28ce325a0a867f1ea3eeb30e9165b84b98eae1f559c817f2a48ce6c5c4114242

Sharing

Copy URL Twitter E-mail

General

Target

28ce325a0a867f1ea3eeb30e9165b84b98eae1f559c817f2a48ce6c5c4114242
Size

1.7MB
MD5

9c4f60fb41aa29b4cce8195a4ab5832e
SHA1

8eb1b303fcce27a09c0adfcfc87f7115d1780110
SHA256

28ce325a0a867f1ea3eeb30e9165b84b98eae1f559c817f2a48ce6c5c4114242
SHA512

e3412b92a9ffb2d3b620cb304912623da4f2e0a469cc7d5b3dc65fce7b20e896797ab3c054a6b653be426ac0ad48b6de125709553ffba0571f1d7f437c3664f1
SSDEEP

24576:rHY47myB5VccMnn6UPRb9jY3mayjFCWChuDT6NBqweKPlkqov7yWTUrLAP/i:cJymnn3Rb9smaOn6zekfovVT+Y/i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28ce325a0a867f1ea3eeb30e9165b84b98eae1f559c817f2a48ce6c5c4114242

Files

28ce325a0a867f1ea3eeb30e9165b84b98eae1f559c817f2a48ce6c5c4114242
.exe windows:5 windows x86 arch:x86

4991bd70b41f035b8ada5b268d6d4374

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
FormatMessageW
GetLastError
GetFileAttributesExW
OutputDebugStringW
SetEvent
GetCurrentThread
TerminateThread
QueryPerformanceFrequency
DeleteFileW
LoadLibraryW
ResetEvent
GetCurrentDirectoryW
GetProcAddress
ReplaceFileW
DeleteCriticalSection
ExitProcess
FreeLibrary
CopyFileW
QueryPerformanceCounter
MoveFileW
IsDebuggerPresent
SetUnhandledExceptionFilter
FlushFileBuffers
GetCommandLineW
AttachConsole
GlobalSize
GlobalAlloc
GlobalLock
GetCurrentProcessId
GlobalUnlock
GetTickCount
CreateThread
InitializeCriticalSectionAndSpinCount
DeleteFileA
CopyFileA
SetStdHandle
GetSystemDirectoryW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
FindNextFileA
FindFirstFileExA
SetFilePointerEx
HeapSize
ReadConsoleW
GetConsoleMode
GetConsoleCP
GetOEMCP
IsValidCodePage
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetFileType
HeapAlloc
HeapFree
GetStdHandle
GetModuleFileNameA
GetACP
FreeLibraryAndExitThread
ExitThread
GetTimeZoneInformation
LoadLibraryExW
RaiseException
RtlUnwind
InitializeSListHead
GetStartupInfoW
IsProcessorFeaturePresent
UnhandledExceptionFilter
WaitForSingleObjectEx
GetCPInfo
GetStringTypeW
LCMapStringW
CompareStringW
MultiByteToWideChar
DecodePointer
EncodePointer
GetModuleHandleW
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SwitchToThread
SetLastError
WideCharToMultiByte
CreateEventW
GetModuleHandleA
GetProcessHeap
ReleaseMutex
GetCurrentThreadId
GetFileAttributesW
CreateFileW
WaitForSingleObject
GetLocaleInfoW
FindClose
CreateMutexW
GetTempPathW
SetEndOfFile
SetFilePointer
InitializeCriticalSection
LeaveCriticalSection
SetThreadPriority
GetModuleFileNameW
SetFileTime
RemoveDirectoryW
WriteConsoleW
TerminateProcess
GetModuleHandleExW
WriteFile
GetCurrentProcess
FindNextFileW
EnterCriticalSection
FindFirstFileW
ReadFile
SetThreadAffinityMask
CreateDirectoryW
CloseHandle
lstrcpyA
Process32Next
CreateToolhelp32Snapshot
lstrcmpA
Process32First

user32

EnumDisplayMonitors
ScreenToClient
SendMessageW
GetSystemMetrics
SetWindowTextW
MessageBeep
WindowFromPoint
GetWindowPlacement
EnumChildWindows
MessageBoxW
SetWindowPos
IsWindowVisible
GetWindowRect
MapVirtualKeyW
GetMessagePos
GetUpdateRgn
GetMessageExtraInfo
GetSystemMenu
CharLowerBuffA
AttachThreadInput
GetWindowThreadProcessId
GetWindowTextW
SetWindowLongW
TranslateMessage
SetFocus
EnumWindows
PeekMessageW
DispatchMessageW
RegisterClassExW
UnregisterClassW
CreateWindowExW
GetFocus
SendMessageTimeoutW
PostMessageW
DefWindowProcW
GetMessageW
GetWindowLongW
ReleaseDC
GetDC
EndPaint
BeginPaint
GetCursorPos
SetCursorPos
InvalidateRect
SetForegroundWindow
ReleaseCapture
GetParent
SystemParametersInfoW
EnableMenuItem
GetDesktopWindow
ShowCaret
UpdateLayeredWindow
SetCursor
ToUnicode
SetClipboardData
SetCapture
DestroyCaret
LoadCursorW
FindWindowW
GetClipboardData
SetLayeredWindowAttributes
GetMessageTime
GetForegroundWindow
TrackMouseEvent
CreateCaret
IsChild
EmptyClipboard
GetKeyboardState
CloseClipboard
CreateIconIndirect
GetMonitorInfoW
GetWindowInfo
DestroyIcon
RedrawWindow
DestroyWindow
GetCapture
OpenClipboard
GetAsyncKeyState
ShowWindow
GetActiveWindow
SetCaretPos
DestroyCursor

gdi32

DeleteObject
RemoveFontMemResourceEx
SetMapMode
CreateFontIndirectW
DeleteDC
GetGlyphOutlineW
StretchDIBits
CreateDIBSection
SaveDC
GetGlyphIndicesW
SetMapperFlags
CreateRectRgnIndirect
GetTextMetricsW
GetDeviceCaps
CreateCompatibleDC
GetKerningPairsW
SelectObject
CombineRgn
CreateBitmap
RestoreDC
ExcludeClipRect
GetOutlineTextMetricsW
CreateRectRgn
GetRegionData

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

shell32

SHGetSpecialFolderPathW
ShellExecuteW
ExtractAssociatedIconW

ole32

RevokeDragDrop
RegisterDragDrop
OleInitialize
OleUninitialize
CoCreateInstance

ws2_32

WSAStartup
WSACleanup
inet_addr
send
socket
ntohs
connect
select
recv
htonl
htons
ioctlsocket
setsockopt
WSAGetLastError
closesocket
__WSAFDIsSet
shutdown
gethostbyname

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

winmm

timeGetTime
timeBeginPeriod

imm32

ImmSetCandidateWindow
ImmGetCompositionStringW
ImmReleaseContext
ImmGetContext
ImmNotifyIME

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 389KB - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4991bd70b41f035b8ada5b268d6d4374

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

ws2_32

version

winmm

imm32

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 389KB - Virtual size: 388KB

.data Size: 17KB - Virtual size: 32KB

.rsrc Size: 18KB - Virtual size: 17KB

.reloc Size: 57KB - Virtual size: 57KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 389KB - Virtual size: 388KB

.data
Size: 17KB - Virtual size: 32KB

.rsrc
Size: 18KB - Virtual size: 17KB

.reloc
Size: 57KB - Virtual size: 57KB