ca5636dfad8eeaaf8d9520ecec300fc1

Sharing

Copy URL

Twitter E-mail

General

Target

ca5636dfad8eeaaf8d9520ecec300fc1
Size

428KB
MD5

ca5636dfad8eeaaf8d9520ecec300fc1
SHA1

3237b7d643dac79bf6a5a0bd363a18298e4532e6
SHA256

3a018646b50150e1b9da5c7cccb963b07e793c73b3f7cc38da289baa5dcb0750
SHA512

1731147ce5f5162267ee30e9dee90cc1e3d3254b59251375d32700b57395db1ef70cef8aaeff68dd8d8dfd039b9e3e4b9bca2eb62aec95b39f797673d8f9d77d
SSDEEP

6144:vfrOtTXgellDY1sCW+omOaWYKsMw+KfpokWg4ETFDpmiUpk3z5YHWCLnBC7MvI9x:nrOJXWsC4k4oPYpAMvIHxTM20rx6PP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca5636dfad8eeaaf8d9520ecec300fc1

Files

ca5636dfad8eeaaf8d9520ecec300fc1
.exe windows:4 windows x86 arch:x86

ae439c3de99cf62ed2baa1bcfcad4604

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
HeapAlloc
GetCurrentThreadId
FreeResource
CreateDirectoryA
GetModuleHandleA
_lclose
GlobalLock
_lread
_hread
GlobalUnlock
GlobalFree
LoadLibraryA
SetErrorMode
GetEnvironmentVariableA
SetCurrentDirectoryA
GetCurrentDirectoryA
CreateEventA
QueryPerformanceFrequency
ReadFile
SetFilePointer
SetEndOfFile
CompareStringA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
WideCharToMultiByte
SetLastError
GetTempPathA
GetTempFileNameA
GetPrivateProfileSectionA
DeleteFileA
VerLanguageNameA
WritePrivateProfileStringA
_hwrite
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
Sleep
GetLocalTime
GetVersion
GetVersionExA
GetSystemInfo
FindFirstFileA
GetSystemDirectoryA
FindClose
GetLastError
GetUserDefaultLCID
SizeofResource
GlobalSize
lstrcmpA
GetDriveTypeA
GetModuleFileNameA
GetWindowsDirectoryA
lstrcpynA
CreateProcessA
GetFileAttributesA
CopyFileA
CreateThread
GetProcAddress
CreateFileA
WriteFile
CloseHandle
GetTickCount
lstrcmpiA
IsDBCSLeadByte
lstrcatA
GetPrivateProfileStringA
lstrcpyA
lstrlenA
FindResourceA
LoadResource
LockResource
GetFileSize
GlobalAlloc
HeapDestroy
HeapCreate
LCMapStringA
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadCodePtr
GetACP
GetCPInfo
GetOEMCP
GetStringTypeA
IsBadWritePtr
GetStringTypeW
LeaveCriticalSection
VirtualAlloc
EnterCriticalSection
InitializeCriticalSection
HeapSize
HeapReAlloc
VirtualFree
TlsGetValue
TlsAlloc
FreeLibrary
TlsSetValue
DeleteCriticalSection
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTime
GetTimeZoneInformation
RtlUnwind
ExitProcess
GetCommandLineA
GetStartupInfoA
SetEnvironmentVariableA
LCMapStringW
SetStdHandle
FlushFileBuffers
RaiseException
CompareStringW
SystemTimeToFileTime
InterlockedExchange
VirtualQuery
VirtualProtect
SearchPathA
WaitForSingleObject
SetEvent
ResetEvent
QueryPerformanceCounter

