9a1a07c4dcadb9896ef4a4db1d8b77133ecbdc402d255048d6b0ea51975fee26

Sharing

Copy URL

Twitter E-mail

General

Target

9a1a07c4dcadb9896ef4a4db1d8b77133ecbdc402d255048d6b0ea51975fee26
Size

2.4MB
MD5

083d16c31d6d21c007d198d7a4ff1644
SHA1

b7d10c503ce045a2f1b4ba121017a757daaf7cbe
SHA256

9a1a07c4dcadb9896ef4a4db1d8b77133ecbdc402d255048d6b0ea51975fee26
SHA512

97dc07ea13dc813e9219d7db1c769b162dc20edb4b197171195c4ea7e6bdf4bd6b1911b65e816d12c75735f1cac0c80afe33db2f3abe5034002a05af4c1488cc
SSDEEP

24576:f8OGPzBcQhBEwncND3DtBOnibIWdZ8y87QSXtTO+VPnuofTx2fE3W8binzF0J4YJ:Enz+S6FVKnWdmy87QSp1ju2rKdRYwpq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a1a07c4dcadb9896ef4a4db1d8b77133ecbdc402d255048d6b0ea51975fee26

Files

9a1a07c4dcadb9896ef4a4db1d8b77133ecbdc402d255048d6b0ea51975fee26
.exe windows:5 windows x86 arch:x86

bc182a5cf18a53b4c80725e8c4ebbe5a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

comctl32

ImageList_Destroy

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

kernel32

GetCPInfo
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetEnvironmentStringsW
GetExitCodeThread
GetFileAttributesW
GetFileSize
GetFileTime
GetFileType
GetFullPathNameW
GetLastError
GetLocaleInfoA
GetLocaleInfoW
GetLongPathNameW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDirectoryW
GetSystemInfo
GetTempFileNameW
GetTempPathW
GetTimeFormatA
GetTimeZoneInformation
GetUserDefaultLCID
GetWindowsDirectoryW
GlobalAlloc
GlobalFree
GlobalHandle
GlobalLock
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByteEx
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringA
LCMapStringW
LoadLibraryExW
LoadResource
GetConsoleOutputCP
LocalFree
LockResource
lstrcmpiW
lstrcmpW
lstrcpyA
lstrcpynW
lstrcpyW
lstrlenA
lstrlenW
MapViewOfFile
MoveFileW
MulDiv
MultiByteToWideChar
OpenFileMappingW
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadFile
RemoveDirectoryW
ResetEvent
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFileAttributesW
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SleepEx
SystemTimeToTzSpecificLocalTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
GetVersionExA
GetEnvironmentVariableA
GetEnvironmentStrings
FreeEnvironmentStringsA
GetCurrentProcess
GetVersion
RtlUnwind
GetConsoleMode
GetConsoleCP
GetCommandLineW
GetACP
FreeLibrary
FreeEnvironmentStringsW
FlushInstructionCache
FlushFileBuffers
FindResourceW
FindResourceExW
FindNextFileW
FindFirstFileW
FileTimeToSystemTime
FileTimeToLocalFileTime
ExpandEnvironmentStringsW
ExitThread
ExitProcess
EnumSystemLocalesA
DeleteFileW
DeleteFileA
DeleteCriticalSection
CreateThread
CreateSemaphoreW
CreateProcessW
CreateMutexW
CreateFileW
CreateFileA
CreateEventW
GetSystemTimeAsFileTime
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
GetTickCount
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
FindClose
GetProcAddress
LocalAlloc

user32

GetSubMenu
GetSysColor
GetSystemMetrics
GetWindowDC
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
InflateRect
InsertMenuW
IntersectRect
InvalidateRect
InvalidateRgn
IsChild
IsDialogMessageW
IsRectEmpty
IsWindowEnabled
IsWindowVisible
KillTimer
LoadAcceleratorsW
LoadCursorW
LoadIconW
LoadMenuW
MapDialogRect
MapWindowPoints
MessageBoxW
ModifyMenuW
MoveWindow
OffsetRect
PeekMessageW
PostMessageW
PostQuitMessage
PtInRect
RedrawWindow
RegisterClassExW
RegisterClassW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropW
ScreenToClient
ScrollWindow
SendDlgItemMessageW
SendMessageW
SetCapture
SetClipboardData
SetCursorPos
SetDlgItemInt
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetPropW
SetRectEmpty
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetWindowContextHelpId
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
GetScrollInfo
SetWindowTextW
ShowCursor
ShowScrollBar
ShowWindow
SubtractRect
SystemParametersInfoW
TrackPopupMenu
TrackPopupMenuEx
TranslateAcceleratorW
TranslateMessage
UnhookWindowsHookEx
UnionRect
UnregisterClassA
wsprintfW
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetKeyState
GetForegroundWindow
GetFocus
GetDlgItemTextW
GetDlgItemInt
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoExW
GetCaretPos
GetCapture
GetActiveWindow
FindWindowW
FillRect
EqualRect
EnumWindows
EnumChildWindows
EndPaint
EndDialog
EnableWindow
EnableMenuItem
DrawTextW
DrawIcon
DispatchMessageW
BeginPaint
BringWindowToTop
CallNextHookEx
CallWindowProcW
CharNextExA
DialogBoxParamW
DialogBoxIndirectParamW
DestroyWindow
DestroyMenu
DestroyAcceleratorTable
DefWindowProcW
CreateWindowExW
CreatePopupMenu
CreateDialogIndirectParamW
CreateAcceleratorTableW
CopyRect
ClientToScreen
GetPropW
GetParent
CharNextW
CheckMenuItem
GetMessageW
SetWindowsHookExW
GetMenuStringW
FindWindowExW

gdi32

GetICMProfileW
GetObjectW
GetStockObject
GetTextExtentPoint32W
GetTextMetricsW
LineTo
MoveToEx
OffsetRgn
GetDeviceCaps
SelectObject
SetBkColor
SetBkMode
SetPixel
SetTextColor
SetWindowOrgEx
StartDocW
StartPage
ExtTextOutW
ExtCreateRegion
ExcludeClipRect
EndPage
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreateFontW
CreateFontIndirectW
CreateDIBSection
OffsetWindowOrgEx
EndDoc

winspool.drv

EnumPrintersW
DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

RegCloseKey
RegSetValueExW
RegSetValueExA
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
IsTextUnicode

shell32

StrStrW

ole32

CoTaskMemFree
CoTaskMemAlloc
CoGetClassObject
CoCreateInstance
StringFromGUID2
OleUninitialize
OleSetContainedObject
OleInitialize
OleLockRunning
OleCreate
CreateStreamOnHGlobal
CoUninitialize
CoInitialize
CoTaskMemRealloc

shlwapi

PathIsRelativeW
StrFormatByteSizeW

Sections

.text
Size: 756KB - Virtual size: 753KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.flac9
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bc182a5cf18a53b4c80725e8c4ebbe5a

Headers

File Characteristics

Imports

comctl32

version

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

shlwapi

Sections

.text Size: 756KB - Virtual size: 753KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 12KB - Virtual size: 20KB

.rsrc Size: 236KB - Virtual size: 236KB

.flac9 Size: 1.4MB - Virtual size: 1.4MB

.text
Size: 756KB - Virtual size: 753KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 12KB - Virtual size: 20KB

.rsrc
Size: 236KB - Virtual size: 236KB

.flac9
Size: 1.4MB - Virtual size: 1.4MB