893a8c635fe83955ad9d517fbf7abbae0048b75fd95686435883fbf6edecd417

Sharing

Copy URL

Twitter E-mail

General

Target

893a8c635fe83955ad9d517fbf7abbae0048b75fd95686435883fbf6edecd417
Size

368KB
MD5

530c0c2572c2c1f6fe8cc84a9ef599cc
SHA1

4830922f4071d09e1dc5397cbdc2d9a7579f97a4
SHA256

893a8c635fe83955ad9d517fbf7abbae0048b75fd95686435883fbf6edecd417
SHA512

3afc215a0f98767f45338418029e94fade0607a1927ef4a81a7f45b93a0b62371599f7880a6b1ee0a889b4021ecd58f8d8f3df43096c2ef47048fa5cf74c3551
SSDEEP

6144:GpoeDCzHoeKt6BElj3wyDRTME2m3G+KKn8dkVfrBjsrK:moeDdt6BEN3wyDpMEg+Pn8qjs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
893a8c635fe83955ad9d517fbf7abbae0048b75fd95686435883fbf6edecd417

Files

893a8c635fe83955ad9d517fbf7abbae0048b75fd95686435883fbf6edecd417
.exe windows:4 windows x86 arch:x86

fa19102f379138c4df3673d831d501d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind
CreateDirectoryA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
ExitProcess
TerminateProcess
GetStartupInfoA
GetCommandLineA
HeapFree
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
GetACP
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetTickCount
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
GetStringTypeA
GetStringTypeW
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetErrorMode
GetOEMCP
GetProfileStringA
InterlockedExchange
GetCPInfo
GetProcessVersion
SizeofResource
WritePrivateProfileStringA
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalReAlloc
GetFileTime
GetFileSize
GetFileAttributesA
GetThreadLocale
GetFullPathNameA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
lstrcpynA
FileTimeToLocalFileTime
FileTimeToSystemTime
MulDiv
SetLastError
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GlobalFree
LockResource
FindResourceA
LoadResource
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
LocalFree
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
GetSystemInfo
GetWindowsDirectoryA
GetDriveTypeA
GetVolumeInformationA
GetComputerNameA
FreeLibrary
FormatMessageA
CreateFileA
CloseHandle
DeviceIoControl
GlobalLock
GlobalUnlock
GetLastError
Sleep
LoadLibraryA
GetProcAddress
GetModuleFileNameA
GetStdHandle
GetLongPathNameA

user32

CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
RegisterClipboardFormatA
PostThreadMessageA
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
SetFocus
AdjustWindowRectEx
ScreenToClient
IsWindowVisible
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
UnhookWindowsHookEx
GetPropA
SetWindowContextHelpId
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetNextDlgTabItem
EndDialog
LoadStringA
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
PostMessageA
PostQuitMessage
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
GetParent
SetRectEmpty
InflateRect
DrawFocusRect
LoadCursorA
CopyIcon
SetCursor
MessageBeep
InvalidateRect
SendMessageA
GetClientRect
GetFocus
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsIconic
GetSystemMetrics
DrawIcon
GetSystemMenu
AppendMenuA
SetWindowPos
LoadIconA
MessageBoxA
GetKeyState
GetWindowRect
CopyRect
EnableWindow
IsClipboardFormatAvailable
GetClipboardData
GetSysColorBrush
GetDesktopWindow
PtInRect
GetClassNameA
SetPropA
DestroyMenu
OpenClipboard
EmptyClipboard
IsWindowUnicode
CloseClipboard
SetClipboardData
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
CharUpperA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
UpdateWindow
LoadBitmapA
GetMenuState
ModifyMenuA
GetActiveWindow
MapDialogRect
SetMenuItemBitmaps
CheckMenuItem
CallWindowProcA
EnableMenuItem
GetMenuCheckMarkDimensions

gdi32

SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteObject
SelectObject
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
PatBlt
DPtoLP
GetTextColor
GetBkColor
LPtoDP
RestoreDC
SaveDC
DeleteDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetObjectA
CreateFontIndirectA
GetStockObject
GetTextMetricsA
GetDeviceCaps
CreateDIBitmap
GetTextExtentPointA
BitBlt
CreateCompatibleDC
CreateFontA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA

shell32

ShellExecuteA

comctl32

ord17

oledlg

ord8

ole32

CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
OleInitialize
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
CLSIDFromProgID
CoFreeUnusedLibraries
OleUninitialize
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

VariantClear
VariantCopy
SysAllocString
SysAllocStringByteLen
VariantChangeType
SysFreeString
SysAllocStringLen
VariantTimeToSystemTime
SysStringLen

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fa19102f379138c4df3673d831d501d3

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

iphlpapi

Sections

.text Size: 240KB - Virtual size: 239KB

.rdata Size: 48KB - Virtual size: 46KB

.data Size: 20KB - Virtual size: 39KB

.rsrc Size: 56KB - Virtual size: 52KB

.text
Size: 240KB - Virtual size: 239KB

.rdata
Size: 48KB - Virtual size: 46KB

.data
Size: 20KB - Virtual size: 39KB

.rsrc
Size: 56KB - Virtual size: 52KB