a43e28d52a2598cadfb7478ecb4696ac26e8766fe9bd6230ee5128b069c42a5d

Sharing

Copy URL

Twitter E-mail

General

Target

a43e28d52a2598cadfb7478ecb4696ac26e8766fe9bd6230ee5128b069c42a5d
Size

113KB
MD5

74b5dea658fb9be7c4db8b5a1c2eb359
SHA1

4ab72245be790b290c0997415ed072da09b00f1a
SHA256

a43e28d52a2598cadfb7478ecb4696ac26e8766fe9bd6230ee5128b069c42a5d
SHA512

c0bc6d41cfa3074d3773ab82cdd8f881bb9ff9bbf45af89bdd144f0c9248acc0167f923caf5c20eb994c5e26add66c4f6e6b11c3a9a720b7fe18b0bf2d58c1f3
SSDEEP

1536:mdvP3/5cIK+wQp74y8Y+WxZACle7knY6g8dstmzhZwsSQ:SvP3hc9+lp74y84PAC0kbg8StmznH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a43e28d52a2598cadfb7478ecb4696ac26e8766fe9bd6230ee5128b069c42a5d

Files

a43e28d52a2598cadfb7478ecb4696ac26e8766fe9bd6230ee5128b069c42a5d
.exe windows:5 windows x86 arch:x86

16cba0093e13bac22fd52e968412734a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
lstrcatA
UnlockFile
SetFilePointer
LockFile
CreateFileW
SystemTimeToFileTime
GetLocalTime
SetLastError
LeaveCriticalSection
FlushFileBuffers
GetCurrentThreadId
WriteFile
FormatMessageA
EnterCriticalSection
GetStdHandle
SetEnvironmentVariableW
GlobalFree
TerminateProcess
GetCurrentProcess
GetProcessHeap
GetTickCount
GetVersionExW
GetCurrentProcessId
OpenEventW
ExitProcess
CreateMutexW
GetSystemInfo
VirtualAlloc
HeapCreate
GetCommandLineW
HeapDestroy
CreateEventW
InterlockedCompareExchange
Sleep
InterlockedExchange
lstrlenA
lstrcpyA
SetEvent
TerminateThread
WaitForSingleObject
ResetEvent
SwitchToThread
HeapFree
HeapAlloc
CreateThread
CloseHandle
ExitThread
FindResourceW
LoadResource
LockResource
lstrcpynW
lstrcpynA
GetModuleHandleA
GetStartupInfoW
lstrcpyW
lstrcatW
LoadLibraryA
GetEnvironmentVariableW
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoA
RtlUnwind
GetLastError
GetModuleHandleW
GetModuleFileNameW
GetLongPathNameW
lstrcmpiW
GetSystemTimeAsFileTime
lstrlenW
lstrcmpW

advapi32

OpenSCManagerW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
StartServiceW
EnumDependentServicesW
ControlService
QueryServiceStatusEx
ChangeServiceConfigW
ChangeServiceConfig2W
QueryServiceStatus
OpenServiceW
QueryServiceConfigW
RegCloseKey
CloseServiceHandle
RegDeleteValueW
RegSetValueExW

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHBrowseForFolderW
CommandLineToArgvW
SHGetMalloc
ShellAboutW
Shell_NotifyIconW
Shell_NotifyIconA

user32

MessageBoxW
GetDlgItemTextW
MoveWindow
GetParent
CallWindowProcW
SetWindowLongW
EnableWindow
InvalidateRect
GetClientRect
SetClassLongW
LoadIconW
wvsprintfA
wsprintfA
MessageBoxA
DestroyMenu
TrackPopupMenu
DialogBoxParamW
SetForegroundWindow
CreatePopupMenu
PostMessageW
IsDlgButtonChecked
GetWindowTextLengthW
CheckDlgButton
CheckRadioButton
SetDlgItemTextA
PostQuitMessage
DefWindowProcW
DestroyIcon
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageW
CreateWindowExW
RegisterClassExW
FindWindowW
EndDialog
GetDlgItem
SendMessageA
SetDlgItemTextW
wsprintfW
RegisterWindowMessageW
SystemParametersInfoW
InsertMenuItemW
LoadStringW
LoadStringA
GetWindowRect
GetDesktopWindow
GetSystemMetrics
SetWindowPos
LoadImageW
LoadAcceleratorsW
GetCursorPos
SendMessageW
LoadCursorW

gdi32

DeleteObject

comdlg32

GetSaveFileNameW
GetOpenFileNameW

comctl32

PropertySheetW
ImageList_Destroy
ImageList_Create
ImageList_Add
InitCommonControlsEx

netapi32

NetWkstaGetInfo
NetGetDCName
NetQueryDisplayInformation
NetApiBufferFree

msvcrt

towupper
_ismbblead
__getmainargs
_cexit
_exit
_XcptFilter
exit
_acmdln
_initterm
_amsg_exit
__setusermatherr
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
_controlfp
wcsrchr
iswctype
fflush
_iob
fputs
memset
wcschr

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ropf
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

16cba0093e13bac22fd52e968412734a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

shell32

user32

gdi32

comdlg32

comctl32

netapi32

msvcrt

Sections

.text Size: 38KB - Virtual size: 37KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 10KB - Virtual size: 18KB

.rsrc Size: 44KB - Virtual size: 44KB

.ropf Size: 5KB - Virtual size: 5KB

.text
Size: 38KB - Virtual size: 37KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 10KB - Virtual size: 18KB

.rsrc
Size: 44KB - Virtual size: 44KB

.ropf
Size: 5KB - Virtual size: 5KB