fb8f58a0712769b57ba3d11896ba7489f494084fd726ceba4a1e02862f4f080c

Sharing

Copy URL Twitter E-mail

General

Target

fb8f58a0712769b57ba3d11896ba7489f494084fd726ceba4a1e02862f4f080c
Size

726KB
MD5

13a3d369dde9809353666d5c7d6e850d
SHA1

0240ce0bc40d766d75de438001f83b903c9c6cfe
SHA256

fb8f58a0712769b57ba3d11896ba7489f494084fd726ceba4a1e02862f4f080c
SHA512

69735170d05848f8526383effcdae1ecf94d07b9220b0b460e68b38cfcbf2fdb77957fbdbc0ff94c3695d6efdf3e9f7079f9717c633ef79a8d07626a7bba3833
SSDEEP

12288:k5juWhzKHO0VVzSsN5rRtD1GWaszpXdKbN/j3Ao6UXg7:2jJzKuYVzSsHaQpNAdNXg7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb8f58a0712769b57ba3d11896ba7489f494084fd726ceba4a1e02862f4f080c

Files

fb8f58a0712769b57ba3d11896ba7489f494084fd726ceba4a1e02862f4f080c
.exe windows:4 windows x86 arch:x86

Password: infected

917fd9ab5db4bf4152f6dd368e86a7e0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

dbghelp

ImageNtHeader

kernel32

GetFullPathNameW
SetFileAttributesW
DeleteFileW
MoveFileExW
GlobalLock
GlobalUnlock
GlobalAlloc
GlobalFree
GetCurrentDirectoryW
InterlockedIncrement
QueueUserAPC
ReleaseSemaphore
SleepEx
WaitForSingleObjectEx
CreateSemaphoreW
CancelIo
InterlockedDecrement
CreateFileW
ReadDirectoryChangesW
MulDiv
GetCurrentThreadId
GetModuleHandleW
SetCurrentDirectoryW
FreeLibrary
CopyFileW
GetProcAddress
LoadLibraryW
GlobalSize
ReleaseMutex
Sleep
CreateMutexW
lstrcpynW
CreateDirectoryW
ExpandEnvironmentStringsW
GetVersionExW
LocalFree
FormatMessageW
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
GetLocalTime
GetTimeFormatW
GetDateFormatW
GetACP
LockResource
LoadResource
LoadLibraryA
SizeofResource
FindResourceW
SetLastError
GetCommandLineW
GetTempPathW
GetFileInformationByHandle
FileTimeToLocalFileTime
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
GetOEMCP
IsValidCodePage
GetCommandLineA
GetModuleHandleExW
ExitProcess
LoadLibraryExW
ExitThread
GetSystemTimeAsFileTime
ReadFile
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetDriveTypeW
FindFirstFileExW
IsProcessorFeaturePresent
IsDebuggerPresent
RtlUnwind
EncodePointer
OpenEventW
lstrcmpiW
WaitForSingleObject
ResetEvent
GetLongPathNameW
CreateEventW
lstrcpyW
CloseHandle
WaitForMultipleObjects
SetEvent
GetLastError
VirtualAlloc
SetEnvironmentVariableA
GetModuleFileNameA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
SetEndOfFile
WriteConsoleW
OutputDebugStringW
GetSystemInfo

