4166acd8bcc1e452582566f04180ef78f0282856c061e2119867924b9ff2a90e

Sharing

Copy URL Twitter E-mail

General

Target

4166acd8bcc1e452582566f04180ef78f0282856c061e2119867924b9ff2a90e
Size

125KB
MD5

85e9a553022fdac62c4eac24cfc4adc4
SHA1

4bcdaa19887ff919e328354fa822fe8f5d56c07f
SHA256

4166acd8bcc1e452582566f04180ef78f0282856c061e2119867924b9ff2a90e
SHA512

53930f0d0a7850197d7aea597a092d3d1eecaecff659a40c50150115e832c10de949d923153c729c9c8149b2b0cb390162869d18a54917d7ccd65a4a23932522
SSDEEP

3072:xS/5won4ZO+2zNaGHuxX49f3bUZ7g4/W/ElY6:1n+HHuxX49WL5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4166acd8bcc1e452582566f04180ef78f0282856c061e2119867924b9ff2a90e

Files

4166acd8bcc1e452582566f04180ef78f0282856c061e2119867924b9ff2a90e
.exe windows:4 windows x86 arch:x86

d47264e657cde6db9b439340a5090c3e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
MulDiv
CreateFileA
WaitForSingleObject
GetFileAttributesA
CreateSemaphoreA
CreateThread
GetLastError
SetFilePointer
CompareStringA
SetEndOfFile
InterlockedIncrement
InterlockedDecrement
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
GetOEMCP
GetACP
GetCPInfo
ReadFile
WriteFile
FlushFileBuffers
GetStdHandle
SetHandleCount
GetFileType
SetStdHandle
RtlUnwind
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
VirtualFree
HeapCreate
SetEnvironmentVariableA
CloseHandle
CompareStringW
ReleaseSemaphore
GetVersionExA
GetProcAddress
FreeLibrary
RemoveDirectoryA
CreateDirectoryA
GetEnvironmentVariableA
ExitProcess
lstrlenA
LoadLibraryA
HeapFree
HeapDestroy
VirtualAlloc
HeapReAlloc
HeapAlloc
GetLocalTime
GetTimeZoneInformation
GetSystemTime
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
GetVersion

user32

LoadStringA
SetWindowPos
MessageBoxA
GetSystemMetrics
GetWindowRect
DefWindowProcA
UpdateWindow
ShowWindow
CreateWindowExA
RegisterClassA
InvalidateRect
EndPaint
GetSysColor
DrawIcon
BeginPaint
IsWindowVisible
CallWindowProcA
GetWindowLongA
GetWindowTextA
GetClientRect
SetWindowLongW
GetFocus
GetWindow
FillRect
SetCaretPos
DestroyCaret
CreateCaret
ShowCaret
CallWindowProcW
GetParent
KillTimer
IsDlgButtonChecked
CheckDlgButton
LoadIconA
SetFocus
GetKeyState
GetKeyboardLayout
DialogBoxParamA
IsWindowEnabled
GetDlgItem
SendDlgItemMessageA
SetWindowTextA
SetForegroundWindow
SetTimer
EndDialog
ActivateKeyboardLayout
SendMessageA
GetDC
ReleaseDC
SystemParametersInfoA
SetWindowLongA

gdi32

CreateCompatibleDC
GetTextExtentPoint32W
ExtTextOutA
ExtTextOutW
SetBkColor
SetTextColor
Rectangle
CreateFontIndirectA
CreatePen
DeleteDC
GetTextMetricsA
CreateCompatibleBitmap
GetStockObject
GetDeviceCaps
SelectObject
BitBlt
TranslateCharsetInfo
DeleteObject
CreateSolidBrush

comdlg32

GetSaveFileNameA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

shell32

SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA

comctl32

ord17

Sections

.text
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d47264e657cde6db9b439340a5090c3e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

comctl32

Sections

.text Size: 68KB - Virtual size: 64KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 20KB - Virtual size: 22KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 68KB - Virtual size: 64KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 20KB - Virtual size: 22KB

.rsrc
Size: 8KB - Virtual size: 7KB