4733f9ad7ab5bfb10813af3615620e6d9a5c1fb94dc2dde38a1651ce3e1c2694N

Sharing

Copy URL

Twitter E-mail

General

Target

4733f9ad7ab5bfb10813af3615620e6d9a5c1fb94dc2dde38a1651ce3e1c2694N
Size

841KB
MD5

19d10b3f08fd2b3780c0bc58d561f5f0
SHA1

3393a9ccf8585d01ad06a30d25309485d971d970
SHA256

4733f9ad7ab5bfb10813af3615620e6d9a5c1fb94dc2dde38a1651ce3e1c2694
SHA512

38dd5f475d65cb4f5f8f076fd1faf3bb2eb54b72a29ba57921986f65ebd09f55e59ebb567e53ce4b148289379a3c60913a4da68c4b7cb92f885ae43bc5b9e3b5
SSDEEP

24576:jHy72G9rZaSZt9+B4NOih6gWILPAXzh0oL+b4V/qL0di:jHyPoSZP+PYPAXVtLK4VSP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4733f9ad7ab5bfb10813af3615620e6d9a5c1fb94dc2dde38a1651ce3e1c2694N

Files

4733f9ad7ab5bfb10813af3615620e6d9a5c1fb94dc2dde38a1651ce3e1c2694N
.exe windows:5 windows x86 arch:x86

b4db4123328d33fd6f8ed3e7509e9363

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
SetEnvironmentVariableA
LockResource
GetVersionExA
GetACP
WriteConsoleA
FreeEnvironmentStringsA
FileTimeToSystemTime
GetCurrentThread
VirtualFree
GetConsoleMode
HeapDestroy
InterlockedDecrement
GetSystemInfo
DuplicateHandle
LeaveCriticalSection
FreeResource
WriteFile
UnhandledExceptionFilter
SizeofResource
GetLastError
GetStartupInfoA
GetThreadLocale
GlobalReAlloc
FileTimeToLocalFileTime
InterlockedExchange
GetWindowsDirectoryA
GetVersion
GetFileSize
CloseHandle
LCMapStringA
LocalFree
LocalReAlloc
UnlockFile
GetLocaleInfoA
QueryPerformanceCounter
SetLastError
FlushFileBuffers
EnterCriticalSection
InterlockedIncrement
TlsFree
RaiseException
TerminateProcess
SetFileTime
GlobalUnlock
GetCommandLineA
FindClose
LoadResource
GlobalLock
VirtualQuery
MulDiv
lstrlenA
CreateFileA
SetFilePointer
GlobalDeleteAtom
GlobalHandle
GetProcessHeap
GetModuleFileNameA
SetStdHandle
GetSystemDirectoryA
EnumResourceLanguagesW
Sleep
TlsAlloc
GlobalFlags
GetConsoleOutputCP
SetEndOfFile
SystemTimeToFileTime
HeapReAlloc
HeapFree
GetFileType
lstrcmpA
RtlUnwind
SetHandleCount
GetTimeZoneInformation
GetStdHandle
ReadFile
SetErrorMode
HeapAlloc
GetSystemTimeAsFileTime
FreeLibrary
HeapCreate
GetStringTypeA
ConvertDefaultLocale
GetConsoleCP
LockFile
VirtualAlloc
SetUnhandledExceptionFilter
GetCurrentThreadId
IsDebuggerPresent
GetCurrentProcessId
LocalAlloc
DeleteCriticalSection
TlsGetValue
GetEnvironmentStrings
LocalFileTimeToFileTime
HeapSize
CompareStringA
GetCommandLineW
TlsSetValue
lstrcpyA
GetSystemTime
GetModuleHandleA
GetOEMCP
LoadLibraryA
GlobalFree
GetProcAddress
lstrcatA
GlobalAlloc
GetTickCount
GetFileTime
ExitProcess

