39ccc224c2c6d89d0bce3d9e2c677465cbc7524f2d2aa903f79ad26b340dec3d

Sharing

Copy URL Twitter E-mail

General

Target

39ccc224c2c6d89d0bce3d9e2c677465cbc7524f2d2aa903f79ad26b340dec3d
Size

539KB
MD5

585cc99fbf9df24009231d70d007c236
SHA1

cd0e58b6a885580d048b4041bad3b92059bad5b9
SHA256

39ccc224c2c6d89d0bce3d9e2c677465cbc7524f2d2aa903f79ad26b340dec3d
SHA512

0cbf32cfcb2c76e175a479a0e35fe9aea4ce9f7a4eb57f09ec5ec099a6b968d6e5cd97617f07bf60798c76f36d7d6bd1aeb8313ab0f72fa75c660a525c252609
SSDEEP

12288:gE50GSHrG6W42JcycysY0V3D9wCV+YnXGwnUP345WRgG3OkGGs/Lwmm:h+GSHrG6W42JcychY0FD9wCV/Hw3yeJF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39ccc224c2c6d89d0bce3d9e2c677465cbc7524f2d2aa903f79ad26b340dec3d

Files

39ccc224c2c6d89d0bce3d9e2c677465cbc7524f2d2aa903f79ad26b340dec3d
.exe windows:4 windows x64 arch:x64

46702e615a96538f4944f7d15b37d4d8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
HeapCreate
HeapAlloc
GetModuleHandleA
CreateEventA
WaitForSingleObject
CloseHandle
HeapDestroy
GetModuleFileNameW
lstrlenW
HeapFree
GetProcessHeap
Sleep
GetSystemTimeAsFileTime

user32

LoadIconW
CreateMenu
LoadBitmapW
DrawMenuBar
GetClientRect
FillRect
RegisterClassW
CreateWindowExW
DestroyMenu
ReleaseDC
CharUpperBuffW
GetCursor
DestroyIcon
DispatchMessageW
IsZoomed
CreateAcceleratorTableW
DrawFocusRect
IsIconic
GetClassInfoExW
SetTimer
DeleteMenu
IsDialogMessageW
InsertMenuW
DrawIcon
SetScrollPos
CopyImage
GetClassInfoW
DestroyCursor
DefMDIChildProcW
EndMenu
SetMenuItemInfoW
GetScrollPos
GetMenuStringW
DefFrameProcW
FrameRect
ShowCaret
GetDlgCtrlID
GetScrollInfo
PeekMessageW
LoadCursorW
GetWindowTextW
GetSystemMenu
PostMessageW
EndPaint
GetMenuItemInfoW
GetDCEx
EnableWindow
GetScrollRange
ShowWindow
BeginPaint
DestroyWindow
LoadStringW
KillTimer
MsgWaitForMultipleObjectsEx
CreateIcon

gdi32

StretchBlt
Pie
RoundRect
CreateDCW
Polygon
SetBkMode
RectVisible
SetAbortProc
PolyBezierTo
CreateCompatibleBitmap
GetWindowOrgEx
CreateSolidBrush
AngleArc
GetTextMetricsW
CreateICW
GetEnhMetaFileHeader
SetTextColor
GetStockObject
RestoreDC
SetRectRgn
CreatePalette
MoveToEx

ole32

OleUninitialize
CoUninitialize
OleInitialize
CoCreateInstance
IsEqualGUID
CoTaskMemFree
CoInitialize
CoTaskMemAlloc

oleaut32

VariantCopyInd
SafeArrayGetUBound
VariantCopy
SafeArrayGetElement
VariantInit
SafeArrayCreate
SafeArrayPtrOfIndex
GetErrorInfo
SafeArrayGetLBound
SysAllocStringLen
SafeArrayUnaccessData
SysFreeString
SysReAllocStringLen
SafeArrayAccessData
VariantClear
SafeArrayPutElement
VariantChangeType

msvcrt

memcpy
__getmainargs
__C_specific_handler
_XcptFilter
_exit
_ismbblead
_cexit
exit
_acmdln
_initterm
qsort
__setusermatherr
_commode
_fmode
__set_app_type
?terminate@@YAXXZ
wcsrchr
memset
_amsg_exit
wcschr

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 204KB - Virtual size: 203KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textbss
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 332KB - Virtual size: 331KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

46702e615a96538f4944f7d15b37d4d8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

ole32

oleaut32

msvcrt

version

Sections

.text Size: 204KB - Virtual size: 203KB

.textbss Size: - Virtual size: 64KB

.rdata Size: 332KB - Virtual size: 331KB

.data Size: 512B - Virtual size: 144B

.pdata Size: 512B - Virtual size: 300B

.rsrc Size: 1024B - Virtual size: 1024B

.reloc Size: 512B - Virtual size: 72B

.text
Size: 204KB - Virtual size: 203KB

.textbss
Size: - Virtual size: 64KB

.rdata
Size: 332KB - Virtual size: 331KB

.data
Size: 512B - Virtual size: 144B

.pdata
Size: 512B - Virtual size: 300B

.rsrc
Size: 1024B - Virtual size: 1024B

.reloc
Size: 512B - Virtual size: 72B