3c9b0013d3c67508b49b40d7757a89e0a8dd426fc340b08840e7852b22393cca

Sharing

Copy URL

Twitter E-mail

General

Target

3c9b0013d3c67508b49b40d7757a89e0a8dd426fc340b08840e7852b22393cca
Size

1016KB
MD5

32cc8bea9dfd0ab9d58ffb954bf4a32e
SHA1

1f3e5cd1def3cbebf8dd434214b0cd11b7a5fc0b
SHA256

3c9b0013d3c67508b49b40d7757a89e0a8dd426fc340b08840e7852b22393cca
SHA512

8912a6c515b610c20698e6c8cdd5f1ea65e6dfef724dd4dae014cef18fb09f6f9c61bfdb52e298c5884b56fd3427387eeb50d942e723d302489c8f2ba63035b4
SSDEEP

24576:n7dfHtlzKQH1dtAK8cgamLk42FQubIAH+erQH03a:n7T1dCK8tLyBrmT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c9b0013d3c67508b49b40d7757a89e0a8dd426fc340b08840e7852b22393cca

Files

3c9b0013d3c67508b49b40d7757a89e0a8dd426fc340b08840e7852b22393cca
.exe windows:4 windows x86 arch:x86

5dee750cf4c1b78b6690e5a02e362ef5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DispatchMessageA
ShowWindow
GetDesktopWindow
GetMessageA
DestroyIcon
PostQuitMessage
RegisterClassA
CreateWindowExA
PeekMessageA
ScreenToClient
DrawMenuBar
SetMenuItemInfoA
GetActiveWindow
FillRect
PostMessageA
IsZoomed
ChangeDisplaySettingsA
SetFocus
BeginPaint
SetWindowPos
GetCursorPos
MessageBoxA
SetWindowLongA
IntersectRect
EndPaint
GetWindowLongA
SetCursor
SetForegroundWindow
GetUpdateRect
MoveWindow
ReleaseDC
GetDC
GetSystemMetrics
GetAsyncKeyState
SetRect
EqualRect
GetWindowRect
GetClientRect
RegisterWindowMessageA
LoadImageA
UpdateWindow
DefWindowProcA
TranslateMessage
wsprintfA
GetSystemMenu
LoadIconA

kernel32

FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
Sleep
RtlUnwind
HeapSize
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
SetFilePointer
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CreateFileA
GetFileAttributesA
SetFileAttributesA
OutputDebugStringA
CreateEventA
WaitForSingleObject
GetModuleFileNameA
ResetEvent
GetLocalTime
CreateMutexA
ReleaseMutex
lstrcatA
GetFileSize
WaitForMultipleObjects
SetEvent
GetVersion
CreateDirectoryA
SetEndOfFile
ReadFile
CreateThread
ExitThread
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetLastError
CloseHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
RaiseException
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle

gdi32

CreateDIBSection
SetBkMode
DeleteObject
SelectObject
CreateFontA
TextOutA
CreateSolidBrush
GetDeviceCaps
SetBkColor
GetBkMode
SetTextColor
DeleteDC
CreateCompatibleDC

ole32

CoInitialize
CoUninitialize
CoCreateInstance

winmm

mixerGetLineInfoA
mixerClose
mixerGetNumDevs
mixerGetControlDetailsA
mixerSetControlDetails
mixerGetDevCapsA
mixerOpen
timeGetTime
timeEndPeriod
timeGetDevCaps
timeBeginPeriod
mixerGetLineControlsA

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA

imm32

ImmSetCompositionWindow
ImmSetOpenStatus
ImmGetCompositionWindow
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

ddraw

DirectDrawCreateEx

dsound

ord11

Sections

.text
Size: 816KB - Virtual size: 812KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5dee750cf4c1b78b6690e5a02e362ef5

Headers

File Characteristics

Imports

user32

kernel32

gdi32

ole32

winmm

shell32

imm32

ddraw

dsound

Sections

.text Size: 816KB - Virtual size: 812KB

.rdata Size: 116KB - Virtual size: 115KB

.data Size: 76KB - Virtual size: 185KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 816KB - Virtual size: 812KB

.rdata
Size: 116KB - Virtual size: 115KB

.data
Size: 76KB - Virtual size: 185KB

.rsrc
Size: 4KB - Virtual size: 3KB