c24305072e7a537893f8b65a79fda9ea

Sharing

Copy URL Twitter E-mail

General

Target

c24305072e7a537893f8b65a79fda9ea
Size

411KB
MD5

c24305072e7a537893f8b65a79fda9ea
SHA1

2903ea6863b140d15b63401d809770747eb37b73
SHA256

967c8248b123b9ae48243c392f1e772b40f9ba937ec6398df6db7e99073cb848
SHA512

b318ad851fe61d4c043a61e733917d779fc8575c08ba4f75e4d0e0603a76f3c0c280472f55f4283f626411a6358f0ffa481de634cc7c7f662491f81757661433
SSDEEP

3072:gBNtcZg5OcmzsTeaDHmz8kNZnYhcow5rfkryoDUJWKpHmnz:gBNtcS5+srCPkhXrHDMWKpGz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c24305072e7a537893f8b65a79fda9ea

Files

c24305072e7a537893f8b65a79fda9ea
.exe windows:1 windows x86 arch:x86

c31d7f005d3f7b3ee057301d3ad1e3ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectA
CreateSolidBrush
DeleteDC
DeleteObject
GetDeviceCaps
GetPixel
GetStockObject
GetTextExtentPoint32A
GetTextMetricsA
MoveToEx
SelectObject
SetBkColor
SetBkMode
SetTextAlign
SetTextColor
CreateBitmap
CreateFontA

kernel32

CloseHandle
CreateDirectoryA
CreateFileA
CreateProcessA
DeleteFileA
EnumResourceNamesA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetCommandLineA
GetCurrentDirectoryA
GetCurrentThreadId
GetDiskFreeSpaceA
GetFileAttributesA
GetFileSize
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
GetVersionExA
GetVolumeInformationA
GlobalAlloc
GlobalFree
GlobalReAlloc
LockFile
MultiByteToWideChar
ReadFile
RemoveDirectoryA
SetCurrentDirectoryA
SetEndOfFile
SetErrorMode
SetFileAttributesA
SetFilePointer
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnlockFile
WaitForSingleObject
WideCharToMultiByte
WriteFile
GetComputerNameA
GetWindowsDirectoryA
OpenProcess
TerminateProcess
WinExec
RtlMoveMemory
CreateToolhelp32Snapshot
Process32First
Process32Next

ole32

CLSIDFromProgID
CoCreateInstance
CoInitialize
CoUninitialize
ProgIDFromCLSID
CoTaskMemFree

oleaut32

GetActiveObject
SafeArrayCreate
SysAllocStringByteLen
SysFreeString
SysStringByteLen
VariantClear
VariantCopy

user32

BeginPaint
CheckRadioButton
ClientToScreen
CreateDialogIndirectParamA
CreateDialogParamA
CreatePopupMenu
CreateWindowExA
DestroyIcon
DestroyWindow
DialogBoxIndirectParamA
DispatchMessageA
EnableWindow
EndDialog
EndPaint
FillRect
GetClassNameA
GetClientRect
GetDC
GetDlgItem
GetMenu
GetMenuItemInfoA
GetSysColor
GetSysColorBrush
GetWindowLongA
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
InvalidateRect
IsDialogMessageA
IsWindow
LoadIconA
LoadImageA
MapDialogRect
MessageBoxA
PeekMessageA
PostMessageA
RedrawWindow
ReleaseDC
ScreenToClient
SendDlgItemMessageA
SendMessageA
SetFocus
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowWindow
SystemParametersInfoA
TrackPopupMenu
TranslateMessage
AppendMenuA
DestroyMenu
DialogBoxParamA
EnableMenuItem
EnumChildWindows
GetActiveWindow
GetDlgItemTextA
GetFocus
GetKeyState
GetMessageA
GetParent
GetSystemMenu
GetSystemMetrics
GetWindow
IsIconic
LoadAcceleratorsA
LoadBitmapA
ModifyMenuA
SetActiveWindow
SetClassLongA
SetDlgItemTextA
SetWindowsHookExA
TranslateAcceleratorA
UnhookWindowsHookEx
PostQuitMessage

shell32

SHFileOperationA
SHBrowseForFolderA
SHGetSpecialFolderLocation
SHGetPathFromIDListA

hhctrl.ocx

HtmlHelpA

Exports

Exports

PAIP3DLGPROC
PINSTAADLGPROC
PINSTABDLGPROC
procGetList

Sections

.text
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.link
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 250KB - Virtual size: 250KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c31d7f005d3f7b3ee057301d3ad1e3ff

Headers

File Characteristics

Imports

gdi32

kernel32

ole32

oleaut32

user32

shell32

hhctrl.ocx

Exports

Exports

Sections

.text Size: 127KB - Virtual size: 127KB

.data Size: 16KB - Virtual size: 34KB

.link Size: 5KB - Virtual size: 4KB

.rsrc Size: 250KB - Virtual size: 250KB

.rloc Size: 11KB - Virtual size: 11KB

.text
Size: 127KB - Virtual size: 127KB

.data
Size: 16KB - Virtual size: 34KB

.link
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 250KB - Virtual size: 250KB

.rloc
Size: 11KB - Virtual size: 11KB