4005536f6fa2df5f86fa27cc5403242cf6d1549e86351b7f5ead6a22f189c3f0

Sharing

Copy URL

Twitter E-mail

General

Target

4005536f6fa2df5f86fa27cc5403242cf6d1549e86351b7f5ead6a22f189c3f0
Size

72KB
MD5

9d5605222266293035d05c63e1f3cef0
SHA1

60f751fc5b0255a460cf21f348917fd5b20e3765
SHA256

4005536f6fa2df5f86fa27cc5403242cf6d1549e86351b7f5ead6a22f189c3f0
SHA512

2adda726dd8046e0d951fc48623e7300da33f79af29f7aee84d8b0dabcd3efe57834db249209cf50efd2eef731fe2a0edf58d50575d77f50b5fa2480554ab8c5
SSDEEP

1536:NrmVkCi9CY12hYzk46wvwmFTyKGW1XHtCsG9lx7Twzol:oCz1WwdYB7Twzol

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4005536f6fa2df5f86fa27cc5403242cf6d1549e86351b7f5ead6a22f189c3f0

Files

4005536f6fa2df5f86fa27cc5403242cf6d1549e86351b7f5ead6a22f189c3f0
.dll windows:4 windows x86 arch:x86

7d166ccea2ac89d3ced9a8757ff24b83

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA

mwic_32

asc_hex
csc_4442
swr_4442
wsc_4442
srd_4442
hex_asc
swr_102
wsc_102
ic_init
get_status
turn_off
ic_exit
rsct_102
srd_102
csc_102
ser_102
clrrd_102
dv_beep

kernel32

DeleteCriticalSection
SetEnvironmentVariableA
CompareStringW
CompareStringA
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetEndOfFile
LoadLibraryA
GetProcAddress
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
EnterCriticalSection
LeaveCriticalSection
HeapFree
CloseHandle
ReadFile
InitializeCriticalSection
WriteFile
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
SetStdHandle
FlushFileBuffers
SetFilePointer
CreateFileA
GetCPInfo
GetACP
GetOEMCP

Exports

Exports

Error_message
Get_option
Get_pass
Gold_Buycard
Gold_Checkcard
Gold_Clearcard
Gold_Formatcard
Gold_Readcard
Gold_Tonewcard
Gold_Writecard
Mw_sn
Rander
Randnumber
Read_com
Read_mw
Set_option
UnWczy
UnWsjkpass
Wczy
Write_com
Write_mw
Wsjkpass
cn_endata1
isnew_4442
ky_format
long_yh
ps_format
xf_readkh

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d166ccea2ac89d3ced9a8757ff24b83

Headers

File Characteristics

Imports

user32

mwic_32

kernel32

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 42KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 12KB - Virtual size: 17KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 44KB - Virtual size: 42KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 12KB - Virtual size: 17KB

.reloc
Size: 4KB - Virtual size: 3KB