94f16dd31f53c0fda324404849eaec10N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

94f16dd31f53c0fda324404849eaec10N.exe
Size

204KB
MD5

94f16dd31f53c0fda324404849eaec10
SHA1

f93a5e0d189d1ba347f0d72a98d26e1e1863a6f0
SHA256

b29e26caa3161940d596429f14d0479d022b7498c15e7494a9d44581e66f85c7
SHA512

d966f123356ff26b1c3cb00cbaf5b11581a1a8dff910022e51187b96e9b27ffd454a1a21b4294f1ed60c341f2519021545b46b89eb30afd1bb750390c7875132
SSDEEP

6144:+taLQRfeoW7JBxk7QlCkukItPgbMl3/IhoTJ:kuQE756ksPgsvI6J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94f16dd31f53c0fda324404849eaec10N.exe

Files

94f16dd31f53c0fda324404849eaec10N.exe
.exe windows:4 windows x86 arch:x86

dc196ee5594599da8b39f7a4733c776c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegQueryValueExW
DeregisterEventSource
ReportEventA
RegisterEventSourceW
RegEnumValueA
GetUserNameA

comctl32

ord17

gdi32

DeleteDC
RestoreDC
DeleteObject
GetTextMetricsA
GetTextFaceA
SelectObject
CreateFontA
GetDeviceCaps
SetMapMode
SaveDC
Polyline
CreatePen
ExtTextOutW
GetTextExtentPoint32W
SetTextAlign
SetBkMode
SetTextColor
CreateFontIndirectA
GetObjectA

kernel32

MultiByteToWideChar
GetCommandLineA
ExitProcess
GetCommandLineW
MapViewOfFile
ReleaseMutex
WaitForSingleObject
WaitForMultipleObjects
LeaveCriticalSection
EnterCriticalSection
DeleteFileW
GetModuleHandleA
GetStartupInfoA
GetStartupInfoW
CloseHandle
CreateThread
Sleep
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter
MulDiv
FreeLibrary
GetProcAddress
WideCharToMultiByte
GetModuleFileNameA
LoadLibraryA
GetSystemDefaultLangID
GetUserDefaultLangID
GetACP
GetSystemDefaultLCID
GetVersionExA
InitializeCriticalSection
GetProcessHeap
DeleteCriticalSection
lstrcpyA
GetLastError
GetProfileStringA
SetEvent
CreateSemaphoreA
CreateFileMappingA
GetFileSize
CreateFileA
UnmapViewOfFile
DeleteFileA
RemoveDirectoryA
RemoveDirectoryW
GetTickCount
SetEnvironmentVariableA
ReadProcessMemory
VirtualQueryEx
GetSystemInfo
GetFileAttributesA
CreateDirectoryA
FindNextFileA
FindClose
FindFirstFileA
GetWindowsDirectoryA
WriteFile
SetFilePointer
CreateFileW
GetTempPathW
GetFileAttributesW
CreateDirectoryW
LockResource
LoadResource
FindResourceExA
GetSystemDirectoryA
SetEndOfFile
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
IsDBCSLeadByte
CreateProcessA
CreateProcessW
SuspendThread
GetSystemTime
GetComputerNameA
CreateMutexA
TlsAlloc
TlsFree
TlsSetValue
VirtualFree
TlsGetValue
GetTempPathA
ResumeThread
GetCurrentThreadId
TerminateThread
GetCurrentProcessId
IsValidCodePage
HeapAlloc
VirtualAlloc
DuplicateHandle
lstrcmpW
GetStringTypeW
DebugBreak
GetThreadSelectorEntry
GetLocaleInfoA
LCMapStringW
GetThreadContext
HeapFree
SetLastError
GetSystemTimeAsFileTime
OutputDebugStringA
LCMapStringA
GetStringTypeA
RtlUnwind

oleaut32

SysFreeString
VariantTimeToDosDateTime
SysAllocString
SystemTimeToVariantTime
SysStringLen

shell32

ExtractIconExA
ShellExecuteExA

shlwapi

AssocQueryStringW
UrlGetPartA
wnsprintfA

urlmon

CreateURLMoniker

user32

GetScrollInfo
IsDlgButtonChecked
LoadIconA
DrawFocusRect
SetWindowTextW
GetWindow
LoadCursorA
DestroyIcon
GetWindowPlacement
IsIconic
LoadStringW
GetWindowThreadProcessId
EnumWindows
CharPrevA
CallWindowProcA
CallWindowProcW
IsWindowUnicode
EnableWindow
DrawIconEx
DestroyWindow
SetWindowLongA
GetSysColor
SendDlgItemMessageA
GetClientRect
SetScrollInfo
SystemParametersInfoA
CheckDlgButton
SetDlgItemTextA
SetFocus
EndDialog
GetDlgItem
ShowWindow
SetCursor
InvalidateRect
DialogBoxParamW
DialogBoxParamA
CreateDialogParamW
CreateDialogParamA
SetWindowTextA
GetDC
MapWindowPoints
GetSysColorBrush
FillRect
ReleaseDC
GetSystemMetrics
SetForegroundWindow
GetWindowLongA
GetWindowRect
SetWindowPos
RegisterClassExA
CreateWindowExA
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
KillTimer
SetTimer
SendMessageA
PostMessageA
DefWindowProcA

version

GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
VerQueryValueA
GetFileVersionInfoW
GetFileVersionInfoA

wininet

InternetReadFileExA
InternetWriteFile
HttpSendRequestExA
InternetSetOptionA
HttpEndRequestA
InternetSetStatusCallback
InternetAutodial
InternetGetConnectedState
InternetCloseHandle
InternetQueryOptionA
HttpQueryInfoA
HttpOpenRequestA
InternetConnectA
InternetOpenA

Sections

.text
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

dc196ee5594599da8b39f7a4733c776c

Headers

File Characteristics

Imports

advapi32

comctl32

gdi32

kernel32

oleaut32

shell32

shlwapi

urlmon

user32

version

wininet

Sections

.text Size: 164KB - Virtual size: 164KB

.data Size: 4KB - Virtual size: 32KB

.rsrc Size: 32KB - Virtual size: 32KB

.text
Size: 164KB - Virtual size: 164KB

.data
Size: 4KB - Virtual size: 32KB

.rsrc
Size: 32KB - Virtual size: 32KB