646cf4ee8d4987114dc72af90d768b427d980054dcd20a3cfcabaf631ffa5873

Sharing

Copy URL

Twitter E-mail

General

Target

646cf4ee8d4987114dc72af90d768b427d980054dcd20a3cfcabaf631ffa5873
Size

505KB
MD5

3283846c5ecf21cc4b48bacab6309595
SHA1

75675873717a59ecad6c2596049f3f2f7acbe8f8
SHA256

646cf4ee8d4987114dc72af90d768b427d980054dcd20a3cfcabaf631ffa5873
SHA512

9df0a2b9511e02799cb40db36442222d3965118989371a06963dfe4f5836b4d0c56e612a2f5deb12a400d98250d5c2c290b0588a28dd904a5c189b8e9283910b
SSDEEP

12288:tOCxgCTHyK7VxNWFiOw76ChbUKYOoW+mmzqiSG9r91rnmv0ZD:M0g+SsxAFi579IjW+mmKU91rnmv0p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
646cf4ee8d4987114dc72af90d768b427d980054dcd20a3cfcabaf631ffa5873

Files

646cf4ee8d4987114dc72af90d768b427d980054dcd20a3cfcabaf631ffa5873
.exe windows:5 windows x86 arch:x86

12e27ac71bbed861ffc4c49149dcf756

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

HeapSize
Sleep
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
LCMapStringW
GetModuleFileNameA
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetCurrentProcess
EnterCriticalSection
GetModuleFileNameW
GetStdHandle
LoadLibraryW
GetConsoleCP
GetConsoleMode
HeapReAlloc
FlushFileBuffers
SetFilePointer
WriteConsoleW
SetStdHandle
SetConsoleTitleW
lstrlenA
FindFirstFileA
FindNextFileA
FindClose
HeapCreate
HeapAlloc
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
CloseHandle
FlushViewOfFile
FreeEnvironmentStringsW
UnmapViewOfFile
GlobalAlloc
GlobalLock
ReadFile
GlobalUnlock
WriteFile
ExitProcess
GetStringTypeW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetProcAddress
InterlockedDecrement
GetCurrentThreadId
GetLastError
GetModuleHandleA
LeaveCriticalSection
SetLastError
GetModuleHandleW
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DecodePointer
RaiseException
RtlUnwind
MultiByteToWideChar
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapFree
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
CreateFileW

user32

LoadBitmapA
GetWindowLongA
ShowWindow
ModifyMenuA
UpdateWindow
InsertMenuItemA
CopyRect
DrawTextA
GetSystemMetrics
CreateWindowExW
SetWindowTextW
SendMessageA
GetClientRect
ReleaseDC
EnableMenuItem
GetWindowDC
IsWindowEnabled
GetFocus
GetWindowRect
ClientToScreen
OffsetRect
GetDlgItem
LoadCursorA
SetCursor
ShowCursor
BeginPaint
EndPaint
DefWindowProcA
DrawFrameControl
GetDialogBaseUnits
GetWindowTextA
GetWindowTextLengthA
SetWindowTextA
GetMenu
GetSubMenu
GetDC

gdi32

MoveToEx
LineTo
SaveDC
SetMapMode
SetWindowExtEx
Ellipse
SetTextAlign
TextOutA
GetStockObject
CreatePen
SelectObject
GetCurrentPositionEx
DeleteObject
CreateRectRgn
CombineRgn
ExcludeClipRect
CreateEllipticRgn
SetViewportOrgEx
SelectClipRgn
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
CreateICA
GetObjectA
CreateBitmapIndirect
StretchBlt
RestoreDC
Rectangle

comdlg32

FindTextA
GetFileTitleW

advapi32

GetTraceLoggerHandle
AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueA

ole32

CreateILockBytesOnHGlobal
CreateStreamOnHGlobal

oleaut32

OleLoadPicture
VariantTimeToSystemTime
OleSavePictureFile

shlwapi

StrSpnA
StrStrIA
StrChrA

comctl32

ImageList_Create
ord17

rpcrt4

RpcStringBindingComposeA
RpcBindingFromStringBindingA
RpcBindingFree

uxtheme

DrawThemeBackground

rasdlg

RasDialDlgA

Sections

.text
Size: 345KB - Virtual size: 344KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

12e27ac71bbed861ffc4c49149dcf756

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

ole32

oleaut32

shlwapi

comctl32

rpcrt4

uxtheme

rasdlg

Sections

.text Size: 345KB - Virtual size: 344KB

.rdata Size: 25KB - Virtual size: 24KB

.data Size: 6KB - Virtual size: 13KB

.rsrc Size: 119KB - Virtual size: 118KB

.reloc Size: 9KB - Virtual size: 8KB

.text
Size: 345KB - Virtual size: 344KB

.rdata
Size: 25KB - Virtual size: 24KB

.data
Size: 6KB - Virtual size: 13KB

.rsrc
Size: 119KB - Virtual size: 118KB

.reloc
Size: 9KB - Virtual size: 8KB