e3bf6405159dcd8ad12350aaecfd69dac3aed8d9147c5f4f28d357995bedf48d

Sharing

Copy URL Twitter E-mail

General

Target

e3bf6405159dcd8ad12350aaecfd69dac3aed8d9147c5f4f28d357995bedf48d
Size

632KB
MD5

f9f8f014f94d767e9b7ab256e52d51d7
SHA1

1a34f524fccd84275bbf4e4d7a2bd342cc60d77c
SHA256

e3bf6405159dcd8ad12350aaecfd69dac3aed8d9147c5f4f28d357995bedf48d
SHA512

04193b17ae2c8c09fd2da594b9462c122f7bdb93bcb5f133754786660c41cb87623693f87b6ecfedfe039160ab6225397a52bbc434f4b4f09adf205789072814
SSDEEP

12288:ECrHGuPxnXLEMSFsUw+zRtwOVqvFMupT9qLpdZFZ199:sqnXrSFs4zRtwOVqvFDxopNZB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e3bf6405159dcd8ad12350aaecfd69dac3aed8d9147c5f4f28d357995bedf48d

Files

e3bf6405159dcd8ad12350aaecfd69dac3aed8d9147c5f4f28d357995bedf48d
.exe windows:4 windows x86 arch:x86

e7efa93a7386d02d26424aadfc31488a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

ioctlsocket
gethostname
inet_addr
WSAStartup
recv
__WSAFDIsSet
send
WSAGetLastError
getsockname
getpeername
select
accept
listen
gethostbyname
connect
inet_ntoa
htons
htonl
bind
shutdown
closesocket
socket
setsockopt
WSACleanup

kernel32

GetVersionExA
GlobalUnlock
GlobalLock
GlobalAlloc
LockResource
LoadResource
SizeofResource
FindResourceA
CreateMutexA
OpenProcess
CreateProcessA
GetModuleFileNameA
Sleep
SetProcessShutdownParameters
WideCharToMultiByte
HeapSize
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
SetLastError
ExitThread
CreateThread
GetVersion
GetCommandLineA
GetStartupInfoA
GlobalDeleteAtom
TerminateProcess
ExitProcess
RaiseException
InterlockedIncrement
InterlockedDecrement
GetLocalTime
GetTimeZoneInformation
HeapFree
HeapAlloc
RtlUnwind
InterlockedExchange
TlsGetValue
ResumeThread
TlsAlloc
GetCurrentProcess
GetCurrentThread
DuplicateHandle
TlsSetValue
SetThreadPriority
CreateSemaphoreA
ReleaseSemaphore
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalAddAtomA
GetSystemTime
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
SetHandleCount
SystemTimeToFileTime
ReadFile
GetComputerNameA
SetErrorMode
GetLogicalDriveStringsA
FindFirstFileA
FindNextFileA
FindClose
SetFileTime
CreateDirectoryA
GetCurrentThreadId
UnmapViewOfFile
GetCurrentProcessId
OutputDebugStringA
GetStdHandle
WriteConsoleA
WriteFile
CloseHandle
DeleteFileA
MoveFileA
CreateFileA
SetFilePointer
SetEndOfFile
AllocConsole
FreeLibrary
LoadLibraryA
GetLastError
GetProcAddress
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
GetCPInfo
FlushFileBuffers
GetACP
GetOEMCP
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetStdHandle
GetModuleHandleA

