d5aaee083418de49f3d775c83d507728

Sharing

Copy URL

Twitter E-mail

General

Target

d5aaee083418de49f3d775c83d507728
Size

244KB
MD5

d5aaee083418de49f3d775c83d507728
SHA1

f6a6238d30ff5359ce40e5896a9aad0f10ab844f
SHA256

79ae2ddfab8291643df8b63c8d7c5b46856bdabea3603dc46d3f83dd4794bea8
SHA512

255776db5fb0e6e70fad2a61c295c81c807b2fd696b64bcbffedbdeb1a8653c22f6e4fbb46fcc3f303da735f8865afc035f85c2583668ee9d397b6dbf4ef44d8
SSDEEP

6144:/H5qgNkGblPrEQcQFJRJ5Z6OGb0p0S0wn+nceskq9TBkliYIxYuA:/L7JLTHxGbJwn+np1q9TG1d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5aaee083418de49f3d775c83d507728

Files

d5aaee083418de49f3d775c83d507728
.exe windows:4 windows x86 arch:x86

f5b29bb5b3a8fa1a0eced933529963f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

gethostname
gethostbyname
WSAStartup
WSAGetLastError
recv
send
getsockname
getpeername
accept
listen
ioctlsocket
connect
htons
htonl
bind
shutdown
closesocket
socket
setsockopt
WSACleanup
inet_addr

winmm

timeGetTime

kernel32

CloseHandle
CreateFileA
DeviceIoControl
Sleep
Beep
GetCurrentThreadId
GetSystemDirectoryA
GetSystemTime
FlushFileBuffers
CreateDirectoryA
MoveFileA
SetErrorMode
GetDriveTypeA
GetLogicalDriveStringsA
FileTimeToSystemTime
GetFileTime
SetFilePointer
ReadFile
WriteFile
SetFileTime
SystemTimeToFileTime
SetEndOfFile
GetVersionExA
WaitForSingleObject
SetThreadPriority
GetCurrentThread
OpenEventA
GlobalUnlock
GlobalLock
GlobalAlloc
SetProcessShutdownParameters
TerminateProcess
CreateProcessA
ReleaseMutex
CreateMutexA
GetStdHandle
AllocConsole
MoveFileExA
FormatMessageA
SetLastError
WriteConsoleA
OutputDebugStringA
GetCurrentProcessId
OpenProcess
SearchPathA
GlobalFree
TlsGetValue
TlsFree
TlsAlloc
DuplicateHandle
GetLastError
TlsSetValue
CreateSemaphoreA
ReleaseSemaphore
DeleteCriticalSection
InitializeCriticalSection
GetProcAddress
LoadLibraryA
FindClose
FindNextFileA
FindFirstFileA
GetModuleFileNameA
DeleteFileA
FreeLibrary
CopyFileA
LeaveCriticalSection
EnterCriticalSection
GetSystemInfo
GetVersion
GetModuleHandleA
lstrlenA
GetCurrentProcess
GetStartupInfoA
GetProfileStringA
GetComputerNameA
ResumeThread
CreateThread
IsBadWritePtr
IsBadReadPtr

user32

GetProcessWindowStation
GetUserObjectInformationA
ExitWindowsEx
EnableWindow
GetSubMenu
SetMenuDefaultItem
TrackPopupMenu
EnableMenuItem
DestroyMenu
LoadMenuA
ToAscii
VkKeyScanA
GetAsyncKeyState
MapVirtualKeyA
PeekMessageA
GetMenuItemID
WaitMessage
IsIconic
WaitForInputIdle
GetParent
GetClipboardOwner
GetClipboardData
GetForegroundWindow
IsWindowVisible
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetIconInfo
DrawIconEx
SetClipboardViewer
IsWindow
EnumWindows
GetWindowTextA
OpenDesktopA
FindWindowA
GetClassNameA
ChangeClipboardChain
DestroyWindow
GetDesktopWindow
WindowFromPoint
GetWindowRect
RegisterWindowMessageA
mouse_event
InvalidateRect
wsprintfA
GetKeyboardState
keybd_event
GetThreadDesktop
OpenInputDesktop
SetThreadDesktop
CloseDesktop
GetCursorPos
SetCursorPos
GetDC
ReleaseDC
EnumDisplaySettingsA
GetDlgItemTextA
SetFocus
EndDialog
SetWindowTextA
LoadStringA
DialogBoxParamA
GetScrollInfo
PostMessageA
SetDlgItemTextA
GetDlgItem
SendDlgItemMessageA
SetForegroundWindow
MessageBoxA
SystemParametersInfoA
SendMessageA
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
KillTimer
PostQuitMessage
SetTimer
LoadIconA
LoadCursorA
RegisterClassExA
AdjustWindowRect
CreateWindowExA
GetWindowLongA
SetWindowLongA
ShowWindow
GetSystemMetrics
SetWindowPos
IsRectEmpty
LoadImageA
EnumDesktopWindows

gdi32

CreateDIBSection
BitBlt
CreatePalette
GetBitmapBits
GetObjectA
SelectPalette
RealizePalette
SetDIBColorTable
GetDeviceCaps
CreateCompatibleBitmap
GetPixel
ExtEscape
GetSystemPaletteEntries
SetBkMode
GetStockObject
GetClipBox
CreateCompatibleDC
CreateSolidBrush
SelectObject
PatBlt
DeleteDC
GetDIBits
CreateDCA
GdiFlush
StretchBlt
DeleteObject

shell32

Shell_NotifyIconA
SHAppBarMessage
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteA

advapi32

ImpersonateLoggedOnUser
OpenProcessToken
RegCreateKeyExA
RevertToSelf
DuplicateToken
RegCloseKey
OpenSCManagerA
OpenServiceA
CloseServiceHandle
RegCreateKeyA
RegSetValueExA
GetUserNameA
RegQueryValueExA
RegOpenKeyExA

ole32

CoInitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

comctl32

InitCommonControlsEx

msvcrt

_ismbcdigit
atoi
_mbsicmp
memcpy
strcpy
strrchr
strlen
strcat
??3@YAXPAX@Z
__CxxFrameHandler
sprintf
memset
strstr
strcmp
_onexit
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__dllonexit
__setusermatherr
malloc
free
??2@YAPAXI@Z
strncpy
memmove
sscanf
strncat
strchr
tolower
strncmp
abs
calloc
fflush
_fdopen
_dup2
_open_osfhandle
fclose
_iob
_vsnprintf
ctime
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
??1type_info@@UAE@XZ
_controlfp
_purecall
printf
_snprintf
time
fgets
fopen
exit
setbuf
_beginthreadex
_endthreadex
fprintf
realloc
memcmp
_strdup
_strnicmp
_CxxThrowException
_stricmp

msvcp60

??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ

Sections

.text
Size: 160KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f5b29bb5b3a8fa1a0eced933529963f1

Headers

File Characteristics

Imports

wsock32

winmm

kernel32

user32

gdi32

shell32

advapi32

ole32

version

comctl32

msvcrt

msvcp60

Sections

.text Size: 160KB - Virtual size: 158KB

.rdata Size: 32KB - Virtual size: 28KB

.data Size: 32KB - Virtual size: 46KB

.rsrc Size: 16KB - Virtual size: 13KB

.text
Size: 160KB - Virtual size: 158KB

.rdata
Size: 32KB - Virtual size: 28KB

.data
Size: 32KB - Virtual size: 46KB

.rsrc
Size: 16KB - Virtual size: 13KB