942cd943d87c902add3fee8b587823448ef9270956bc67f54ace679e5f7a2569

Sharing

Copy URL Twitter E-mail

General

Target

942cd943d87c902add3fee8b587823448ef9270956bc67f54ace679e5f7a2569
Size

2.6MB
MD5

7eb0225e407789f3e57094d4438cb600
SHA1

82083fe8c2c49046e8727eef2bbcdef12d996db0
SHA256

942cd943d87c902add3fee8b587823448ef9270956bc67f54ace679e5f7a2569
SHA512

4876e06c30f955d5c609a4e83e52fff9a8e5b420c56fe852bc75ec6499c60215cdc9774f2e47d80d68abf0af541e89fa94545a547f0ad1f51a79791eeee7f4f5
SSDEEP

49152:BP/wXqITA7XGrVAJgasNvnuzYg5sz+hEXiIxOqERCEyMhEU0W6:RYXauEYgSz+WiEERJy2OW6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
942cd943d87c902add3fee8b587823448ef9270956bc67f54ace679e5f7a2569

Files

942cd943d87c902add3fee8b587823448ef9270956bc67f54ace679e5f7a2569
.exe windows:5 windows x86 arch:x86

a701c3eb70c6acc8ebde17700af52c8b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetDlgItemTextA
SetWindowTextA
DialogBoxParamA
EndDialog
GetDlgItem
DefDlgProcA
LoadIconA
LoadCursorA
RegisterClassA
SendDlgItemMessageA
ExitWindowsEx
EnumWindows
IsIconic
ShowWindow
SetForegroundWindow
GetLastActivePopup
IsWindowVisible
GetWindowThreadProcessId
FindWindowA
GetParent
GetDesktopWindow
GetWindowRect
CopyRect
OffsetRect
SetWindowPos
MessageBoxA
MessageBoxW

advapi32

RegQueryValueExA
RegSetValueExW
RegCreateKeyExW
RegDeleteValueA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExW

comctl32

ord17

comdlg32

GetOpenFileNameW

kernel32

GetCurrentDirectoryA
InitializeCriticalSectionAndSpinCount
GetDriveTypeA
GetFileAttributesW
GetTimeZoneInformation
SetEnvironmentVariableA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
QueryPerformanceCounter
WriteConsoleA
SetStdHandle
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CompareStringA
CompareStringW
SetEndOfFile
LoadLibraryW
CreateFileW
SetFilePointer
GetLastError
WriteFile
ReadFile
GetProcAddress
LoadLibraryA
GetUserDefaultLCID
CloseHandle
CreateDirectoryW
GetLongPathNameW
ExitProcess
RemoveDirectoryW
FindClose
FindNextFileW
DeleteFileW
FindFirstFileW
WideCharToMultiByte
MultiByteToWideChar
AreFileApisANSI
FindFirstFileA
CreateFileA
GetShortPathNameA
GetModuleFileNameA
GetShortPathNameW
GetModuleFileNameW
GetWindowsDirectoryA
GetLongPathNameA
GetEnvironmentVariableA
GetTempPathA
GetWindowsDirectoryW
GetEnvironmentVariableW
GetTempPathW
GetTempFileNameA
GetTempFileNameW
GetFullPathNameW
GetFullPathNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetConsoleOutputCP
GetCurrentProcessId
DuplicateHandle
GetCurrentProcess
TerminateProcess
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
GetProcessHeap
SetEnvironmentVariableW
SearchPathW
EnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
ReleaseSemaphore
CreateSemaphoreA
DeleteFileA
GetCommandLineW
Sleep
SizeofResource
LockResource
LoadResource
FindResourceA
SetConsoleTitleA
GetTickCount
GetConsoleTitleA
AllocConsole
GetModuleHandleA
CreateDirectoryA
SetCurrentDirectoryW
SetThreadPriority
CreateThread
GetCurrentDirectoryW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
GetSystemTimeAsFileTime
RemoveDirectoryA
HeapAlloc
HeapFree
WriteConsoleW
GetFileType
GetStdHandle
GetModuleHandleW
GetCommandLineA
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
DeleteCriticalSection
SetHandleCount
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage

Sections

.text
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a701c3eb70c6acc8ebde17700af52c8b

Headers

DLL Characteristics

File Characteristics

Imports

user32

advapi32

comctl32

comdlg32

kernel32

Sections

.text Size: 179KB - Virtual size: 179KB

.rdata Size: 47KB - Virtual size: 46KB

.data Size: 7KB - Virtual size: 96KB

.rsrc Size: 31KB - Virtual size: 31KB

.reloc Size: 11KB - Virtual size: 11KB

.text
Size: 179KB - Virtual size: 179KB

.rdata
Size: 47KB - Virtual size: 46KB

.data
Size: 7KB - Virtual size: 96KB

.rsrc
Size: 31KB - Virtual size: 31KB

.reloc
Size: 11KB - Virtual size: 11KB