737b3691dfe54e88333d1f22e15341080a86a7af007a51f8c9e88d3ce64ae07d

Sharing

Copy URL Twitter E-mail

General

Target

737b3691dfe54e88333d1f22e15341080a86a7af007a51f8c9e88d3ce64ae07d
Size

303KB
MD5

c11ef25e4de2a5f00fd383914e01fa3a
SHA1

cf12635b1a6a5c9cbc6daedf2f1a84219646cddb
SHA256

737b3691dfe54e88333d1f22e15341080a86a7af007a51f8c9e88d3ce64ae07d
SHA512

0856cbb19669403aa7fa9c022b4cb40565476de1f26524a711b7b046c8deb448c99ceab672cf83687615f055f21964c1878c3e7dd29054ab681338ff3d7e9bca
SSDEEP

6144:CB54RlTrzgKSGDprQQlN9lAHX3puPCgX0RcBV+UdvrEFp7hKD:i54RVHgKSGDprQPZuq3WBjvrEH7s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
737b3691dfe54e88333d1f22e15341080a86a7af007a51f8c9e88d3ce64ae07d

Files

737b3691dfe54e88333d1f22e15341080a86a7af007a51f8c9e88d3ce64ae07d
.exe windows:4 windows x86 arch:x86

42b5c77f23a34aca55f80c9bfeec1d3a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
wcslen
wcscpy
wcscat
wcsncpy
wcscmp
memmove
memcmp
_stricmp
sprintf
strcpy
atoi
strlen
strcat
_CIpow
_wcsnicmp
_wcsicmp
wcschr
memcpy
_wcsdup
free
wcsncmp
floor
_snwprintf
tolower
localtime
mktime
_itow
gmtime
fabs
malloc
ceil
fseek
ftell
fread
fclose
pow
??3@YAXPAX@Z
setlocale
swscanf
wcsstr
_isnan
_vsnwprintf

kernel32

GetModuleHandleW
HeapCreate
HeapDestroy
ExitProcess
GetBinaryTypeW
GetLastError
GetCurrentProcess
CloseHandle
SetLastError
GetDateFormatW
GetTimeFormatW
GetLogicalDriveStringsW
GetDriveTypeW
GetVolumeInformationW
ExpandEnvironmentStringsW
FileTimeToSystemTime
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
WaitForSingleObject
CreateThread
HeapFree
HeapAlloc
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentVariableW
SetEnvironmentVariableW
GetModuleFileNameW
DuplicateHandle
CreatePipe
GetStdHandle
CreateProcessW
PeekNamedPipe
GetExitCodeProcess
ReadFile
HeapReAlloc
CreateFileW
GetFileSize
SetFilePointer
WideCharToMultiByte
MultiByteToWideChar
SetEndOfFile
WriteFile
FreeLibrary
LoadLibraryW
GetProcAddress
SetErrorMode
GetDiskFreeSpaceW
FindFirstFileW
FindNextFileW
FindClose
GetLogicalDrives
GetWindowsDirectoryW
WaitForMultipleObjects
ResetEvent
SetEvent
FindCloseChangeNotification
FindNextChangeNotification
TerminateThread
CreateEventW
FindFirstChangeNotificationW
Sleep
MulDiv
GetFileAttributesW
GetCurrentDirectoryW
GetTempPathW
SetFileAttributesW
DeleteFileW
RemoveDirectoryW
GetLocalTime
TlsAlloc
GetVersionExW
TlsFree
TlsGetValue
TlsSetValue
DeleteCriticalSection
InterlockedCompareExchange
InterlockedExchange
UnregisterWait
GetCurrentThread
RegisterWaitForSingleObject

gdiplus

GdipDeleteFont
GdipDeleteGraphics
GdipDeletePath
GdipDeleteMatrix
GdipDeletePen
GdipDeleteStringFormat
GdipFree
GdipGetDpiX
GdipGetDpiY

