e4ffc29bb839e054bf2bb3abad068c40c7152a75f58c7b79096e549c92b4bb21

Sharing

Copy URL Twitter E-mail

General

Target

e4ffc29bb839e054bf2bb3abad068c40c7152a75f58c7b79096e549c92b4bb21
Size

595KB
MD5

2d3bacd338cbe6ba02adecf1c8592401
SHA1

e6bd4c0f1d5bea5e098328f9b08763a87fb2b047
SHA256

e4ffc29bb839e054bf2bb3abad068c40c7152a75f58c7b79096e549c92b4bb21
SHA512

5f0cb83488ec25951eadda9401e09ad073f8abcfde70494a6e5caeb9c710dc9fe88ee9c3abfb9ee2d8b116d6b9d3feeec22ae01594a2417de852509d986cc5fa
SSDEEP

12288:WMIFKX2cMKWSRFwUJfbfu9R4ENGBgaxTr4myMcs:WMIFKX2iJwUpLu9R4ENOTr4myMV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e4ffc29bb839e054bf2bb3abad068c40c7152a75f58c7b79096e549c92b4bb21

Files

e4ffc29bb839e054bf2bb3abad068c40c7152a75f58c7b79096e549c92b4bb21
.exe windows:5 windows x86 arch:x86

472558dcbd9d641e5b0ac1b7020d3cc7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

comdlg32

GetSaveFileNameW

comctl32

ord17
ImageList_ReplaceIcon
ImageList_Create
ImageList_Destroy
ImageList_GetIcon

ws2_32

ioctlsocket
connect
inet_ntoa
WSAStartup
ntohl
inet_addr
htonl
select
WSAGetLastError
htons
getsockname
shutdown
setsockopt
recv
socket
closesocket
send
gethostbyname

kernel32

ReadFile
GetModuleFileNameW
CreateFileW
CloseHandle
SetFilePointer
CreateDirectoryW
UnlockFile
LockFile
GetTickCount
CopyFileW
GetLastError
MoveFileW
DeleteFileW
GetCurrentProcessId
GetFullPathNameW
MapViewOfFile
UnmapViewOfFile
CreateProcessW
FormatMessageA
GetStartupInfoW
GetCurrentDirectoryW
CreateFileMappingW
ResumeThread
AllocConsole
GetUserDefaultLCID
FreeConsole
GetVersionExW
SetLastError
RemoveDirectoryW
HeapFree
HeapAlloc
HeapReAlloc
FindFirstFileExW
FindNextFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileExA
Sleep
ExitProcess
DecodePointer
GetDriveTypeA
EncodePointer
GetCommandLineA
HeapSetInformation
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
GetStdHandle
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
RtlUnwind
IsProcessorFeaturePresent
GetFileInformationByHandle
PeekNamedPipe
GetFileType
SetHandleCount
DeleteCriticalSection
GetTimeZoneInformation
GetFullPathNameA
CreateFileA
RaiseException
GetStringTypeW
HeapSize
WriteConsoleW
LCMapStringW
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetConsoleCP
SetStdHandle
FlushFileBuffers
SetEndOfFile
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
WriteFile
GetFileSize
GetCommandLineW
GetProcAddress
MultiByteToWideChar
LoadLibraryW
FreeLibrary
WideCharToMultiByte
GetModuleHandleW
GetSystemTimeAsFileTime

user32

GetWindowLongW
IsDialogMessageW
TranslateMessage
GetDC
DrawTextW
LoadImageW
PostQuitMessage
GetMessageW
GetWindowRect
FindWindowA
UpdateWindow
SetDlgItemTextW
GetDlgItemTextW
MessageBoxW
CreateWindowExW
GetAncestor
InsertMenuItemW
SetFocus
LoadCursorW
DialogBoxParamW
GetFocus
SetForegroundWindow
GetSystemMenu
GetWindowTextW
GetSystemMetrics
PeekMessageW
MoveWindow
SetMenuItemInfoW
DrawMenuBar
SendDlgItemMessageW
GetIconInfo
IsWindowEnabled
DrawIconEx
MapDialogRect
SetCursor
CreateIconIndirect
GetDesktopWindow
SetWindowPos
ShowWindow
CreateDialogParamW
SendMessageW
MapWindowPoints
EnableWindow
SetWindowTextW
DestroyIcon
DispatchMessageW
ReleaseDC
GetDlgItem
SetWindowLongW
DestroyWindow
EndDialog

advapi32

RegCreateKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCloseKey
RegQueryValueExW
RegEnumKeyExW

ole32

CoInitialize
CoCreateInstance

gdi32

SetBkMode
DeleteObject
CreateCompatibleDC
GetDeviceCaps
CreatePatternBrush
LPtoDP
SelectObject
DPtoLP
DeleteDC
GetObjectW
CreateFontIndirectW
GetTextExtentPoint32W
GetBitmapBits
SetDIBits
CreateCompatibleBitmap
GetDIBits
SetBrushOrgEx

shell32

SHGetSpecialFolderPathW
SHChangeNotify
SHGetSpecialFolderLocation
SHGetFolderPathW

Sections

.text
Size: 253KB - Virtual size: 253KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 243KB - Virtual size: 242KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

472558dcbd9d641e5b0ac1b7020d3cc7

Headers

DLL Characteristics

File Characteristics

Imports

iphlpapi

comdlg32

comctl32

ws2_32

kernel32

user32

advapi32

ole32

gdi32

shell32

Sections

.text Size: 253KB - Virtual size: 253KB

.rdata Size: 69KB - Virtual size: 69KB

.data Size: 11KB - Virtual size: 71KB

.rsrc Size: 243KB - Virtual size: 242KB

.reloc Size: 18KB - Virtual size: 18KB

.text
Size: 253KB - Virtual size: 253KB

.rdata
Size: 69KB - Virtual size: 69KB

.data
Size: 11KB - Virtual size: 71KB

.rsrc
Size: 243KB - Virtual size: 242KB

.reloc
Size: 18KB - Virtual size: 18KB