815371df71df61fc4182351e4b79b53eed3d3da7cd22b7a66939f0df5b9191d3N

Sharing

Copy URL

Twitter E-mail

General

Target

815371df71df61fc4182351e4b79b53eed3d3da7cd22b7a66939f0df5b9191d3N
Size

125KB
MD5

fe0de4c0308fc2404c9ccbcf8ec90050
SHA1

57d2315e3f3a5f69c82f9b39bc661d2670c89878
SHA256

815371df71df61fc4182351e4b79b53eed3d3da7cd22b7a66939f0df5b9191d3
SHA512

8fa792e00f8a6eba42758bc20f60102af9a3b6d9a93b1971a9766d6a933b52073f116433dd066f33920ac5d3bce01f9e241f3a9d09d7b928d83f668f246f21f8
SSDEEP

1536:eZuEDl5o4czaYHoecnq+HCTYOSItQlgdjgNdqleEAd6VutOUCQwvk8/7:eZxDl5o4ceY6fHEYOSzC1guyhOUCpzD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
815371df71df61fc4182351e4b79b53eed3d3da7cd22b7a66939f0df5b9191d3N

Files

815371df71df61fc4182351e4b79b53eed3d3da7cd22b7a66939f0df5b9191d3N
.exe windows:5 windows x86 arch:x86

c98d864f18a199402132e0a3741f36a6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
lstrlenW
FlushInstructionCache
RaiseException
GetStringTypeExA
GetShortPathNameA
SetThreadLocale
FindFirstFileA
GetLastError
SetLastError
lstrcmpiA
GetThreadLocale
GetProcAddress
EnterCriticalSection
GetTempFileNameA
FindClose
LoadLibraryA
LockResource
CreateEventW
GetModuleFileNameA
FindNextFileA
GetModuleHandleA
LoadLibraryExA
VirtualProtect
OpenEventW
DeleteCriticalSection
GetCurrentThreadId
GetVersionExA
CloseHandle
GetTempPathA
GetSystemTime
DeleteFileA
GetLocaleInfoA
GetEnvironmentVariableA
GetStringTypeA
LCMapStringW
LCMapStringA
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetStdHandle
ExitProcess
GetSystemDirectoryA
ReadFile
IsDBCSLeadByte
GetExitCodeProcess
GetFileAttributesA
LeaveCriticalSection
SizeofResource
GetVolumeInformationA
WideCharToMultiByte
FindResourceExA
InitializeCriticalSection
WriteFile
GetWindowsDirectoryA
GetTickCount
SetEvent
WaitForSingleObject
GetUserDefaultLCID
GetCurrentProcess
InterlockedDecrement
InterlockedIncrement
LoadResource
FreeLibrary
lstrlenA
FreeResource
lstrcmpA
FindResourceA
GetFileSize
CreateFileA
Sleep
HeapReAlloc
HeapCreate
GetStartupInfoA
GetCommandLineA
VirtualQuery
GetSystemInfo
GetModuleHandleW
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
GetComputerNameA
GetStringTypeW
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange

user32

DialogBoxParamA
SetDlgItemTextA
EnableWindow
UpdateWindow
MapWindowPoints
LoadImageA
SetWindowTextA
GetWindow
CallWindowProcA
GetWindowTextA
ClientToScreen
SetCursor
GetMessageA
SetTimer
ScreenToClient
GetWindowRect
LoadStringA
GetParent
CharNextA
GetClientRect
GetWindowTextLengthA
SendMessageA
UnregisterClassA
SetWindowLongA
MessageBoxA
InvalidateRect
CharLowerA
GetWindowLongA
GetDlgItem
EndDialog
DefWindowProcA
RedrawWindow
GetSysColor
SetWindowPos
LoadStringW
CheckDlgButton
IsDlgButtonChecked
GetActiveWindow
PostMessageA
wvsprintfA
SystemParametersInfoA
GetSystemMetrics

gdi32

SetTextColor
CreateFontIndirectA
DeleteObject
GetObjectA
GetStockObject
CreateSolidBrush

advapi32

RegCreateKeyExA
CloseServiceHandle
CreateWellKnownSid
RegCloseKey
GetUserNameA
OpenSCManagerA
RegDeleteValueA
LsaClose
RegQueryInfoKeyA
RegOpenKeyExA
OpenServiceA
ChangeServiceConfigA
RegEnumKeyExA
RegDeleteKeyA
LsaAddAccountRights
RegQueryValueExA
RegSetValueExA
GetTokenInformation
LsaOpenPolicy
OpenProcessToken

shell32

ShellExecuteExA
ShellExecuteA

ole32

StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoInitialize
CoCreateInstance

oleaut32

VarUI4FromStr

comctl32

InitCommonControlsEx

wininet

InternetCanonicalizeUrlA
InternetCrackUrlA

Sections

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c98d864f18a199402132e0a3741f36a6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

wininet

Sections

.rdata Size: 17KB - Virtual size: 16KB

.data Size: 99KB - Virtual size: 102KB

.rsrc Size: 8KB - Virtual size: 7KB

.rdata
Size: 17KB - Virtual size: 16KB

.data
Size: 99KB - Virtual size: 102KB

.rsrc
Size: 8KB - Virtual size: 7KB