bf903b3dbc8fe1269c0cfff0080a6f809aed204a838766d63c5cfe2c3e057452N

Sharing

Copy URL Twitter E-mail

General

Target

bf903b3dbc8fe1269c0cfff0080a6f809aed204a838766d63c5cfe2c3e057452N
Size

1.4MB
MD5

dd36ec8aa8d72ea2c49eab71a8eee5b0
SHA1

acb0eec86a3d6ee5f75a987368c0784fa7177fea
SHA256

bf903b3dbc8fe1269c0cfff0080a6f809aed204a838766d63c5cfe2c3e057452
SHA512

e4433008a753cb7188bf82bc8b2d010375281ba2485020c4ccd90af2ffc059a67552d577a7d9971195e7eeaeae8f043c914eccaa058149f16f8bf106c3cbf2b0
SSDEEP

12288:ZRKEby/xnpktQ+LewXmQrIFnvaR8cKR1nCHEqosaJFJ3k98YcD:N+/5pNLwexaR8cKR5CkJJFJ3ShcD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf903b3dbc8fe1269c0cfff0080a6f809aed204a838766d63c5cfe2c3e057452N

Files

bf903b3dbc8fe1269c0cfff0080a6f809aed204a838766d63c5cfe2c3e057452N
.exe windows:4 windows x86 arch:x86

b5e13de18cc863407d3ca9f9f4a91ac0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17
ord410
ord413

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

kernel32

GetProcAddress
GlobalUnlock
GlobalFree
GlobalLock
GlobalAlloc
FindNextFileW
GetModuleFileNameW
LoadLibraryW
FreeLibrary
lstrcatW
lstrcpyW
lstrlenW
GetPrivateProfileStringW
WideCharToMultiByte
GetLastError
GetCurrentThreadId
ReleaseMutex
CreateMutexW
OpenMutexW
GetCurrentProcess
GetVersionExW
GetCurrentProcessId
GetUserDefaultLCID
GetSystemDirectoryW
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
SetStdHandle
LoadLibraryA
GetConsoleMode
GetConsoleCP
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
InitializeCriticalSection
Sleep
MultiByteToWideChar
FindFirstFileW
FindClose
DeleteFileW
GetFileSize
SetFilePointer
ReadFile
WriteFile
CreateFileW
CloseHandle
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
HeapFree
HeapReAlloc
HeapAlloc
RtlUnwind
RaiseException
GetVersionExA
GetProcessHeap
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapSize
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
LCMapStringA
LCMapStringW
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
CreateFileA

user32

GetClassNameW
GetSystemMetrics
FindWindowW
SetWindowsHookExW
SendMessageW
LoadIconW
GetWindowRect
CallNextHookEx
GetWindowTextW
UnhookWindowsHookEx
DialogBoxParamW
GetWindowLongW
SetWindowLongW
EndDialog
GetClientRect
SetWindowPos
SendDlgItemMessageW
LoadStringW
MessageBoxW

advapi32

RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegCloseKey

Sections

.text
Size: 112KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1.2MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b5e13de18cc863407d3ca9f9f4a91ac0

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

version

kernel32

user32

advapi32

Sections

.text Size: 112KB - Virtual size: 110KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 8KB - Virtual size: 12KB

.rsrc Size: 44KB - Virtual size: 42KB

.reloc Size: 1.2MB - Virtual size: 1.8MB

.text
Size: 112KB - Virtual size: 110KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 8KB - Virtual size: 12KB

.rsrc
Size: 44KB - Virtual size: 42KB

.reloc
Size: 1.2MB - Virtual size: 1.8MB