34758db5cc59deb0878125fc16f0d1f0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

34758db5cc59deb0878125fc16f0d1f0N.exe
Size

428KB
MD5

34758db5cc59deb0878125fc16f0d1f0
SHA1

95d55aa5b3cd5ac6a1e78c00e76485d120157283
SHA256

0094238e8d8466ae861d488b59cf11df32f690fbcff39b9d1a5f716755e4b1a5
SHA512

d10b938685adb99b4b23ea8514b4a034d76b8e46a18913c9406a3ea215b4e2ae1f10c4c3e78ba2dd3b2c10edf99288cac3a4e92b325b11d7498c18eeb13b96b1
SSDEEP

12288:wzwcpyB7ybSLz8Kp4mF9jdDoxTp/7PWb:cNpycbm+N6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34758db5cc59deb0878125fc16f0d1f0N.exe

Files

34758db5cc59deb0878125fc16f0d1f0N.exe
.dll regsvr32 windows:4 windows x86 arch:x86

c9fa41379fdb0d90da9ab6b30a8162e2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

kernel32

SetFilePointer
WriteFile
ReadFile
CloseHandle
SetLastError
CreateFileA
GetFileSize
GetSystemDirectoryA
IsDBCSLeadByte
lstrcpynA
lstrcmpiA
LoadLibraryExA
GetLastError
SizeofResource
GetModuleHandleA
GetShortPathNameA
GlobalAlloc
GlobalLock
GlobalUnlock
MulDiv
GetCurrentProcess
FlushInstructionCache
GetCurrentThreadId
FindResourceA
LoadResource
LockResource
WideCharToMultiByte
MultiByteToWideChar
GetModuleFileNameA
lstrlenW
lstrcatA
lstrlenA
lstrcpyA
GetProcAddress
CompareStringA
SetUnhandledExceptionFilter
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetStartupInfoA
GetFileType
FreeEnvironmentStringsA
SetHandleCount
TerminateProcess
GetStdHandle
GetACP
GetCPInfo
GetOEMCP
HeapCreate
GetVersionExA
RaiseException
ExitProcess
GetEnvironmentVariableA
VirtualAlloc
VirtualFree
IsBadWritePtr
TlsGetValue
TlsFree
TlsSetValue
GetVersion
TlsAlloc
GetLocalTime
GetSystemTime
GetCommandLineA
HeapFree
HeapAlloc
SetEnvironmentVariableA
GetTimeZoneInformation
RtlUnwind
IsBadReadPtr
FreeLibrary
LoadLibraryA
IsBadCodePtr
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
InterlockedDecrement
HeapReAlloc
CompareStringW
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
HeapDestroy

user32

GetWindowLongA
RegisterClassExA
GetDialogBaseUnits
CallWindowProcA
CreateWindowExA
DestroyWindow
DefWindowProcA
SetWindowLongA
IsDialogMessageA
CreateDialogParamA
LoadStringA
SetWindowRgn
WinHelpA
wsprintfA
IsWindow
MoveWindow
ShowWindow
GetKeyState
UnionRect
PtInRect
ReleaseDC
CharNextA
GetDC
SetWindowPos
LoadCursorA
GetClassInfoExA
IntersectRect
OffsetRect
EqualRect
GetFocus
InvalidateRect
IsChild
BeginPaint
EndPaint
GetClientRect
GetActiveWindow
LoadBitmapA
FillRect
SetClipboardData
GetSystemMetrics
CloseClipboard
CharUpperA
EmptyClipboard
SendDlgItemMessageA
IsDlgButtonChecked
CheckRadioButton
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
SetFocus
SetWindowTextA
SendMessageA
GetParent
EndDialog
DialogBoxParamA
ScreenToClient
SetDlgItemTextA
GetWindowRect
OpenClipboard

gdi32

SetViewportOrgEx
MoveToEx
Rectangle
TextOutA
SetTextColor
DeleteObject
GetTextExtentPointA
GetTextMetricsA
SelectObject
CreateFontIndirectA
GetDeviceCaps
CreateRectRgnIndirect
DeleteMetaFile
CloseMetaFile
RestoreDC
SetWindowExtEx
SetWindowOrgEx
SaveDC
CreateMetaFileA
GetObjectType
GetObjectA
DeleteDC
SetMapMode
LPtoDP
BitBlt
CreateCompatibleDC
LineTo
GetStockObject
DeleteEnhMetaFile
PlayEnhMetaFile
CloseEnhMetaFile
CreateSolidBrush
CreateEnhMetaFileA
GetMapMode
GetViewportOrgEx
GetWindowOrgEx
PlayMetaFile
CopyEnhMetaFileA
EnumFontsA
CreateDIBitmap
CopyMetaFileA
SetBkMode
CreateDCA
GetDIBits

advapi32

RegSetValueExA
RegQueryValueExA
RegEnumValueA
RegQueryInfoKeyA
RegDeleteKeyA
RegEnumKeyExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA

ole32

CoTaskMemRealloc
CoTaskMemFree
OleSaveToStream
CreateStreamOnHGlobal
OleLoadFromStream
OleRegGetMiscStatus
OleRegGetUserType
OleRegEnumVerbs
CoCreateInstance
WriteClassStm
CoTaskMemAlloc
CreateDataAdviseHolder
CreateOleAdviseHolder

oleaut32

SysStringByteLen
VariantChangeType
OleCreatePropertyFrame
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocStringByteLen
SetErrorInfo
OleCreateFontIndirect
CreateErrorInfo
VariantInit
VariantClear
OleCreatePictureIndirect
LoadRegTypeLi
SysStringLen
VarUI4FromStr
RegisterTypeLi
SysAllocString
SysFreeString
SysAllocStringLen
LoadTypeLi

