4f0784440bee1fc6002827cdc1b6663add2f111e3294cededd202443abb9f07d

Resubmissions

13-09-2021 08:21

210913-j9gyvagddm 10

Sharing

Copy URL

Twitter E-mail

General

Target

4f0784440bee1fc6002827cdc1b6663add2f111e3294cededd202443abb9f07d
Size

566KB
MD5

e08abfaa3f43ee68221fe4c21b9a0ea6
SHA1

5092275c94bb50bfe326ffbe22a56aab5746b739
SHA256

4f0784440bee1fc6002827cdc1b6663add2f111e3294cededd202443abb9f07d
SHA512

dc7181f47541ad3e323baba9f763a5a0e315450b59b04d894835a25f5c074e2ab8fdd4170c83ae7c5c025861a206e553bcc77169bb76eb32fd098685954f57c9
SSDEEP

12288:Bz4ubZCXMtdUKat+YH7/yJ2je3rojGvB/WaEYvWG:pjOMtd1a/yl3KOjj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f0784440bee1fc6002827cdc1b6663add2f111e3294cededd202443abb9f07d

Files

4f0784440bee1fc6002827cdc1b6663add2f111e3294cededd202443abb9f07d
.exe windows:4 windows x86 arch:x86

174266963e9a11ce6878050b21579fcf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
GetLastError
GetModuleHandleA
VirtualAlloc
GetModuleFileNameA
ResetEvent
SetLastError
MultiByteToWideChar
ReadFile
InterlockedCompareExchange
LocalAlloc
OutputDebugStringW
QueryPerformanceFrequency
EncodePointer
CreateEventW
SetEvent
QueryPerformanceCounter
LoadLibraryA
GetFileAttributesW
lstrcpynW
HeapSetInformation
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetTickCount
GetSystemTimeAsFileTime
RaiseException
WaitForMultipleObjects
DecodePointer
GetCommandLineW
InterlockedExchange
ExitProcess
GetTempFileNameW
FreeLibrary
SetUnhandledExceptionFilter
GetCurrentProcess
CreateDirectoryW
WaitForSingleObject
LoadLibraryW
CreateFileW
GetProcAddress
GetCurrentThreadId
CloseHandle
DeleteFileW
GetCurrentProcessId
CreateThread
Sleep
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
ReleaseSemaphore
CreateSemaphoreW
DeleteCriticalSection
WriteFile
GetModuleFileNameW
GetFileSizeEx
GetLocalTime
LocalFree
OpenMutexW
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetFilePointer
CreateMutexW
ReleaseMutex
InterlockedDecrement
GetModuleHandleW
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedIncrement
WideCharToMultiByte
RtlUnwind
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
SetStdHandle

user32

GetClipboardData
CharNextA
GetWindowDC
GetAsyncKeyState
IsMenu
IsCharAlphaNumericW
CharLowerA
IsCharLowerA
DestroyIcon
GetTopWindow
IsGUIThread
OpenIcon
GetMenu
EnumClipboardFormats
GetMenuItemCount
GetKeyState
LoadCursorW
GetKeyboardLayout
wsprintfW

gdi32

DeleteObject
GetStockObject
FlattenPath
GetDCBrushColor
EndPage
CreateHalftonePalette
AbortPath
WidenPath
GetEnhMetaFileW
GetEnhMetaFileBits

advapi32

RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyW
CloseServiceHandle
OpenSCManagerW
OpenServiceW
ChangeServiceConfigW
StartServiceW
QueryServiceStatusEx

shell32

SHGetSpecialFolderPathW
SHGetFolderPathW
Shell_NotifyIconW
ShellExecuteW
ShellExecuteExW
SHFileOperationW
SHLoadNonloadedIconOverlayIdentifiers
DragAcceptFiles
SHQueryRecycleBinA
SHBrowseForFolder
ShellExecuteEx
ExtractAssociatedIconExA
DragFinish
SHGetMalloc
SHChangeNotify
SHBrowseForFolderA
DragQueryFileW
SHGetSpecialFolderPathA
ExtractAssociatedIconExW
CheckEscapesW
ExtractIconW
FindExecutableW
DoEnvironmentSubstA
SHInvokePrinterCommandA
SHGetIconOverlayIndexA
SHCreateDirectoryExA
SHCreateProcessAsUserW

shlwapi

PathAppendW
PathRemoveFileSpecW
AssocQueryStringW
StrStrIA
StrRStrIA
StrChrA
StrChrIA
StrRChrIA
StrRChrW
StrStrIW
SHSetValueW
SHGetValueW

Sections

.text
Size: 387KB - Virtual size: 386KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text3
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text2
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

174266963e9a11ce6878050b21579fcf

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

shlwapi

Sections

.text Size: 387KB - Virtual size: 386KB

.text3 Size: 107KB - Virtual size: 107KB

.text2 Size: 20KB - Virtual size: 19KB

.data Size: 25KB - Virtual size: 25KB

.data3 Size: 20KB - Virtual size: 19KB

.rsrc Size: 5KB - Virtual size: 5KB

.text
Size: 387KB - Virtual size: 386KB

.text3
Size: 107KB - Virtual size: 107KB

.text2
Size: 20KB - Virtual size: 19KB

.data
Size: 25KB - Virtual size: 25KB

.data3
Size: 20KB - Virtual size: 19KB

.rsrc
Size: 5KB - Virtual size: 5KB