11aee57d51b7828a724341977f2b7843393aed82c8470f24d31ebf8a61eb07e3

Sharing

Copy URL Twitter E-mail

General

Target

11aee57d51b7828a724341977f2b7843393aed82c8470f24d31ebf8a61eb07e3
Size

2.3MB
MD5

b605fdae77df0a8aeb1f31f77c10a17e
SHA1

fbdfd988a2e13cc529cda2201c5361b8a896389d
SHA256

11aee57d51b7828a724341977f2b7843393aed82c8470f24d31ebf8a61eb07e3
SHA512

cea0efd4a02fa8bb8a95678104462d2e1a96e5228be0d4ff1667adbe22ee44e47fd8a863d5f05443a2b962ff3df0bb9a376c9b3dc0c72929cdc8b61f66188f44
SSDEEP

49152:F94SoRH2HQT7GVoyJ3C7xjTGtqYVYkXPlTaW9T037:z4Iqyk7hTGtjVYkto

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11aee57d51b7828a724341977f2b7843393aed82c8470f24d31ebf8a61eb07e3

Files

11aee57d51b7828a724341977f2b7843393aed82c8470f24d31ebf8a61eb07e3
.exe windows:5 windows x64 arch:x64

b8310707ef91d33125f153ffadec77d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

MulDiv
GetSystemDefaultLangID
ReadProcessMemory
GetCurrentProcessId
VirtualProtectEx
GetProcAddress
GetSystemDirectoryW
GetVersionExW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcmpW
GetModuleFileNameW
FindClose
FindNextFileW
FindFirstFileW
WritePrivateProfileStringW
IsBadReadPtr
WideCharToMultiByte
Thread32Next
SuspendThread
OpenThread
Thread32First
CreateToolhelp32Snapshot
GetCurrentThreadId
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetExitCodeProcess
WaitForSingleObject
Sleep
DeleteFileW
CreateThread
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
DeleteCriticalSection
RaiseException
SetLastError
FlushInstructionCache
GetCurrentProcess
lstrcmpiW
CompareStringW
FreeLibrary
LoadLibraryExW
WriteConsoleA
LoadLibraryA
InitializeCriticalSectionAndSpinCount
FlushFileBuffers
SetStdHandle
GetLocaleInfoA
FindResourceW
GetStringTypeA
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
MultiByteToWideChar
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapSize
HeapReAlloc
HeapCreate
HeapSetInformation
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
FlsAlloc
FlsFree
FlsSetValue
FlsGetValue
DecodePointer
EncodePointer
GetStartupInfoW
HeapAlloc
HeapFree
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlPcToFileHeader
RtlUnwindEx
RtlLookupFunctionEntry
WriteConsoleW
GetConsoleOutputCP
SetEndOfFile
GetProcessHeap
SizeofResource
LoadResource
LockResource
CreateFileA
InterlockedPushEntrySList
VirtualFree
VirtualAlloc
InterlockedPopEntrySList
CreateProcessW
GetLastError
VirtualAllocEx
WriteProcessMemory
LoadLibraryW
QueueUserAPC
ResumeThread
TerminateProcess
CloseHandle
LockFile
GetFileSize
ReadFile
UnlockFile
lstrlenA
OutputDebugStringW
DebugBreak
CreateFileW
MoveFileExW
WriteFile
SetFilePointer
GetModuleHandleW
lstrlenW
GetCommandLineW
GetStringTypeW
LocalFree

user32

CreateWindowExW
GetDlgCtrlID
SetWindowLongW
GetWindowTextLengthW
SystemParametersInfoW
GetClassNameW
GetFocus
GetSysColor
IsWindowEnabled
FillRect
DrawFocusRect
SetWindowLongPtrW
GetWindowLongPtrW
CallWindowProcW
OffsetRect
LoadCursorW
ScreenToClient
GetCursorPos
GetCapture
ReleaseCapture
SetCapture
PtInRect
SetCursor
InvalidateRect
CreateDialogParamW
EndDialog
DialogBoxParamW
IsWindow
SetRectEmpty
DestroyWindow
DefWindowProcW
MessageBoxW
PostQuitMessage
CheckDlgButton
ClientToScreen
TrackPopupMenu
IsDlgButtonChecked
GetActiveWindow
UpdateWindow
GetParent
GetWindow
GetWindowRect
GetWindowLongW
MonitorFromWindow
GetMonitorInfoW
GetClientRect
MapWindowPoints
SetWindowPos
LoadMenuW
GetSubMenu
GetSystemMetrics
LoadImageW
RegisterWindowMessageW
IsDialogMessageW
GetClassInfoW
RegisterClassW
ShowWindow
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
CharLowerW
PostMessageW
wsprintfW
AppendMenuW
CheckMenuItem
GetDlgItem
ModifyMenuW
SetWindowTextW
SetDlgItemTextW
BeginPaint
SetRect
DrawTextW
EndPaint
GetWindowTextW
EnumChildWindows
ReleaseDC
GetDC
SendMessageW
CharNextW
CharUpperW
LoadStringW
SetFocus
UnregisterClassA

gdi32

GetObjectW
GetStockObject
CreateFontIndirectW
DeleteDC
SelectObject
SetTextColor
CreateFontW
DeleteObject
EnumFontFamiliesExW
GetDeviceCaps
SetBkMode

comdlg32

ChooseFontW
GetOpenFileNameW

advapi32

RegCloseKey
RegQueryInfoKeyW
RegOpenKeyExW
RegQueryValueExW
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegEnumKeyExW
RegSetValueExW

shell32

CommandLineToArgvW
ShellExecuteW

ole32

CoTaskMemFree
CoCreateInstance
CoInitialize
CoUninitialize
CoTaskMemAlloc
CoTaskMemRealloc

oleaut32

SysAllocString
SysFreeString
VarUI4FromStr

shlwapi

SHGetValueW
SHSetValueW
PathRemoveFileSpecW
PathFileExistsW
PathFindFileNameW

comctl32

_TrackMouseEvent
InitCommonControlsEx

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 394KB - Virtual size: 393KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b8310707ef91d33125f153ffadec77d5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

version

Sections

.text Size: 394KB - Virtual size: 393KB

.rdata Size: 87KB - Virtual size: 86KB

.data Size: 9KB - Virtual size: 21KB

.pdata Size: 25KB - Virtual size: 25KB

.rsrc Size: 1.8MB - Virtual size: 1.8MB

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 394KB - Virtual size: 393KB

.rdata
Size: 87KB - Virtual size: 86KB

.data
Size: 9KB - Virtual size: 21KB

.pdata
Size: 25KB - Virtual size: 25KB

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

.reloc
Size: 7KB - Virtual size: 7KB