30a75e469e4129f74ca8545bd7f8b037b00e7e7368f8abf2cc2b22756163a22c

Sharing

Copy URL Twitter E-mail

General

Target

30a75e469e4129f74ca8545bd7f8b037b00e7e7368f8abf2cc2b22756163a22c
Size

11.6MB
MD5

e181cfe8d933332b3e99bfbc824acd01
SHA1

c81da96c1013c12d86db5c1f1325698a06ab7f00
SHA256

30a75e469e4129f74ca8545bd7f8b037b00e7e7368f8abf2cc2b22756163a22c
SHA512

fc11d3809b9896c5803d2262ad7c13de24bb9ffae0a748babf6b1ed4e65e39a04f9ce1e1447aea7f949ac67d1fc179871e78c262e92097ab447f333e9eb8f94a
SSDEEP

196608:r2PY9EQa1TYzAjwCz9jY3svOlN01MLCfoi5i3JDi5HKOsRR39/ppdlaWkllt3MU/:u6M1y+wWq0YHSHJ+fLwt5/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30a75e469e4129f74ca8545bd7f8b037b00e7e7368f8abf2cc2b22756163a22c

Files

30a75e469e4129f74ca8545bd7f8b037b00e7e7368f8abf2cc2b22756163a22c
.exe windows:5 windows x86 arch:x86

a44e85ea22161762befcee724c761e92

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
lstrcmpiW
lstrcpyW
GetTickCount
FreeLibrary
LoadLibraryW
GetProcAddress
GlobalLock
GlobalAlloc
GlobalUnlock
QueryPerformanceCounter
QueryPerformanceFrequency
HeapAlloc
HeapFree
GetProcessHeap
GetCurrentThreadId
FindResourceW
LoadResource
GetModuleHandleW
SizeofResource
LockResource
GetDriveTypeW
MoveFileExW
SetEnvironmentVariableW
Sleep
CopyFileW
GetSystemWow64DirectoryW
SetCurrentDirectoryW
FormatMessageA
GetModuleFileNameA
LoadLibraryExA
OutputDebugStringA
CreateMutexW
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
ReleaseMutex
WaitForMultipleObjects
LocalFree
SetEndOfFile
SetEnvironmentVariableA
WriteConsoleW
SetStdHandle
LCMapStringW
CompareStringW
GetTimeFormatW
OutputDebugStringW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
LoadLibraryExW
GetTimeZoneInformation
TlsFree
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreatePipe
GetCurrentProcessId
GetConsoleCP
FlushFileBuffers
GetStartupInfoW
GetFileType
SetFilePointer
ReadConsoleW
GetConsoleMode
GetStdHandle
HeapSize
SetLastError
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
IsDebuggerPresent
RaiseException
GetCommandLineA
GetModuleHandleExW
ExitProcess
GetSystemTimeAsFileTime
AreFileApisANSI
CreateProcessA
DuplicateHandle
GetTempPathA
RtlUnwind
IsProcessorFeaturePresent
GetFileAttributesExW
HeapReAlloc
DecodePointer
EncodePointer
CreateThread
TlsAlloc
DeleteCriticalSection
FindClose
CreateEventW
GetTempPathW
CreateFileW
GetModuleFileNameW
ReadFile
GetFileAttributesW
WriteFile
CreateDirectoryW
SetFilePointerEx
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
TlsSetValue
SetEvent
InterlockedDecrement
InterlockedIncrement
TlsGetValue
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
GetLastError
TerminateProcess
GetExitCodeProcess
GetVersionExW
OpenProcess
WaitForSingleObject
GetCurrentProcess
SetFileAttributesW
DeleteFileW
CloseHandle
FindNextFileW
GetLocaleInfoW
RemoveDirectoryW
FindFirstFileW
MultiByteToWideChar
GetDateFormatW
WideCharToMultiByte

user32

PtInRect
DispatchMessageW
MoveWindow
MapWindowPoints
GetSystemMetrics
GetActiveWindow
MessageBoxW
SetFocus
GetFocus
SetCapture
SetWindowRgn
UpdateLayeredWindow
EndPaint
PostThreadMessageW
ExitWindowsEx
TranslateMessage
AnimateWindow
BeginPaint
InvalidateRect
ReleaseCapture
UpdateWindow
GetCaretBlinkTime
ScreenToClient
TrackMouseEvent
CallNextHookEx
IsWindowEnabled
LoadIconW
EnableWindow
GetTopWindow
GetWindowLongW
SetWindowLongW
SetTimer
KillTimer
GetWindowRect
SetActiveWindow
GetCursorPos
SetWindowsHookExW
UnhookWindowsHookEx
FillRect
DrawTextW
SetCursor
CloseClipboard
GetKeyState
IsClipboardFormatAvailable
LoadCursorW
GetClipboardData
EmptyClipboard
OpenClipboard
SetClipboardData
DestroyWindow
RegisterClassExW
CreateWindowExW
DefWindowProcW
IsWindow
OffsetRect
IntersectRect
SendMessageW
GetClientRect
PeekMessageW
SetWindowPos
ShowWindow
IsWindowVisible
ClientToScreen
GetMessageW
PostQuitMessage
PostMessageW
IsIconic

gdi32

CreateRoundRectRgn
SetBkMode
SaveDC
RestoreDC
BitBlt
CreateDIBSection
StretchBlt
GetCharWidth32W
GetClipRgn
SetTextColor
SelectClipRgn
CreateRectRgnIndirect
GetTextMetricsW
DeleteDC
SelectObject
CreateCompatibleDC
CreateSolidBrush
CreateFontIndirectW
DeleteObject
GetObjectW
GetStockObject
CreateRectRgn

advapi32

RegQueryValueExW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegDeleteValueW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityInfo
GetSecurityDescriptorSacl
RegCreateKeyExW

shell32

SHGetSpecialFolderPathW
ShellExecuteExW
ShellExecuteW
SHBrowseForFolderW
SHGetPathFromIDListW

ole32

CoCreateInstance
OleUninitialize
OleInitialize
CoInitialize
CoUninitialize
RevokeDragDrop

psapi

GetModuleFileNameExW

shlwapi

SHDeleteKeyW
PathIsDirectoryEmptyW

imm32

ImmGetContext
ImmGetDefaultIMEWnd
ImmNotifyIME
ImmReleaseContext

Sections

.text
Size: 526KB - Virtual size: 525KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 417KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 273.1MB - Virtual size: 273.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data
.rsrc
.text

Sharing

General

Malware Config

Signatures

Files

a44e85ea22161762befcee724c761e92

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

psapi

shlwapi

imm32

Sections

.text Size: 526KB - Virtual size: 525KB

.data Size: 12KB - Virtual size: 417KB

.rsrc Size: 273.1MB - Virtual size: 273.1MB

.text
Size: 526KB - Virtual size: 525KB

.data
Size: 12KB - Virtual size: 417KB

.rsrc
Size: 273.1MB - Virtual size: 273.1MB