user32

EqualRect
IsWindowVisible
ShowWindow
SetWindowTextA
GetDesktopWindow
UpdateWindow
SetRectEmpty
DestroyMenu
ClientToScreen
TrackPopupMenu
GetFocus
SetFocus
LoadIconA
LoadCursorA
InvalidateRect
ScreenToClient
SetWindowLongA
GetSystemMenu
AppendMenuA
ShowScrollBar
RegisterWindowMessageA
EndDialog
LoadBitmapA
SetTimer
UnregisterClassA
GetClassInfoA
CopyRect
VkKeyScanA
GetClientRect
GetWindowRect
SetDlgItemTextA
GetSystemMetrics
MoveWindow
GetDlgItem
BeginPaint
FillRect
PostMessageA
wsprintfA
MessageBoxA
PostQuitMessage
DefWindowProcA
CreateDialogParamA
GetDC
ReleaseDC
GetWindowLongA
GetScrollPos
SetWindowPos
SendMessageA
FindWindowA
RegisterClassA
CreateWindowExA
IsWindow
DestroyWindow
DialogBoxIndirectParamA
GetCursorPos
GetForegroundWindow
IsRectEmpty
SubtractRect
IntersectRect
SetScrollPos
GetScrollRange
SetScrollRange
SetForegroundWindow
IsDlgButtonChecked
CheckRadioButton
GetWindowTextA
IsCharAlphaA
UnionRect
CreatePopupMenu
GetMessageA
GetKeyState
TranslateMessage
DispatchMessageA
EndPaint
MapVirtualKeyA
MessageBeep
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
CharNextA
IsCharAlphaNumericA
DrawFocusRect
EnumChildWindows
IsIconic
SetCaretPos
CharLowerBuffA
CreateCaret
SetCaretBlinkTime
ShowCaret
DestroyCaret
InflateRect
GetMessagePos
GetMessageTime
LoadCursorFromFileA
SetClassLongA
DestroyCursor
LoadStringA
SetParent
GetClassInfoExA
RegisterClassExA
PtInRect
GetSysColor
SetCursor
SetRect
SetCapture
EnableWindow
ReleaseCapture
GetDlgItemTextA
CharUpperBuffA
SendDlgItemMessageA
CharLowerA
PeekMessageA
GetParent
MsgWaitForMultipleObjects
KillTimer
SetCursorPos
DialogBoxParamA
WaitForInputIdle
DrawTextA
ValidateRect
WindowFromPoint

gdi32

RealizePalette
GetDeviceCaps
CreatePalette
GetSystemPaletteEntries
DeleteObject
DeleteDC
BitBlt
SelectObject
UnrealizeObject
CreateCompatibleDC
CreateSolidBrush
SetTextColor
SetBkMode
GetStockObject
GetObjectA
CreateCompatibleBitmap
CreateDCA
RestoreDC
SelectClipRgn
SaveDC
CombineRgn
CreateRectRgn
CreateEllipticRgn
CreateRectRgnIndirect
CreateEllipticRgnIndirect
CreatePatternBrush
SetPixel
GetPixel
PatBlt
CreatePolygonRgn
RemoveFontResourceA
AddFontResourceA
Rectangle
SetBkColor
CreateHatchBrush
DeleteEnhMetaFile
StretchBlt
CreateBitmap
SetStretchBltMode
PlayEnhMetaFile
SetEnhMetaFileBits
SetWinMetaFileBits
CreatePen
LineTo
MoveToEx
StretchDIBits
ExtTextOutA
SetTextAlign
TextOutA
SetTextCharacterExtra
Arc
Ellipse
CreateRoundRectRgn
RoundRect
Polygon
Polyline
GetTextMetricsA
GetTextExtentPoint32A
EnumFontsA
EnumFontFamiliesExA
CreateFontIndirectA
SelectPalette
CreateDIBitmap

comdlg32

GetOpenFileNameA

advapi32

RegQueryValueExA
RegOpenKeyA
RegCloseKey
RegQueryValueA
RegOpenKeyExA
RegCreateKeyExA

shell32

ShellExecuteA

ole32

CoUninitialize
CoInitialize
CoCreateInstance

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

winmm

timeKillEvent
timeGetTime
timeBeginPeriod
mciSendCommandA
timeSetEvent
timeGetDevCaps

comctl32

InitCommonControlsEx

oleaut32

SysFreeString
SysAllocStringLen

Exports

Exports

AppEnumWindows
CaptureHookProc
DemoClosingDialog
DemoMenuDialog
DemoSplashDialog
EnumFontExProc
EventProcDll
JournalPlayHookProc
JournalRecordHookProc
KeyboardHookProc
LaunchAppProc
MouseHookProc
PlayerAbout
ServerWndProc
WinSupBackWndProc
WinSupWndProc

Sections

.text
Size: 324KB - Virtual size: 323KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ae439c3de99cf62ed2baa1bcfcad4604

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

version

winmm

comctl32

oleaut32

Exports

Exports

Sections

.text Size: 324KB - Virtual size: 323KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 24KB - Virtual size: 32KB

.rsrc Size: 52KB - Virtual size: 68KB

.text
Size: 324KB - Virtual size: 323KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 24KB - Virtual size: 32KB

.rsrc
Size: 52KB - Virtual size: 68KB