a7cec5b4385e50dcbd59769413ab18661572adae99b7047c3d3df6dd3add68a2

Sharing

Copy URL Twitter E-mail

General

Target

a7cec5b4385e50dcbd59769413ab18661572adae99b7047c3d3df6dd3add68a2
Size

4.9MB
MD5

60531c97d70e85b32f25fe24d282d933
SHA1

a9c9fccd054a6e8e766ce5949893476c33f04f3d
SHA256

a7cec5b4385e50dcbd59769413ab18661572adae99b7047c3d3df6dd3add68a2
SHA512

76344fdeb46cd25ca4a2b77dac05a3cad26910aae12cec9b706d3002193eea2d64450cb2d2a8ca6c259b0fc1c5c1d284ab2d217e982e46785829bd70a4aee4ef
SSDEEP

98304:4Y1ex2Hnul6YZb5hTnpvdmnoxirWsgIqNme8ZXfGB:J11O5h2nRTXJuB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7cec5b4385e50dcbd59769413ab18661572adae99b7047c3d3df6dd3add68a2

Files

a7cec5b4385e50dcbd59769413ab18661572adae99b7047c3d3df6dd3add68a2
.exe windows:5 windows x86 arch:x86

ce072800b0fc5d48915fc379e5027fe3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE

Imports

mpr

WNetCloseEnum

comctl32

InitCommonControlsEx

kernel32

FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindNextFileW
FindResourceExW
FindResourceW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCPInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetFileAttributesW
GetFileSize
GetFileTime
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameW
GetOEMCP
GetPriorityClass
GetProcessHeap
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadPriority
GetTimeFormatW
GetVersionExW
GlobalAlloc
GlobalLock
GlobalUnlock
HeapAlloc
HeapDestroy
ExitProcess
HeapReAlloc
HeapSize
IsBadWritePtr
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LoadLibraryExW
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LocalLock
LocalUnlock
LockResource
MulDiv
MultiByteToWideChar
OpenEventW
OpenMutexW
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ReadFile
ReleaseMutex
ResetEvent
SetEndOfFile
SetEvent
SetLastError
SetPriorityClass
SetStdHandle
SetThreadPriority
SetThreadPriorityBoost
SetUnhandledExceptionFilter
SizeofResource
Sleep
SystemTimeToFileTime
TerminateProcess
TerminateThread
UnhandledExceptionFilter
VirtualProtect
WaitForSingleObject
WideCharToMultiByte
WinExec
WriteConsoleW
WriteFile
GetModuleHandleA
DeleteFileW
DeleteCriticalSection
CreateThread
CreateMutexW
CreateFileW
CreateEventW
GetStartupInfoW
GetCommandLineA
EnterCriticalSection
GetTickCount
LeaveCriticalSection
LoadLibraryA
InitializeCriticalSection
GetModuleHandleW
GetProcAddress
HeapFree
GetStartupInfoA

user32

IsDialogMessageW
IsDlgButtonChecked
IsWindow
IsWindowEnabled
KillTimer
LoadBitmapW
LoadIconW
LoadImageW
LoadMenuW
LoadStringW
MessageBeep
MessageBoxW
MoveWindow
OffsetRect
OpenClipboard
PeekMessageW
PostMessageW
PostQuitMessage
RedrawWindow
RegisterClassExW
SendMessageW
SetClipboardData
SetDlgItemInt
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetMenu
SetPropW
SetRect
GetWindowTextW
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TranslateMessage
WaitMessage
WinHelpW
GetActiveWindow
FindWindowW
FillRect
EndDialog
EnableWindow
EnableMenuItem
EmptyClipboard
DrawTextW
DrawIcon
DispatchMessageW
DialogBoxParamW
DestroyWindow
DestroyIcon
DefWindowProcW
CreateWindowExW
CloseClipboard
CheckMenuItem
CheckDlgButton
GetKeyState
GetWindowLongW
GetWindowRect
GetKeyboardLayout
GetSystemMetrics
GetSystemMenu
GetSysColor
GetSubMenu
GetParent
GetMessageW
GetMenuItemInfoW
GetLastActivePopup
GetDlgItemTextW
GetDlgItemInt
GetDialogBaseUnits
GetCursorPos
GetClientRect
GetClassNameW
SetTimer
GetAsyncKeyState
CreateDialogIndirectParamW

gdi32

SelectObject
DeleteDC
SetBkColor
SetTextColor
CreateSolidBrush
CreateFontIndirectW
GetTextExtentPoint32W

advapi32

RegDeleteKeyW
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW

shell32

ShellExecuteW

ole32

StringFromGUID2

msvcrt

__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_except_handler3
_controlfp

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ping6
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ce072800b0fc5d48915fc379e5027fe3

Headers

File Characteristics

Imports

mpr

comctl32

kernel32

user32

gdi32

advapi32

shell32

ole32

msvcrt

Sections

.text Size: 2.3MB - Virtual size: 2.3MB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 4.0MB

.rsrc Size: 40KB - Virtual size: 39KB

.ping6 Size: 2.5MB - Virtual size: 2.5MB

.text
Size: 2.3MB - Virtual size: 2.3MB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 4.0MB

.rsrc
Size: 40KB - Virtual size: 39KB

.ping6
Size: 2.5MB - Virtual size: 2.5MB