ec1dc232eaeadedeae0bd2ab347465a299004fc2c21c3a396a5d68149a64237f

Sharing

Copy URL Twitter E-mail

General

Target

ec1dc232eaeadedeae0bd2ab347465a299004fc2c21c3a396a5d68149a64237f
Size

3.9MB
MD5

d8c96d339ff06b8692aaa77388d945e7
SHA1

3fb167219d6d1fb778719ff96bcb8dbe8b429309
SHA256

ec1dc232eaeadedeae0bd2ab347465a299004fc2c21c3a396a5d68149a64237f
SHA512

667abf47152cf0cbdf8e904294091eb0c6425ee0c79caaefb6f738324a894c604fc2e2db37840bcc923fb0a200367d86f4728607f76c3671b723d48878084ced
SSDEEP

98304:WCv3QFc6ipOB8tHuCtlQauym0ROC3IduS7cDquPPAL3/:1v3QjipOGHuCPPuyxAnv8O3/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec1dc232eaeadedeae0bd2ab347465a299004fc2c21c3a396a5d68149a64237f

Files

ec1dc232eaeadedeae0bd2ab347465a299004fc2c21c3a396a5d68149a64237f
.exe windows:4 windows x86 arch:x86

b37201d498c5d82bcb6291ab11c50f75

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleMode
GetCommandLineW
LoadLibraryA
LeaveCriticalSection
GetTickCount
EnterCriticalSection
InitializeCriticalSection
GetCommandLineA
GetStartupInfoW
CloseHandle
CreateEventW
CreateFileW
CreateMutexW
CreateThread
DeleteCriticalSection
DeleteFileW
ExitProcess
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindNextFileW
FindResourceExW
FindResourceW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetConsoleOutputCP
GetCPInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetFileAttributesW
GetFileSize
GetFileTime
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameW
GetModuleHandleW
GetOEMCP
GetPriorityClass
GetProcAddress
GetProcessHeap
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadPriority
GetTimeFormatW
GetVersionExW
GlobalAlloc
GlobalLock
GlobalUnlock
HeapAlloc
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
IsBadWritePtr
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LoadLibraryExW
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LocalLock
LocalUnlock
LockResource
MulDiv
MultiByteToWideChar
OpenEventW
OpenMutexW
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ReadFile
ReleaseMutex
ResetEvent
SetEndOfFile
SetEvent
SetLastError
SetPriorityClass
SetStdHandle
SetThreadPriority
SetThreadPriorityBoost
SetUnhandledExceptionFilter
SizeofResource
Sleep
SystemTimeToFileTime
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
WaitForSingleObject
WideCharToMultiByte
WinExec
WriteConsoleW
WriteFile
LCMapStringA
GetStringTypeA
VirtualAlloc
InterlockedIncrement
InterlockedDecrement
VirtualFree
HeapCreate
GetVersionExA
GetEnvironmentVariableA
SetHandleCount
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetVersion
GetStartupInfoA
GetModuleHandleA
RtlUnwind

user32

GetMenuItemInfoW
GetMessageW
GetParent
GetSubMenu
GetSysColor
GetSystemMenu
GetSystemMetrics
GetWindowLongW
GetWindowRect
GetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
IsWindow
IsWindowEnabled
KillTimer
LoadBitmapW
LoadIconW
LoadImageW
LoadMenuW
LoadStringW
MessageBeep
MessageBoxW
MoveWindow
OffsetRect
GetLastActivePopup
PeekMessageW
PostMessageW
PostQuitMessage
RedrawWindow
RegisterClassExW
SendMessageW
SetClipboardData
SetDlgItemInt
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetMenu
SetPropW
SetRect
SetTimer
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TranslateMessage
WaitMessage
WinHelpW
OpenClipboard
GetDlgItemTextW
GetDlgItemInt
GetDialogBaseUnits
GetCursorPos
GetClientRect
GetClassNameW
GetAsyncKeyState
GetActiveWindow
FindWindowW
FillRect
EndPaint
EndDialog
EnableWindow
EnableMenuItem
EmptyClipboard
DrawTextW
DrawIcon
DispatchMessageW
DialogBoxParamW
DestroyWindow
DestroyIcon
DefWindowProcW
CreateWindowExW
CreateDialogIndirectParamW
CloseClipboard
CheckMenuItem
CheckDlgButton
BeginPaint
GetKeyState

shell32

CommandLineToArgvW

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 228KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.LMP7
Size: 1.3MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b37201d498c5d82bcb6291ab11c50f75

Headers

File Characteristics

Imports

kernel32

user32

shell32

Sections

.text Size: 2.3MB - Virtual size: 2.3MB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 12KB - Virtual size: 4.0MB

.rsrc Size: 228KB - Virtual size: 227KB

.LMP7 Size: 1.3MB - Virtual size: 1.4MB

.text
Size: 2.3MB - Virtual size: 2.3MB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 12KB - Virtual size: 4.0MB

.rsrc
Size: 228KB - Virtual size: 227KB

.LMP7
Size: 1.3MB - Virtual size: 1.4MB