506a9e8d4e4ce6911ae1e472896e3cc9

Sharing

Copy URL Twitter E-mail

General

Target

506a9e8d4e4ce6911ae1e472896e3cc9
Size

248KB
MD5

506a9e8d4e4ce6911ae1e472896e3cc9
SHA1

f252392d353bda7bc2bd5e2c99658529380dba48
SHA256

6a1b4a748690288db8936d90c15afa5f58bafa238bf3d43526bbc9722cf6223b
SHA512

1f1c907032d082cba2ed18c69b62991ac2a6b7c40d14e2a04229dd91aba4c7f49881ff1e0b38b39c6c8106ea3ce54e3617a141a7f367a1cd33ac02e6acfe421a
SSDEEP

3072:iBfjTqfUFsO86T+3rF/RxYg+FbJZ2Pyd3TOMOWwv8zh/h8dy5pScS1J8MarupNG:MTECJa3rF/4dJQad3Tv3amcP8M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
506a9e8d4e4ce6911ae1e472896e3cc9

Files

506a9e8d4e4ce6911ae1e472896e3cc9
.exe windows:4 windows x86 arch:x86

2a801c7d61e6e80a396bcf3a2c39a18f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
HeapReAlloc
HeapSize
GetACP
GetTimeZoneInformation
TerminateProcess
RaiseException
GetStartupInfoA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
ExitProcess
GetCommandLineA
UnhandledExceptionFilter
GetStdHandle
GetFileType
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
GetProcessVersion
WritePrivateProfileStringA
SetStdHandle
CompareStringA
CompareStringW
HeapFree
RtlUnwind
GetFileAttributesA
GetFileTime
FileTimeToSystemTime
GetTickCount
FileTimeToLocalFileTime
FindFirstFileA
GetFullPathNameA
GetVolumeInformationA
FindClose
LockFile
SetEndOfFile
UnlockFile
GetCurrentProcess
FlushFileBuffers
ReadFile
FormatMessageA
DuplicateHandle
SetErrorMode
GetThreadLocale
GetOEMCP
GetCPInfo
FreeEnvironmentStringsA
FreeEnvironmentStringsW
LoadResource
LockResource
SizeofResource
FreeLibrary
lstrcpyA
lstrcmpiA
WideCharToMultiByte
SetFileAttributesA
SetFilePointer
WriteFile
UnmapViewOfFile
CloseHandle
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
IsBadReadPtr
GetModuleHandleA
GetProcAddress
OutputDebugStringA
lstrlenA
Sleep
InterlockedExchange
GetProfileStringA
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
GetLastError
lstrcpynA
MulDiv
SetLastError
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
InterlockedDecrement
InterlockedIncrement
GlobalUnlock
GlobalFree
GetModuleFileNameA
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
GetCurrentThread
GetCurrentThreadId
LoadLibraryA
FindResourceA
IsBadCodePtr
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
MultiByteToWideChar
SetEnvironmentVariableA

user32

InvalidateRect
CharUpperA
RegisterClipboardFormatA
PostThreadMessageA
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
CharNextA
InflateRect
GetSysColorBrush
PtInRect
GetClassNameA
GetDesktopWindow
LoadCursorA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
DestroyMenu
LoadStringA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
SetFocus
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
MessageBeep
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
CopyRect
GetDC
ReleaseDC
EndDialog
AdjustWindowRectEx
ScreenToClient
GetMenuItemID
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
MessageBoxA
SetCursor
PostQuitMessage
PostMessageA
EnableWindow
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
SendMessageA
GetWindowLongA
SetWindowLongA
LoadIconA
GetClassInfoA
DrawFocusRect
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode

gdi32

DeleteObject
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
DPtoLP
GetTextColor
GetBkColor
LPtoDP
CreateDIBitmap
CreateCompatibleDC
BitBlt
GetTextExtentPointA
IntersectClipRect
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetViewportExtEx
SetMapMode
SetBkMode
SelectObject
RestoreDC
GetStockObject
DeleteDC
SaveDC
SetBkColor
SetTextColor
GetObjectA
GetClipBox
PatBlt
CreateBitmap

comdlg32

GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA

shell32

ShellExecuteA

comctl32

ImageList_Destroy
ImageList_LoadImageA
ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoTaskMemAlloc

olepro32

ord253

oleaut32

SysStringLen
SysAllocStringByteLen
VariantCopy
SysAllocString
VariantChangeType
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString

Sections

.text
Size: 168KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2a801c7d61e6e80a396bcf3a2c39a18f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 168KB - Virtual size: 166KB

.rdata Size: 40KB - Virtual size: 37KB

.data Size: 20KB - Virtual size: 35KB

.rsrc Size: 16KB - Virtual size: 14KB

.text
Size: 168KB - Virtual size: 166KB

.rdata
Size: 40KB - Virtual size: 37KB

.data
Size: 20KB - Virtual size: 35KB

.rsrc
Size: 16KB - Virtual size: 14KB