fa4dbf30b057abf24fb6c340219539ea6f2f5728e1ac05cfe114211497eadb55

Sharing

Copy URL Twitter E-mail

General

Target

fa4dbf30b057abf24fb6c340219539ea6f2f5728e1ac05cfe114211497eadb55
Size

204KB
MD5

6a439f8f5114e363965a7166e7bc6487
SHA1

0b7c90e45f3d80acf63664268bb8e77de9360fe6
SHA256

fa4dbf30b057abf24fb6c340219539ea6f2f5728e1ac05cfe114211497eadb55
SHA512

3f45a44744eebe074b5ab69a3f7bb9ff1e19ec9c8d1de1bb01a69d9d0a1a4fff35019f5c0a43ce9a5ba6417988562c31fe65c26347eb71809cb4630f378d1e75
SSDEEP

3072:adGaTPrrIGvvyy8dHSi+OcGMrOpOVKdOyMbkrWRdg+E2uEPczTinJhV+p9GEVFUE:YGazIc6TVBMrOpzeJEsuirSGEMpgE8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa4dbf30b057abf24fb6c340219539ea6f2f5728e1ac05cfe114211497eadb55

Files

fa4dbf30b057abf24fb6c340219539ea6f2f5728e1ac05cfe114211497eadb55
.exe windows:4 windows x86 arch:x86

e12f72e7fe59535708698b4de0340a02

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetOEMCP
GetWindowsDirectoryW
SetErrorMode
CreateFileMappingA
GetComputerNameA
QueryPerformanceCounter
GetModuleFileNameA
SetPriorityClass
lstrcpyn
GetFileType
InitializeCriticalSection
GetLogicalDrives
GetProcessHeap
GetNumberFormatA
LocalAlloc
CreateEventW
GetTimeFormatA
GetVersionExW
GetProcessHeaps
CopyFileExW
GetHandleInformation
GlobalGetAtomNameA
FlushFileBuffers
CreateNamedPipeW
CopyFileA
GetCurrentDirectoryA
OpenWaitableTimerW
GetCommandLineW
lstrlen
CopyFileExA
FreeLibrary
SetComputerNameW
GetProcAddress
EnumCalendarInfoA
FindAtomA
GetModuleHandleW
CreatePipe
OpenProcess
CreateMailslotW
BeginUpdateResourceW
IsDebuggerPresent
GetVersionExA
GetEnvironmentStringsW
GetModuleHandleA

user32

GetSysColorBrush
RegisterClassExW
GetWindowLongA
SetMenu
ArrangeIconicWindows
DialogBoxParamW
LoadIconW
CreateIcon
CharNextA
GetMessageW
LoadImageA
TrackPopupMenuEx
mouse_event
GetParent
OpenClipboard
LoadIconW
GetIconInfo
CheckRadioButton
GetIconInfo
GetWindowTextW
OffsetRect
SetWindowPos
GetMenuStringW
CopyRect
EnumWindows
SetFocus
SetDlgItemInt
GetSystemMetrics
GetWindowTextLengthA
GetCapture
GetMenuItemCount
EnumDesktopsA
DestroyCursor
GetClassInfoExA
UpdateLayeredWindow
MonitorFromWindow
FrameRect
EnumChildWindows
FindWindowA
LoadBitmapW
RegisterClassExA
CloseWindow
IsMenu
MessageBeep
AdjustWindowRect
EnumDesktopWindows
DeleteMenu
MonitorFromRect
IsWindow

gdi32

ExtFloodFill
ExtEscape
EqualRgn
CopyEnhMetaFileW
SetPixelFormat
ResetDCW
CreatePolygonRgn
CreateDCA
SetTextJustification
GetKerningPairsA
GetDCPenColor
SetPaletteEntries
AbortPath
CreatePolyPolygonRgn
GetBkMode

advapi32

RegOpenKeyA
RegQueryValueW
RegReplaceKeyW
RegCreateKeyExW
RegRestoreKeyA

oleaut32

CreateDispTypeInfo

opengl32

glColor3iv

winspool.drv

SetPortW
AddPortExW
ScheduleJob
PrinterProperties
XcvDataW
FindNextPrinterChangeNotification
EnumPrintProcessorDatatypesW
SetPortA
ResetPrinterW

oledlg

OleUIInsertObjectA

wsock32

WSARecvEx
WSASetBlockingHook
shutdown

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.oqngCF
Size: 1KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.N
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.LUV
Size: 1024B - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.GOTYM
Size: 2KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.AGbvFQ
Size: 2KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kkPQAu
Size: 512B - Virtual size: 253KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e12f72e7fe59535708698b4de0340a02

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

oleaut32

opengl32

winspool.drv

oledlg

wsock32

Sections

.text Size: 12KB - Virtual size: 12KB

.oqngCF Size: 1KB - Virtual size: 19KB

.N Size: 4KB - Virtual size: 15KB

.LUV Size: 1024B - Virtual size: 31KB

.GOTYM Size: 2KB - Virtual size: 21KB

.data Size: 10KB - Virtual size: 9KB

.AGbvFQ Size: 2KB - Virtual size: 9KB

.kkPQAu Size: 512B - Virtual size: 253KB

.rsrc Size: 168KB - Virtual size: 168KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 12KB - Virtual size: 12KB

.oqngCF
Size: 1KB - Virtual size: 19KB

.N
Size: 4KB - Virtual size: 15KB

.LUV
Size: 1024B - Virtual size: 31KB

.GOTYM
Size: 2KB - Virtual size: 21KB

.data
Size: 10KB - Virtual size: 9KB

.AGbvFQ
Size: 2KB - Virtual size: 9KB

.kkPQAu
Size: 512B - Virtual size: 253KB

.rsrc
Size: 168KB - Virtual size: 168KB

.reloc
Size: 1KB - Virtual size: 1KB