user32

LoadIconA
DestroyMenu
EnableMenuItem
GetMenuItemID
TrackPopupMenu
SetMenuDefaultItem
GetSubMenu
CheckMenuItem
GetMenuState
MapWindowPoints
CreateDialogParamA
ExitWindowsEx
GetUserObjectInformationA
GetProcessWindowStation
IsIconic
GetWindow
PostThreadMessageA
TranslateMessage
GetMessageA
GetAsyncKeyState
MapVirtualKeyA
GetClipboardOwner
GetClipboardData
PostQuitMessage
EnumWindows
GetPropA
IsWindowVisible
SetPropA
RemovePropA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
DrawIconEx
GetIconInfo
LoadMenuA
ChangeDisplaySettingsA
OpenDesktopA
EnumDesktopWindows
SystemParametersInfoA
FindWindowA
KillTimer
PeekMessageA
WaitMessage
DispatchMessageA
RegisterWindowMessageA
GetCursorPos
IntersectRect
mouse_event
GetKeyboardState
keybd_event
SetTimer
GetForegroundWindow
GetWindowThreadProcessId
SetActiveWindow
MessageBeep
FlashWindow
EndDialog
DialogBoxParamA
SetForegroundWindow
EnumDisplaySettingsA
GetThreadDesktop
OpenInputDesktop
SetThreadDesktop
CloseDesktop
GetDC
GetWindowTextA
GetClassNameA
GetWindowDC
ReleaseDC
LoadImageA
DestroyCursor
CallWindowProcA
SetClipboardViewer
VkKeyScanA
GetParent
WindowFromPoint
IsChild
GetSystemMetrics
LoadBitmapA
SetWindowTextA
GetDesktopWindow
EqualRect
IsRectEmpty
GetWindowPlacement
SetWindowRgn
InflateRect
PtInRect
GetWindowRgn
InvalidateRgn
ShowWindow
GetWindowLongA
GetCapture
ClientToScreen
GetWindowRect
SetWindowPos
UpdateWindow
LoadCursorA
SetCursor
BeginPaint
OffsetRect
FillRect
SetRect
EndPaint
SetCapture
ClipCursor
PostMessageA
DefWindowProcA
ReleaseCapture
DestroyWindow
RegisterClassExA
CreateWindowExA
SetWindowLongA
GetDlgItemTextA
SetDlgItemInt
MessageBoxA
GetDlgItemInt
SetDlgItemTextA
GetFocus
SetFocus
SendMessageA
SendDlgItemMessageA
GetDlgItem
EnableWindow
ChangeClipboardChain

gdi32

GetRegionData
GetObjectA
GetBitmapBits
GdiFlush
SelectObject
BitBlt
CreateDIBSection
GetStockObject
CreatePalette
SelectPalette
RealizePalette
CreateCompatibleDC
GetDeviceCaps
CreateCompatibleBitmap
GetDIBits
CreateDCA
ExtEscape
DeleteDC
GetSystemPaletteEntries
SetROP2
FrameRgn
CreateRectRgnIndirect
CombineRgn
CreateRectRgn
CreateHatchBrush
DeleteObject
CreateSolidBrush

advapi32

RegCloseKey
RegSetValueExA
RegisterEventSourceA
ReportEventA
DeregisterEventSource
SetServiceStatus
RegOpenKeyA
OpenServiceA
ControlService
QueryServiceStatus
DeleteService
OpenSCManagerA
CreateServiceA
CloseServiceHandle
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
OpenProcessToken
ImpersonateLoggedOnUser
RevertToSelf
GetUserNameA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegDeleteValueA
RegCreateKeyA

shell32

Shell_NotifyIconA

ole32

CoUninitialize
CoInitialize
CoCreateInstance

comctl32

ord17

Sections

.text
Size: 240KB - Virtual size: 238KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 224KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e7efa93a7386d02d26424aadfc31488a

Headers

File Characteristics

Imports

wsock32

kernel32

user32

gdi32

advapi32

shell32

ole32

comctl32

Sections

.text Size: 240KB - Virtual size: 238KB

.rdata Size: 28KB - Virtual size: 24KB

.data Size: 64KB - Virtual size: 71KB

.rsrc Size: 224KB - Virtual size: 221KB

.text
Size: 240KB - Virtual size: 238KB

.rdata
Size: 28KB - Virtual size: 24KB

.data
Size: 64KB - Virtual size: 71KB

.rsrc
Size: 224KB - Virtual size: 221KB