149aa5d2591be26a7f66ec6c6443e94301efc3f1c0dad83c6dc34e49b22ee325N

Sharing

Copy URL

Twitter E-mail

General

Target

149aa5d2591be26a7f66ec6c6443e94301efc3f1c0dad83c6dc34e49b22ee325N
Size

716KB
MD5

5bbc4c13ea38c58d5c3c2bc8f558f800
SHA1

65075202a7a44b7d2735ad44869d49f59373e615
SHA256

149aa5d2591be26a7f66ec6c6443e94301efc3f1c0dad83c6dc34e49b22ee325
SHA512

cff4c12ee90eef55ab5f75e3f15c7f5f78ef44706bc3bffc05afcfca45bba39b66aa5a6602b0aef036d62e5eb4211fae434df3f76f09ab84cdc505b5950e0bcd
SSDEEP

12288:lXcqhWkdzkMWzcw9OsOSsyRvy1u7kqtf2ssp2JcPpHL4JiV8qGV3wGa7Y8vh4HZI:lXc/SzGzc8OsO9yRvlD2ssp2eRHksiG5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
149aa5d2591be26a7f66ec6c6443e94301efc3f1c0dad83c6dc34e49b22ee325N

Files

149aa5d2591be26a7f66ec6c6443e94301efc3f1c0dad83c6dc34e49b22ee325N
.exe windows:5 windows x86 arch:x86

9fdf9ab4488734a1a0f7e4bcd2d39ea4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
FreeEnvironmentStringsA
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
IsValidLocale
GetEnvironmentStrings
EnumSystemLocalesA
CompareStringA
GetLocaleInfoA
CompareStringW
GetUserDefaultLCID
HeapSize
CloseHandle
SetFilePointer
ReadFile
FlushFileBuffers
GetConsoleMode
SetEnvironmentVariableA
CreateFileA
ReadConsoleInputA
SetConsoleMode
CreateProcessA
VirtualProtect
GetConsoleCP
IsValidCodePage
GetOEMCP
GetACP
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetModuleFileNameA
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
GetProcAddress
ExitProcess
GetStartupInfoW
GetCPInfo
RaiseException
RtlUnwind
LCMapStringA
LCMapStringW
HeapAlloc
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetFileAttributesA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
WriteFile
GetStdHandle

comdlg32

PrintDlgW
PrintDlgExW
PrintDlgA
PageSetupDlgW
CommDlgExtendedError
GetFileTitleW
FindTextW

mpr

WNetGetNetworkInformationW
WNetConnectionDialog1W
MultinetGetConnectionPerformanceW
MultinetGetConnectionPerformanceA
WNetDisconnectDialog1A
WNetOpenEnumW
WNetGetConnectionA
WNetConnectionDialog
WNetAddConnectionW

ole32

HWND_UserFree
FreePropVariantArray
WriteOleStg
StgOpenStorageEx
UtConvertDvtd32toDvtd16
HENHMETAFILE_UserSize
OleLoad

msvfw32

ICGetInfo
ICSendMessage
GetOpenFileNamePreviewA

avifil32

AVIStreamRead
AVIStreamCreate

shlwapi

PathCreateFromUrlW
UrlIsNoHistoryA
StrRChrW
PathMakePrettyA
SHEnumKeyExW
UrlHashW
SHRegCreateUSKeyA
StrChrA

gdi32

CreateCompatibleBitmap
GetClipRgn
GetTextCharacterExtra
BitBlt
CreateDIBSection
CreateFontIndirectW
EudcLoadLinkW

odbc32

VRetrieveDriverErrorsRowCol
ord160
ord30
ord64
ord217
PostComponentError
ord142
CursorLibLockStmt
ord270
ord136

msacm32

acmDriverRemove
acmDriverClose
acmFormatDetailsA
acmDriverEnum
acmFilterChooseW
acmStreamOpen
acmDriverAddA
acmStreamUnprepareHeader

user32

CallWindowProcW

Sections

.code
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 569KB - Virtual size: 569KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9fdf9ab4488734a1a0f7e4bcd2d39ea4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

comdlg32

mpr

ole32

msvfw32

avifil32

shlwapi

gdi32

odbc32

msacm32

user32

Sections

.code Size: 133KB - Virtual size: 132KB

.data Size: 569KB - Virtual size: 569KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 10KB - Virtual size: 10KB

.code
Size: 133KB - Virtual size: 132KB

.data
Size: 569KB - Virtual size: 569KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 10KB - Virtual size: 10KB