03868a09e4d6909d9cee3d0c196509ec9ce9729394f8b18c318cafb318084cdd[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

03868a09e4d6909d9cee3d0c196509ec9ce9729394f8b18c318cafb318084cdd.exe
Size

352KB
MD5

c2f0719a716c319a452c78602da3cab0
SHA1

80298684dd51b963c00b30ea38c78e50e49f0170
SHA256

03868a09e4d6909d9cee3d0c196509ec9ce9729394f8b18c318cafb318084cdd
SHA512

39aedf12802f0e5b9a6e2837d233355a63e653a6d484b46c17b8978c6c2696b43969779c19048de00ce904b15b0a0abf159dac49a43574c1f8ae6d92f0b149df
SSDEEP

3072:iKa0ml77F1RoEN09pY/gclPcKC/KvM+oJL3rrZBD5t3Qo4Fq3XI3///Y/d0H/+/Q:FaLlT+Eqk/tlEBiujb3P3Ys05LG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03868a09e4d6909d9cee3d0c196509ec9ce9729394f8b18c318cafb318084cdd.exe

Files

03868a09e4d6909d9cee3d0c196509ec9ce9729394f8b18c318cafb318084cdd.exe
.exe windows:4 windows x86 arch:x86

61e6013d84ff2be9e417800c841505fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
RaiseException
HeapAlloc
HeapFree
GetTimeZoneInformation
GetACP
TerminateProcess
HeapSize
HeapReAlloc
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCommandLineA
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetStartupInfoA
GetProfileStringA
RtlUnwind
GetTickCount
GetCurrentDirectoryA
WritePrivateProfileStringA
SizeofResource
SetErrorMode
GetFileTime
GetFileSize
GetFileAttributesA
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GlobalAlloc
GetCurrentThread
GlobalFree
GetThreadLocale
GetFullPathNameA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
CloseHandle
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
lstrcpynA
GetLastError
lstrcmpA
FileTimeToLocalFileTime
FileTimeToSystemTime
FormatMessageA
LocalFree
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
GlobalLock
GlobalUnlock
MulDiv
SetLastError
LoadLibraryA
FreeLibrary
FindResourceA
LoadResource
LockResource
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
GetProcAddress
CreateDirectoryA
GetLogicalDrives
GetDriveTypeA
GetVolumeInformationA
GetModuleFileNameA
SetHandleCount
GetLocaleInfoA

user32

CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
RegisterClipboardFormatA
PostThreadMessageA
GetNextDlgTabItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
LoadIconA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
SetActiveWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
CopyRect
IsWindowVisible
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetParent
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
DestroyMenu
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
GetKeyState
GetWindowRect
InvalidateRect
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
GetDC
GrayStringA
DrawTextA
TabbedTextOutA
ReleaseCapture
SetCapture
PtInRect
GetFocus
GetClientRect
DrawFocusRect
GetSysColor
LoadBitmapA
MessageBoxA
EnableWindow
PostMessageA
GetMenuItemCount
MessageBeep
SendMessageA
IsWindow
GetSysColorBrush
LoadCursorA
GetDesktopWindow
GetClassNameA
MapDialogRect
SetWindowContextHelpId
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
SetCursor
PostQuitMessage
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
InflateRect
FindWindowA
CharUpperA
LoadStringA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
ClientToScreen
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
RemovePropA
GetSubMenu
EnableMenuItem
CheckMenuItem

gdi32

ExtTextOutA
Escape
GetClipBox
SetTextColor
SetBkColor
CreateBitmap
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
MoveToEx
LineTo
TextOutA
DeleteObject
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
PatBlt
CreateFontIndirectA
RectVisible
PtVisible
GetTextExtentPoint32A
CreateCompatibleDC
LPtoDP
CreateCompatibleBitmap
GetMapMode
DPtoLP
Rectangle
BitBlt
CreatePen
CreatePatternBrush
GetTextColor
GetBkColor
GetObjectA
CreateDIBitmap
GetTextExtentPointA
CreateSolidBrush

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

shell32

ShellExecuteA

comctl32

ord17

oledlg

ord8

ole32

OleUninitialize
OleInitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoFreeUnusedLibraries
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

VariantClear
VariantCopy
SysAllocString
SysAllocStringByteLen
VariantChangeType
SysFreeString
SysAllocStringLen
VariantTimeToSystemTime
SysStringLen

Sections

.text
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

61e6013d84ff2be9e417800c841505fa

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 168KB - Virtual size: 167KB

.rdata Size: 44KB - Virtual size: 41KB

.data Size: 20KB - Virtual size: 34KB

.rsrc Size: 116KB - Virtual size: 114KB

.text
Size: 168KB - Virtual size: 167KB

.rdata
Size: 44KB - Virtual size: 41KB

.data
Size: 20KB - Virtual size: 34KB

.rsrc
Size: 116KB - Virtual size: 114KB