534296a6379402cde2f8cdf71732a47b738dff41c973b2a7403d4ca8d39e9b0c

Sharing

Copy URL

Twitter E-mail

General

Target

534296a6379402cde2f8cdf71732a47b738dff41c973b2a7403d4ca8d39e9b0c
Size

4.8MB
MD5

564eb5403f316150871943b09a0f3fe5
SHA1

d86eb0ee8008a93ddd7fed557a78b9de605f7a95
SHA256

534296a6379402cde2f8cdf71732a47b738dff41c973b2a7403d4ca8d39e9b0c
SHA512

359af8610f62b7089b240f976d27ff35b3767feea4256595afa33a485f1519d5d3aaac00e6b0769eca3e54af2952ef1eb866103a5bce61514f80194b610b5405
SSDEEP

98304:sDPn1hUa4I7qCBlO5gqSZQkztu6PGnfahe5cBmirfK6MsLNlQ/58oI1ktftRINxf:E1Z4I7tZQmtu67eCPDM+C58J+tMxf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
534296a6379402cde2f8cdf71732a47b738dff41c973b2a7403d4ca8d39e9b0c

Files

534296a6379402cde2f8cdf71732a47b738dff41c973b2a7403d4ca8d39e9b0c
.exe windows:4 windows x86 arch:x86

e85494f910b0958f60f118ce10b3a110

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\svn\apd5\513\code\installer\makepackage\bin32\release\PackageStub.pdb

Imports

comctl32

InitCommonControlsEx

kernel32

GetLastError
FindResourceA
GetExitCodeProcess
WaitForSingleObject
CloseHandle
Sleep
CreateProcessA
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetTickCount
GetTempPathA
GetCurrentThreadId
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
InterlockedIncrement
InterlockedDecrement
lstrlenA
lstrcmpiA
IsDBCSLeadByte
CreateEventA
FreeLibrary
LoadLibraryExA
GetModuleHandleA
GetModuleFileNameA
FlushInstructionCache
GetCurrentProcess
SetLastError
LoadResource
CreateThread
GetProcAddress
LoadLibraryA
SetEnvironmentVariableA
CompareStringW
CompareStringA
ReadFile
SetEndOfFile
GetTimeZoneInformation
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
SetFilePointer
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
SizeofResource
LockResource
FreeResource
FindFirstFileA
SetFileAttributesA
MoveFileExA
FindNextFileA
FindClose
SetEvent
RtlUnwind
GetConsoleMode
GetConsoleCP
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
HeapCreate
SetConsoleCtrlHandler
FatalAppExitA
GetStdHandle
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
InterlockedCompareExchange
HeapFree
GetProcessHeap
HeapAlloc
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
ExitProcess
VirtualProtect
GetSystemInfo
VirtualQuery
HeapReAlloc
GetCommandLineA
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThread
WriteFile
HeapDestroy

user32

MapWindowPoints
SetForegroundWindow
EnumThreadWindows
CharNextA
DestroyWindow
LoadStringA
CreateDialogParamA
GetSystemMetrics
LoadImageA
PostQuitMessage
IsDialogMessageA
GetParent
GetWindow
GetWindowRect
SystemParametersInfoA
GetClientRect
UnregisterClassA
SetWindowPos
GetDlgItem
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
SendMessageA
ShowWindow
SetWindowTextA
PostMessageA
GetWindowLongA
SetWindowLongA

advapi32

RegDeleteValueA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteKeyA

shell32

SHCreateDirectoryExA
SHFileOperationA

ole32

CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc

oleaut32

SysFreeString
VarUI4FromStr

Sections

.text
Size: 140KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51.6MB - Virtual size: 51.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e85494f910b0958f60f118ce10b3a110

Headers

File Characteristics

PDB Paths

Imports

comctl32

kernel32

user32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 140KB - Virtual size: 138KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 8KB - Virtual size: 12KB

.rsrc Size: 51.6MB - Virtual size: 51.6MB

.text
Size: 140KB - Virtual size: 138KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 8KB - Virtual size: 12KB

.rsrc
Size: 51.6MB - Virtual size: 51.6MB