5905f13d19c963842bc1cc0afe1ed4e6b1828772a39754a1645b1f96d6ec1f7f

Sharing

Copy URL Twitter E-mail

General

Target

5905f13d19c963842bc1cc0afe1ed4e6b1828772a39754a1645b1f96d6ec1f7f
Size

3.2MB
MD5

9e7d6c87ce4cf550d683b24ec3c02745
SHA1

aecbc2a7b2bb5bcaeefe05f6d18908375643bfd9
SHA256

5905f13d19c963842bc1cc0afe1ed4e6b1828772a39754a1645b1f96d6ec1f7f
SHA512

b4ce7f4cb90f06120a65e39b5c5b3ee1ef23584c67cf8d729771e0d0dcd212436083b827c42aec81ba637556ac66e4f2ed19e3ca2e5a9b69c5a0d20fc427dd4e
SSDEEP

49152:/QZ9WNw4murgCPrnHBGuoHbBlL2PTEWlcxfMTNLv:/296murzrnHBGuoHdlSPTlSxfGLv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5905f13d19c963842bc1cc0afe1ed4e6b1828772a39754a1645b1f96d6ec1f7f

Files

5905f13d19c963842bc1cc0afe1ed4e6b1828772a39754a1645b1f96d6ec1f7f
.exe windows:4 windows x86 arch:x86

692eea76d45dd5e54f5c867aa715372b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

kernel32

GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetTempFileNameW
GetTempPathW
GetThreadLocale
GetVersionExA
GetVersionExW
GetWindowsDirectoryW
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
HeapAlloc
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InterlockedCompareExchange
InterlockedExchange
IsProcessorFeaturePresent
LoadLibraryW
LoadResource
LockResource
lstrlenA
lstrlenW
MultiByteToWideChar
OpenEventW
OpenMutexW
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ReadFile
SetEvent
SetFilePointer
SetLastError
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SystemTimeToFileTime
TerminateProcess
GetProcessHeap
UnmapViewOfFile
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteFile
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetOEMCP
GetCPInfo
InterlockedIncrement
InterlockedDecrement
HeapCreate
GetEnvironmentVariableA
TlsGetValue
TlsAlloc
TlsSetValue
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
GetCurrentProcess
ExitProcess
GetVersion
GetStartupInfoA
GetModuleHandleA
RtlUnwind
GetProcAddress
GetPrivateProfileStringW
GetPrivateProfileIntW
GetModuleHandleW
GetModuleFileNameW
GetLocalTime
GetLocaleInfoA
GetLastError
GetFileSize
GetFileInformationByHandle
GetExitCodeThread
GetExitCodeProcess
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetACP
FreeResource
FreeLibrary
FlushInstructionCache
FindResourceW
FindResourceExW
FileTimeToSystemTime
DeleteCriticalSection
CreateMutexW
CreateFileW
CopyFileW
GetStartupInfoW
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
GetTickCount
LeaveCriticalSection
LoadLibraryA
GetCommandLineW
GetConsoleMode
UnhandledExceptionFilter

user32

SystemParametersInfoW
TranslateMessage
UnregisterClassA
UpdateWindow
WindowFromPoint
VkKeyScanW
MessageBoxA
SetFocus
SetCursor
SetClassLongW
SetCapture
SetActiveWindow
SendMessageW
ScreenToClient
ReleaseCapture
RegisterWindowMessageW
RegisterClassExW
PtInRect
PostThreadMessageW
PostMessageW
PeekMessageW
OpenClipboard
OffsetRect
MoveWindow
ShowWindow
LoadImageW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsWindowVisible
IsWindowEnabled
IsWindow
IsDialogMessageW
IsChild
InvalidateRect
IntersectRect
InflateRect
GetWindowTextW
GetWindowTextLengthW
GetWindowRect
GetWindowLongW
GetSystemMetrics
GetScrollPos
GetParent
GetNextDlgTabItem
GetMessageW
GetKeyState
GetForegroundWindow
GetFocus
GetDlgItem
SetWindowTextW
SetWindowRgn
SetWindowPos
SetWindowLongW
SetTimer
SetRectEmpty
SetRect
MapWindowPoints
SetForegroundWindow
GetDlgCtrlID
GetDesktopWindow
GetCursorPos
GetClipboardData
GetClientRect
GetClassInfoExW
GetActiveWindow
FindWindowW
FindWindowExW
FillRect
EqualRect
EndPaint
EnableWindow
DrawTextW
DrawIconEx
DrawFrameControl
DispatchMessageW
DestroyWindow
DestroyIcon
DestroyCursor
DefWindowProcW
CreateWindowExW
CopyRect
CloseClipboard
ClientToScreen
CallWindowProcW
BringWindowToTop
BeginPaint
GetDC
GetKeyboardType
ReleaseDC
GetWindowThreadProcessId

gdi32

ExtSelectClipRgn
ExtTextOutW
GetClipRgn
GetCurrentObject
GetObjectW
GetStockObject
GetTextColor
GetTextExtentPoint32W
GetViewportOrgEx
LineTo
MoveToEx
OffsetRgn
DeleteObject
RectInRegion
RestoreDC
SaveDC
SelectObject
SetBkColor
SetBkMode
SetStretchBltMode
SetTextColor
SetViewportOrgEx
StretchBlt
TextOutW
DeleteDC
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgnIndirect
CreatePen
Rectangle
GetDeviceCaps
CreateFontIndirectW

comdlg32

GetOpenFileNameW
CommDlgExtendedError
ChooseColorA

advapi32

RegQueryValueExW
RegOpenKeyW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegSetValueExW

shell32

ShellExecuteExW
ShellExecuteW
CommandLineToArgvW

shlwapi

PathAddBackslashW
PathFileExistsW
StrToIntA
StrToIntW

Sections

.text
Size: 756KB - Virtual size: 753KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_ohead_1
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

692eea76d45dd5e54f5c867aa715372b

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

comdlg32

advapi32

shell32

shlwapi

Sections

.text Size: 756KB - Virtual size: 753KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 12KB - Virtual size: 20KB

.rsrc Size: 300KB - Virtual size: 300KB

_ohead_1 Size: 2.1MB - Virtual size: 2.1MB

.text
Size: 756KB - Virtual size: 753KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 12KB - Virtual size: 20KB

.rsrc
Size: 300KB - Virtual size: 300KB

_ohead_1
Size: 2.1MB - Virtual size: 2.1MB