715f0c77ffb97c6dd7a02ed695a949cb604becb9a99bd378d9cdf7bbf2abe5e9

Sharing

Copy URL Twitter E-mail

General

Target

715f0c77ffb97c6dd7a02ed695a949cb604becb9a99bd378d9cdf7bbf2abe5e9
Size

528KB
MD5

33a2a5c9dc012855624d03d20c31b210
SHA1

e3723ee7084c845dd822879f47e6d78dade3b60f
SHA256

715f0c77ffb97c6dd7a02ed695a949cb604becb9a99bd378d9cdf7bbf2abe5e9
SHA512

bdfcc10067d24896a25ddea61e4e54a2fef21db71429473d2a97f5473f18c2587afc0c56ac690acb0b29316ccad23876d2d00a24cc6d5f7af65d2e5f2d7bda86
SSDEEP

6144:TRHczz+a00ZoOEYyjpq04Or/6GHdoEnTwjhopmyK32+F23GYd:AzDZoOEDttf/g2vg21

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
715f0c77ffb97c6dd7a02ed695a949cb604becb9a99bd378d9cdf7bbf2abe5e9

Files

715f0c77ffb97c6dd7a02ed695a949cb604becb9a99bd378d9cdf7bbf2abe5e9
.exe windows:5 windows x86 arch:x86

324eae7f19890b5c58aadd2591fcc750

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

inet_ntoa
ntohs
htons
inet_addr

winmm

waveInOpen
mixerGetControlDetailsA
waveInGetNumDevs
waveInGetDevCapsA
mixerGetLineControlsA
mixerGetLineInfoA
waveInClose
waveInUnprepareHeader
waveInReset
waveInAddBuffer
waveInStart
waveInPrepareHeader
mixerOpen
mixerClose
mixerSetControlDetails

cfgmgr32

CM_Enumerate_Classes

setupapi

SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiClassGuidsFromNameA
SetupDiGetClassImageList
SetupDiDestroyDeviceInfoList
SetupDiOpenClassRegKeyExA
SetupDiGetClassDevsA
SetupDiGetClassImageIndex
SetupDiClassNameFromGuidA

kernel32

LoadLibraryA
lstrcmpA
Sleep
GetSystemDirectoryA
GetLogicalDriveStringsA
HeapAlloc
GetProcessHeap
FindClose
FindNextFileA
FindFirstFileA
SetErrorMode
GetComputerNameA
GetCurrentDirectoryA
SetEvent
VirtualAlloc
CloseHandle
CreateThread
VirtualFree
TerminateThread
SetThreadPriority
ResumeThread
WaitForSingleObject
CreateEventA
PulseEvent
GetProcAddress
WideCharToMultiByte
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
GetCurrentProcessId
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
ResetEvent
DeviceIoControl
WaitForMultipleObjects
ReleaseSemaphore
CreateSemaphoreA
WaitForSingleObjectEx
GetCurrentProcess
GetCurrentThreadId
GetSystemInfo
CompareStringW
CreateFileA
CreateFileW
GetSystemDirectoryW
DeleteFileA
GetTickCount
GetSystemTimeAsFileTime
LoadLibraryW
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
GlobalHandle
GlobalReAlloc
SetFilePointer
SetEndOfFile
GetFileSize
ReadFile
WriteFile
HeapFree
HeapReAlloc
FreeLibrary
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetVersionExA
InterlockedExchange
InterlockedCompareExchange
TerminateProcess
UnhandledExceptionFilter
QueryPerformanceCounter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError

user32

GetSystemMetrics
GetDesktopWindow
GetDC
ReleaseDC
wsprintfA
GetMessageA

gdi32

CreateCompatibleDC
CreateDIBSection
BitBlt
DeleteDC
SelectObject
DeleteObject

advapi32

OpenSCManagerW
SetServiceStatus
RegQueryValueA
RegCloseKey
RegOpenKeyA
RegEnumKeyA
RegQueryValueExA
QueryServiceConfigW
CreateServiceW
ChangeServiceConfigW
QueryServiceStatus
StartServiceW
OpenServiceW
UnlockServiceDatabase
LockServiceDatabase
CloseServiceHandle
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
RegEnumKeyExA
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegEnumKeyExW
RegOpenKeyExA
RegQueryInfoKeyA

ole32

CoCreateInstance
CoInitialize
CoUninitialize

oleaut32

SysStringLen
SysAllocString

msvcp90

?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Unlock@_Mutex@std@@QAEXXZ
?_Lock@_Mutex@std@@QAEXXZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBDH@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@AAD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z

msvcr90

__getmainargs
??2@YAPAXI@Z
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
remove
_controlfp_s
_invoke_watson
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
__initenv
_XcptFilter
_exit
_cexit
??_V@YAXPAX@Z
memcpy
memset
memmove
feof
fread
_itoa
_snprintf
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
exit
strtoul
realloc
strncpy_s
_vsnwprintf
_purecall
_vsnprintf
strncpy
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??3@YAXPAX@Z
??0exception@std@@QAE@XZ
__CxxFrameHandler3
_mbsicmp
_CxxThrowException
free
malloc
fclose
fopen
fwrite
memmove_s

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 120KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.shell
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

324eae7f19890b5c58aadd2591fcc750

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

winmm

cfgmgr32

setupapi

kernel32

user32

gdi32

advapi32

ole32

oleaut32

msvcp90

msvcr90

Sections

.text Size: 65KB - Virtual size: 64KB

.rdata Size: 21KB - Virtual size: 20KB

.data Size: 120KB - Virtual size: 121KB

.rsrc Size: 1024B - Virtual size: 688B

.shell Size: 320KB - Virtual size: 320KB

.text
Size: 65KB - Virtual size: 64KB

.rdata
Size: 21KB - Virtual size: 20KB

.data
Size: 120KB - Virtual size: 121KB

.rsrc
Size: 1024B - Virtual size: 688B

.shell
Size: 320KB - Virtual size: 320KB