896add8fae50017d27ade19dae7a37292ad4ce6e1b4ea47d1f8b8db852866e4b

Sharing

Copy URL

Twitter E-mail

General

Target

896add8fae50017d27ade19dae7a37292ad4ce6e1b4ea47d1f8b8db852866e4b
Size

300KB
MD5

bccb7b04dea160d7a3386de60c8798ff
SHA1

334320b447654a189f313fb42e846c81780da385
SHA256

896add8fae50017d27ade19dae7a37292ad4ce6e1b4ea47d1f8b8db852866e4b
SHA512

593348490408a6f04c5f97dae9f23bf0858940de9d8e976f08ee235f181bcdf9274351214a9486d4017139a60dc106b160bb7220eff75db9d3409656d4df2749
SSDEEP

6144:CPriNtvicrPMOacwxY/8i6n056K5IBycu3WRRDB5qfyJ:CPotv5rUHlHnS6wZy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
896add8fae50017d27ade19dae7a37292ad4ce6e1b4ea47d1f8b8db852866e4b

Files

896add8fae50017d27ade19dae7a37292ad4ce6e1b4ea47d1f8b8db852866e4b
.exe windows:4 windows x86 arch:x86

a86d1a9240d77d04e6d31c854d6c15cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetSysColor
MapWindowPoints
LoadIconA
LoadCursorA
GetSysColorBrush
LoadStringA
DestroyMenu
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetSubMenu
GetMenuItemID
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
SetFocus
ShowWindow
SetWindowPos
SetWindowLongA
AdjustWindowRectEx
GetDlgItem
GrayStringA
DrawTextA
TabbedTextOutA
ReleaseDC
GetDC
GetMenuItemCount
UnhookWindowsHookEx
GetWindowTextA
SetWindowTextA
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
EnableWindow
SetCursor
PostQuitMessage
GetClientRect
CopyRect
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
MessageBoxA
GetClassNameA
IsWindow
FindWindowExA
MsgWaitForMultipleObjects
SendMessageA
PostMessageA
UnregisterClassA

kernel32

IsBadCodePtr
GetStringTypeA
GetStringTypeW
LoadLibraryA
GetProcAddress
FreeLibrary
GetStartupInfoA
CreateProcessA
WaitForSingleObject
GetTickCount
LCMapStringA
IsBadReadPtr
HeapFree
HeapReAlloc
HeapAlloc
ExitProcess
GetModuleHandleA
GetProcessHeap
GetProcessIoCounters
OpenProcess
GetCurrentProcess
WideCharToMultiByte
lstrlenW
LocalFree
LocalAlloc
GetFullPathNameW
MultiByteToWideChar
CloseHandle
SetWaitableTimer
SetStdHandle
LCMapStringW
SetUnhandledExceptionFilter
CreateWaitableTimerA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetACP
HeapSize
RaiseException
TerminateProcess
RtlUnwind
GetCommandLineA
GetOEMCP
GetCPInfo
FlushFileBuffers
SetFilePointer
WriteFile
SetErrorMode
GetProcessVersion
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GetLastError
SetLastError
InterlockedIncrement
lstrcpyA
lstrcatA
WritePrivateProfileStringA
InterlockedDecrement
GlobalFlags
lstrlenA
lstrcpynA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
GlobalUnlock
GlobalFree
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
GetModuleFileNameA
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId

shlwapi

PathMakeSystemFolderA

advapi32

RegCreateKeyExA
RegQueryValueExW
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExW

gdi32

SetWindowExtEx
GetObjectA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetDeviceCaps
CreateBitmap
DeleteObject
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkColor
SetTextColor
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetMapMode
ScaleWindowExtEx
GetClipBox

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

comctl32

ord17

oleaut32

VariantTimeToSystemTime

Sections

.text
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 148KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a86d1a9240d77d04e6d31c854d6c15cb

Headers

File Characteristics

Imports

user32

kernel32

shlwapi

advapi32

gdi32

winspool.drv

comctl32

oleaut32

Sections

.text Size: 96KB - Virtual size: 94KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 148KB - Virtual size: 207KB

.rsrc Size: 36KB - Virtual size: 34KB

.text
Size: 96KB - Virtual size: 94KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 148KB - Virtual size: 207KB

.rsrc
Size: 36KB - Virtual size: 34KB