user32

SendMessageW
CreateWindowExW
GetSysColor
DestroyIcon
SystemParametersInfoW
SendInput
GetDC
ReleaseDC
FindWindowW
IsWindow
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
SetForegroundWindow
GetKeyboardLayout
VkKeyScanExW
EnableWindow
MessageBeep
IsWindowVisible
GetWindowLongW
IsWindowEnabled
EnumWindows
SetWindowPos
SetMenu
DestroyMenu
CreatePopupMenu
AppendMenuW
EnableMenuItem
GetCursorPos
TrackPopupMenu
DestroyWindow
GetWindowTextLengthW
GetWindowTextW
ShowWindow
GetWindowRect
GetParent
MapWindowPoints
MoveWindow
InvalidateRect
RedrawWindow
ScreenToClient
ClientToScreen
SetWindowTextW
SetWindowLongW
GetClientRect
GetClassNameW
IntersectRect
ValidateRect
GetWindow
CallWindowProcW
GetUpdateRect
DefWindowProcW
SendDlgItemMessageW
GetDlgItemTextW
SetDlgItemTextW
EndDialog
CreateDialogParamW
GetSysColorBrush
SetRect
DrawTextW
GetSystemMetrics
SetPropW
GetPropW
RemovePropW
FillRect
LoadCursorW
RegisterClassExW
SetClassLongW
GetIconInfo
UpdateWindow
ReleaseCapture
BeginPaint
DrawStateW
EndPaint
SetCapture
SetFocus
GetFocus
PostMessageW
GetScrollPos
DrawFrameControl
TranslateMessage
DispatchMessageW
PeekMessageW
EnumPropsExW
SetActiveWindow
LoadIconW
RegisterClassW
AdjustWindowRectEx
CreateAcceleratorTableW
UnregisterClassW
IsZoomed
IsIconic
MsgWaitForMultipleObjects
GetMessageW
GetActiveWindow
TranslateAcceleratorW
GetMenu
SetTimer
KillTimer
DefFrameProcW
DestroyAcceleratorTable
EnumChildWindows
GetKeyState
IsChild
RegisterWindowMessageW
CharUpperW
CharLowerW

gdi32

GetStockObject
GetObjectW
EnumFontFamiliesExW
DeleteObject
CreateFontIndirectW
SetBkMode
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
CreateBrushIndirect
DeleteDC
SetTextColor
SetBkColor
GetTextExtentPoint32W
GetObjectType
CreateDCW
SetStretchBltMode
StretchBlt
CreatePen
MoveToEx
LineTo
CreateDIBSection
CreateSolidBrush
GetDeviceCaps
CreateBitmap
SetPixel
GetDIBits
BitBlt
CreateFontW

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegLoadKeyW
RegUnLoadKeyW
InitiateSystemShutdownW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges

comctl32

InitCommonControlsEx
ImageList_Destroy
ImageList_GetImageCount
ImageList_Duplicate
ImageList_SetBkColor
ImageList_Replace
ImageList_Add
ImageList_ReplaceIcon
ImageList_Remove
ImageList_AddMasked
ImageList_Create
ImageList_GetIconSize

ole32

CoCreateInstance
StringFromGUID2
CoInitialize
CoTaskMemFree
RevokeDragDrop

shell32

SHCreateDirectory
ShellExecuteExW
SHGetFileInfoW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetFolderLocation

winmm

timeBeginPeriod

Sections

.code
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

42b5c77f23a34aca55f80c9bfeec1d3a

Headers

File Characteristics

Imports

msvcrt

kernel32

gdiplus

user32

gdi32

comdlg32

advapi32

comctl32

ole32

shell32

winmm

Sections

.code Size: 86KB - Virtual size: 86KB

.text Size: 95KB - Virtual size: 94KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 23KB - Virtual size: 30KB

.rsrc Size: 19KB - Virtual size: 19KB

.code
Size: 86KB - Virtual size: 86KB

.text
Size: 95KB - Virtual size: 94KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 23KB - Virtual size: 30KB

.rsrc
Size: 19KB - Virtual size: 19KB