6ce654794607dd8d98f330af3869224fac64fae31ef041e8c6cb45b95f5caa12N

Sharing

Copy URL Twitter E-mail

General

Target

6ce654794607dd8d98f330af3869224fac64fae31ef041e8c6cb45b95f5caa12N
Size

499KB
MD5

ded5df2d0025491815b0de276d0a5fa0
SHA1

7875623dfa6a965134c60a9674fb78cc1979c755
SHA256

6ce654794607dd8d98f330af3869224fac64fae31ef041e8c6cb45b95f5caa12
SHA512

c1b61a97fce9c4c0a3018d912eda059415e3ccf1c0d283540eecd3505064f69612d6c1b80424f1f252cd85d1852320429ee7683973cc76b11f351f987d2561be
SSDEEP

12288:Yh8u0eF19AkKSSsuJBCfGLHKI1Vuz1eWo:Yh8uF/JXuPPns4Wo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ce654794607dd8d98f330af3869224fac64fae31ef041e8c6cb45b95f5caa12N

Files

6ce654794607dd8d98f330af3869224fac64fae31ef041e8c6cb45b95f5caa12N
.exe windows:5 windows x86 arch:x86

8731a29f8d52ef57721dbfc01803405c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

KillTimer
FindWindowW
DialogBoxParamW
GetDlgItemTextW
LoadStringW
SetWindowTextW
ShowWindow
GetIconInfo
LoadImageW
WinHelpW
SetWindowLongW
RegisterWindowMessageW
GetParent
CheckDlgButton
CallWindowProcW
SendMessageW
GetDlgItem
MessageBoxW
SystemParametersInfoW
LoadIconW
GetDlgItemInt
SendDlgItemMessageW
SetWindowPos
SetDlgItemInt
EnableWindow
RegisterDeviceNotificationW
CheckRadioButton
EndDialog
ExitWindowsEx
DestroyWindow
SetFocus
BringWindowToTop
SetTimer
UnregisterDeviceNotification
wsprintfW
CharNextW
InvalidateRect
SetDlgItemTextW
GetWindowTextW
GetWindowLongW
IsDlgButtonChecked
CharPrevW

kernel32

lstrcpyW
CloseHandle
GetSystemDirectoryW
lstrcmpiW
GetUserDefaultLCID
GetDiskFreeSpaceW
GlobalMemoryStatusEx
GetProcAddress
LocalFree
ExpandEnvironmentStringsW
GetCurrentProcessId
lstrcatW
FormatMessageW
SetUnhandledExceptionFilter
SetLastError
GetWindowsDirectoryW
lstrlenW
GetTickCount
GetSystemInfo
GetLocaleInfoA
FreeLibrary
GetSystemTimeAsFileTime
GetLocaleInfoW
QueryPerformanceCounter
LoadLibraryA
GetModuleFileNameW
LocalAlloc
GetLastError
lstrcpynW
GetModuleHandleA
GetCurrentProcess
GetVersionExW

advapi32

OpenServiceW
StartServiceW
RegCloseKey
RegEnumValueW
LockServiceDatabase
CloseServiceHandle
UnlockServiceDatabase
RegDeleteKeyW
OpenSCManagerW
RegOpenKeyExW
ChangeServiceConfigW
RegQueryValueExW
RegDeleteValueW
ControlService
RegEnumKeyExW
QueryServiceStatus
RegCreateKeyExW
OpenProcessToken
AdjustTokenPrivileges
RegSetValueExW
GetTokenInformation

ole32

CoInitialize
CoTaskMemFree
CoCreateInstance
CoUninitialize

setupapi

SetupDiSetClassInstallParamsW
CM_Get_Hardware_Profile_Info_ExW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
CM_Get_Device_ID_ExW
CM_Get_HW_Prof_Flags_ExW
SetupDiGetClassDevsExW
SetupDiGetDeviceInstallParamsW
SetupDiSetDeviceInstallParamsW
SetupDiChangeState
SetupDiDeleteDeviceInfo
SetupDiCallClassInstaller

gdi32

DeleteObject

shell32

ShellExecuteW

msvcrt

wcscmp
_itow
wcscpy
swscanf
_wcsicmp
wcscat
wcschr
_except_handler3

ntdll

RtlNtStatusToDosError

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 431KB - Virtual size: 431KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8731a29f8d52ef57721dbfc01803405c

Headers

File Characteristics

Imports

user32

kernel32

advapi32

ole32

setupapi

gdi32

shell32

msvcrt

ntdll

Sections

.text Size: 33KB - Virtual size: 32KB

.rdata Size: 23KB - Virtual size: 22KB

.data Size: 10KB - Virtual size: 9KB

.rsrc Size: 431KB - Virtual size: 431KB

.text
Size: 33KB - Virtual size: 32KB

.rdata
Size: 23KB - Virtual size: 22KB

.data
Size: 10KB - Virtual size: 9KB

.rsrc
Size: 431KB - Virtual size: 431KB