a036cd85af781fd85e40d87fa10157a17902eabf523c5fd3c266bf2e6345a9c3

Sharing

Copy URL Twitter E-mail

General

Target

a036cd85af781fd85e40d87fa10157a17902eabf523c5fd3c266bf2e6345a9c3
Size

1.7MB
MD5

d87467b62790fb40c0f32f72068a0412
SHA1

80baa08ad181551d8a8eca4bde06943b8d17db04
SHA256

a036cd85af781fd85e40d87fa10157a17902eabf523c5fd3c266bf2e6345a9c3
SHA512

3ebec33361fe5df345c4cee280b30b22b0fef667cdadc933c9384e0388d2b5ad1b45af5c132b8bd4baa5d98f5337535a93207f820a4a48c24ef40381c0b58e2d
SSDEEP

24576:yCxJZmdkNeQAaPCupvIVNu+fHTMW6L5s0lYC3/kxLhU0jb7FopGnNKnq786HT/:8yN/AU1vIVNfY7UqwpL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a036cd85af781fd85e40d87fa10157a17902eabf523c5fd3c266bf2e6345a9c3

Files

a036cd85af781fd85e40d87fa10157a17902eabf523c5fd3c266bf2e6345a9c3
.exe windows:4 windows x86 arch:x86

f84d57c8ce410a9e9cfa675d01fa7521

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsAlloc
TlsGetValue
TlsSetValue
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
GetLastError
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
TerminateProcess
HeapReAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
HeapFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetFileType
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
ExitProcess
GetVersion
GetModuleHandleA
RtlUnwind
SystemTimeToTzSpecificLocalTime
SuspendThread
Sleep
SizeofResource
SetUnhandledExceptionFilter
SetThreadPriority
SetStdHandle
SetLastError
SetHandleCount
SetFileAttributesW
SetEvent
SetEnvironmentVariableW
SetEnvironmentVariableA
SetEndOfFile
SetCurrentDirectoryW
ResumeThread
DuplicateHandle
GetStartupInfoA
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
LoadLibraryA
GetProcAddress
GetStdHandle
WriteFile
GetCommandLineW
MultiByteToWideChar
GetConsoleMode

user32

keybd_event
KillTimer
LoadCursorW
LoadImageW
LoadStringW
MapDialogRect
MapVirtualKeyW
MapWindowPoints
MessageBoxW
MoveWindow
MsgWaitForMultipleObjects
OffsetRect
OpenClipboard
PeekMessageW
PostMessageW
PostQuitMessage
PtInRect
RedrawWindow
RegisterClassW
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropW
ScreenToClient
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TranslateMessage
UnhookWindowsHookEx
UpdateWindow
WaitForInputIdle
WindowFromDC
WindowFromPoint
wsprintfW
IsZoomed
IsClipboardFormatAvailable
IsCharAlphaW
InvalidateRect
InsertMenuW
InsertMenuItemW
InflateRect
GetWindowThreadProcessId
GetWindowTextW
GetWindowTextLengthW
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowDC
GetWindow
GetUpdateRect
GetSystemMetrics
GetSubMenu
GetScrollInfo
GetPropW
GetParent
GetNextDlgGroupItem
GetMessageW
GetMenuStringW
GetMenuItemInfoW
GetKeyNameTextW
GetKeyboardState
GetIconInfo
GetForegroundWindow
GetFocus
GetDlgItemTextW
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursor
GetClipboardData
GetClientRect
IsWindowVisible
IsWindowEnabled
IsDialogMessageW
IsDlgButtonChecked
SendMessageW
RegisterWindowMessageW
FindWindowW
MessageBoxA
GetKeyState
CheckDlgButton
CheckMenuItem
CheckMenuRadioItem
ClientToScreen
GetClassNameW
GetClassNameA
GetClassInfoW
GetCapture
GetAsyncKeyState
GetActiveWindow
FrameRect
FindWindowExW
FillRect
EnumChildWindows
EndDialog
EnableWindow
EnableMenuItem
EmptyClipboard
DrawTextW
DrawStateW
DrawIconEx
DrawFocusRect
DrawEdge
DispatchMessageW
DialogBoxParamW
DialogBoxIndirectParamW
DestroyWindow
DestroyMenu
DestroyIcon
DeleteMenu
DefWindowProcW
CreateWindowExW
CreatePopupMenu
CreateDialogParamW
CreateDialogIndirectParamW
CloseClipboard
IsIconic

advapi32

RegCloseKey
RegOpenKeyExA
ControlService
DuplicateTokenEx
EnumDependentServicesW
FreeSid
GetAce
GetLengthSid
GetSidLengthRequired
GetSidSubAuthority
GetUserNameW
InitializeAcl
InitializeSecurityDescriptor
InitializeSid
LookupAccountSidW
LookupPrivilegeValueW
OpenProcessToken
OpenSCManagerW
OpenServiceW
PrivilegeCheck
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumKeyW
RegEnumValueW
RegOpenKeyExW
RegOpenKeyW
RegQueryInfoKeyW
RegQueryValueExW
RegSetKeySecurity
RegSetValueExW
SetFileSecurityW
SetSecurityDescriptorDacl
StartServiceW
RegQueryValueExA

shell32

ShellExecuteExW
CommandLineToArgvW
ShellExecuteW

ole32

StringFromCLSID
PropVariantClear
CreateStreamOnHGlobal
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
CoRevokeClassObject
CoResumeClassObjects

Sections

.text
Size: 808KB - Virtual size: 807KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 280KB - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.assist
Size: 599KB - Virtual size: 599KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f84d57c8ce410a9e9cfa675d01fa7521

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

Sections

.text Size: 808KB - Virtual size: 807KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 12KB - Virtual size: 20KB

.rsrc Size: 280KB - Virtual size: 277KB

.assist Size: 599KB - Virtual size: 599KB

.text
Size: 808KB - Virtual size: 807KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 12KB - Virtual size: 20KB

.rsrc
Size: 280KB - Virtual size: 277KB

.assist
Size: 599KB - Virtual size: 599KB