7906fa39b25735931980f47b98c17b059885451d6fa5700e963d4e5dbb6bb780

Sharing

Copy URL Twitter E-mail

General

Target

7906fa39b25735931980f47b98c17b059885451d6fa5700e963d4e5dbb6bb780
Size

268KB
MD5

b35c0528c748774eddfb9d12b09c1d72
SHA1

21e159e845768eab216f6b6d4dec4cbf9e0befb6
SHA256

7906fa39b25735931980f47b98c17b059885451d6fa5700e963d4e5dbb6bb780
SHA512

0587a1815909a7a9312ba41a69d2a6596b780afd1354c686ead51b3b0af37461b490784ff5c03bbfd20d44a17e33b93cc91d36e7e75ecfed7a50bacee5d94fcf
SSDEEP

6144:8kbmBkwG8CAsHcWsbAbDCME2L+lx0GM5Iwc:8kbmB5GTAsHLsbAbDSf0GgIwc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7906fa39b25735931980f47b98c17b059885451d6fa5700e963d4e5dbb6bb780

Files

7906fa39b25735931980f47b98c17b059885451d6fa5700e963d4e5dbb6bb780
.exe windows:4 windows x64 arch:x64

ecd42221dd01b17b6e517feb08c1d3fd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

comctl32

InitCommonControlsEx
SetWindowSubclass

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCW
CreateDIBSection
CreateFontIndirectW
CreatePen
CreateSolidBrush
DeleteDC
DeleteObject
Ellipse
GetDeviceCaps
GetObjectW
GetStockObject
GetTextExtentPoint32A
LineTo
MoveToEx
Rectangle
RoundRect
SelectObject
SetBkColor
SetBkMode
SetTextColor
TextOutW

gdiplus

GdipAddPathArc
GdipAddPathLine
GdipAddPathString
GdipBitmapGetPixel
GdipBitmapSetPixel
GdipClosePathFigure
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromStream
GdipCreateFontFamilyFromName
GdipCreateFromHDC
GdipCreateHBITMAPFromBitmap
GdipCreateHICONFromBitmap
GdipCreateLineBrush
GdipCreatePath
GdipCreatePen1
GdipCreateSolidFill
GdipDeleteBrush
GdipDeleteCustomLineCap
GdipDeleteFontFamily
GdipDeleteGraphics
GdipDeletePath
GdipDeletePen
GdipDisposeImage
GdipDrawEllipse
GdipDrawImageRect
GdipDrawPath
GdipDrawPolygon
GdipDrawRectangle
GdipFillEllipse
GdipFillPath
GdipFillPolygon
GdipFillRectangle
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipGetImageHeight
GdipGetImageWidth
GdipGetMatrixElements
GdipGetPathGradientPointCount
GdipGetPenFillType
GdipSaveImageToFile
GdipSetImageAttributesRemapTable
GdipSetSmoothingMode
GdipWindingModeOutline
GdiplusShutdown
GdiplusStartup

kernel32

CloseHandle
CompareStringW
CreateFileW
DeleteCriticalSection
EnterCriticalSection
FindClose
FindFirstFileW
FindResourceW
FreeLibrary
GetCommState
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileAttributesW
GetFileSize
GetLargestConsoleWindowSize
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetPrivateProfileStringW
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetSystemTimeAsFileTime
GetTickCount
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LoadResource
LockResource
MoveFileW
MulDiv
MultiByteToWideChar
PeekConsoleInputA
PurgeComm
QueryPerformanceCounter
ReadConsoleInputA
ReadFile
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetCommMask
SetCommState
SetCommTimeouts
SetConsoleCtrlHandler
SetConsoleMode
SetConsoleWindowInfo
SetUnhandledExceptionFilter
SetupComm
SizeofResource
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte
WriteConsoleInputA
WriteFile
WritePrivateProfileStringW
__C_specific_handler

