d220befaa3ae56cc45d21a0efc929b2d79ad98338e8ece47bcb4cbf29376307f

Sharing

Copy URL Twitter E-mail

General

Target

d220befaa3ae56cc45d21a0efc929b2d79ad98338e8ece47bcb4cbf29376307f
Size

1004KB
MD5

2b439de704321e13bc6194afb0c259df
SHA1

1e61aa7e5d7a18f778c78bd8a172b294c08d3ade
SHA256

d220befaa3ae56cc45d21a0efc929b2d79ad98338e8ece47bcb4cbf29376307f
SHA512

b4f9f42793301fb30dbfe694812066c00bb413a12597b324ee28b75114c1581f4e9474781cdd292cfaf8cd2fc55adf8aac72b5a032390245d407992e628002f5
SSDEEP

24576:GhISWldxU+ARcIb+kJFNzvBaZvGkQEsYtREkF7II:GhI8N2IxBGJQEC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d220befaa3ae56cc45d21a0efc929b2d79ad98338e8ece47bcb4cbf29376307f

Files

d220befaa3ae56cc45d21a0efc929b2d79ad98338e8ece47bcb4cbf29376307f
.exe windows:4 windows x86 arch:x86

aaeeadd295748f8d35b8a442d9c1d4c2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeBeginPeriod
waveOutClose
waveOutUnprepareHeader
waveOutReset
waveOutWrite
waveOutPrepareHeader
timeGetTime
waveOutGetDevCapsA
timeEndPeriod
timeGetDevCaps
waveOutOpen

msvcrt

time
strncmp
memcmp
_errno
realloc
_stricmp
strrchr
fgets
qsort
fputs
_beginthreadex
strerror
_sys_nerr
fputc
fflush
_getpid
tolower
_lseeki64
_fstati64
atoi
getenv
gmtime
_stati64
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
sscanf
_iob
_isctype
__mb_cur_max
strpbrk
strtol
_pctype
memchr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strncpy
strstr
calloc
strcat
strchr
_ftol
_purecall
_close
fabs
frexp
printf
memmove
strcmp
strlen
sprintf
__CxxFrameHandler
strcpy
fopen
fseek
ftell
fread
fclose
fwrite
free
malloc
memcpy
memset
_strdup
_read
_write
_open
strtoul

shlwapi

PathFindFileNameA

shell32

ShellExecuteA

comdlg32

CommDlgExtendedError
GetOpenFileNameA

user32

OpenClipboard
GetClipboardData
CloseClipboard
SetCursor
SetClipboardData
GetMenu
KillTimer
SetTimer
SetWindowPos
InvalidateRect
wsprintfA
EmptyClipboard
SetMenu
wvsprintfA
ReleaseDC
GetDC
RegisterClassExA
LoadIconA
UpdateWindow
ShowWindow
CreateWindowExA
DestroyMenu
TrackPopupMenu
ClientToScreen
DeleteMenu
GetSubMenu
CheckMenuItem
EnableMenuItem
LoadMenuA
ReleaseCapture
SetCapture
EndPaint
BeginPaint
DefWindowProcA
DestroyWindow
DialogBoxParamA
GetKeyState
PostQuitMessage
LoadStringA
EndDialog
SetWindowTextA
GetDlgItem
GetClientRect
LoadCursorA

gdi32

GetDeviceCaps
CreatePalette
DeleteObject
DeleteDC
BitBlt
SelectObject
CreateCompatibleDC
RealizePalette
SelectPalette
GetSystemPaletteEntries
GdiFlush
CreateDIBSection

msvcp60

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

kernel32

WaitForSingleObject
CreateThread
GetThreadPriority
SetThreadPriority
Sleep
EnterCriticalSection
CreateEventA
SetEvent
GlobalAlloc
GlobalLock
GlobalUnlock
WinExec
GetModuleFileNameA
lstrcatA
WritePrivateProfileStringA
DeleteFileA
OutputDebugStringA
DebugBreak
LeaveCriticalSection
SetFilePointer
CreateFileA
ReadFile
SystemTimeToFileTime
GetCurrentDirectoryA
lstrlenA
lstrcpyA
LocalFileTimeToFileTime
CreateDirectoryA
GetFileAttributesA
SetFileTime
WriteFile
GetModuleHandleA
GetStartupInfoA
DeleteCriticalSection
GetLastError
InitializeCriticalSection
CloseHandle
GetProcAddress
FreeLibrary
GetTickCount
SleepEx
LoadLibraryA
GetSystemDirectoryA
FormatMessageA
GetVersionExA
PeekNamedPipe
WaitForMultipleObjects
GetFileType
GetStdHandle
ExpandEnvironmentStringsA
SetLastError

wsock32

getservbyport
__WSAFDIsSet
WSASetLastError
WSAStartup
gethostbyaddr
sendto
recvfrom
listen
accept
inet_ntoa
gethostbyname
WSAGetLastError
select
send
recv
getsockname
getpeername
ntohs
getsockopt
setsockopt
connect
bind
htons
closesocket
socket
inet_addr
htonl
getservbyname
WSACleanup
gethostname
ntohl
ioctlsocket

advapi32

CryptHashData
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
CryptCreateHash
CryptGetHashParam
CryptDestroyHash
CryptImportKey
CryptEncrypt
CryptDestroyKey

wldap32

ord41
ord22
ord211
ord143
ord60
ord50
ord26
ord27
ord30
ord200
ord32
ord33
ord301
ord35
ord79
ord46

ws2_32

WSAIoctl

crypt32

CertFreeCertificateContext

Sections

.text
Size: 644KB - Virtual size: 640KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 248KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aaeeadd295748f8d35b8a442d9c1d4c2

Headers

File Characteristics

Imports

winmm

msvcrt

shlwapi

shell32

comdlg32

user32

gdi32

msvcp60

kernel32

wsock32

advapi32

wldap32

ws2_32

crypt32

Sections

.text Size: 644KB - Virtual size: 640KB

.rdata Size: 84KB - Virtual size: 80KB

.data Size: 248KB - Virtual size: 254KB

.rsrc Size: 24KB - Virtual size: 20KB

.text
Size: 644KB - Virtual size: 640KB

.rdata
Size: 84KB - Virtual size: 80KB

.data
Size: 248KB - Virtual size: 254KB

.rsrc
Size: 24KB - Virtual size: 20KB