user32

GetSubMenu
GetMenuItemID
ModifyMenuW
IsIconic
IsZoomed
DestroyAcceleratorTable
TranslateAcceleratorW
GetMenuStringW
DrawMenuBar
GetMenuItemCount
DeleteMenu
SetForegroundWindow
CheckMenuRadioItem
MonitorFromWindow
GetMonitorInfoW
RealChildWindowFromPoint
SetMenu
IsDialogMessageW
LoadMenuW
GetClassNameW
DrawIcon
CharUpperW
CharLowerW
IsCharAlphaW
IsCharAlphaNumericW
IsCharLowerW
GetClassNameA
CreateAcceleratorTableW
FindWindowW
ReleaseCapture
CreateDialogIndirectParamW
SystemParametersInfoW
TrackMouseEvent
GetCapture
DragDetect
SetRectEmpty
AppendMenuW
RegisterWindowMessageW
ShowCursor
CreateCursor
DestroyCursor
ScrollWindow
SetPropW
GetPropW
RemovePropW
SetScrollInfo
InsertMenuItemW
SetMenuItemInfoW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
SetParent
GetCursorPos
SetWindowTextW
RedrawWindow
EnableMenuItem
CheckMenuItem
GetMenuState
EmptyClipboard
SetClipboardData
GetDlgItemTextW
IsWindow
GetDlgItemInt
FrameRect
FillRect
DrawFocusRect
RemoveMenu
SetWindowLongW
InflateRect
GetSysColor
ClientToScreen
SetWindowPos
CallWindowProcW
IsClipboardFormatAvailable
RegisterClipboardFormatW
GetClipboardData
ChangeClipboardChain
SetClipboardViewer
CloseClipboard
OpenClipboard
LoadCursorW
GetParent
GetWindowLongW
SetCaretPos
ShowCaret
HideCaret
DestroyCaret
CreateCaret
SetCursor
MessageBeep
ShowScrollBar
GetScrollRange
SetScrollPos
EndPaint
BeginPaint
ReleaseDC
GetDC
DrawTextExW
DrawTextW
GetMenu
GetSystemMetrics
ToAscii
GetKeyboardState
GetFocus
SetWindowPlacement
GetWindowPlacement
DestroyWindow
DestroyIcon
LoadIconW
GetDesktopWindow
CreateWindowExW
RegisterClassW
DefWindowProcW
PostMessageW
DrawFrameControl
DrawEdge
LoadBitmapW
ScreenToClient
MessageBoxW
GetWindowRect
GetClientRect
InvalidateRect
UpdateWindow
TrackPopupMenu
InsertMenuW
DestroyMenu
CreatePopupMenu
IsWindowVisible
ShowWindow
UnregisterClassW
wsprintfW
SetFocus
MoveWindow
DrawIconEx
LoadImageW
EnableWindow
GetKeyState
SendDlgItemMessageW
SetDlgItemTextW
GetDlgItem
SendMessageW
PtInRect
WindowFromPoint
LockWindowUpdate
GetDCEx
mouse_event
SetDlgItemInt
GetSysColorBrush
MapWindowPoints
AdjustWindowRectEx
EndDialog
DialogBoxIndirectParamW
DialogBoxParamW
FlashWindowEx
RegisterClassExW
PostQuitMessage
DispatchMessageW
TranslateMessage
MessageBoxA
GetWindowTextW
SetCapture
CreateDialogParamW
GetActiveWindow
CreateMenu

Sections

.text
Size: 474KB - Virtual size: 473KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 205KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/26
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/30
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

917fd9ab5db4bf4152f6dd368e86a7e0

Headers

File Characteristics

Imports

dbghelp

kernel32

user32

Sections

.text Size: 474KB - Virtual size: 473KB

.data Size: 5KB - Virtual size: 4KB

.rdata Size: 205KB - Virtual size: 204KB

.bss Size: - Virtual size: 4KB

.pdata Size: 4KB - Virtual size: 4KB

.xdata Size: 4KB - Virtual size: 4KB

.idata Size: 7KB - Virtual size: 6KB

.CRT Size: 4KB - Virtual size: 4KB

.tls Size: 512B - Virtual size: 44B

.rsrc Size: 11KB - Virtual size: 10KB

/26 Size: 4KB - Virtual size: 4KB

/30 Size: 4KB - Virtual size: 4KB

.text
Size: 474KB - Virtual size: 473KB

.data
Size: 5KB - Virtual size: 4KB

.rdata
Size: 205KB - Virtual size: 204KB

.bss
Size: - Virtual size: 4KB

.pdata
Size: 4KB - Virtual size: 4KB

.xdata
Size: 4KB - Virtual size: 4KB

.idata
Size: 7KB - Virtual size: 6KB

.CRT
Size: 4KB - Virtual size: 4KB

.tls
Size: 512B - Virtual size: 44B

.rsrc
Size: 11KB - Virtual size: 10KB

/26
Size: 4KB - Virtual size: 4KB

/30
Size: 4KB - Virtual size: 4KB