811dee1af28315f4e485cb8ea3fb26ac842a91b09290103d32183c80c576c5a0

Sharing

Copy URL

Twitter E-mail

General

Target

811dee1af28315f4e485cb8ea3fb26ac842a91b09290103d32183c80c576c5a0
Size

152KB
MD5

87aa54077525cdb82d8191e08eda9996
SHA1

567f9baa74ea26273bb675123fc923484430df31
SHA256

811dee1af28315f4e485cb8ea3fb26ac842a91b09290103d32183c80c576c5a0
SHA512

85f6f020bae7fdfe431c458c3fa54f10ca91289cca509dcf9f11e42609ed7f33f6a55ec2e6f13ba3d377276c3cbc242b54706153a29bedbb203681982985d28e
SSDEEP

3072:ADCD4ZcFAMjOC8u2n2olv01NLRDwQASH0JgPKjpJlLNTVIQMov9D:QCDVAMjOC8fn7t01lRDw3j3SQMk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
811dee1af28315f4e485cb8ea3fb26ac842a91b09290103d32183c80c576c5a0

Files

811dee1af28315f4e485cb8ea3fb26ac842a91b09290103d32183c80c576c5a0
.exe windows:6 windows x86 arch:x86

b207ed95112321370340a0e49eb9a3c2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

psapi

GetModuleBaseNameA
EnumProcessModules

kernel32

DecodePointer
VerSetConditionMask
FreeLibrary
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryExA
LoadResource
SizeofResource
lstrcmpiA
FindResourceA
VerifyVersionInfoW
MultiByteToWideChar
WideCharToMultiByte
IsDBCSLeadByte
CreateFileA
FindClose
FindFirstFileA
WriteFile
CloseHandle
OpenProcess
GetLocalTime
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
SetEvent
WaitForSingleObject
CreateEventA
OpenEventA
GetCurrentProcess
CreateThread
SetThreadPriority
SetPriorityClass
MapViewOfFile
UnmapViewOfFile
OpenMutexA
CreateFileMappingA
OpenFileMappingA
CreateFileW
WriteConsoleW
FlushFileBuffers
SetFilePointerEx
GetConsoleMode
GetCurrentThreadId
GetStringTypeW
SetStdHandle
FindNextFileA
GetProcessHeap
FindFirstFileExA
GetCommandLineW
GetCommandLineA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
LCMapStringW
GetFileType
GetACP
GetStdHandle
GetModuleHandleExW
ExitProcess
VirtualQuery
VirtualProtect
GetSystemInfo
RtlUnwind
GetModuleFileNameW
LoadLibraryExW
TlsFree
IsDebuggerPresent
TlsSetValue
TlsGetValue
TlsAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
GetConsoleCP
EnterCriticalSection
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
SetLastError
GetLastError
RaiseException
OutputDebugStringW
QueryPerformanceCounter
GetStartupInfoW
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleW
CreateEventW
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
ResetEvent
EncodePointer
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
WaitForSingleObjectEx

user32

GetMenuItemCount
SendMessageA
UnregisterClassA
RegisterClassExA
GetClassInfoExA
CreateWindowExA
SetWindowLongA
MessageBoxA
TrackPopupMenu
GetSubMenu
GetActiveWindow
SetClipboardData
CloseClipboard
OpenClipboard
GetMonitorInfoA
MonitorFromPoint
LoadImageA
GetWindowLongA
PtInRect
MapWindowPoints
MessageBeep
GetWindowRect
GetClientRect
InvalidateRect
GetMenuItemInfoA
TrackPopupMenuEx
RemoveMenu
AppendMenuA
EmptyClipboard
DestroyMenu
CreatePopupMenu
LoadMenuA
GetSystemMetrics
LoadAcceleratorsA
SetFocus
CharNextA
SetWindowPos
ShowWindow
DestroyWindow
IsWindow
CallWindowProcA
PostQuitMessage
DefWindowProcA
PeekMessageA
DispatchMessageA
TranslateMessage
GetMessageA
LoadStringW
LoadStringA
LoadCursorA

gdi32

GetStockObject

comdlg32

GetOpenFileNameA
GetSaveFileNameA

advapi32

SystemFunction036
RegCreateKeyExA
RegSetValueExA
RegQueryInfoKeyW
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey

ole32

CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoInitialize
CoUninitialize

oleaut32

VarUI4FromStr

comctl32

InitCommonControlsEx

Sections

.text
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b207ed95112321370340a0e49eb9a3c2

Headers

DLL Characteristics

File Characteristics

Imports

psapi

kernel32

user32

gdi32

comdlg32

advapi32

ole32

oleaut32

comctl32

Sections

.text Size: 99KB - Virtual size: 98KB

.rdata Size: 33KB - Virtual size: 33KB

.data Size: 4KB - Virtual size: 6KB

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 99KB - Virtual size: 98KB

.rdata
Size: 33KB - Virtual size: 33KB

.data
Size: 4KB - Virtual size: 6KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 6KB - Virtual size: 6KB