39dbbfa53e75c7bf0ebb543b093294f499daa55e3be2bb84d5dc47e174d1471bN

Sharing

Copy URL Twitter E-mail

General

Target

39dbbfa53e75c7bf0ebb543b093294f499daa55e3be2bb84d5dc47e174d1471bN
Size

1.2MB
MD5

f816f291e1fd11848b12198379a267d0
SHA1

7a1e44db640309ef072cd6e612b4fec29be599b9
SHA256

39dbbfa53e75c7bf0ebb543b093294f499daa55e3be2bb84d5dc47e174d1471b
SHA512

46f44ee5625cd7ee6b108ec7104d82732a7eb2aac7a4bcc8c8a2efe67d4086cd5601a351b4c72d765fbe51be1ba4c8be57e05bf581c0e748ea71231492ac9491
SSDEEP

24576:AuznCLKDzIewbqkulSGxKcKyqRTPXIpZKqpomoS:AYJIewbqkKS3bRzIpZZoXS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39dbbfa53e75c7bf0ebb543b093294f499daa55e3be2bb84d5dc47e174d1471bN

Files

39dbbfa53e75c7bf0ebb543b093294f499daa55e3be2bb84d5dc47e174d1471bN
.exe windows:4 windows x86 arch:x86

de3127d843a4d52243475a05165e799e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Only\Must\Not\And.pdb

Imports

kernel32

GetVersionExA
WideCharToMultiByte
ExitProcess
GetSystemTime
lstrcpyW
GetUserDefaultLCID
CopyFileA
FindNextFileA
InterlockedIncrement
GetCurrentDirectoryA
GetPrivateProfileStringA
SetErrorMode
GetCurrentThread
EnumResourceLanguagesA
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
GetTempPathA
SearchPathA
LocalLock
LocalUnlock
GetDiskFreeSpaceA
GetTempFileNameA
GlobalFlags
VirtualProtect
GetProfileIntA
FreeResource
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcmpW
WaitForMultipleObjects
CreateEventA
ReleaseMutex
ReleaseSemaphore
CreateSemaphoreA
WaitForSingleObject
TlsFree
TlsAlloc
TlsGetValue
RaiseException
GetCPInfo
GetFileTime
GetFileAttributesA
SetFileAttributesA
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalFree
GlobalUnlock
GlobalReAlloc
GetThreadLocale
GlobalLock
GetModuleFileNameA
GetShortPathNameA
FindFirstFileA
FindClose
CloseHandle
DuplicateHandle
GetFileSize
UnlockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
MoveFileA
lstrcpynA
GetStringTypeExW
GetStringTypeExA
GetEnvironmentVariableW
CompareStringA
lstrcmpiW
FindResourceExA
FindResourceA
LoadResource
DeleteCriticalSection
InitializeCriticalSection
GetLastError
lstrcpyA
lstrcmpA
lstrlenA
UnhandledExceptionFilter
LocalReAlloc
lstrcpynW
LocalFree
lstrcatW
LocalAlloc
ExpandEnvironmentStringsW
CopyFileW
FreeLibrary
SetLastError
WriteConsoleW
GetFileType
GetStdHandle
MultiByteToWideChar
GetModuleHandleW
GetCommandLineW
FindNextFileW
QueryPerformanceCounter
GetModuleHandleA
GetFileAttributesW
lstrlenW
DisableThreadLibraryCalls
GetLocaleInfoA
GetACP
InterlockedExchange
InterlockedDecrement
CreateThread
HeapSize
HeapFree
HeapAlloc
lstrcmpiA
GetWindowsDirectoryA
GlobalAlloc
CreateFileA

user32

SetWindowContextHelpId
CountClipboardFormats
WindowFromDC
CopyAcceleratorTableA
RegisterClipboardFormatA
InsertMenuA
ShowOwnedPopups
ValidateRect
RemoveMenu
IsClipboardFormatAvailable
SetWindowRgn
DrawIcon
FindWindowA
SetCursorPos
DestroyCursor
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
CharNextA
CheckMenuItem
GetMenuCheckMarkDimensions
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SetWindowTextA
GetSysColorBrush
GetMenuStringA
GetMenuItemInfoA
BeginPaint
TabbedTextOutA
MapDialogRect
GetNextDlgTabItem
EndDialog
DrawFocusRect
MapVirtualKeyA
GetKeyNameTextA
GrayStringA
DrawTextExA
DrawTextA
GetTabbedTextExtentA
LockWindowUpdate
GetSystemMenu
AppendMenuA
DeleteMenu
IsRectEmpty
GetDC
ReleaseDC
SetTimer
RedrawWindow
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
GetCursorPos
GetWindowThreadProcessId
WindowFromPoint
SetCapture
ClientToScreen
LoadCursorA
LoadMenuA
GetSystemMetrics
GetActiveWindow
ReleaseCapture
InvalidateRect
InsertMenuItemA
CreatePopupMenu
BringWindowToTop
SetMenu
ShowWindow
GetDesktopWindow
IsWindowEnabled
TranslateAcceleratorA
LoadAcceleratorsA
WinHelpA
CreateWindowExA
SetWindowsHookExA
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetFocus
IsWindow
SetFocus
IsChild
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
EndDeferWindowPos
GetDlgItem
MapWindowPoints
TrackPopupMenuEx
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
EnableWindow
ShowScrollBar
IsWindowVisible
GetClientRect
GetSubMenu
GetMenuItemID
GetMenuItemCount
GetSysColor
AdjustWindowRectEx
GetParent
ScreenToClient
GetScrollInfo
SetScrollInfo
RegisterClassA
SetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetWindowLongA
SetWindowLongA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowRect
CopyRect
PtInRect
GetWindow
LoadStringW
ClipCursor
DrawEdge
EnumChildWindows
wsprintfA
UnregisterClassA
CharUpperW
DestroyMenu
CharLowerA
DialogBoxParamA
CharUpperA
MsgWaitForMultipleObjects
LoadStringA
SetDlgItemTextA
LoadImageA
DestroyIcon
SetWindowPos
CreateDialogParamA
CharPrevA
EnableMenuItem

advapi32

RegSetValueExA
RegUnLoadKeyW
RegOpenKeyExW
RegQueryValueExW
RegLoadKeyW
RegSaveKeyW
RegQueryValueExA
RegCloseKey
RegEnumValueA
RegDeleteKeyA
GetFileSecurityW

ole32

CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

msvcrt

strchr
ldexp
memmove
fprintf
malloc
free
vfwprintf
vswprintf
strtod
fgetwc
fflush
wcscpy
exit
_chdir
atol
fwprintf

shlwapi

PathFindExtensionA
PathRemoveExtensionA
PathFindFileNameA
UrlUnescapeA
PathIsUNCA
PathStripToRootA

Sections

.text
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

de3127d843a4d52243475a05165e799e

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

ole32

version

msvcrt

shlwapi

Sections

.text Size: 176KB - Virtual size: 175KB

.idata Size: 12KB - Virtual size: 9KB

.rdata Size: 32KB - Virtual size: 30KB

.data Size: 92KB - Virtual size: 2.6MB

.rsrc Size: 8KB - Virtual size: 6KB

.text
Size: 176KB - Virtual size: 175KB

.idata
Size: 12KB - Virtual size: 9KB

.rdata
Size: 32KB - Virtual size: 30KB

.data
Size: 92KB - Virtual size: 2.6MB

.rsrc
Size: 8KB - Virtual size: 6KB