d5c635949a066a79fb689837c4e5be10N

Sharing

Copy URL Twitter E-mail

General

Target

d5c635949a066a79fb689837c4e5be10N
Size

190KB
MD5

d5c635949a066a79fb689837c4e5be10
SHA1

98187794e57b6a4f3a2c6a4abd76f8985414f8e2
SHA256

b188ff65293dd7e96f9b0034aa49460c1ea4ffa1c464055e8f679eef5605d5d1
SHA512

ef1b52e5911a1e71572335d2bb889880ffabae3b7d68893a59ba02de56011ed8680aaf4fc4cc2dc37246474a056d07602ecc8e307c2c2166088292b4c881192b
SSDEEP

1536:YZYd5QJc/vaSybs4n0rQQ87eHe3soW7CCDJ85AB0RlAh6:G1c/2b5zf7857CKJ8AB0RlT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5c635949a066a79fb689837c4e5be10N

Files

d5c635949a066a79fb689837c4e5be10N
.exe .vbs windows:4 windows x86 arch:x86 polyglot

ef2c43bbd1d69c662e975f06c2f3267c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
lstrlenA
FindClose
FindFirstFileA
GetSystemDirectoryA
MoveFileExA
ReadFile
WinExec
GetTempFileNameA
GetTempPathA
SetFilePointer
lstrcpynA
CreateDirectoryA
FindNextFileA
ReleaseMutex
WaitForSingleObject
lstrcmpiA
lstrcpyA
lstrcmpA
GetEnvironmentVariableA
lstrcatA
GetDiskFreeSpaceA
GetModuleHandleA
Sleep
MoveFileA
GetLocalTime
GetCurrentProcess
FormatMessageA
GetLastError
GetComputerNameA
SetFileAttributesW
GetSystemTime
VirtualAlloc
VirtualFree
FileTimeToDosDateTime
SetEndOfFile
DosDateTimeToFileTime
ExitProcess
SetFileTime
SystemTimeToFileTime
CreateProcessA
GetWindowsDirectoryA
CreateMutexA
CreateSemaphoreA
CreateThread
SizeofResource
LockResource
LoadResource
FindResourceA
DeviceIoControl
HeapFree
HeapAlloc
GetProcessHeap
GetDriveTypeA
GetLogicalDrives
GetLogicalDriveStringsA
FileTimeToSystemTime
ReleaseSemaphore
OpenSemaphoreA
GetFileSize
CreateFileMappingA
MapViewOfFile
WriteFile
UnmapViewOfFile
CreateFileA
GetFileTime
CloseHandle
DeleteFileA
GetModuleFileNameA
CopyFileA
SetFileAttributesA
LoadLibraryA
SetCurrentDirectoryA
GetProcAddress

user32

CharLowerBuffA
wsprintfA
DefWindowProcA
SetTimer
ShowWindow
PostQuitMessage
EndDialog
KillTimer
DialogBoxParamA

advapi32

InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetFileSecurityA
InitializeSecurityDescriptor
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegSaveKeyA
RegOpenKeyExA
RegRestoreKeyA
RegCloseKey
RegQueryValueExA
LookupAccountNameA

shell32

SHChangeNotify

ole32

CoInitialize
CoUninitialize

msvcrt

strrchr
_strcmpi
atol
isdigit
_except_handler3
memmove
strchr
wcslen
strncmp
__CxxFrameHandler
atoi
_strlwr
strncpy
_findfirst
_findclose
_findnext

ws2_32

gethostbyname
WSAStartup
WSACleanup
inet_addr

Sections

.data
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qyykndy
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ifocdom
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bidhyzo
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bbitxnp
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zdbzvnp
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lzavotb
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

jdariez
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lgsndfg
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lgidkcr
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ef2c43bbd1d69c662e975f06c2f3267c

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

msvcrt

ws2_32

Sections

.data Size: 52KB - Virtual size: 52KB

.rsrc Size: 136KB - Virtual size: 164KB

qyykndy Size: - Virtual size: 32KB

ifocdom Size: - Virtual size: 32KB

bidhyzo Size: - Virtual size: 32KB

bbitxnp Size: - Virtual size: 32KB

zdbzvnp Size: - Virtual size: 32KB

lzavotb Size: - Virtual size: 32KB

jdariez Size: - Virtual size: 32KB

lgsndfg Size: - Virtual size: 32KB

lgidkcr Size: - Virtual size: 4KB

.data
Size: 52KB - Virtual size: 52KB

.rsrc
Size: 136KB - Virtual size: 164KB

qyykndy
Size: - Virtual size: 32KB

ifocdom
Size: - Virtual size: 32KB

bidhyzo
Size: - Virtual size: 32KB

bbitxnp
Size: - Virtual size: 32KB

zdbzvnp
Size: - Virtual size: 32KB

lzavotb
Size: - Virtual size: 32KB

jdariez
Size: - Virtual size: 32KB

lgsndfg
Size: - Virtual size: 32KB

lgidkcr
Size: - Virtual size: 4KB