74077b33ef98e9caac6079c4bc8c90f1b59007c86985831ad1f2d98becf7dcfe

Sharing

Copy URL

Twitter E-mail

General

Target

74077b33ef98e9caac6079c4bc8c90f1b59007c86985831ad1f2d98becf7dcfe
Size

582KB
MD5

0ea99b365b967aa7ca6a38fd02365c9e
SHA1

023acbbd38446d7398c3f699a63429971edaba7a
SHA256

74077b33ef98e9caac6079c4bc8c90f1b59007c86985831ad1f2d98becf7dcfe
SHA512

586fa91ac93a74e5e7c9e1349685c0b8aa75d467513633cc816361bcf528a52461ea61ffd86422b7476fb8452b89b7671ce36d19d2099690a7df67b0d78e83de
SSDEEP

6144:V6+i1XKDBMZkRhJEHEkVTNZAAXYJPdk8hZZF:s9KDBnRhiES7z0Pdk8b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74077b33ef98e9caac6079c4bc8c90f1b59007c86985831ad1f2d98becf7dcfe

Files

74077b33ef98e9caac6079c4bc8c90f1b59007c86985831ad1f2d98becf7dcfe
.exe windows:4 windows x86 arch:x86

39527421e19653ad02e31fcf8b625df3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileStringA
SetErrorMode
RtlUnwind
RaiseException
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapFree
HeapAlloc
GetTimeZoneInformation
GetLocalTime
GetACP
SetStdHandle
GetFileType
TerminateProcess
CreateThread
ExitThread
HeapReAlloc
HeapSize
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
SystemTimeToFileTime
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
IsBadWritePtr
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
LocalFileTimeToFileTime
GetOEMCP
GetCPInfo
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GlobalFlags
GetProcessVersion
FindResourceExA
MulDiv
GetVolumeInformationA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
GetCurrentProcess
DuplicateHandle
CreateEventA
SuspendThread
SetThreadPriority
GlobalAlloc
GetCurrentThread
SetLastError
GetModuleFileNameA
FileTimeToLocalFileTime
GetDiskFreeSpaceA
SetFileTime
lstrcpynA
LocalFree
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
GetVersion
lstrcatA
GetCurrentThreadId
GetFileAttributesA
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GlobalLock
GlobalUnlock
FindResourceA
LoadResource
LockResource
GlobalFree
FileTimeToSystemTime
GetSystemTime
FlushFileBuffers
CreatePipe
CreateProcessA
WriteFile
WaitForMultipleObjects
GetLastError
GetTempPathA
GetTempFileNameA
ResetEvent
ResumeThread
lstrcmpA
FindFirstFileA
FindNextFileA
SetFilePointer
CreateFileA
GetFileSize
GetFileTime
ReadFile
GetExitCodeThread
SetEvent
WaitForSingleObject
CloseHandle
lstrcpyA
CreateDirectoryA
FreeLibrary
VirtualFree
VirtualAlloc
LoadLibraryA
GetProcAddress
GetFullPathNameA
UnhandledExceptionFilter

user32

LoadStringA
PostQuitMessage
ShowOwnedPopups
SetCursor
ValidateRect
TranslateMessage
GetMessageA
CharUpperA
InvalidateRect
ReleaseDC
GetDC
DestroyMenu
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
ReleaseCapture
GetDesktopWindow
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
IsZoomed
LoadCursorA
GetSysColorBrush
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
GetClassNameA
PtInRect
InflateRect
WindowFromPoint
SetRect
GetDCEx
LockWindowUpdate
SetCapture
SetParent
CheckMenuItem
EnableMenuItem
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
LoadIconA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
AdjustWindowRectEx
wvsprintfA
DeferWindowPos
GetClientRect
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
GetTopWindow
MessageBoxA
IsChild
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetMenuItemID
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetNextDlgTabItem
EndDialog
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetWindowRect
MapDialogRect
SetWindowPos
ShowWindow
GetCapture
GetActiveWindow
SetActiveWindow
GetAsyncKeyState
GetFocus
SetFocus
GetDlgItem
IsWindowEnabled
GetParent
PostMessageA
KillTimer
SetTimer
ScreenToClient
LoadMenuA
GetSubMenu
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
EqualRect
SetMenuItemBitmaps
GetCursorPos
wsprintfA
GetWindowLongA
SetWindowLongA
SendMessageA
EnableWindow
UnregisterClassA

gdi32

SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
CreateRectRgn
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetRectRgn
CombineRgn
RestoreDC
SaveDC
DeleteDC
EnumFontFamiliesExA
GetStockObject
GetDeviceCaps
CreateFontIndirectA
DeleteObject
GetTextMetricsA
SelectObject
GetTextExtentPoint32A
CreateRectRgnIndirect
PatBlt
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyExA

shell32

DragFinish
ShellExecuteA
DragQueryFileA

comctl32

DestroyPropertySheetPage
CreatePropertySheetPageA
ord17
ImageList_Destroy
PropertySheetA
ImageList_LoadImageA

wsock32

htons
WSAGetLastError
listen
shutdown
WSASetLastError
inet_addr
ntohs
getpeername
ioctlsocket
bind
accept
htonl
closesocket
recv
send
WSAAsyncSelect
inet_ntoa
socket
recvfrom
sendto
connect

Sections

.text
Size: 180KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 296KB - Virtual size: 309KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

39527421e19653ad02e31fcf8b625df3

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

wsock32

Sections

.text Size: 180KB - Virtual size: 176KB

.rdata Size: 44KB - Virtual size: 42KB

.data Size: 296KB - Virtual size: 309KB

.rsrc Size: 60KB - Virtual size: 60KB

.text
Size: 180KB - Virtual size: 176KB

.rdata
Size: 44KB - Virtual size: 42KB

.data
Size: 296KB - Virtual size: 309KB

.rsrc
Size: 60KB - Virtual size: 60KB