79280de0f0cd856387ccb3d47f9f611b3e4a3f1b06f20528e050365e5233bee8

Sharing

Copy URL Twitter E-mail

General

Target

79280de0f0cd856387ccb3d47f9f611b3e4a3f1b06f20528e050365e5233bee8
Size

398KB
MD5

7b93631e97ed1e54ad398974fd7d1a96
SHA1

989b24ebb0c5d8d5945554b1c6257ad710154179
SHA256

79280de0f0cd856387ccb3d47f9f611b3e4a3f1b06f20528e050365e5233bee8
SHA512

cf718ba3349c7e32cf9c1354f17aafe8d9e8a112c38ecad0aadf1a2411e01b35d7b343b1a2a0650a66e6f5eb6b4ede3c99360f1551eefdabb0b06d2d4c9b6ca4
SSDEEP

12288:Q1yYJhlsTHKEkrH+HwaD/Fb7mU5oHQmdQIr47:QEYLlNCHDDB5K5QX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79280de0f0cd856387ccb3d47f9f611b3e4a3f1b06f20528e050365e5233bee8

Files

79280de0f0cd856387ccb3d47f9f611b3e4a3f1b06f20528e050365e5233bee8
.exe windows:4 windows x86 arch:x86

3494d9abfa0832e05dfdefcabdc50066

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetOEMCP
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
GetStartupInfoA
ExitProcess
TerminateProcess
HeapReAlloc
HeapSize
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
GetCPInfo
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
SetErrorMode
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
GlobalFlags
InterlockedIncrement
GetCurrentDirectoryA
WritePrivateProfileStringA
InterlockedDecrement
GlobalGetAtomNameA
GlobalFindAtomA
lstrcatA
lstrcmpW
FindNextFileA
GetFullPathNameA
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetFileTime
GetFileAttributesA
SetFileAttributesA
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToSystemTime
FreeResource
GlobalAddAtomA
SetLastError
GlobalFree
MulDiv
GlobalUnlock
lstrcpynA
GetCurrentThread
GetCurrentThreadId
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
GetModuleHandleA
ConvertDefaultLocale
EnumResourceLanguagesA
CreateFileA
GetFileSize
ReadFile
WriteFile
DeleteFileA
HeapFree
GetProcessHeap
HeapAlloc
GetCommandLineA
GetModuleFileNameA
Sleep
GetSystemDirectoryA
GetVolumeInformationA
CreateProcessA
CreateDirectoryA
FormatMessageA
LocalFree
RemoveDirectoryA
GetDiskFreeSpaceA
lstrcpyA
SetCurrentDirectoryA
CompareStringW
CompareStringA
CreateMutexA
CloseHandle
LoadLibraryA
GetProcAddress
FreeLibrary
lstrlenA
lstrcmpiA
GetVersion
FindResourceA
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
GetLastError
RaiseException
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GetStdHandle
InterlockedExchange

user32

DestroyMenu
GetSysColorBrush
LoadCursorA
EndPaint
BeginPaint
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
SendDlgItemMessageA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
SetForegroundWindow
GetMenu
GetSysColor
AdjustWindowRectEx
ScreenToClient
GetClassInfoA
RegisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
CharUpperA
RemovePropA
SendMessageA
UnregisterClassA
MessageBoxA
GetDesktopWindow
FindWindowExA
DrawIcon
IsIconic
GetWindowRect
GetClientRect
SystemParametersInfoA
GetWindowPlacement
CopyRect
PtInRect
GetWindow
wsprintfA
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
MapWindowPoints
UpdateWindow
LoadIconA
GetSystemMetrics
EnableWindow
InvalidateRect
PostMessageA
PostQuitMessage
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
SetCursor
IsWindowEnabled
GetLastActivePopup
GetWindowLongA
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
GetParent

gdi32

GetStockObject
DeleteDC
TextOutA
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
GetDeviceCaps
RectVisible
PtVisible
DeleteObject
SetMapMode
RestoreDC
SaveDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
ExtTextOutA

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegOpenKeyExA
RegQueryValueExA
RegEnumKeyExA
RegSetValueExA
RegEnumValueA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCloseKey
RegCreateKeyExA

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetSpecialFolderLocation
SHGetMalloc

comctl32

ord17

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

ole32

CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

VariantClear
VariantChangeType
VariantInit

Sections

.text
Size: 152KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3494d9abfa0832e05dfdefcabdc50066

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

Sections

.text Size: 152KB - Virtual size: 150KB

.rdata Size: 36KB - Virtual size: 32KB

.data Size: 12KB - Virtual size: 22KB

.rsrc Size: 24KB - Virtual size: 21KB

.text
Size: 152KB - Virtual size: 150KB

.rdata
Size: 36KB - Virtual size: 32KB

.data
Size: 12KB - Virtual size: 22KB

.rsrc
Size: 24KB - Virtual size: 21KB