2ae6eaeb08cdfa348ff8cce84d1898d64ca3a491a9f3fcdf7222909464a1d686

Sharing

Copy URL Twitter E-mail

General

Target

2ae6eaeb08cdfa348ff8cce84d1898d64ca3a491a9f3fcdf7222909464a1d686
Size

1.4MB
MD5

8774b95254bf1b3845f231b77ed2284f
SHA1

bf355ba0e5fdaa2e16492853cadee83282e5f4e5
SHA256

2ae6eaeb08cdfa348ff8cce84d1898d64ca3a491a9f3fcdf7222909464a1d686
SHA512

52c10369419d963efed2947f18c4b89d7ee0e5fe5f28e77aea3dca22c8af7a26dd35f22de8d31f0eeb8c6fdefac4ffa12305dff186ccd64c00abc5d7f11fa7e0
SSDEEP

24576:3gRfEpNe/9lADByeAhgAByRCofN7EZQwbtSW29lHTm0d1UaPD+Dk96x:3pe/96A9hPufN7Eiwbs99m0d1UaR96

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ae6eaeb08cdfa348ff8cce84d1898d64ca3a491a9f3fcdf7222909464a1d686

Files

2ae6eaeb08cdfa348ff8cce84d1898d64ca3a491a9f3fcdf7222909464a1d686
.exe windows:4 windows x86 arch:x86

aa96398d26f2046ef0dd111e1dd02200

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MulDiv
SizeofResource
LockResource
LoadResource
FindResourceA
MultiByteToWideChar
WideCharToMultiByte
CreateEventA
DuplicateHandle
WaitForMultipleObjects
SetEvent
ResetEvent
InterlockedExchange
GetPrivateProfileStringA
WritePrivateProfileStringA
FlushFileBuffers
FreeResource
LocalAlloc
CreateFileW
GetTempPathA
FindClose
FindFirstFileA
GetSystemDirectoryA
CreateProcessA
GetStdHandle
LoadLibraryA
GetStartupInfoA
LocalFree
DeleteFileA
SetEndOfFile
GlobalMemoryStatus
FindResourceExA
FreeLibrary
EnumResourceNamesA
EnumResourceLanguagesA
GetCurrentThreadId
CreateMutexA
ReleaseMutex
OutputDebugStringA
RaiseException
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
GetCurrentProcessId
GetSystemTime
GetFullPathNameA
ExitProcess
CopyFileA
GetVersionExA
MoveFileA
GetFileAttributesA
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
GetModuleHandleA
DeleteCriticalSection
VirtualAlloc
SetLastError
GetSystemInfo
Sleep
VirtualFree
FormatMessageA
GetModuleFileNameA
GetCurrentProcess
SetPriorityClass
RemoveDirectoryA
GetProcAddress
WaitForSingleObject
CreateFileA
CreateDirectoryA
SetFileAttributesA
InterlockedIncrement
GetCurrentDirectoryA
InterlockedDecrement
GetFileSize
GetTickCount
WriteFile
ReadFile
GetLastError
SetFilePointer
CloseHandle
CreateThread
ResumeThread
LCMapStringA
GetCPInfo
LCMapStringW
HeapSize
GetVersion
TerminateProcess
GetFileType
RtlUnwind
FreeEnvironmentStringsA
GetACP
InitializeCriticalSection
GetOEMCP
SetStdHandle
SetHandleCount
GetEnvironmentVariableA
HeapDestroy
HeapCreate
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
lstrlenA
SetUnhandledExceptionFilter
IsBadCodePtr

user32

ValidateRect
IsWindowVisible
CopyRect
EndDialog
GetSysColorBrush
GetSysColor
SetClassLongA
GetWindowRect
MapWindowPoints
GetParent
ShowWindow
EnumChildWindows
GetWindow
GetDlgCtrlID
GetDlgItemTextA
SetForegroundWindow
SetRect
GetMenu
GetFocus
SetFocus
SetWindowLongA
GetClassInfoExA
LoadIconA
LoadCursorA
PostQuitMessage
DestroyWindow
PeekMessageA
TranslateMessage
DispatchMessageA
IsChild
TranslateAcceleratorA
WaitMessage
CreateWindowExA
RegisterClassExA
DefWindowProcA
GetSystemMetrics
SetTimer
KillTimer
GetDlgItem
GetWindowTextA
SetWindowTextA
IsWindowEnabled
OffsetRect
LoadImageA
PostMessageA
GetDC
SendMessageA
GetWindowLongA
LoadStringA
MessageBoxA
GetWindowThreadProcessId
RegisterWindowMessageA
MessageBoxIndirectA
DialogBoxIndirectParamA
CheckDlgButton
IsDlgButtonChecked
CreateDialogIndirectParamA
CreateDialogParamA
EnableWindow
DefDlgProcA
IntersectRect
GetUpdateRect
BeginPaint
EndPaint
SystemParametersInfoW
SystemParametersInfoA
InvalidateRect
wvsprintfA
MsgWaitForMultipleObjects
GetClassInfoA
GetClassNameA
SetDlgItemTextA
CallMsgFilterA
IsDialogMessageA
AdjustWindowRectEx
SetWindowRgn
FindWindowExA
LoadCursorFromFileA
GetClientRect
ReleaseDC
RegisterClassA
SetWindowPos
CallWindowProcA

gdi32

DeleteObject
SelectObject
RestoreDC
BitBlt
SaveDC
GetStockObject
CreateCompatibleDC
SetTextColor
SetBkMode
CreateSolidBrush
GetObjectA
GetDeviceCaps
CreateRectRgnIndirect
CreateCompatibleBitmap
GdiFlush
SetDIBits
StretchBlt
SetBrushOrgEx
CreateDIBSection
GetDIBits
AddFontResourceA
SetStretchBltMode
RemoveFontResourceA
GetTextExtentPoint32A
CreateScalableFontResourceA
SetBkColor
DeleteDC
CombineRgn
CreateFontIndirectA

comctl32

_TrackMouseEvent
ord17

shell32

Shell_NotifyIconA
ShellExecuteExA
SHGetSpecialFolderPathA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

ole32

OleCreate
OleSetContainedObject
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoInitialize
CoUninitialize

wininet

InternetQueryOptionA
InternetSetOptionA
InternetQueryDataAvailable
InternetReadFile
InternetOpenUrlA
HttpQueryInfoA
InternetOpenA
InternetCloseHandle

oleaut32

VariantClear
SysAllocString
SysFreeString

Sections

.text
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aa96398d26f2046ef0dd111e1dd02200

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comctl32

shell32

advapi32

ole32

wininet

oleaut32

Sections

.text Size: 208KB - Virtual size: 207KB

.rdata Size: 40KB - Virtual size: 38KB

.data Size: 12KB - Virtual size: 18KB

.rsrc Size: 1.1MB - Virtual size: 1.1MB

.reloc Size: 16KB - Virtual size: 14KB

.text
Size: 208KB - Virtual size: 207KB

.rdata
Size: 40KB - Virtual size: 38KB

.data
Size: 12KB - Virtual size: 18KB

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

.reloc
Size: 16KB - Virtual size: 14KB