916316e6f67e63182bee5b433ec2a520N

Sharing

Copy URL Twitter E-mail

General

Target

916316e6f67e63182bee5b433ec2a520N
Size

736KB
MD5

916316e6f67e63182bee5b433ec2a520
SHA1

5d3f5939c9b55818a9aa812c31446db5391c3341
SHA256

0438857da2a77c623ada813d310be7754a387f2b014d909a0c682c329da7d90b
SHA512

1ae4464d7ba46c810042418a206edb56fb702717b0a6e8bcd1ffc955a4c07f7cae3d9decc5345519058bdb6e3c627295d735d968d1202754cdca5f62b73eb00f
SSDEEP

12288:qPPaf3oh6QTVL8A6KTk6d2f4aqpWH7oPJKiqbJF:Bf2KAE6cf4BWbAJKiqbJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
916316e6f67e63182bee5b433ec2a520N

Files

916316e6f67e63182bee5b433ec2a520N
.exe windows:4 windows x86 arch:x86

ef4b7468331a3de06bd84b4947510ded

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalLock
GlobalHandle
GlobalUnlock
GlobalAlloc
GetDiskFreeSpaceExA
GetCurrentDirectoryA
QueryPerformanceCounter
Sleep
CreateThread
CreateMutexA
ReleaseMutex
WaitForSingleObject
GlobalFree
WriteFile
SetEndOfFile
SetCurrentDirectoryA
DeleteFileA
RemoveDirectoryA
CopyFileA
GetFileSize
ReadFile
SetFilePointer
CreateFileA
CloseHandle
LoadLibraryA
GetProcAddress
GetComputerNameA
GetVolumeInformationA
GetStringTypeW
IsBadReadPtr
SetUnhandledExceptionFilter
GetEnvironmentStrings
FreeEnvironmentStringsW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
RaiseException
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
HeapAlloc
HeapFree
GetLocalTime
GetSystemTime
GetTimeZoneInformation
CreateDirectoryA
GetCurrentProcess
TerminateProcess
ExitProcess
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindNextFileA
FindFirstFileA
GetLastError
RtlUnwind
LCMapStringW
HeapReAlloc
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetModuleFileNameA
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
SetStdHandle
GetStringTypeA
IsBadCodePtr
FreeLibrary
GetACP
GetCPInfo
GetOEMCP
GetEnvironmentStringsW
GetVersionExA
GetEnvironmentVariableA
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapCreate
HeapDestroy
IsBadWritePtr
VirtualAlloc
VirtualFree

user32

MessageBoxA
GetMessageA
DispatchMessageA
PostMessageA
SetTimer
TranslateMessage
PeekMessageA
PostQuitMessage
EndPaint
BeginPaint
SetCursor
GetForegroundWindow
GetCursorPos
DefWindowProcA
GetAsyncKeyState
ShowCursor
SetCursorPos
DestroyWindow
LoadIconA
LoadCursorA
RegisterClassA
GetSystemMetrics
CreateWindowExA
SystemParametersInfoA
GetWindowRect
ShowWindow
SetRect
GetWindowLongA
AdjustWindowRectEx
SetWindowPos
UpdateWindow
SetFocus
GetClientRect
ClientToScreen
InvalidateRect
GetDC
ReleaseDC
KillTimer

gdi32

GetStockObject
GetDeviceCaps

advapi32

RegDeleteValueA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA

ole32

CoCreateInstance
CoInitialize

wsock32

WSAStartup
WSACleanup
ioctlsocket
gethostbyaddr
gethostbyname

ddraw

DirectDrawCreate

dsound

ord11

winmm

mixerGetLineInfoA
mmioGetInfo
mmioAdvance
mmioSetInfo
mmioSeek
mmioDescend
mmioRead
mmioAscend
mmioOpenA
mmioClose
mixerGetLineControlsA
mixerGetControlDetailsA
mixerSetControlDetails
mixerClose
auxGetNumDevs
auxGetDevCapsA
auxSetVolume
mciSendCommandA
timeSetEvent
timeGetTime
mixerGetNumDevs
mixerOpen
auxGetVolume

Sections

.text
Size: 596KB - Virtual size: 594KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 116KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ef4b7468331a3de06bd84b4947510ded

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

wsock32

ddraw

dsound

winmm

Sections

.text Size: 596KB - Virtual size: 594KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 116KB - Virtual size: 1.4MB

.rsrc Size: 8KB - Virtual size: 4KB

.text
Size: 596KB - Virtual size: 594KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 116KB - Virtual size: 1.4MB

.rsrc
Size: 8KB - Virtual size: 4KB