8d0ca9296d4f2b3d84b81be3c8387e94515ceb11a1a16c1e8b63447104df43d6

Sharing

Copy URL Twitter E-mail

General

Target

8d0ca9296d4f2b3d84b81be3c8387e94515ceb11a1a16c1e8b63447104df43d6
Size

653KB
MD5

4422f17bbf81062548957656c19588ce
SHA1

5c7ec2812cd006892b0811d225731270c56e90a1
SHA256

8d0ca9296d4f2b3d84b81be3c8387e94515ceb11a1a16c1e8b63447104df43d6
SHA512

17562d39fffa78ba13ea7b2c7810a8f87592a6e2166fc581df70c8a1f73aee9559926bfef4de52bfa1bb7116b79e2f43e13bd212b387a955e8f9a1d256adbce7
SSDEEP

12288:j3lhEKwgFd25wWUENWLy60jezEClolpgN2XzloI8ulOUViOOme06RErw4QBOGqkr:52LgO5wdEN36jhlolpg4Zn8ulOOiGtv6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d0ca9296d4f2b3d84b81be3c8387e94515ceb11a1a16c1e8b63447104df43d6

Files

8d0ca9296d4f2b3d84b81be3c8387e94515ceb11a1a16c1e8b63447104df43d6
.exe windows:4 windows x86 arch:x86

76ff84ab9bc3205bf672693e1378c426

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\haozip2.4\build\rczip\bin\Win32\release\pdb\HaoZip7zSetup.pdb

Imports

comctl32

InitCommonControlsEx

shell32

SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListW
ShellExecuteW
ShellExecuteExW
CommandLineToArgvW
SHGetFileInfoW
SHBrowseForFolderW

kernel32

SetCurrentDirectoryW
CreateProcessW
CloseHandle
GetCurrentDirectoryW
LocalFree
SetFileApisToOEM
GetCurrentThread
SetThreadPriority
GetLastError
SetPriorityClass
GetEnvironmentVariableW
GetCurrentProcess
GetCommandLineW
GetFileAttributesW
FormatMessageW
SetFileAttributesW
RemoveDirectoryW
CreateDirectoryW
DeleteFileW
InterlockedExchangeAdd
FindFirstFileW
FindClose
FindNextFileW
GetModuleHandleW
FreeLibrary
GetProcAddress
LoadLibraryW
CreateFileW
SetFilePointer
SetEndOfFile
SetFileTime
WriteFile
GetFileSize
ReadFile
GetCurrentThreadId
ResumeThread
Sleep
GetACP
MultiByteToWideChar
WideCharToMultiByte
MoveFileW
lstrlenW
GetTempPathW
GetWindowsDirectoryW
GetFullPathNameW
GetTempFileNameW
WaitForSingleObject
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetVersionExW
FindResourceW
FileTimeToSystemTime
ExpandEnvironmentStringsW
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
LoadLibraryA
HeapReAlloc
VirtualAlloc
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
GetModuleFileNameW
GetLongPathNameW
WaitForMultipleObjects
CreateEventW
SetEvent
ResetEvent
HeapDestroy
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapSize
InterlockedDecrement
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
GetSystemTimeAsFileTime
ExitThread
CreateThread
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError

user32

GetActiveWindow
LoadStringW
GetDesktopWindow
GetMessageW
IsDialogMessageW
CreateDialogParamW
PostQuitMessage
DispatchMessageW
EnableWindow
LoadIconW
TranslateMessage
SetTimer
KillTimer
DestroyIcon
IsWindow
SendMessageW
MessageBoxW
ShowWindow
PostMessageW
DialogBoxParamW
GetSystemMetrics
GetWindowRect
SetWindowPos
EndDialog
GetWindowTextW
SetWindowTextW
GetDlgItem
IsWindowVisible
ScreenToClient

gdi32

DeleteObject
CreateSolidBrush

advapi32

RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegSetValueExW

ole32

CoInitialize
CoCreateInstance
CoTaskMemFree
CoUninitialize
CoInitializeEx

Sections

.text
Size: 282KB - Virtual size: 281KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

76ff84ab9bc3205bf672693e1378c426

Headers

File Characteristics

PDB Paths

Imports

comctl32

shell32

kernel32

user32

gdi32

advapi32

ole32

Sections

.text Size: 282KB - Virtual size: 281KB

.rdata Size: 68KB - Virtual size: 67KB

.data Size: 16KB - Virtual size: 40KB

.rsrc Size: 75KB - Virtual size: 75KB

.text
Size: 282KB - Virtual size: 281KB

.rdata
Size: 68KB - Virtual size: 67KB

.data
Size: 16KB - Virtual size: 40KB

.rsrc
Size: 75KB - Virtual size: 75KB