c8530b94e38e53454c418aaf0291510cd492d6948f6dff6e74a4690eefb74716

Sharing

Copy URL Twitter E-mail

General

Target

c8530b94e38e53454c418aaf0291510cd492d6948f6dff6e74a4690eefb74716
Size

296KB
MD5

2190e60937bc1375473902fa887e4f46
SHA1

74b8d1ddbbc32fde935bfd67ce50e2ea673423fc
SHA256

c8530b94e38e53454c418aaf0291510cd492d6948f6dff6e74a4690eefb74716
SHA512

5cbb3114788f1d0854b4d91776a79fbbe99144f577a517d73035a2b714e25f33b8255b8bed4d75e235ebdf7ded0285d34456218eed1db7f3c8fe043f94cec843
SSDEEP

3072:ORpaJ0k0IQqglGwOx8L7ygOCEcpVjy3VsojmLRJXWqy1uIi1RWHKhO:ORp7k0agg+7ZEcpSVORRWqSQWp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8530b94e38e53454c418aaf0291510cd492d6948f6dff6e74a4690eefb74716

Files

c8530b94e38e53454c418aaf0291510cd492d6948f6dff6e74a4690eefb74716
.exe windows:4 windows x86 arch:x86

3882f686614b24a7bfec6792572c7e82

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundA

kernel32

RtlUnwind
HeapFree
GetStartupInfoA
GetCommandLineA
TerminateProcess
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
GetACP
HeapDestroy
HeapCreate
VirtualFree
ExitProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
GetTickCount
GetModuleFileNameA
GetProfileStringA
SetFilePointer
FlushFileBuffers
WriteFile
SetErrorMode
GetCurrentProcess
GetProcessVersion
GetOEMCP
GetCPInfo
LocalReAlloc
TlsGetValue
GlobalReAlloc
TlsSetValue
EnterCriticalSection
GlobalHandle
LeaveCriticalSection
TlsFree
InitializeCriticalSection
DeleteCriticalSection
TlsAlloc
GetLastError
LocalAlloc
SizeofResource
GlobalFlags
lstrcpynA
SetLastError
LocalFree
MulDiv
InterlockedIncrement
MultiByteToWideChar
WideCharToMultiByte
WritePrivateProfileStringA
InterlockedDecrement
lstrlenA
LoadLibraryA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcatA
FreeLibrary
GetVersion
GlobalFindAtomA
GlobalGetAtomNameA
GlobalAddAtomA
GetProcAddress
lstrcpyA
GetModuleHandleA
GlobalDeleteAtom
CloseHandle
GlobalAlloc
GetEnvironmentStrings
lstrcmpA
GetEnvironmentStringsW
VirtualAlloc
IsBadWritePtr

user32

SendDlgItemMessageA
EndDeferWindowPos
CopyRect
BeginDeferWindowPos
GetClientRect
DeferWindowPos
EqualRect
ScreenToClient
AdjustWindowRectEx
SetFocus
GetSysColor
IsDialogMessageA
SetWindowTextA
ShowWindow
MapWindowPoints
LoadStringA
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
ReleaseCapture
GetDesktopWindow
DestroyMenu
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
InvalidateRect
BringWindowToTop
GetClassNameA
PtInRect
GetSysColorBrush
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
ClientToScreen
GetMenu
GetSubMenu
GetMenuItemID
GetWindowTextA
GetDlgCtrlID
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
EnableMenuItem
GetFocus
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
CallNextHookEx
ValidateRect
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetLastActivePopup
MessageBoxA
SetCursor
ShowOwnedPopups
PostMessageA
PostQuitMessage
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetParent
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetSystemMetrics
EnableWindow
SetTimer
KillTimer
GetDC
ReleaseDC
LoadBitmapA
DrawEdge
InflateRect
FillRect
UnregisterClassA
GetMenuItemCount
GetTopWindow
FindWindowA
IsWindowVisible
SendMessageA
SetForegroundWindow
IsIconic
DefWindowProcA
LoadIconA
LoadCursorA
UpdateWindow
GetWindowTextLengthA
CheckMenuItem
IntersectRect
DefDlgProcA
DrawFocusRect
CharNextA
ExcludeUpdateRgn
IsWindowUnicode
HideCaret
ShowCaret

gdi32

CreateDIBitmap
CreateCompatibleDC
GetClipBox
SetTextColor
GetObjectA
DeleteDC
SetBkColor
SaveDC
RestoreDC
SetBkMode
GetStockObject
SetViewportOrgEx
OffsetViewportOrgEx
SetMapMode
ScaleViewportExtEx
SetViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetTextExtentPointA
MoveToEx
IntersectClipRect
LineTo
SelectObject
DeleteObject
GetDeviceCaps
CreatePen
CreateSolidBrush
PtVisible
RectVisible
ExtTextOutA
Escape
TextOutA
BitBlt
CreateBitmap
PatBlt

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegDeleteValueA
RegSetValueExA
RegDeleteKeyA

shell32

DragFinish
DragQueryFileA
Shell_NotifyIconA

comctl32

ord17

Sections

.text
Size: 104KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3882f686614b24a7bfec6792572c7e82

Headers

File Characteristics

Imports

winmm

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

Sections

.text Size: 104KB - Virtual size: 100KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 8KB - Virtual size: 22KB

.rsrc Size: 100KB - Virtual size: 116KB

.text
Size: 104KB - Virtual size: 100KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 8KB - Virtual size: 22KB

.rsrc
Size: 100KB - Virtual size: 116KB