de5ddbfd4637c9e4bcd7f0e62b7652ac

Sharing

Copy URL Twitter E-mail

General

Target

de5ddbfd4637c9e4bcd7f0e62b7652ac
Size

274KB
MD5

de5ddbfd4637c9e4bcd7f0e62b7652ac
SHA1

8898b96798af135f9d6e772b036b7a65e20110bf
SHA256

32b71108e3345607c01ce665ea36530d24e9252de77268c51b145c9f8d7be0ab
SHA512

2b4c2a466a2581abffe01460890cb06d24fdb7e2b59aed65f2924dcea881e526dd67f6b605bfe64102b5228f6e2c4a3f644e0e4f36b243813449a944cdba9183
SSDEEP

3072:Mwng8wmazlhkiIJqs7ObG8aqHMWAmSY0SXang8q6Fx03gHgeUV:9vwmmbkiK7X8dH0gbk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de5ddbfd4637c9e4bcd7f0e62b7652ac

Files

de5ddbfd4637c9e4bcd7f0e62b7652ac
.exe windows:4 windows x86 arch:x86

390057f0cb10f9e5a5c6497e5fd9ec7c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimeAsFileTime
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
MulDiv
GetModuleHandleA
CreateThread
GetCurrentThreadId
ResumeThread
SetThreadPriority
GetExitCodeThread
ExitThread
HeapAlloc
HeapCreate
HeapDestroy
GetProcessHeap
HeapReAlloc
HeapSize
HeapFree
CreateFileW
ReadFile
WriteFile
GetFileSize
CloseHandle
FindFirstFileA
FindNextFileA
FindClose
SetStdHandle
GetCurrentThread
TerminateThread
IsBadReadPtr
UnhandledExceptionFilter
GetTempFileNameA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
lstrcmpiW
GetDriveTypeA
CreateFileA
GetFileAttributesW
GetCurrentProcess
SetUnhandledExceptionFilter
GetEnvironmentStrings
CompareFileTime
GetFileTime
FindFirstFileW
FindNextFileW
FileTimeToLocalFileTime
UnmapViewOfFile
MapViewOfFile
GlobalHandle
GetShortPathNameA
GetFullPathNameA
FileTimeToDosDateTime
LCMapStringW
DeleteFileW
CreateEventA
SetEvent
ResetEvent
LoadLibraryA
LoadLibraryW
LoadLibraryExA
GetProcAddress
GetLocaleInfoW
CreateDirectoryA
CreateEventW
CreateMutexA
ReleaseMutex
OpenMutexA
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetConsoleOutputCP
lstrcpyA
GetOEMCP
GlobalReAlloc
SetThreadLocale
GlobalUnlock
InterlockedExchange
GetModuleFileNameW
FindResourceA
LoadResource
SizeofResource
FreeResource
GetFileType
CreateProcessA
IsDBCSLeadByte
RtlUnwind
GetUserDefaultLangID
FlushFileBuffers
FindResourceW
GlobalAlloc
IsValidCodePage
LockResource
GetPrivateProfileStringA
SystemTimeToFileTime
DeviceIoControl
CreateProcessW
GetSystemInfo
GetStartupInfoW
SetEndOfFile
LoadLibraryExW
GetWindowsDirectoryA
GetEnvironmentVariableA
GetACP
DisableThreadLibraryCalls
GetExitCodeProcess
GetStdHandle
ExitProcess
GetTempPathA
GetUserDefaultLCID
lstrcpynA
GetCurrentDirectoryA
VirtualAlloc
GetCPInfo
GetEnvironmentStringsW
LCMapStringA
lstrcmpA
GetThreadLocale
IsDebuggerPresent
GetVersionExW
GetCommandLineA

