c59a898c6dff5da4e68a75250ab1ca6f3f4451ea09140d1bfa8b4914608cbcb9

Sharing

Copy URL Twitter E-mail

General

Target

c59a898c6dff5da4e68a75250ab1ca6f3f4451ea09140d1bfa8b4914608cbcb9
Size

272KB
MD5

99c2abcc94702e164a173939ede09c9c
SHA1

eebf63dcebcb2dc5221f86e2c3c7a4391fb46f64
SHA256

c59a898c6dff5da4e68a75250ab1ca6f3f4451ea09140d1bfa8b4914608cbcb9
SHA512

151214b73b3dad44c8d1da67e4a19db030e8b71a86aa0764e3cc39f42e00c7105cb68df78b1a9d2c650de0473862b9aafdf514e581932b4155d5cf022e6d1e6e
SSDEEP

3072:c/e1oO5Lmpw2yPy6LbFmS98RHeMCuH+YJa0Dfiw4p0pKOQ2IpcjCB4c9To3Twxmc:c/4756YyWn98RHeMhJL+w4Z3XTtEF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c59a898c6dff5da4e68a75250ab1ca6f3f4451ea09140d1bfa8b4914608cbcb9

Files

c59a898c6dff5da4e68a75250ab1ca6f3f4451ea09140d1bfa8b4914608cbcb9
.exe windows:4 windows x86 arch:x86

3c569a802a44e470a13e7f73aa35ed11

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
HeapFree
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
GetACP
GetTimeZoneInformation
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
ExitProcess
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetCommandLineA
GetStartupInfoA
RtlUnwind
SetErrorMode
GetProfileStringA
GetFileTime
GetFileSize
GetFileAttributesA
GetPrivateProfileStringA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetOEMCP
GetCPInfo
SizeofResource
GetProcessVersion
GetCurrentDirectoryA
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
FindNextFileA
FindFirstFileA
FindClose
GlobalReAlloc
lstrcpynA
MulDiv
SetLastError
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GetProcAddress
FormatMessageA
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
CloseHandle
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
WideCharToMultiByte
InterlockedIncrement
GetTickCount
SetFileAttributesA
lstrlenA
MultiByteToWideChar
GetLastError
InterlockedDecrement
LocalFree
WritePrivateProfileStringA
GetModuleFileNameA
GetPrivateProfileIntA
HeapCreate

user32

MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
CharNextA
PostThreadMessageA
GetSysColorBrush
LoadCursorA
PtInRect
GetClassNameA
LoadStringA
CharUpperA
GetDesktopWindow
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
DestroyMenu
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
SetFocus
AdjustWindowRectEx
ScreenToClient
CopyRect
LoadIconA
SendMessageA
DrawIcon
InflateRect
GetSystemMetrics
IsIconic
FindWindowA
UnregisterClassA
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
InvalidateRect
DefDlgProcA
IsWindowUnicode
EnableWindow
PostQuitMessage
PostMessageA
SetCursor
MessageBoxA
GetWindowLongA
IsWindowEnabled
GetLastActivePopup
GetParent
SetWindowsHookExA
wvsprintfA
GetCursorPos
PeekMessageA
IsWindowVisible
ValidateRect
CallNextHookEx
GetKeyState
GetActiveWindow
DispatchMessageA
TranslateMessage
GetMessageA
GetNextDlgTabItem
GetFocus
EnableMenuItem
CheckMenuItem
GetClientRect
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
RegisterClipboardFormatA
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps

gdi32

PatBlt
GetMapMode
SetWindowExtEx
LPtoDP
DPtoLP
GetBkColor
GetTextColor
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateSolidBrush
GetWindowExtEx
GetViewportExtEx
GetDeviceCaps
DeleteObject
IntersectClipRect
ScaleWindowExtEx
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
GetObjectA
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
GetTextExtentPointA
BitBlt
CreateCompatibleDC
CreateDIBitmap
ScaleViewportExtEx

comdlg32

GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA

comctl32

ord17

oledlg

ord8

ole32

CoTaskMemAlloc
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoGetClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoCreateInstance
OleRun
CLSIDFromString
CLSIDFromProgID
CoTaskMemFree
CreateILockBytesOnHGlobal

olepro32

ord253

oleaut32

SysStringLen
SysAllocStringByteLen
VariantCopy
SysAllocString
VariantChangeType
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
GetErrorInfo
SysFreeString

odbc32

ord43
ord48
ord49
ord17
ord59
ord8
ord44
ord19
ord46
ord12
ord68
ord41
ord2
ord1
ord23
ord50
ord45
ord51
ord15
ord9
ord14
ord11
ord18
ord61
ord5
ord10
ord3
ord54
ord16
ord13
ord20

Sections

.text
Size: 188KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3c569a802a44e470a13e7f73aa35ed11

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

oledlg

ole32

olepro32

oleaut32

odbc32

Sections

.text Size: 188KB - Virtual size: 185KB

.rdata Size: 44KB - Virtual size: 43KB

.data Size: 20KB - Virtual size: 36KB

.rsrc Size: 16KB - Virtual size: 12KB

.text
Size: 188KB - Virtual size: 185KB

.rdata
Size: 44KB - Virtual size: 43KB

.data
Size: 20KB - Virtual size: 36KB

.rsrc
Size: 16KB - Virtual size: 12KB