40d3bb7b9d50f631c59d436b7e47f9a955ad18f1dc311786d81d94c108b83293

Sharing

Copy URL Twitter E-mail

General

Target

40d3bb7b9d50f631c59d436b7e47f9a955ad18f1dc311786d81d94c108b83293
Size

1.2MB
MD5

9e5f913f5e9dae598b6e06997ac317f9
SHA1

c462f35bc2d7ce7e6d462210d3ff91c23f06219b
SHA256

40d3bb7b9d50f631c59d436b7e47f9a955ad18f1dc311786d81d94c108b83293
SHA512

0f4a2525896835dc61ef4d9858ac3aa7d8218fa4392b1a552a514bfafd5632df17adb9c2edc4af80fb03f1aadbd5354ec5985018edde1e928916d91667b3b629
SSDEEP

24576:kn9HgvqCSPZvpIFS+NgqZSkviKA2a51kR9//atS:Q9AvgPxLI3qKAX56/o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40d3bb7b9d50f631c59d436b7e47f9a955ad18f1dc311786d81d94c108b83293

Files

40d3bb7b9d50f631c59d436b7e47f9a955ad18f1dc311786d81d94c108b83293
.exe windows:1 windows x86 arch:x86

24227e3c8ee66b2163130689a3585b81

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

MulDiv
LoadLibraryA
Sleep
GetExitCodeThread
lstrcpyA
GetStdHandle
VirtualFree
GetModuleFileNameA
SetHandleCount
ReadFile
FindNextFileA
lstrcatA
GetStartupInfoA
GetDateFormatA
WritePrivateProfileStringA
DeleteFileA
GetFileSize
TerminateThread
GetEnvironmentStrings
GetLocalTime
CloseHandle
GetLastError
GetFileType
LoadResource
GetPrivateProfileStringA
GlobalUnlock
GlobalMemoryStatus
ExitProcess
GetCurrentThreadId
FindClose
GetProfileStringA
GetProcAddress
WriteFile
WaitForSingleObject
GetWindowsDirectoryA
VirtualAlloc
GlobalFree
FindFirstFileA
FindResourceA
GetVersion
GetVersionExA
SizeofResource
CreateFileA
GetTimeZoneInformation
FreeLibrary
SetFilePointer
GetCommandLineA
lstrlenA
LockResource
GetModuleHandleA
CreateSemaphoreA
CreateThread
GetFileAttributesA

user32

LoadStringA
GetWindowTextLengthA
GetDlgItem
GetWindowRect
GetScrollRange
GetParent
KillTimer
GetMessageA
GetForegroundWindow
FillRect
GetDC
GetClientRect
GetActiveWindow
EnumThreadWindows
EndPaint
EndDialog
DispatchMessageA
DialogBoxParamA
DestroyWindow
DefWindowProcA
CreateWindowExA
CreateDialogParamA
CharUpperBuffA
CallWindowProcA
BeginPaint
GetWindowTextA
GetSystemMetrics
LoadCursorA
IsDialogMessageA
MoveWindow
MessageBoxA
GetScrollPos
ReleaseDC
SetScrollRange
SetScrollPos
wvsprintfA
SetRect
ShowCursor
ShowWindow
SetWindowTextA
SetWindowLongA
SetTimer
wsprintfA
SendMessageA
TranslateMessage
RegisterClassA
PostQuitMessage
PostMessageA
EnableWindow
SystemParametersInfoA
PeekMessageA

gdi32

CreatePen
CreatePalette
CreateFontIndirectA
CreateDIBSection
CreateDCA
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
TextOutA
StretchDIBits
StretchBlt
StartPage
StartDocA
SetWinMetaFileBits
SetTextColor
SetEnhMetaFileBits
SetBkMode
SelectPalette
SelectObject
Rectangle
RealizePalette
PlayEnhMetaFile
MoveToEx
LineTo
GetTextMetricsA
GetTextExtentPoint32A
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetDeviceCaps
EndPage
EndDoc
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush

winmm

timeGetTime

shell32

ShellExecuteA

comdlg32

PrintDlgA
GetOpenFileNameA

msvfw32

MCIWndCreateA

Exports

Exports

__GetExceptDLLinfo

Sections

CODE
Size: 68KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

24227e3c8ee66b2163130689a3585b81

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winmm

shell32

comdlg32

msvfw32

Exports

Exports

Sections

CODE Size: 68KB - Virtual size: 72KB

DATA Size: 11KB - Virtual size: 40KB

.idata Size: 4KB - Virtual size: 4KB

.edata Size: 512B - Virtual size: 4KB

.reloc Size: 2KB - Virtual size: 4KB

.rsrc Size: 1.2MB - Virtual size: 1.2MB

CODE
Size: 68KB - Virtual size: 72KB

DATA
Size: 11KB - Virtual size: 40KB

.idata
Size: 4KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 4KB

.reloc
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 1.2MB - Virtual size: 1.2MB