3cdb3d9f4ea6e815270433385d7f8a1a4432aa18f11411cf7719fa58671f26ed[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

3cdb3d9f4ea6e815270433385d7f8a1a4432aa18f11411cf7719fa58671f26ed.exe
Size

1.4MB
MD5

0ec67c60c5ea33486206792b75199716
SHA1

3b400e90f84f78495dbcb9c67d85a81e292f47be
SHA256

3cdb3d9f4ea6e815270433385d7f8a1a4432aa18f11411cf7719fa58671f26ed
SHA512

0b64d12ab10f0938c63539b637f1b47ce41ceb0effbb64accf8f275c376ade590937d5237da22a8155f0776160d398bc295b608a0737bbaa17354000a3d0a633
SSDEEP

24576:GKuNMwuq8s40aIlBhx8+WUNal3B1egfeQm+K+ajAaatZpqg/0VBVfFeBATuudsSe:GKuNMwuq8s40aIlBhx8+WUNal3B1egfR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cdb3d9f4ea6e815270433385d7f8a1a4432aa18f11411cf7719fa58671f26ed.exe

Files

3cdb3d9f4ea6e815270433385d7f8a1a4432aa18f11411cf7719fa58671f26ed.exe
.exe windows:4 windows x86 arch:x86

38f13b7ce6e438c64340ba2603a9b575

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
TerminateProcess
RaiseException
GetFileType
GetStartupInfoA
GetCommandLineA
HeapSize
GetTimeZoneInformation
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
SetStdHandle
SetHandleCount
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
RtlUnwind
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetModuleHandleA
GetLastError
CreateMutexA
GetFileAttributesA
FileTimeToDosDateTime
FileTimeToLocalFileTime
CloseHandle
GetFileInformationByHandle
CreateFileA
GetTempPathA
GlobalUnlock
GlobalLock
lstrcpyA
MulDiv
_lclose
_llseek
OpenFile
GlobalFree
GlobalReAlloc
GlobalAlloc
_lread
InterlockedIncrement
InterlockedDecrement
CopyFileA
ExpandEnvironmentStringsA
GetTempFileNameA
GetProcAddress
LoadLibraryA
FreeLibrary
SearchPathA
GetProfileIntA
FindClose
FindFirstFileA
Sleep
lstrcmpiA
GetVersionExA
GetSystemInfo
GlobalMemoryStatus
GetVersion
GetThreadLocale
HeapReAlloc
HeapFree
HeapAlloc
GetTickCount
FileTimeToSystemTime
SetErrorMode
GetFileTime
GetFileSize
GetOEMCP
GetCPInfo
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GlobalFlags
GetProcessVersion
FindResourceExA
GetFullPathNameA
GetVolumeInformationA
DeleteFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
WritePrivateProfileStringA
GetPrivateProfileStringA
FormatMessageA
lstrcpynA
LocalFree
SetLastError
GetModuleFileNameA
lstrcmpA
GetCurrentThread
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
GetACP
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
VirtualProtect
FindResourceA
LoadResource
LockResource
LoadLibraryExA
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
EnumResourceLanguagesA
EnumResourceNamesA

user32

CopyAcceleratorTableA
CharNextA
SetRect
PtInRect
GetClassNameA
GetSysColorBrush
LoadCursorA
CharUpperA
DestroyMenu
LoadStringA
SetWindowContextHelpId
GrayStringA
DrawTextA
TabbedTextOutA
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
SetCursor
PostQuitMessage
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
IsDialogMessageA
GetNextDlgGroupItem
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
AdjustWindowRectEx
ScreenToClient
GetClientRect
CopyRect
IsWindowVisible
GetTopWindow
MessageBoxA
IsChild
WinHelpA
wsprintfA
GetClassInfoA
GetParent
SendMessageA
EnableWindow
UnregisterClassA
LoadBitmapA
SetForegroundWindow
BringWindowToTop
ShowWindow
FindWindowA
LoadIconA
SetWindowLongA
InsertMenuA
GetSystemMenu
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
RegisterClipboardFormatA
UpdateWindow
PostThreadMessageA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
GetWindow
RegisterWindowMessageA
OffsetRect
SystemParametersInfoA
GetWindowRect
PostMessageA
IsRectEmpty
SetRectEmpty
SetWindowTextA
GetDlgItem
MessageBeep
SetActiveWindow
ReleaseCapture
SetFocus
SetCapture
GetDesktopWindow
IsWindowEnabled
GetFocus
GetWindowLongA
GetAsyncKeyState
GetActiveWindow
GetCapture
SetWindowPos
MapDialogRect
DestroyWindow
CreateDialogIndirectParamA
GetSystemMetrics
IsWindow
EndDialog
GetNextDlgTabItem
GetWindowPlacement
IsIconic
MoveWindow

gdi32

EndPage
StartPage
GetClipBox
SetTextColor
SetBkColor
CreateBitmap
DeleteDC
StartDocA
SaveDC
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
EndDoc
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
EnumFontFamiliesExA
GetTextColor
GetBkColor
CreateFontA
StretchDIBits
LPtoDP
CreateFontIndirectA
Rectangle
DPtoLP
GetTextMetricsA
Polyline
GetStockObject
SelectObject
CreatePen
Polygon
DeleteObject
GetMapMode
GetDeviceCaps
GetObjectA

comdlg32

PrintDlgA
GetFileTitleA
CommDlgExtendedError

advapi32

RegEnumKeyA
RegQueryValueExA
RegOpenKeyExA
RegEnumValueA
RegSetValueExA
RegCreateKeyExA
RegCloseKey

shell32

ShellExecuteA
ShellExecuteExA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc

comctl32

DestroyPropertySheetPage
CreatePropertySheetPageA
ord17
PropertySheetA

ole32

CLSIDFromProgID
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
OleRun
CoUninitialize
CoInitialize
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleInitialize
OleUninitialize
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 312KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

38f13b7ce6e438c64340ba2603a9b575

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

comctl32

ole32

version

Sections

.text Size: 312KB - Virtual size: 310KB

.rdata Size: 68KB - Virtual size: 64KB

.data Size: 28KB - Virtual size: 39KB

.rsrc Size: 1.0MB - Virtual size: 1.0MB

.text
Size: 312KB - Virtual size: 310KB

.rdata
Size: 68KB - Virtual size: 64KB

.data
Size: 28KB - Virtual size: 39KB

.rsrc
Size: 1.0MB - Virtual size: 1.0MB