bca058c7a06b8ff5cacf36a79d925bb3ff8fa8e4f8a75c9b118111856524ef5b

Sharing

Copy URL Twitter E-mail

General

Target

bca058c7a06b8ff5cacf36a79d925bb3ff8fa8e4f8a75c9b118111856524ef5b
Size

326KB
MD5

687644e13cef04222e00a70818d66865
SHA1

1ade1fec50e311d040052daf85a793fffa8bfc58
SHA256

bca058c7a06b8ff5cacf36a79d925bb3ff8fa8e4f8a75c9b118111856524ef5b
SHA512

b1351b03b2f9cb82043d8a8d3c08296991449417c97eb622999a854dbc51a2235642a393f0cee81d1b8ca72e276245ee68b682645c5256123d4b91bb7988d25d
SSDEEP

6144:VlKsuxq8DFT60mJV34ENm2eK7mnoUSgpAY8ODcDcm7cIs16jpTJFj5EYzRnpFGwx:VlKsuxqKu0mJ+6jpTJFuwnpgwkwZLiaX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bca058c7a06b8ff5cacf36a79d925bb3ff8fa8e4f8a75c9b118111856524ef5b

Files

bca058c7a06b8ff5cacf36a79d925bb3ff8fa8e4f8a75c9b118111856524ef5b
.exe windows:5 windows x86 arch:x86

ee295deb1bd36d83386f259a80bb24cc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AllocateAndInitializeSid
CopySid
EqualSid
GetLengthSid
GetUserNameA
InitializeSecurityDescriptor
RegCloseKey
RegCreateKeyA
RegEnumKeyA
RegOpenKeyA
RegQueryValueExA
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner

user32

AppendMenuA
CreateDialogParamA
CreateMenu
CreatePopupMenu
CreateWindowExA
DefWindowProcA
DestroyIcon
DestroyMenu
DestroyWindow
DialogBoxParamA
DispatchMessageA
EnableWindow
EndDialog
FindWindowA
GetCursorPos
GetDesktopWindow
GetDlgItem
GetDlgItemTextA
GetMenuDefaultItem
GetMenuItemCount
GetMenuItemInfoA
GetMessageA
GetWindowLongA
GetWindowRect
InsertMenuItemA
IsDialogMessageA
IsWindow
LoadIconA
MessageBeep
MessageBoxA
MessageBoxIndirectA
MoveWindow
MsgWaitForMultipleObjects
PeekMessageW
PostMessageA
PostQuitMessage
RegisterClassA
RegisterWindowMessageA
RemoveMenu
SendDlgItemMessageA
SendMessageA
SetActiveWindow
SetDlgItemTextA
SetForegroundWindow
SetMenuDefaultItem
SetWindowLongA
SetWindowPos
ShowWindow
TrackPopupMenu
TranslateMessage

shell32

ShellExecuteA
Shell_NotifyIconA

comdlg32

GetOpenFileNameA
GetSaveFileNameA

kernel32

CloseHandle
ConnectNamedPipe
CreateEventA
CreateFileA
CreateFileMappingA
CreateFileW
CreateNamedPipeA
CreateThread
DecodePointer
DeleteCriticalSection
DeleteFileA
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileA
FindFirstFileExW
FindNextFileW
FindResourceA
FlushFileBuffers
FormatMessageA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetFileType
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetOverlappedResult
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetTempPathA
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadResource
LocalAlloc
LocalFree
LockResource
MapViewOfFile
MultiByteToWideChar
OpenFileMappingA
OpenProcess
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ReadConsoleW
ReadFile
RtlUnwind
SetCurrentDirectoryA
SetEndOfFile
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SizeofResource
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualQuery
WaitForSingleObject
WaitNamedPipeA
WideCharToMultiByte
WriteConsoleW
WriteFile

Sections

.text
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ee295deb1bd36d83386f259a80bb24cc

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

user32

shell32

comdlg32

kernel32

Sections

.text Size: 236KB - Virtual size: 236KB

.rdata Size: 66KB - Virtual size: 65KB

.data Size: 2KB - Virtual size: 7KB

.00cfg Size: 512B - Virtual size: 4B

.rsrc Size: 9KB - Virtual size: 9KB

.reloc Size: 10KB - Virtual size: 10KB

.text
Size: 236KB - Virtual size: 236KB

.rdata
Size: 66KB - Virtual size: 65KB

.data
Size: 2KB - Virtual size: 7KB

.00cfg
Size: 512B - Virtual size: 4B

.rsrc
Size: 9KB - Virtual size: 9KB

.reloc
Size: 10KB - Virtual size: 10KB