ce406f1b6b4cba1d639df65201bacd70fa2d7f4bb7e56cd7820f298a59f83e28

Sharing

Copy URL Twitter E-mail

General

Target

ce406f1b6b4cba1d639df65201bacd70fa2d7f4bb7e56cd7820f298a59f83e28
Size

46KB
MD5

5403b347f4ad7350a5543a7b6a838997
SHA1

e7b324add4df043621e18a38eac5a92c2e2b25e0
SHA256

ce406f1b6b4cba1d639df65201bacd70fa2d7f4bb7e56cd7820f298a59f83e28
SHA512

ff784f658b5dd0538436806fbd498ee63ff927165a187a78f3d6654c0b440bceb48e351657fea93369ff14c5fedb5982a843a9c7f15a98ae3673b514bb9fb663
SSDEEP

768:+xtmLz0LYc8BTtsYjl07rz2jKzDzRCDxlYvLVKJIOQnToIf1fRLxZd3GX:omMLYcitsYj6rzfAdIOQnToIfZv3GX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce406f1b6b4cba1d639df65201bacd70fa2d7f4bb7e56cd7820f298a59f83e28

Files

ce406f1b6b4cba1d639df65201bacd70fa2d7f4bb7e56cd7820f298a59f83e28
.exe windows:5 windows x86 arch:x86

43079541d6612cec6d88faa0dcfbf89b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetDeviceCaps

kernel32

ExitProcess
WritePrivateProfileStructA
GlobalLock
GetTickCount
SetProcessPriorityBoost
GlobalAlloc
GetPrivateProfileIntA
Sleep
SetThreadPriority
GlobalUnlock
GetProcAddress
GetPrivateProfileStringA
GetLocalTime
WritePrivateProfileStringA
GetPrivateProfileStructA
GetModuleFileNameA
GetModuleHandleA
CloseHandle

user32

GetDlgItemInt
DialogBoxParamA
GetDlgItemTextA
GetDlgCtrlID
MessageBoxExW
SetWindowTextA
DispatchMessageA
ShowWindow
EnableWindow
SetDlgItemTextA
EndDialog
GetDlgItem
SetDlgItemInt
TranslateMessage
GetDC
SendMessageA
PostMessageA
GetMessageA
SetFocus
MessageBeep
LoadIconA
SendDlgItemMessageA
SetTimer
PostThreadMessageA
CreateDialogParamA
SwitchToThisWindow

ws2_32

send
closesocket
socket
connect
WSAStartup
getsockname
recv
setsockopt
gethostbyname

shell32

Shell_NotifyIconA

ole32

CoInitialize
CreateStreamOnHGlobal

wininet

InternetCloseHandle
InternetOpenA
HttpSendRequestA
HttpOpenRequestA
InternetSetOptionA
InternetReadFile
InternetConnectA
HttpQueryInfoA

msvcp60

??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ

oleaut32

OleLoadPicture

msvcrt

strpbrk
atof
time
_beginthreadex
strtol
atoi
strchr
strstr
_ui64toa
sprintf
??2@YAPAXI@Z
memcpy
malloc
free
__dllonexit
_onexit
_ultoa

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

43079541d6612cec6d88faa0dcfbf89b

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

kernel32

user32

ws2_32

shell32

ole32

wininet

msvcp60

oleaut32

msvcrt

Sections

.text Size: 22KB - Virtual size: 21KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 3KB - Virtual size: 91KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 22KB - Virtual size: 21KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 3KB - Virtual size: 91KB

.rsrc
Size: 4KB - Virtual size: 3KB