88563b5e18d03cea568836cfab4f1ffeeaaf2949face8519cfba2fa51ffde3ab

Sharing

Copy URL Twitter E-mail

General

Target

88563b5e18d03cea568836cfab4f1ffeeaaf2949face8519cfba2fa51ffde3ab
Size

217KB
MD5

9b8df75e8aa71753bafe68a5a1f9ef5e
SHA1

ec328f20b900eaf5a01301f896a59d1415fa29fd
SHA256

88563b5e18d03cea568836cfab4f1ffeeaaf2949face8519cfba2fa51ffde3ab
SHA512

ff785644a1eb08337bde6e6ca5d99e85ada6663fdc66c0d6a7edb85f952c82dffcc29229d571f019f653779467e22f7a7b65e80808d99e8cbb0647d9602baaae
SSDEEP

6144:fnyiqVQBf0EaIp8fkTJJsK1eEzEB1XjrkXb:wEdp8csKpE7XX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88563b5e18d03cea568836cfab4f1ffeeaaf2949face8519cfba2fa51ffde3ab

Files

88563b5e18d03cea568836cfab4f1ffeeaaf2949face8519cfba2fa51ffde3ab
.exe windows:4 windows x86 arch:x86

752e1ad839fdd9d87e202c92c2bee710

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLangID
EnumDateFormatsW
GetLogicalDrives
lstrlen
lstrcpynW
GetDateFormatW
GetEnvironmentStringsW
GetVersionExA
SetThreadPriority
LocalAlloc
GetAtomNameA
GetShortPathNameW
LoadLibraryA
GetWindowsDirectoryW
GetEnvironmentVariableA
AddAtomA
GetDiskFreeSpaceA
GlobalFindAtomA
GetModuleFileNameA
GetHandleInformation
GetModuleHandleA
CompareFileTime
MoveFileA
SearchPathW
GetLogicalDriveStringsA
SetPriorityClass
OpenProcess
FatalAppExitA
GetLongPathNameW
IsValidCodePage
IsDebuggerPresent
lstrcmpW
GetProcAddress
SetCurrentDirectoryA
GetShortPathNameA
LoadLibraryW
SetErrorMode
RaiseException
EndUpdateResourceA

user32

GetWindowRgn
GetMenuItemInfoA
GetClassInfoA
GetMenu
LoadMenuIndirectW
UpdateWindow
ClientToScreen
WaitMessage
FrameRect
ArrangeIconicWindows
CreatePopupMenu
GetMenuStringA
MessageBoxIndirectW
RegisterClassExA
WaitForInputIdle
CreateDialogIndirectParamW
FlashWindow
GetMenuItemInfoW
EnumDesktopsW
IsChild
EmptyClipboard
CreateDialogParamW
EnumDesktopsA
DialogBoxIndirectParamA
EndDialog
CharNextW
DefDlgProcW
IsWindow
DrawTextW
PeekMessageA
GetWindowRect
ReleaseDC

gdi32

GetPath
CreateSolidBrush
GetRgnBox
SetMiterLimit
SetBrushOrgEx
GetMetaRgn
GetDeviceGammaRamp
GetDeviceCaps
FrameRgn
CreateFontIndirectA
OffsetClipRgn
GetCharWidth32A
AnimatePalette
SetDCBrushColor
UpdateICMRegKeyA
SetLayout
FillRgn
CreateMetaFileA
PtVisible
GetEnhMetaFilePaletteEntries
ExtEscape
EndPath
GetClipBox

advapi32

RegReplaceKeyW
RegCreateKeyExW
RegSaveKeyW
RegEnumValueA
RegDeleteValueW
RegQueryValueExW
RegEnumKeyW
RegReplaceKeyA
RegRestoreKeyW
RegSetValueW

shlwapi

SHSkipJunction
UrlCanonicalizeA
DllGetVersion
PathIsPrefixA
PathParseIconLocationA

wininet

InternetSetPerSiteCookieDecisionW
InternetSetOptionW
InternetSetCookieW
FindNextUrlCacheContainerA
FindFirstUrlCacheEntryW
InternetWriteFileExW
CreateUrlCacheContainerA
FtpCommandA
InternetCanonicalizeUrlW
InternetAutodial
GopherCreateLocatorW
InternetSetOptionExA
DeleteIE3Cache
HttpEndRequestW
InternetCrackUrlW
FtpSetCurrentDirectoryA

winspool.drv

QuerySpoolMode
AddPrinterW
OpenPrinterW
GetDefaultPrinterW
DocumentPropertiesW
AddPortExA
AbortPrinter
SetPrinterDataA
SetPrinterW

inetcomm

MimeEditDocumentFromStream
HrDoAttachmentVerb
MimeOleGetFileInfo
MimeOleCreateHashTable
MimeGetAddressFormatW
MimeOleSMimeCapsToDlg
MimeOleAlgStrengthFromSMimeCap
CreateNNTPTransport

oledlg

OleUIChangeSourceA
OleUIPasteSpecialW
OleUIUpdateLinksW
OleUIPromptUserW
OleUIObjectPropertiesW
OleUIConvertA
OleUIChangeSourceW
OleUIAddVerbMenuW
OleUIInsertObjectW

wsock32

WSAAsyncGetProtoByNumber
recv
htons
AcceptEx
recvfrom
GetAcceptExSockaddrs
WSAStartup
rexec
TransmitFile
gethostbyname

crypt32

CertNameToStrW
CertGetValidUsages
CertGetEnhancedKeyUsage
CertAddCertificateContextToStore
CryptSIPRemoveProvider
CryptGetDefaultOIDFunctionAddress
CryptBinaryToStringW
CryptAcquireCertificatePrivateKey
CryptUnregisterOIDInfo

Sections

.rdata
Size: 1KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 32KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 33KB

IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 23KB

IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 12KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

752e1ad839fdd9d87e202c92c2bee710

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shlwapi

wininet

winspool.drv

inetcomm

oledlg

wsock32

crypt32

Sections

.rdata Size: 1KB - Virtual size: 10KB

.rdata Size: 1024B - Virtual size: 2KB

.edata Size: 1KB - Virtual size: 32KB

.edata Size: 14KB - Virtual size: 13KB

.rdata Size: 5KB - Virtual size: 5KB

.rdata Size: 1024B - Virtual size: 33KB

.edata Size: 1KB - Virtual size: 15KB

.rdata Size: 1KB - Virtual size: 25KB

.data Size: 11KB - Virtual size: 16KB

.rdata Size: 1KB - Virtual size: 19KB

.rdata Size: 1024B - Virtual size: 23KB

.edata Size: 1KB - Virtual size: 12KB

.rsrc Size: 172KB - Virtual size: 172KB

.reloc Size: 1024B - Virtual size: 4KB

.rdata
Size: 1KB - Virtual size: 10KB

.rdata
Size: 1024B - Virtual size: 2KB

.edata
Size: 1KB - Virtual size: 32KB

.edata
Size: 14KB - Virtual size: 13KB

.rdata
Size: 5KB - Virtual size: 5KB

.rdata
Size: 1024B - Virtual size: 33KB

.edata
Size: 1KB - Virtual size: 15KB

.rdata
Size: 1KB - Virtual size: 25KB

.data
Size: 11KB - Virtual size: 16KB

.rdata
Size: 1KB - Virtual size: 19KB

.rdata
Size: 1024B - Virtual size: 23KB

.edata
Size: 1KB - Virtual size: 12KB

.rsrc
Size: 172KB - Virtual size: 172KB

.reloc
Size: 1024B - Virtual size: 4KB