msvcrt

_ultoa
_setjmp3
_strcmpi
__p___initenv
swscanf
fread
memchr
putchar
memset
_dup
ftell
wcslen
_XcptFilter
_pctype
qsort
strtol
__getmainargs
strcat
_iob
abort
longjmp
tolower
_vsnwprintf
wcschr
rand
memcpy
towlower
exit
_snprintf
wcsrchr
sqrt
_stricmp
toupper
_getch
_errno
_assert
_setmode
isleadbyte
wcstombs
_lseek
fseek
atof
free
_vsnprintf
rename
strchr
_fdopen
puts
_isatty
localeconv
_kbhit
wctomb
__badioinfo
floor
sprintf
__mb_cur_max
_lseeki64
_CIsqrt
cos
malloc
_amsg_exit
fputc
strncpy
wcsncmp
_close
_umask
getenv
_get_osfhandle
wcscmp
towupper
strtok
fopen
_purecall
_snwprintf
fputs
strstr
log
vsprintf
fflush
iswspace
_dup2
_adjust_fdiv
fclose
_getpid
_wcslwr
ctime
_filelengthi64
_osver
clock
time
_c_exit
_wcsnicmp
srand
_strlwr
localtime
_mbscmp
setlocale
_open_osfhandle
_wtoi
_fileno
_unlock
_putenv
_chmod
_flsbuf
_mkdir
__p__commode
wcscspn
wcstol
fgetc
_wtol
_itoa
_onexit
realloc
isxdigit
fprintf
__p__fmode
wcsncpy
_getcwd
__pioinfo
atoi
strcmp
_utime
bsearch
__dllonexit
__p__environ
_ismbblead
strncmp
_fstat
_itow
_initterm
_unlink
wcscat
__CxxFrameHandler
_except_handler3
strncat
memcmp
clearerr
_wcsupr
_write
strerror
signal
sin
__set_app_type
wcstoul
pow
memmove
strlen
_lock
_wfopen
_acmdln
atol
wcsstr
iswctype
_filbuf
fwrite
strcpy
atexit
swprintf
strrchr
_pipe
ceil
_mbsicmp
fsetpos
strspn
ungetc
_wcsicmp
_stat
__lc_codepage
_fullpath
fgets
_controlfp
isspace
__initenv
_strnicmp
_mbsrchr
_ftol
_exit
_strdup
strcspn
_read
rewind
calloc
_cexit
printf
__setusermatherr
_beginthreadex
remove
sscanf
strpbrk
_setjmp
_isctype
_open
gmtime
iswdigit

user32

ClientToScreen
CharLowerA
TrackPopupMenu
ScrollWindow
GetTopWindow
IsWindowEnabled
SetScrollInfo
TranslateMessage
WaitMessage
UnhookWindowsHookEx
EndDialog
ReleaseCapture
EnumThreadWindows
SystemParametersInfoA
DrawIconEx
ShowWindow
GetForegroundWindow
SetTimer
PeekMessageA
DrawTextA
FrameRect
GetClassNameA
WinHelpA
IsIconic
RemoveMenu
SetClipboardData
SetScrollPos
GetIconInfo
GetParent
SetCursor
DispatchMessageA
EmptyClipboard
CreatePopupMenu
LoadBitmapA
InvalidateRect
EndPaint
ShowOwnedPopups
UnregisterClassA
GetWindowPlacement
IsChild
SetPropA
DrawFrameControl
SetWindowPos
EnumWindows
SetClassLongA
CreateMenu
GetMenuState
SendDlgItemMessageA
IsZoomed
MessageBoxA
DestroyCursor
GetWindow
DestroyIcon
GetSysColorBrush
RegisterWindowMessageA
WindowFromPoint
SetFocus
GetActiveWindow
DrawEdge
DestroyWindow
GetMenuStringA
GetDesktopWindow
IsWindowVisible
SetWindowLongA
SetWindowTextA
EqualRect
GetDC
GetMenu
GetPropA
IsWindow
GetScrollRange
GetScrollInfo
InsertMenuItemA
SetScrollRange
BeginPaint
SetCapture
SendMessageA
EnableWindow
EnableMenuItem
LoadCursorA
RegisterClipboardFormatA
GetDlgItem
InsertMenuA
ReleaseDC
GetFocus
IsRectEmpty
OemToCharA
GetSystemMenu
RedrawWindow
DestroyMenu
GetLastActivePopup
GetMessageA
ShowCursor
GetScrollPos
SetWindowsHookExA
SetActiveWindow
DefWindowProcA
CallWindowProcA
LoadStringA
MapWindowPoints
FillRect
GetCursorPos
DeleteMenu
RegisterClassA
GetWindowLongA
GetWindowRect
GetKeyboardType
SetWindowPlacement
GetMessagePos
GetClassInfoA
PostMessageA
CloseClipboard
KillTimer
GetMenuItemCount
GetSysColor
DrawMenuBar
CallNextHookEx
GetMenuItemID
GetClientRect
IsDialogMessageA
UpdateWindow
IntersectRect
MessageBeep
GetKeyState
AdjustWindowRectEx
GetCapture
GetWindowDC
GetSubMenu
GetSystemMetrics
ScreenToClient
DialogBoxParamA
GetWindowThreadProcessId
CheckMenuItem
SetRect
InflateRect
GetWindowTextA
DrawIcon
LoadIconA
SetForegroundWindow
OffsetRect

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wrdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

390057f0cb10f9e5a5c6497e5fd9ec7c

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: 55KB - Virtual size: 54KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 79KB - Virtual size: 78KB

.rsrc Size: 1024B - Virtual size: 4KB

.wrdata Size: 60KB - Virtual size: 60KB

.text
Size: 55KB - Virtual size: 54KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 79KB - Virtual size: 78KB

.rsrc
Size: 1024B - Virtual size: 4KB

.wrdata
Size: 60KB - Virtual size: 60KB