c890877d69d626467727ec78c1a22d57

Sharing

Copy URL

Twitter E-mail

General

Target

c890877d69d626467727ec78c1a22d57
Size

48KB
MD5

c890877d69d626467727ec78c1a22d57
SHA1

734ebb823d90d0db48d32afcae9e7d03a77ef7d2
SHA256

c259c03b5ed07248021baba712f103cc51eef5c411ca96eb24981d022e7d8e55
SHA512

b5a691ee5de2297ec6264335e84fd14bcd066e280367fb77831a9fce03115cf18b6af0a3755d87f1b3223dd7b2b5e409d5b087d98079631423fceed528109da8
SSDEEP

768:D1GXYpwhttc6AttzplaViMtftJC5UUxvCU5NZxkHbiTCRe:D1IYtfz3OUCFKeiTCA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c890877d69d626467727ec78c1a22d57

Files

c890877d69d626467727ec78c1a22d57
.exe windows:4 windows x86 arch:x86

adbca68a17746ec452490976961d0b47

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
CharLowerA
CloseClipboard
SetClipboardData
wsprintfA
GetMenu
IsWindow
SendMessageA
FindWindowExA
BlockInput
keybd_event
SetForegroundWindow
SetFocus
ShowWindow
VkKeyScanA
OpenClipboard
EmptyClipboard
FindWindowA

ole32

CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

VariantClear
VariantInit
SysFreeString
SysAllocString

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
_snprintf
_except_handler3
strcat
strstr
memcpy
memset
_vsnprintf
strlen
strcmp
strtok
srand
strncpy
memcmp
atoi
strchr
rand
strcpy
??2@YAPAXI@Z
__CxxFrameHandler
malloc
sprintf
realloc
free
_stricmp
_strrev
wcslen

kernel32

FindNextFileA
ExitProcess
FindClose
GetStartupInfoA
WideCharToMultiByte
MultiByteToWideChar
TerminateThread
lstrcpyA
lstrcmpA
lstrcpynA
GetSystemTime
ReadFile
GetWindowsDirectoryA
GlobalLock
GlobalUnlock
GetDriveTypeA
FindFirstFileA
SetCurrentDirectoryA
GetFileSize
SetFilePointer
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GlobalAlloc
GlobalFree
lstrlenA
CopyFileA
CreateProcessA
CreateFileA
WriteFile
SetFileAttributesA
GetVersionExA
GetLocaleInfoA
CreateMutexA
GetTickCount
ReleaseMutex
ExitThread
GetCurrentProcess
CloseHandle
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetFullPathNameA
ExpandEnvironmentStringsA
WaitForSingleObject
lstrcmpiA
Sleep
CreateThread
GetLastError
GetTempPathA
InterlockedDecrement

advapi32

GetUserNameA
RegQueryValueExA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

ws2_32

closesocket
connect
ioctlsocket
socket

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

adbca68a17746ec452490976961d0b47

Headers

File Characteristics

Imports

user32

ole32

oleaut32

msvcrt

kernel32

advapi32

ws2_32

Sections

.text Size: 32KB - Virtual size: 29KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 8KB - Virtual size: 276KB

.text
Size: 32KB - Virtual size: 29KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 8KB - Virtual size: 276KB