217670752e7363c967f691e3aa7524edfcabb2997c5e84adcc9f3b4125edb31b

Sharing

Copy URL Twitter E-mail

General

Target

217670752e7363c967f691e3aa7524edfcabb2997c5e84adcc9f3b4125edb31b
Size

12.0MB
MD5

27245445167834aab16df834dcc6959e
SHA1

20f30ddfeee6481341a57939d37addcaec548f65
SHA256

217670752e7363c967f691e3aa7524edfcabb2997c5e84adcc9f3b4125edb31b
SHA512

8499fcfbd303cef9c0109e06aaceb92961bd4206a0e60b7c4d7a8b960a68952c3064e0134b4afeefb83ec890528d896628b84a020789b6a6036382c07b784cd8
SSDEEP

196608:RQzjyX3mtxq5ZyN8tgN+9ynS29vbmAWonVTSh4fxosRBwH1bzitJ0OEXP:RQzkwcZi8e+Anf94onpfxx61bzBzXP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
217670752e7363c967f691e3aa7524edfcabb2997c5e84adcc9f3b4125edb31b

Files

217670752e7363c967f691e3aa7524edfcabb2997c5e84adcc9f3b4125edb31b
.exe windows:4 windows x86 arch:x86

d5be7e30b23b429c421e30dbeb8de108

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumValueW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
SetFileSecurityW
RegOpenKeyExW
RegCreateKeyExW

shell32

ShellExecuteExW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHFileOperationW
SHGetSpecialFolderLocation

ole32

CoCreateInstance
OleUninitialize
OleInitialize
IIDFromString
CoTaskMemFree

comctl32

ord17
ImageList_Destroy
ImageList_AddMasked
ImageList_Create

user32

SetDlgItemTextW
GetSystemMetrics
CreatePopupMenu
AppendMenuW
TrackPopupMenu
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
CallWindowProcW
GetMessagePos
CheckDlgButton
LoadCursorW
SetCursor
GetSysColor
SetWindowPos
GetWindowLongW
IsWindowEnabled
SetClassLongW
GetSystemMenu
EnableMenuItem
GetWindowRect
ScreenToClient
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetDlgItemTextW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
FindWindowExW
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
CharPrevW
CharNextA
wsprintfA
DispatchMessageW
PeekMessageW
GetClassInfoW
MessageBoxIndirectW

gdi32

GetDeviceCaps
SetBkColor
DeleteObject
SelectObject
SetTextColor
SetBkMode
CreateFontIndirectW
CreateBrushIndirect

kernel32

GetSystemDirectoryW
GetProcAddress
GetModuleHandleA
GetExitCodeProcess
lstrcatW
MoveFileExW
lstrcpyA
WriteFile
GetTempFileNameW
CreateFileW
lstrcmpiA
RemoveDirectoryW
CreateProcessW
CreateDirectoryW
GetSystemInfo
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceW
WideCharToMultiByte
lstrcpynW
lstrlenW
SetErrorMode
WaitForSingleObject
GetCommandLineW
GetTempPathW
GetWindowsDirectoryW
SetEnvironmentVariableW
CopyFileW
ExitProcess
GetCurrentProcess
GetLastError
GetModuleFileNameW
GetFileSize
GetTickCount
Sleep
SetFileAttributesW
GetFileAttributesW
SetCurrentDirectoryW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalFree
GlobalAlloc
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenA
MultiByteToWideChar
ReadFile
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
MulDiv
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
CreateEventW
ResetEvent
WaitForMultipleObjects
SetEvent
GetVersionExW

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 160KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d5be7e30b23b429c421e30dbeb8de108

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

Sections

.text Size: 30KB - Virtual size: 30KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 1KB - Virtual size: 128KB

.ndata Size: - Virtual size: 160KB

.rsrc Size: 60KB - Virtual size: 60KB

.text
Size: 30KB - Virtual size: 30KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 1KB - Virtual size: 128KB

.ndata
Size: - Virtual size: 160KB

.rsrc
Size: 60KB - Virtual size: 60KB