c0e6525d84161354852311b52bd4392eb590ff94f8a4a8bf0b64133198902da6

Sharing

Copy URL Twitter E-mail

General

Target

c0e6525d84161354852311b52bd4392eb590ff94f8a4a8bf0b64133198902da6
Size

264KB
MD5

48bd3d7503d1cefd404924c1c357f3bb
SHA1

ae6e0d83ba9e1d32c08b73f6f4800e450173dc48
SHA256

c0e6525d84161354852311b52bd4392eb590ff94f8a4a8bf0b64133198902da6
SHA512

86b450d22b4504424a3fed319307027b1baeaac6a6db8cb7b7eb70fbc1fa1342243fc67449967ee685ad410c7c267649466110b4bc4f7e9b94724be3e8ff11da
SSDEEP

6144:CvjzHPJ5k4dbxFxuEyx1LwFAxthWzRBYZOoPOY:qJhdbtJQ8FAxthWtCEo2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0e6525d84161354852311b52bd4392eb590ff94f8a4a8bf0b64133198902da6

Files

c0e6525d84161354852311b52bd4392eb590ff94f8a4a8bf0b64133198902da6
.exe windows:4 windows x86 arch:x86

b3a477a1975e4e387e6641f259f10c60

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileStringA
RtlUnwind
GetStartupInfoA
GetCommandLineA
HeapAlloc
HeapFree
RaiseException
GetTimeZoneInformation
GetACP
HeapReAlloc
HeapSize
SetHandleCount
GetStdHandle
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
MulDiv
SetErrorMode
GetFileTime
GetFileAttributesA
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalAlloc
lstrcmpA
GetCurrentThread
FreeLibrary
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GlobalFree
LockResource
FindResourceA
LoadResource
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalLock
GlobalUnlock
LocalFree
GetModuleFileNameA
lstrcmpiA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
lstrcpyA
LoadLibraryA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
GetCurrentProcess
DuplicateHandle
lstrcpynA
GetLastError
SetLastError
InterlockedDecrement
InterlockedIncrement
CreateProcessA
WaitForSingleObject
TerminateProcess
GetModuleHandleA
GetProcAddress
OpenProcess
GetCurrentProcessId
ExitProcess
lstrlenA
MultiByteToWideChar
WideCharToMultiByte
CreateFileA
GetFileSize
ReadFile
CloseHandle
DeleteFileA
GetEnvironmentVariableA
Sleep

user32

DrawTextA
TabbedTextOutA
ClientToScreen
PtInRect
GetClassNameA
LoadStringA
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
SetCursor
PostQuitMessage
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
SetWindowTextA
IsDialogMessageA
LoadIconA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgCtrlID
GetKeyState
DestroyMenu
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetSysColorBrush
LoadCursorA
GrayStringA
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
CopyRect
GetClientRect
GetDC
ReleaseDC
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetWindowTextA
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
GetSystemMetrics
CharUpperA
wsprintfA
GetWindowThreadProcessId
IsWindowVisible
GetParent
EnumWindows
PostMessageA
SendMessageA
EnableWindow
UnregisterClassA

gdi32

PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
RestoreDC
SaveDC
DeleteDC
GetStockObject
SelectObject
DeleteObject
GetDeviceCaps
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA

comctl32

ord17

psapi

GetModuleFileNameExA

Sections

.text
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rmnet
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b3a477a1975e4e387e6641f259f10c60

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

psapi

Sections

.text Size: 92KB - Virtual size: 89KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 16KB - Virtual size: 29KB

.rsrc Size: 12KB - Virtual size: 11KB

.rmnet Size: 116KB - Virtual size: 116KB

.text
Size: 92KB - Virtual size: 89KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 16KB - Virtual size: 29KB

.rsrc
Size: 12KB - Virtual size: 11KB

.rmnet
Size: 116KB - Virtual size: 116KB