Exports

Exports

BarcodeAbout
BarcodeBarPrint
BarcodeBarPrintB
BarcodeBarPrintB2
BarcodeCheckVersion
BarcodeClipboard
BarcodeCreate
BarcodeGetBackColor
BarcodeGetBarColor
BarcodeGetBarHeight
BarcodeGetBarRatio
BarcodeGetBarWidth
BarcodeGetBearer
BarcodeGetBitmap
BarcodeGetBitmapB
BarcodeGetBitmapB2
BarcodeGetBitmapB2I
BarcodeGetBitmapBI
BarcodeGetBitmapI
BarcodeGetBlackBarRevisionValue
BarcodeGetBlackRatio
BarcodeGetCharGap
BarcodeGetCharHeight
BarcodeGetCharWidth
BarcodeGetCheckChar
BarcodeGetCheckDigitChar
BarcodeGetCheckPattern
BarcodeGetCodeSet
BarcodeGetDCMode
BarcodeGetDpiX
BarcodeGetDpiY
BarcodeGetElement
BarcodeGetEnhMetaFile
BarcodeGetEnhMetaFileB
BarcodeGetEnhMetaFileB2
BarcodeGetEnhMetaFileB2I
BarcodeGetEnhMetaFileBI
BarcodeGetEnhMetaFileI
BarcodeGetErrorMessage
BarcodeGetErrorNumber
BarcodeGetFlatHeight
BarcodeGetHeight
BarcodeGetMessage
BarcodeGetMetaFile
BarcodeGetMetaFileB
BarcodeGetMetaFileB2
BarcodeGetMetaFileB2I
BarcodeGetMetaFileBI
BarcodeGetMetaFileI
BarcodeGetPDFColumn
BarcodeGetPDFInitialSymbol
BarcodeGetPDFLevel
BarcodeGetPDFModel
BarcodeGetPDFRatio
BarcodeGetPDFRow
BarcodeGetPictureDisp
BarcodeGetPoint
BarcodeGetQRConnect
BarcodeGetQREscCode
BarcodeGetQRLevel
BarcodeGetQRMask
BarcodeGetQRModel
BarcodeGetQRSymbolNumber
BarcodeGetQRType
BarcodeGetQuiet
BarcodeGetRotate
BarcodeGetScaleHeight
BarcodeGetScaleWidth
BarcodeGetStartChar
BarcodeGetStopChar
BarcodeGetType
BarcodeGetUnit
BarcodeGetValue
BarcodeGetWhiteBarRevisionValue
BarcodeGetWidth
BarcodeGetZoom
BarcodePutBackColor
BarcodePutBarColor
BarcodePutBarHeight
BarcodePutBarRatio
BarcodePutBarWidth
BarcodePutBearer
BarcodePutBlackBarRevisionValue
BarcodePutBlackRatio
BarcodePutCharGap
BarcodePutCharHeight
BarcodePutCharWidth
BarcodePutCheckChar
BarcodePutCheckPattern
BarcodePutCodeSet
BarcodePutDCMode
BarcodePutDpiX
BarcodePutDpiY
BarcodePutElement
BarcodePutFlatHeight
BarcodePutFont
BarcodePutMessage
BarcodePutPDFColumn
BarcodePutPDFInitialSymbol
BarcodePutPDFLevel
BarcodePutPDFModel
BarcodePutPDFRatio
BarcodePutPDFRow
BarcodePutPoint
BarcodePutQRConnect
BarcodePutQREscCode
BarcodePutQRLevel
BarcodePutQRMask
BarcodePutQRModel
BarcodePutQRSymbolNumber
BarcodePutQRType
BarcodePutQuiet
BarcodePutRotate
BarcodePutStartChar
BarcodePutStopChar
BarcodePutType
BarcodePutUnit
BarcodePutValue
BarcodePutValueB
BarcodePutValueB2
BarcodePutWhiteBarRevisionValue
BarcodePutZoom
BarcodeRelease
BarcodeReleasePictureDisp
BarcodeSaveFile
BarcodeSetOnErrorProc
BarcodeSetPrinterDC
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 256KB - Virtual size: 253KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c9fa41379fdb0d90da9ab6b30a8162e2

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 256KB - Virtual size: 253KB

.rdata Size: 28KB - Virtual size: 25KB

.data Size: 48KB - Virtual size: 47KB

.rsrc Size: 76KB - Virtual size: 73KB

.reloc Size: 16KB - Virtual size: 15KB

.text
Size: 256KB - Virtual size: 253KB

.rdata
Size: 28KB - Virtual size: 25KB

.data
Size: 48KB - Virtual size: 47KB

.rsrc
Size: 76KB - Virtual size: 73KB

.reloc
Size: 16KB - Virtual size: 15KB