f86b581cd89b5c59a436812e85c9e0d11d358df7a137b40fd1798d3f886b644a

Sharing

Copy URL Twitter E-mail

General

Target

f86b581cd89b5c59a436812e85c9e0d11d358df7a137b40fd1798d3f886b644a
Size

1.4MB
MD5

73de0c24840a0c225a2b6759b585f5c8
SHA1

3861a7cd6df6b7e76aa02a35074c6a2343f62162
SHA256

f86b581cd89b5c59a436812e85c9e0d11d358df7a137b40fd1798d3f886b644a
SHA512

47433488fb8f3cfdae45756bef76d13c73206e3bb055821be134a319340d028009ffa20e9049e3452e9108b829d914fef4cc17d221c304679c22b7d02b62a47e
SSDEEP

24576:M+3aq0RjqyqnU9SuGssPDHnSAR5ZvSzTDoiHwzFmongfIJgmYUi+X:YuLvsUHSE55s1HwpwUZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f86b581cd89b5c59a436812e85c9e0d11d358df7a137b40fd1798d3f886b644a

Files

f86b581cd89b5c59a436812e85c9e0d11d358df7a137b40fd1798d3f886b644a
.exe windows:4 windows x86 arch:x86

a4fef9209f9adf4e272d19b3998b20f0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockResource
LoadResource
SizeofResource
MultiByteToWideChar
WideCharToMultiByte
CreateEventA
DuplicateHandle
FlushFileBuffers
FreeResource
ResetEvent
InterlockedExchange
GetPrivateProfileStringA
WritePrivateProfileStringA
SetEvent
WaitForMultipleObjects
CreateFileW
GetTempPathA
FindClose
FindFirstFileA
GetSystemDirectoryA
CreateProcessA
GetStdHandle
LoadLibraryA
GetStartupInfoA
LocalFree
LocalAlloc
MulDiv
CreateThread
SetEndOfFile
GlobalMemoryStatus
FindResourceExA
FreeLibrary
EnumResourceNamesA
EnumResourceLanguagesA
GetCurrentThreadId
ReleaseMutex
OutputDebugStringA
RaiseException
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
GetCurrentProcessId
GetSystemTime
GetFullPathNameA
ExitProcess
CopyFileA
GetVersionExA
ResumeThread
CloseHandle
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
GetModuleHandleA
DeleteCriticalSection
SetLastError
GetSystemInfo
VirtualAlloc
VirtualFree
GetModuleFileNameA
CreateMutexA
FormatMessageA
Sleep
GetCurrentProcess
SetPriorityClass
GetProcAddress
WaitForSingleObject
RemoveDirectoryA
CreateDirectoryA
SetFileAttributesA
FindResourceA
CreateFileA
GetCurrentDirectoryA
InterlockedDecrement
InterlockedIncrement
GetTickCount
DeleteFileA
MoveFileA
GetFileAttributesA
WriteFile
GetFileSize
GetLastError
SetFilePointer
ReadFile
GetVersion
LCMapStringA
HeapSize
GetFileType
RtlUnwind
TerminateProcess
HeapCreate
LCMapStringW
GetStringTypeA
GetStringTypeW
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
SetHandleCount
GetEnvironmentVariableA
HeapDestroy
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
lstrlenA
SetUnhandledExceptionFilter
IsBadCodePtr

user32

GetSysColor
ValidateRect
IsWindowVisible
CopyRect
EndDialog
SetClassLongA
GetWindowRect
MapWindowPoints
BeginPaint
RegisterClassA
GetParent
ShowWindow
EnumChildWindows
GetWindow
GetDlgCtrlID
GetDlgItemTextA
GetSysColorBrush
SetForegroundWindow
GetFocus
SetFocus
SetWindowLongA
GetClassInfoExA
LoadIconA
LoadCursorA
PostQuitMessage
DestroyWindow
PeekMessageA
TranslateMessage
DispatchMessageA
IsChild
TranslateAcceleratorA
WaitMessage
CreateWindowExA
RegisterClassExA
DefWindowProcA
GetSystemMetrics
SendMessageA
SetTimer
KillTimer
GetDlgItem
GetWindowTextA
SetWindowTextA
IsWindowEnabled
OffsetRect
LoadImageA
GetDC
PostMessageA
IsDlgButtonChecked
GetWindowLongA
LoadStringA
MessageBoxA
SetDlgItemTextA
GetWindowThreadProcessId
RegisterWindowMessageA
MessageBoxIndirectA
DialogBoxIndirectParamA
CheckDlgButton
CreateDialogIndirectParamA
CreateDialogParamA
EnableWindow
DefDlgProcA
IntersectRect
InvalidateRgn
GetUpdateRect
SystemParametersInfoW
SystemParametersInfoA
InvalidateRect
wvsprintfA
MsgWaitForMultipleObjects
GetClassInfoA
SetRect
GetMenu
GetClassNameA
CallMsgFilterA
IsDialogMessageA
FindWindowExA
AdjustWindowRectEx
SetWindowRgn
GetClientRect
LoadCursorFromFileA
ReleaseDC
SetWindowPos
EndPaint
CallWindowProcA

gdi32

CreateFontIndirectA
DeleteObject
SelectObject
RestoreDC
CreateCompatibleDC
SaveDC
GetStockObject
CreateSolidBrush
SetTextColor
SetBkMode
CreateRectRgnIndirect
GetObjectA
GetDeviceCaps
SetDIBits
CreateCompatibleBitmap
GdiFlush
CreateDIBSection
CombineRgn
CreatePolygonRgn
CreateRectRgn
StretchBlt
SetBrushOrgEx
SetStretchBltMode
SelectClipRgn
GetDIBits
AddFontResourceA
CreateScalableFontResourceA
RemoveFontResourceA
GetTextExtentPoint32A
SetBkColor
BitBlt
DeleteDC

comctl32

_TrackMouseEvent
ord17

shell32

SHGetSpecialFolderPathA
ShellExecuteExA
Shell_NotifyIconA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

ole32

OleCreate
OleSetContainedObject
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoInitialize
CoUninitialize

wininet

HttpQueryInfoA
InternetQueryOptionA
InternetSetOptionA
InternetQueryDataAvailable
InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle

winmm

PlaySoundA

oleaut32

SysAllocString
SysFreeString
VariantClear

Sections

.text
Size: 216KB - Virtual size: 214KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a4fef9209f9adf4e272d19b3998b20f0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comctl32

shell32

advapi32

ole32

wininet

winmm

oleaut32

Sections

.text Size: 216KB - Virtual size: 214KB

.rdata Size: 40KB - Virtual size: 39KB

.data Size: 12KB - Virtual size: 18KB

.rsrc Size: 1.1MB - Virtual size: 1.1MB

.reloc Size: 16KB - Virtual size: 14KB

.text
Size: 216KB - Virtual size: 214KB

.rdata
Size: 40KB - Virtual size: 39KB

.data
Size: 12KB - Virtual size: 18KB

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

.reloc
Size: 16KB - Virtual size: 14KB