f34af1d03044675ab59eeb6a84fb4d752f818692f6f0ca7bd98091ed49db4b8f

Sharing

Copy URL Twitter E-mail

General

Target

f34af1d03044675ab59eeb6a84fb4d752f818692f6f0ca7bd98091ed49db4b8f
Size

276KB
MD5

8335e5217387ea702d9f1ca6c1eef923
SHA1

48cba0f1baf4969b14e13a29237b1caae6c3177e
SHA256

f34af1d03044675ab59eeb6a84fb4d752f818692f6f0ca7bd98091ed49db4b8f
SHA512

aece73172d0ddcf3333ce072fa392f132d6d4dacd507a53b2507fac07326c2ebf44379874156f2a911e08871f8eb45f85b47b53ad5db31c3b2c1af8caad992ae
SSDEEP

6144:6vNeJ+NeNWNfNuN2NuJGNWSvsIGN/uPu4V5EdwuKQZmNPvJ:6vNeJ+NeNWNfNuN2NuJGNWSGuG4V5E2h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f34af1d03044675ab59eeb6a84fb4d752f818692f6f0ca7bd98091ed49db4b8f

Files

f34af1d03044675ab59eeb6a84fb4d752f818692f6f0ca7bd98091ed49db4b8f
.exe windows:4 windows x86 arch:x86

3839635ec093b23b4eb851ff6e280984

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

LocalReAlloc
TlsGetValue
MulDiv
GlobalFlags
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
LockResource
LoadResource
FindResourceA
GetProcessVersion
SetErrorMode
DuplicateHandle
GetCurrentProcess
FlushFileBuffers
LockFile
UnlockFile
MoveFileA
DeleteFileA
GetVolumeInformationA
GetFullPathNameA
GetStringTypeExA
GetThreadLocale
GetShortPathNameA
GetCPInfo
GetOEMCP
RtlUnwind
HeapFree
HeapAlloc
GetDriveTypeA
GetLocalTime
GetStartupInfoA
GetCommandLineA
ExitProcess
GetTimeZoneInformation
GetSystemTime
GetACP
TerminateProcess
CreateThread
ExitThread
TlsSetValue
HeapReAlloc
HeapSize
FatalAppExitA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStringTypeA
GetStringTypeW
Sleep
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetConsoleCtrlHandler
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
GlobalReAlloc
GetLastError
GetVersionExA
lstrcmpiA
GetSystemInfo
TlsFree
GlobalHandle
GlobalUnlock
GlobalFree
TlsAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
SetFileAttributesA
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
FindFirstFileA
FindClose
GetFileTime
GetFileAttributesA
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
GlobalLock
GlobalAlloc
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
FileTimeToLocalFileTime
FileTimeToSystemTime
GetProcAddress
FormatMessageA
WideCharToMultiByte
InterlockedDecrement
GetModuleHandleA
InterlockedIncrement
SetLastError
GetCurrentDirectoryA
CreateProcessA
WaitForSingleObject
OutputDebugStringA
GetCurrentProcessId
GetModuleFileNameA
GetTempPathA
SetCurrentDirectoryA
SetFilePointer
WriteFile
SetEndOfFile
CreateFileA
GetFileSize
ReadFile
CreateFileW
MultiByteToWideChar
LoadLibraryA
GetWindowsDirectoryA
GetSystemDirectoryA
LoadLibraryExA
GetUserDefaultLangID
lstrcpyA
lstrcatA
CreateMutexA
CloseHandle
lstrcpynA
LocalAlloc
lstrcmpA
lstrlenA
LocalFree
GetVersion
FreeLibrary
RaiseException

user32

GetWindowTextLengthA
SetWindowLongA
MoveWindow
SetWindowPos
ShowWindow
SetFocus
GetSystemMetrics
GetWindowPlacement
IsIconic
SystemParametersInfoA
IntersectRect
OffsetRect
RegisterWindowMessageA
SetForegroundWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
DefWindowProcA
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
CreateWindowExA
DestroyWindow
SetWindowPlacement
TrackPopupMenu
GetMenuItemID
GetSubMenu
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
IsChild
GetTopWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
SetScrollInfo
GetScrollInfo
ScrollWindow
EndDeferWindowPos
CopyRect
BeginDeferWindowPos
GetClientRect
DeferWindowPos
EqualRect
AdjustWindowRectEx
IsWindow
SetActiveWindow
GetSysColor
MapWindowPoints
UpdateWindow
LoadIconA
GetSysColorBrush
CharUpperA
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
DestroyMenu
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
InvalidateRect
IsDialogMessageA
SendDlgItemMessageA
GetDlgItemTextA
GetDlgItemInt
GetDlgItem
CheckRadioButton
CheckDlgButton
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
GetMenuStringA
DeleteMenu
InsertMenuA
GetMenuItemCount
GetWindowTextA
SetWindowTextA
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetClassNameA
ScreenToClient
ClientToScreen
WindowFromPoint
GetWindowThreadProcessId
GetDesktopWindow
WaitMessage
ReleaseCapture
SetCapture
LoadCursorA
UnregisterClassA
UnhookWindowsHookEx
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
EnableWindow
SetCursor
ShowOwnedPopups
SendMessageA
PostQuitMessage
PostMessageA
OemToCharA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
BringWindowToTop
CharToOemA
wsprintfA
wsprintfW
CharNextA
SetDlgItemInt
CharPrevA
LoadStringA
GetMenuState
GetCapture

gdi32

DeleteDC
StartDocA
SaveDC
RestoreDC
SelectObject
GetStockObject
SelectPalette
SetBkColor
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
DeleteObject
GetCurrentPositionEx
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
GetClipRgn
CreateRectRgn
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreatePen
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreatePatternBrush
CreateDIBPatternBrushPt
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetDCOrgEx
GetObjectA
SetMapperFlags
CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegDeleteValueA
RegCreateKeyExA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
RegSetValueExA

shell32

SHGetFileInfoA
DragFinish
DragQueryFileA
DragAcceptFiles

comctl32

ord17

Sections

.text
Size: 184KB - Virtual size: 181KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3839635ec093b23b4eb851ff6e280984

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

Sections

.text Size: 184KB - Virtual size: 181KB

.rdata Size: 44KB - Virtual size: 40KB

.data Size: 24KB - Virtual size: 37KB

.rsrc Size: 12KB - Virtual size: 10KB

.text
Size: 184KB - Virtual size: 181KB

.rdata
Size: 44KB - Virtual size: 40KB

.data
Size: 24KB - Virtual size: 37KB

.rsrc
Size: 12KB - Virtual size: 10KB