b4bd44b3ecc776d145bc22af6db06d8f1f196e111ad2fc76c148fe4f55cca3e9N

Sharing

Copy URL Twitter E-mail

General

Target

b4bd44b3ecc776d145bc22af6db06d8f1f196e111ad2fc76c148fe4f55cca3e9N
Size

332KB
MD5

037e3771c8efa7dfa1b2f3569a226c40
SHA1

4c5bc89a45a749c6350c289068f3ac0c58300ec9
SHA256

b4bd44b3ecc776d145bc22af6db06d8f1f196e111ad2fc76c148fe4f55cca3e9
SHA512

f33d1c5187ff5d1d1278b07db3e84591b389c3a520732ca1386372dccea3149bd1fe906ce665bac86877eea29370f667e34fdf3a3a9e595d2c472dfd5fe57451
SSDEEP

6144:ELlx3geNVAOTIoYw8MyEOYyymcTLpnGDlRH/2vx:wHX4OTIoYwBIrO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4bd44b3ecc776d145bc22af6db06d8f1f196e111ad2fc76c148fe4f55cca3e9N

Files

b4bd44b3ecc776d145bc22af6db06d8f1f196e111ad2fc76c148fe4f55cca3e9N
.exe windows:4 windows x86 arch:x86

fe14bc6916cd363f2ff7786033f9c35b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapFree
RtlUnwind
RaiseException
HeapSize
HeapReAlloc
TerminateProcess
GetACP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetOEMCP
GetCPInfo
GlobalFlags
lstrcmpA
GetProcessVersion
LoadLibraryA
FreeLibrary
lstrcatA
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
GetProcAddress
GetCurrentThreadId
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
GetModuleFileNameA
GetVersion
lstrcpynA
GetLastError
SetLastError
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalAlloc
GlobalReAlloc
GlobalLock
LeaveCriticalSection
GlobalHandle
GlobalUnlock
GlobalFree
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
InterlockedDecrement
GetSystemDirectoryA
FindResourceA
LoadResource
LockResource
SizeofResource
CreateFileA
WriteFile
HeapAlloc
CloseHandle

user32

CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
PostMessageA
LoadIconA
SetWindowTextA
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
GetClassNameA
PtInRect
ClientToScreen
PostQuitMessage
DestroyMenu
TabbedTextOutA
DrawTextA
GrayStringA
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
DispatchMessageA
GetKeyState
CallNextHookEx
PeekMessageA
SetWindowsHookExA
LoadStringA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
UnhookWindowsHookEx
EnableWindow
SendMessageA
LoadBitmapA

advapi32

RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegCreateKeyExA

shell32

ShellExecuteA

comctl32

ord17

gdi32

RestoreDC
SaveDC
GetStockObject
DeleteDC
GetClipBox
SetTextColor
SelectObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteObject
SetBkColor
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetDeviceCaps
CreateBitmap
GetObjectA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 260KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fe14bc6916cd363f2ff7786033f9c35b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

comctl32

gdi32

winspool.drv

Sections

.text Size: 44KB - Virtual size: 42KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 8KB - Virtual size: 14KB

.rsrc Size: 260KB - Virtual size: 257KB

.text
Size: 44KB - Virtual size: 42KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 8KB - Virtual size: 14KB

.rsrc
Size: 260KB - Virtual size: 257KB