48126d918d22db353108959e99e2e52328d68d24d6ab0566c3b029aa2b08087aN

Sharing

Copy URL Twitter E-mail

General

Target

48126d918d22db353108959e99e2e52328d68d24d6ab0566c3b029aa2b08087aN
Size

827KB
MD5

41200a5107581f4b5fa6137245bcc730
SHA1

546e4c9aee85188dc4a687fd89d41bbb4d34c875
SHA256

48126d918d22db353108959e99e2e52328d68d24d6ab0566c3b029aa2b08087a
SHA512

9b9337acafc3e9ce7833915a27b64c469d0f5a1fc2e32998197ed265c65e6a3396b05c37ff1116c163a61a53dc0cc20782ee3577c776e1e80bf8567c21751596
SSDEEP

12288:Ntw70/zSknQPmbFlXTPhvHA7azeJHah0u0y4GLe9L5mFIu8hkdWBo1/:mqbFR9A7aCHal0pGT+kdQo1/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48126d918d22db353108959e99e2e52328d68d24d6ab0566c3b029aa2b08087aN

Files

48126d918d22db353108959e99e2e52328d68d24d6ab0566c3b029aa2b08087aN
.exe windows:4 windows x86 arch:x86

1945ba15175ee209d5fbea3bf9a15143

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetFileSize
GetProcAddress
LoadLibraryA
FreeLibrary
Sleep
SetFilePointer
WritePrivateProfileStringA
OpenProcess
GetPrivateProfileStringA
WinExec
ExpandEnvironmentStringsA
GetModuleHandleA
GetTempPathA
TerminateProcess
RemoveDirectoryA
GetACP
MultiByteToWideChar
GetFileAttributesA
SetCurrentDirectoryA
GetWindowsDirectoryA
WaitForSingleObject
UnhandledExceptionFilter
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
FindClose
CreateDirectoryA
GetCurrentProcess
SetPriorityClass
ResumeThread
WriteFile
ReadFile
GetSystemTime
GlobalFree
LocalAlloc
LocalFree
GlobalAlloc
GlobalLock
GlobalUnlock
CreateFileA
GetModuleFileNameA
lstrcpyA
lstrlenA
CloseHandle
GetVersionExA
GetEnvironmentVariableA
CreateProcessA
SetThreadPriority
GetCurrentThread
FindFirstFileA
SetFileAttributesA
FindNextFileA
GetStringTypeW
LCMapStringW
LCMapStringA
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
GetStringTypeA
FreeEnvironmentStringsA
GetOEMCP
DeleteFileA
FreeEnvironmentStringsW
GetCPInfo
GetVersion
RtlUnwind
HeapAlloc
VirtualAlloc
HeapReAlloc

user32

AdjustWindowRect
GetDlgItem
SetWindowTextA
DestroyIcon
DrawIcon
GetCursorPos
LoadIconA
SetWindowLongA
FindWindowA
SetCursorPos
ClipCursor
GetClipCursor
AttachThreadInput
EnumWindows
GetMessageTime
FindWindowExA
SetWindowPos
GetMenuItemID
GetMenu
SetWindowRgn
LoadImageA
ReleaseCapture
SetCapture
PostQuitMessage
DispatchMessageA
TranslateMessage
EndDialog
DialogBoxParamA
RegisterClassExA
LoadMenuA
SendMessageA
ShowWindow
SetWindowsHookExA
UnhookWindowsHookEx
GetAsyncKeyState
CallNextHookEx
GetWindow
IsWindow
IsIconic
IsWindowVisible
GetWindowTextA
GetWindowLongA
SetForegroundWindow
PeekMessageA
BeginPaint
GetClientRect
EndPaint
MessageBoxA
ChangeDisplaySettingsA
GetDesktopWindow
GetDC
GetSystemMetrics
ReleaseDC
EnumDisplaySettingsA
wsprintfA
GetSubMenu
TrackPopupMenu
PostMessageA
DestroyMenu
GetClassNameA
CreateWindowExA
LoadCursorA
SetCursor
CharNextA
SetTimer
DefWindowProcA
MoveWindow
GetForegroundWindow
KillTimer
InvalidateRect
FillRect
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindowThreadProcessId
GetMessageA
RegisterClassA
DestroyWindow
GetParent

gdi32

GetDeviceCaps
DeleteDC
GetDIBits
CreateICA
GetObjectA
GetStockObject
CreatePalette
SetDIBitsToDevice
RealizePalette
SelectPalette
GetDCOrgEx
GetClipBox
CreateSolidBrush
SetMapMode
GetMapMode
TextOutA
SetTextColor
SetBkColor
DeleteObject
ExtCreateRegion

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegDeleteKeyA

ole32

OleInitialize
OleUninitialize
CoGetClassObject

oleaut32

SysAllocStringLen

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1945ba15175ee209d5fbea3bf9a15143

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

Sections

.text Size: 60KB - Virtual size: 59KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 8KB - Virtual size: 1.1MB

.rsrc Size: 12KB - Virtual size: 10KB

.text
Size: 60KB - Virtual size: 59KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 8KB - Virtual size: 1.1MB

.rsrc
Size: 12KB - Virtual size: 10KB