msvcrt

__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_controlfp
_errno
_fmode
_fpreset
_i64toa
_i64tow
_initterm
_itoa
_itow
_onexit
_snprintf
_ui64toa
_ui64tow
_ultoa
_ultow
abort
calloc
exit
floor
fprintf
fputs
free
fwrite
islower
isupper
iswctype
localeconv
malloc
mbstowcs
memchr
memcmp
memcpy
memset
qsort
realloc
setlocale
signal
strchr
strlen
strncmp
strtoul
tolower
toupper
towupper
vfprintf
wcscmp
wcscspn
wcslen
wcsncmp
wcsstr
wcstod
wcstombs

ole32

CreateStreamOnHGlobal

oleaut32

SysAllocString
SysAllocStringLen
SysFreeString
SysStringLen

shell32

SHGetPathFromIDListW

shlwapi

PathRemoveBackslashW
StrToIntW

user32

AdjustWindowRectEx
BeginDeferWindowPos
BeginPaint
CallWindowProcW
CreateIconIndirect
CreateWindowExW
DefWindowProcW
DeferWindowPos
DestroyAcceleratorTable
DestroyCursor
DestroyIcon
DestroyWindow
DispatchMessageW
DrawIconEx
DrawTextW
EnableWindow
EndDeferWindowPos
EndPaint
EnumThreadWindows
FillRect
FindWindowExW
FindWindowW
FlashWindowEx
GetAncestor
GetClassLongPtrW
GetClassNameA
GetClassNameW
GetClientRect
GetDC
GetDesktopWindow
GetDlgCtrlID
GetDlgItem
GetIconInfo
GetMenu
GetMessageW
GetParent
GetPropW
GetScrollInfo
GetSysColor
GetSystemMetrics
GetWindow
GetWindowDC
GetWindowLongPtrW
GetWindowPlacement
GetWindowRect
GetWindowTextLengthW
GetWindowThreadProcessId
IntersectRect
InvalidateRect
IsDialogMessageW
IsIconic
IsWindow
IsWindowEnabled
IsWindowVisible
IsZoomed
LoadCursorW
LoadImageA
LoadImageW
MapVirtualKeyA
MapWindowPoints
MessageBoxW
OpenIcon
PostMessageW
PostQuitMessage
RegisterClassExW
ReleaseCapture
ReleaseDC
RemovePropW
ScreenToClient
SendMessageA
SendMessageW
SetClassLongPtrW
SetCursor
SetFocus
SetForegroundWindow
SetLayeredWindowAttributes
SetParent
SetPropW
SetRect
SetScrollInfo
SetWindowLongPtrW
SetWindowPlacement
SetWindowPos
ShowWindow
SystemParametersInfoW
TranslateAcceleratorW
TranslateMDISysAccel
TranslateMessage
UnregisterClassW
UpdateWindow
VkKeyScanA

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 211KB - Virtual size: 210KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 49KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ecd42221dd01b17b6e517feb08c1d3fd

Headers

File Characteristics

Imports

comctl32

gdi32

gdiplus

kernel32

msvcrt

ole32

oleaut32

shell32

shlwapi

user32

version

Sections

.text Size: 211KB - Virtual size: 210KB

.data Size: 8KB - Virtual size: 7KB

.rdata Size: 13KB - Virtual size: 13KB

.pdata Size: 1024B - Virtual size: 972B

.xdata Size: 1024B - Virtual size: 908B

.bss Size: - Virtual size: 49KB

.idata Size: 12KB - Virtual size: 11KB

.CRT Size: 512B - Virtual size: 104B

.tls Size: 512B - Virtual size: 16B

.rsrc Size: 20KB - Virtual size: 19KB

.text
Size: 211KB - Virtual size: 210KB

.data
Size: 8KB - Virtual size: 7KB

.rdata
Size: 13KB - Virtual size: 13KB

.pdata
Size: 1024B - Virtual size: 972B

.xdata
Size: 1024B - Virtual size: 908B

.bss
Size: - Virtual size: 49KB

.idata
Size: 12KB - Virtual size: 11KB

.CRT
Size: 512B - Virtual size: 104B

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 20KB - Virtual size: 19KB