5328bbd959bca72b2353ed5b78ff456b61b158530d93086d3fd9660a6fb88e0eN

Sharing

Copy URL

Twitter E-mail

General

Target

5328bbd959bca72b2353ed5b78ff456b61b158530d93086d3fd9660a6fb88e0eN
Size

2.0MB
MD5

9e382b7b3fe6893e509c3650745c2380
SHA1

de79019e69a9e8eefbc93ae31ffba69c6b1ee33e
SHA256

5328bbd959bca72b2353ed5b78ff456b61b158530d93086d3fd9660a6fb88e0e
SHA512

9373a25365f29f8fe9dd16a99eaa4f2f95d9600233c63ad927d3acaca2c333b0199018593d3e96d64e6e37c2dcc45c5b34568933b6566a063a416f957ff19265
SSDEEP

49152:FuMAGOOP7seWQs2uTQEObr/SoTJhenkl0ht:FNaw4eB7ubloTJhenklG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5328bbd959bca72b2353ed5b78ff456b61b158530d93086d3fd9660a6fb88e0eN

Files

5328bbd959bca72b2353ed5b78ff456b61b158530d93086d3fd9660a6fb88e0eN
.exe windows:5 windows x86 arch:x86

c1e44c6b0d8774295426589904c4db69

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
SystemTimeToTzSpecificLocalTime
GlobalLock
GlobalAlloc
TerminateThread
FileTimeToSystemTime
GetTimeZoneInformation
WritePrivateProfileStringW
GlobalUnlock
GetFileSizeEx
GetFileTime
GetExitCodeProcess
GetVersion
SetEndOfFile
CompareStringW
GetDateFormatA
GetTimeFormatA
InitializeCriticalSection
InterlockedPopEntrySList
VirtualAlloc
VirtualFree
InterlockedPushEntrySList
InterlockedCompareExchange
GetProcessHeap
WriteConsoleW
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
RtlUnwind
GetLocaleInfoW
InterlockedExchange
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
InterlockedDecrement
GetModuleFileNameW
CloseHandle
FlushFileBuffers
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
SetFilePointer
ReadFile
GetFileType
SetHandleCount
HeapReAlloc
HeapSize
GetStdHandle
HeapDestroy
HeapCreate
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
IsProcessorFeaturePresent
Sleep
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
HeapSetInformation
GetCommandLineW
DecodePointer
EncodePointer
HeapAlloc
HeapFree
CreateThread
ExitThread
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedIncrement
LoadLibraryExW
GetCurrentThreadId
DeleteCriticalSection
lstrcmpiW
EnterCriticalSection
GetPrivateProfileIntW
RaiseException
FlushInstructionCache
lstrlenW
LCMapStringW
MultiByteToWideChar
GetModuleHandleW
GetStringTypeW
GetCurrentProcess
FreeLibrary
FindResourceExW
CreateMutexW
ExitProcess
GetProcAddress
SetLastError
GetLastError
LoadLibraryW
LockResource
LocalAlloc
CreateFileW
SizeofResource
WriteFile
WaitForSingleObject
LoadResource
FindResourceW
FreeEnvironmentStringsW
SetEnvironmentVariableA

user32

BeginPaint
GetDC
SetForegroundWindow
UnregisterClassA
GetParent
PostMessageW
EndPaint
GetWindowLongW
GetWindowTextW
GetWindowRect
GetWindowTextLengthW
EnumChildWindows
GetClassNameW
GetClientRect
InvalidateRgn
IsWindow
SetWindowLongW
SetPropW
IsIconic
RegisterWindowMessageW
RemovePropW
SendMessageW
GetPropW
CallWindowProcW
SetWindowTextW
MessageBoxW
CloseClipboard
GetSystemMenu
SetTimer
LoadImageW
KillTimer
SetFocus
InvalidateRect
AppendMenuW
GetClipboardData
EnableMenuItem
EmptyClipboard
MonitorFromWindow
GetDlgItem
EndDialog
SetWindowPos
IsDlgButtonChecked
CheckRadioButton
OpenClipboard
GetSystemMetrics
SetDlgItemTextW
MapWindowPoints
EnableWindow
SetClipboardData
GetDlgItemTextA
SetDlgItemTextA
GetMonitorInfoW
GetWindow
CheckDlgButton
DestroyWindow
CharNextW
GetLastActivePopup
DialogBoxParamW
FindWindowW
ShowWindow
GetActiveWindow
SwitchToThisWindow
DefWindowProcW

gdi32

SetBkMode
PatBlt
GetStockObject
SetTextColor

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegDeleteKeyW
RegQueryInfoKeyW
RegDeleteValueW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegSetValueExW
CreateWellKnownSid
CheckTokenMembership
GetTokenInformation
OpenProcessToken
RegCreateKeyExW

shell32

DragAcceptFiles
DragFinish
ShellExecuteExW
ord680
DragQueryFileW

ole32

PropVariantClear
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
CoTaskMemRealloc
CoUninitialize
CoCreateInstance

oleaut32

VarUI4FromStr

shlwapi

SHStrDupW
PathAppendW
PathRemoveFileSpecW

comctl32

InitCommonControlsEx

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c1e44c6b0d8774295426589904c4db69

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 41KB - Virtual size: 40KB

.data Size: 26KB - Virtual size: 35KB

.rsrc Size: 139KB - Virtual size: 138KB

.reloc Size: 22KB - Virtual size: 21KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 41KB - Virtual size: 40KB

.data
Size: 26KB - Virtual size: 35KB

.rsrc
Size: 139KB - Virtual size: 138KB

.reloc
Size: 22KB - Virtual size: 21KB