoubleClickTime
CreateWindowExA
ShowWindow
IsWindowEnabled
MoveWindow
DestroyWindow
WindowFromPoint
DrawCaption
OffsetRect
DrawEdge
DrawFocusRect
DrawFrameControl
DrawTextA
SetRect
GetSysColorBrush
FillRect
SetWindowRgn
GetDC
SetCursorPos
GetSystemMetrics
SetSysColors
GetSysColor
GetWindowRect
GetCursorPos

gdi32

SetMapMode
CreateFontA
GetDeviceCaps
CreateEllipticRgn
TextOutA
SetBkMode
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
ExtFloodFill
GetTextMetricsA
DeleteObject
CreateSolidBrush

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetOpenFileNameW
GetSaveFileNameW
ChooseColorA
ChooseColorW
ChooseFontA
ChooseFontW
PrintDlgA
PrintDlgW
PageSetupDlgA
PageSetupDlgW

advapi32

GetUserNameA
GetUserNameW
OpenEventLogA
ClearEventLogA
ReportEventA
GetNumberOfEventLogRecords
GetOldestEventLogRecord
BackupEventLogA
CloseEventLog
IsValidSid

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

61f9e6411605ef4f9285854edddbae6e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

Sections

.text Size: 36KB - Virtual size: 32KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 188KB - Virtual size: 187KB

.text
Size: 36KB - Virtual size: 32KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 188KB - Virtual size: 187KB