ca26df2829176966a6446926230761f3

Sharing

Copy URL Twitter E-mail

General

Target

ca26df2829176966a6446926230761f3
Size

256KB
MD5

ca26df2829176966a6446926230761f3
SHA1

608dc7f2722c66a39992d1846bcce970c8a9e3cf
SHA256

5d16af888dc5724a39fab7b238d15e5950beddb84c1c01cf42aa885b50f9da62
SHA512

b48700b7dea9939cfa4cc2295a4eed5fa743896967e649f99a24dfa7772fba724e3d14978c48ceddb93974460f52c2957fd2faadae735bc3152c6c681e400992
SSDEEP

3072:xIl7uc47ZJBZy9NxXfkxJEaXVzx8k4J7bfMcaRvVlTaVoFtRpMSY52dAI3IW1l:Eh4VJzy97oEKVwJ7TjEaVoFtRpMSY5I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca26df2829176966a6446926230761f3

Files

ca26df2829176966a6446926230761f3
.exe windows:4 windows x86 arch:x86

5be76770af7705393e5e0486e1db57fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

printf
_chdrive
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
abs
_ftol
strcpy
atof
atol
srand
strcat
memmove
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
_CxxThrowException
??0exception@@QAE@ABV0@@Z
_strnicmp
strcmp
strtok
strncpy
??2@YAPAXI@Z
atoi
strcspn
strlen
memcmp
isdigit
malloc
memcpy
_strcmpi
_itoa
_strupr
_strlwr
_stricmp
_chmod
_rmdir
memchr
realloc
strrchr
strchr
sscanf
strncmp
free
rand
sprintf
time
_access
strstr
strncat
__CxxFrameHandler
memset
??3@YAXPAX@Z
_chdir

shfolder

SHGetFolderPathA

ole32

CoCreateInstance
CoInitializeEx
CoUninitialize
CLSIDFromString
OleRun
CoInitialize

oleaut32

SysFreeString
GetErrorInfo
VariantClear
VariantInit
SysAllocString

kernel32

GetWindowsDirectoryA
GetVersionExA
ResetEvent
SetEvent
MultiByteToWideChar
FormatMessageA
LocalFree
RaiseException
InterlockedExchange
LocalAlloc
GetProcAddress
WaitForSingleObject
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
CreateEventA
OutputDebugStringA
InterlockedDecrement
SizeofResource
LoadResource
CloseHandle
lstrcatA
LockResource
SetLastError
lstrlenA
Sleep
CopyFileA
GetLastError
DeleteFileA
ExitThread
lstrcmpiA
GetModuleFileNameA
ReadFile
CreateFileA
RemoveDirectoryA
lstrcmpA
lstrcpynA
GetFileSize
WriteFile
SetFilePointer
GetModuleHandleA
GetTickCount
WideCharToMultiByte
lstrlenW
FindResourceA
GetTempPathA
CreateProcessA
OpenProcess
GetCurrentProcessId
GetLocalTime
FreeLibrary
LoadLibraryA
CreateThread
FreeResource
GetStartupInfoA
GetTempFileNameA
TerminateProcess
GetCurrentProcess
lstrcpyA
CreateDirectoryA
GetSystemDirectoryA

user32

GetWindowLongA
IsWindow
PostMessageA
FindWindowA
CharLowerA
CharUpperA
MessageBoxA
GetActiveWindow
DestroyWindow
KillTimer
GetDC
ReleaseDC
ScreenToClient
BeginPaint
EndPaint
InvalidateRect
LoadImageA
PostQuitMessage
DefWindowProcA
LoadCursorA
RegisterClassExA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
GetDesktopWindow
CreateDialogParamA
ShowWindow
SetForegroundWindow
ReleaseCapture
GetParent
SetWindowPos
LoadMenuA
GetCursorPos
TrackPopupMenuEx
DestroyMenu
EnableWindow
GetAsyncKeyState
GetMenu
GetSubMenu
DeleteMenu
InsertMenuA
EnableMenuItem
GetWindowTextA
SetWindowLongA
SetFocus
CallWindowProcA
RedrawWindow
GetDlgItemTextA
GetWindow
IsIconic
LoadStringA
SetDlgItemTextA
SystemParametersInfoA
SetTimer
FillRect
DialogBoxParamA
EndDialog
SetWindowTextA
LoadIconA
GetClientRect
GetDlgItem
IsWindowVisible
SendMessageA
SetCapture
PeekMessageA
GetWindowThreadProcessId
GetDlgCtrlID
SetCursor
GetWindowRect

gdi32

GetObjectA
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
StretchBlt
CreateFontA
SetTextColor
CreateSolidBrush
SetBkColor
DeleteObject
RealizePalette
SelectPalette
CreatePalette
GetDIBColorTable

shell32

ShellExecuteA
Shell_NotifyIconA

urlmon

URLDownloadToFileA

wininet

InternetOpenUrlA
InternetSetStatusCallback
HttpQueryInfoA
InternetReadFile
InternetCrackUrlA
InternetGetConnectedState
InternetCloseHandle
InternetOpenA
InternetQueryDataAvailable

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

advapi32

OpenProcessToken
CryptReleaseContext
CryptEncrypt
CryptDeriveKey
AdjustTokenPrivileges
RegEnumValueA
RegEnumKeyExA
CryptHashData
CryptCreateHash
CryptDestroyHash
CryptDestroyKey
CryptAcquireContextA
CryptDecrypt
LookupPrivilegeValueA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegConnectRegistryA
RegOpenKeyExA
RegCreateKeyExA

Sections

pec1
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pec
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5be76770af7705393e5e0486e1db57fa

Headers

File Characteristics

Imports

msvcrt

shfolder

ole32

oleaut32

kernel32

user32

gdi32

shell32

urlmon

wininet

version

advapi32

Sections

pec1 Size: 152KB - Virtual size: 152KB

.rsrc Size: 80KB - Virtual size: 80KB

.pec Size: 16KB - Virtual size: 16KB

.rsrc Size: 4KB - Virtual size: 4KB

pec1
Size: 152KB - Virtual size: 152KB

.rsrc
Size: 80KB - Virtual size: 80KB

.pec
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 4KB - Virtual size: 4KB