cdce511604352508fb0bc4f0ffa61fc1

Sharing

Copy URL Twitter E-mail

General

Target

cdce511604352508fb0bc4f0ffa61fc1
Size

320KB
MD5

cdce511604352508fb0bc4f0ffa61fc1
SHA1

4d1638be465dcf977b5fa05d16c44b086cc50dea
SHA256

d987a2cbe0c2d08cfe0c4061db1936d2f16b9b21ef27d582c63d35e7b87c12c2
SHA512

58037b4fa2fecc8e17cf205c5f9306303691808cc41114a0cc484ee34d5fce778b9314bd26d1fff7a20da2a74dc3c9a3f2c000a4ad95d846e5d842d37b795069
SSDEEP

6144:dHP2DH4/GYYX2SpB8Fpfax1/kB1XoIJ5aOm6y2TFI43kHkD:5ur4Cmm+f+9k526jzD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cdce511604352508fb0bc4f0ffa61fc1

Files

cdce511604352508fb0bc4f0ffa61fc1
.exe windows:4 windows x86 arch:x86

71a75bf18de32aa7ccf9df5a09226d30

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

atoi
memmove

user32

wvsprintfW
wsprintfW
wsprintfA
UpdateWindow
TranslateMessage
SetWindowLongW
SetTimer
SetRect
SetCursor
SetClipboardData
SendMessageW
ReleaseDC
RegisterClassW
PostMessageW
PeekMessageW
OpenClipboard
MsgWaitForMultipleObjects
MessageBoxW
MessageBeep
LoadStringW
LoadStringA
LoadCursorW
KillTimer
IsWindow
InvalidateRect
GetWindowLongW
GetParent
GetMessageW
GetDC
GetClipboardData
GetClientRect
GetClassInfoW
GetAsyncKeyState
EqualRect
EndPaint
EmptyClipboard
DispatchMessageW
DefWindowProcW
CreateWindowExW
CloseClipboard
ClientToScreen
BeginPaint

kernel32

lstrlenW
lstrlenA
lstrcpynW
lstrcpyW
lstrcpyA
lstrcmpiW
lstrcatW
lstrcatA
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualFree
VirtualAlloc
Sleep
SetThreadPriority
SetFilePointer
SetEvent
QueryPerformanceFrequency
QueryPerformanceCounter
MultiByteToWideChar
MulDiv
LocalUnlock
LocalLock
LocalHandle
LocalFree
LocalAlloc
LoadLibraryW
CloseHandle
CreateEventW
CreateFileW
CreateThread
DeleteCriticalSection
DeleteFileW
DisableThreadLibraryCalls
EnterCriticalSection
FreeLibrary
GetACP
GetCurrentThread
GetCurrentThreadId
GetDiskFreeSpaceW
GetFileAttributesW
GetFileSize
GetFullPathNameW
GetLastError
GetLocalTime
GetModuleFileNameW
GetModuleHandleW
GetOverlappedResult
GetPrivateProfileStringW
GetProcAddress
GetProcessHeap
GetSystemInfo
GetThreadPriority
GetVersionExW
GlobalAlloc
GlobalFree
GlobalHandle
GlobalLock
GlobalMemoryStatusEx
GlobalReAlloc
GlobalUnlock
HeapAlloc
LeaveCriticalSection
InitializeCriticalSection
IsBadCodePtr
IsBadHugeReadPtr
IsBadReadPtr
IsBadStringPtrW
IsBadWritePtr
HeapFree

gdi32

SetWindowOrgEx
SelectPalette
SelectObject
RealizePalette
PatBlt
GetSystemPaletteEntries
GetStockObject
GetPaletteEntries
GetObjectW
GetNearestPaletteIndex
GetDeviceCaps
GetDCOrgEx
GetClipBox
DeleteObject
CreatePalette

winmm

mmioWrite
timeGetTime
waveInAddBuffer
waveInClose
waveInOpen
waveInPrepareHeader
waveInReset
mmioSeek
waveInStop
waveInUnprepareHeader
waveOutGetNumDevs
SendDriverMessage
OpenDriver
CloseDriver
mmioRead
mmioOpenW
mmioFlush
mmioDescend
mmioCreateChunk
mmioClose
mmioAscend
waveInStart
mciSendStringW

advapi32

RegCloseKey
RegCreateKeyW
RegEnumKeyW
RegOpenKeyW
RegQueryValueExW
RegQueryValueExA
RegOpenKeyA

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

Exports

Exports

bind_textdomain_codeset
bindtextdomain
dcgettext
dcngettext
dgettext
dngettext
gettext
libintl_bind_textdomain_codeset
libintl_bindtextdomain
libintl_dcgettext
libintl_dcngettext
libintl_dgettext
libintl_dngettext
libintl_fprintf
libintl_gettext
libintl_ngettext
libintl_printf
libintl_snprintf
libintl_sprintf
libintl_textdomain
libintl_vfprintf
libintl_vprintf
libintl_vsnprintf
libintl_vsprintf
ngettext
set_relocation_prefix
textdomain

Sections

.text
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

71a75bf18de32aa7ccf9df5a09226d30

Headers

File Characteristics

Imports

ntdll

user32

kernel32

gdi32

winmm

advapi32

version

Exports

Exports

Sections

.text Size: 232KB - Virtual size: 232KB

.rdata Size: 44KB - Virtual size: 44KB

.data Size: 20KB - Virtual size: 1.7MB

.idata Size: 8KB - Virtual size: 8KB

.rsrc Size: 12KB - Virtual size: 12KB

.text
Size: 232KB - Virtual size: 232KB

.rdata
Size: 44KB - Virtual size: 44KB

.data
Size: 20KB - Virtual size: 1.7MB

.idata
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 12KB - Virtual size: 12KB