c82ff7fd84a9ef4b04713139be34f683

Sharing

Copy URL Twitter E-mail

General

Target

c82ff7fd84a9ef4b04713139be34f683
Size

191KB
MD5

c82ff7fd84a9ef4b04713139be34f683
SHA1

26306d3e5d52dd2862fe3687b7cf30996bbeff6d
SHA256

b2b5904b2ce7e1a68e9702e8c3e472a62bd6e4de886baef7f558b209967ad7e8
SHA512

8ec32345519458e7c40e2e467a4b029abc89c7fdfb60cca139fc0e24f666849f4fecc584cfb4b8b8f77c413ff4fa87c931c4f9cdd1bca822cb30f2f7a111e547
SSDEEP

3072:WGiMdwcdMbp4i6EA7arq95uiB3Lt2JljYw6PW57zy7UVv4fWBrjXEb1F+iI7uLLE:WswcdtiMGHKngH14f+jX2H+idLeXhqU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c82ff7fd84a9ef4b04713139be34f683

Files

c82ff7fd84a9ef4b04713139be34f683
.exe windows:6 windows x86 arch:x86

8d2b32902a95170d6849dabd79a7edb7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CompareStringW
CreateFileW
CreateProcessW
DecodePointer
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileA
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetExitCodeProcess
GetFileAttributesExW
GetFileSizeEx
GetFileType
GetLastError
GetLogicalDrives
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
LocalFree
LockFileEx
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReadConsoleW
ReadFile
RtlUnwind
SetEndOfFile
SetEnvironmentVariableW
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
WriteFile
lstrcmpW

comdlg32

FindTextW
GetOpenFileNameA
GetOpenFileNameW
PageSetupDlgW
PrintDlgExW
ReplaceTextW

loadperf

LoadPerfCounterTextStringsA
LoadPerfCounterTextStringsW

shell32

CommandLineToArgvW
DragFinish
SHGetDiskFreeSpaceA
SHGetFolderPathW
SHGetSpecialFolderPathW
ShellExecuteA

pdh

PdhConnectMachineW
PdhEnumObjectsW
PdhGetCounterInfoA
PdhGetDataSourceTimeRangeW
PdhGetDefaultPerfObjectA
PdhGetDefaultPerfObjectW
PdhParseInstanceNameW
PdhRemoveCounter
PdhVbGetOneCounterPath
PdhVbIsGoodStatus

user32

CreateWindowExW
DefWindowProcW
DispatchMessageW
DrawTextW
EnumDisplaySettingsW
FillRect
GetClientRect
GetMenuItemInfoW
GetMessageW
GetNextDlgGroupItem
GetSysColorBrush
GetSystemMetrics
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
InvalidateRect
IsWindow
IsWindowVisible
LoadCursorW
LoadImageA
LoadImageW
MapWindowPoints
MessageBoxIndirectA
PostQuitMessage
RedrawWindow
RegisterClassW
SendMessageW
SetFocus
SetScrollRange
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowTextW
ShowWindow
TranslateMessage
wsprintfW

rpcrt4

I_RpcGetBufferWithObject
I_RpcIfInqTransferSyntaxes
I_RpcNsBindingSetEntryNameW
NDRSContextUnmarshall
NdrEncapsulatedUnionMarshall
NdrNonConformantStringUnmarshall
RpcEpRegisterNoReplaceW
RpcMgmtEpEltInqDone
RpcObjectSetType
RpcServerUseAllProtseqs
RpcServerUseAllProtseqsEx
RpcSmSetThreadHandle

mscms

EnumColorProfilesA
GetColorDirectoryW
GetCountColorProfileElements
GetPS2ColorRenderingIntent
GetStandardColorSpaceProfileW
InstallColorProfileW
IsColorProfileTagPresent
SetColorProfileElementSize

gdi32

BitBlt
CreateCompatibleDC
CreateFontW
CreateSolidBrush
GetObjectW
GetStockObject
SelectObject
SetBkColor
SetBkMode
SetTextColor

winmm

PlaySoundW

Sections

.text
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.voltbl
Size: 512B - Virtual size: 282B

.rsrc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8d2b32902a95170d6849dabd79a7edb7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

comdlg32

loadperf

shell32

pdh

user32

rpcrt4

mscms

gdi32

winmm

Sections

.text Size: 145KB - Virtual size: 145KB

.rdata Size: 34KB - Virtual size: 33KB

.data Size: 2KB - Virtual size: 5KB

.00cfg Size: 512B - Virtual size: 8B

.voltbl Size: 512B - Virtual size: 282B

.rsrc Size: 512B - Virtual size: 424B

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 145KB - Virtual size: 145KB

.rdata
Size: 34KB - Virtual size: 33KB

.data
Size: 2KB - Virtual size: 5KB

.00cfg
Size: 512B - Virtual size: 8B

.voltbl
Size: 512B - Virtual size: 282B

.rsrc
Size: 512B - Virtual size: 424B

.reloc
Size: 6KB - Virtual size: 6KB