user32

UnhookWindowsHookEx
CreatePopupMenu
SetCapture
EqualRect
GetWindowRgn
InvalidateRgn
GetActiveWindow
SetWindowPos
BeginPaint
TrackPopupMenu
SendDlgItemMessageA
GetMessageTime
DestroyWindow
SetWindowRgn
ReleaseCapture
KillTimer
ScreenToClient
OffsetRect
GetWindowPlacement
SetScrollPos
SetTimer
UnregisterClassA
ShowOwnedPopups
GetTopWindow
GetCapture
SetScrollInfo
GetWindowThreadProcessId
GetMessagePos
IsWindowEnabled
DestroyMenu
GetMenuItemID
ScrollWindow
GetNextDlgGroupItem
InflateRect
GetMenuCheckMarkDimensions
ShowWindow
ReleaseDC
GetMenuItemCount
SetForegroundWindow
SetRectEmpty
EndDialog
GetScrollPos
SetRect
LockWindowUpdate
MapDialogRect
GetDesktopWindow
GetKeyState
EnableMenuItem
GetDlgCtrlID
GetSystemMetrics
GetClientRect
WindowFromPoint
GetLastActivePopup
PostQuitMessage
CallNextHookEx
SetFocus
PtInRect
SetCursor
GetWindowRect
GetNextDlgTabItem
GetDC
GetWindow
SetActiveWindow
ValidateRect
SystemParametersInfoA
ClientToScreen
SetMenuItemBitmaps
SetMenu
GetMenuState
IsWindowVisible
TranslateMessage
GetFocus
CopyRect
IntersectRect
UnpackDDElParam
GetMenu
CheckMenuItem
GetCursorPos
GetWindowDC
BeginDeferWindowPos
GetSubMenu
GetForegroundWindow
UpdateWindow
FillRect
IsWindow
AdjustWindowRectEx
GetScrollRange
MapWindowPoints
IsZoomed
IsRectEmpty
GetDlgItem
SetWindowContextHelpId
DrawIcon
MessageBeep
MoveWindow
GetScrollInfo
EndPaint
RedrawWindow
GetSystemMenu
BringWindowToTop
GetSysColorBrush
GetSysColor
GetDCEx
GetParent
IsIconic
SetParent
InvalidateRect
DeferWindowPos
ShowScrollBar
EndDeferWindowPos
DestroyIcon
ReuseDDElParam
IsChild
SetScrollRange
DeleteMenu

gdi32

GetDeviceCaps
SelectClipRgn
CombineRgn
BitBlt
GetPixel
PatBlt
SetViewportExtEx
CreateCompatibleBitmap
ScaleViewportExtEx
IntersectClipRect
GetClipBox
PtVisible
RestoreDC
SetTextColor
CreateSolidBrush
SetBkMode
SetWindowExtEx
CreateRectRgnIndirect
CreatePatternBrush
DPtoLP
ExtSelectClipRgn
GetTextColor
CreateEllipticRgn
DeleteDC
RectVisible
CreateBitmap
SetRectRgn
GetStockObject
Ellipse
ScaleWindowExtEx
Escape
CreateCompatibleDC
SelectObject
GetRgnBox
OffsetRgn
GetMapMode
DeleteObject
OffsetViewportOrgEx
GetBkColor
SetBkColor
StretchDIBits
SaveDC
CreateRectRgn
ExcludeClipRect
SetViewportOrgEx
SetMapMode
GetWindowExtEx

advapi32

RegCloseKey
SetFileSecurityW

shell32

DragFinish

ole32

CreateStreamOnHGlobal
StgCreateDocfileOnILockBytes
OleInitialize
CreateILockBytesOnHGlobal
CoFreeUnusedLibraries
OleFlushClipboard
OleUninitialize
CLSIDFromProgID
StgOpenStorageOnILockBytes
OleIsCurrentClipboard
CLSIDFromString
CoCreateInstance
CoGetClassObject
CoRegisterMessageFilter
CoRevokeClassObject

oleaut32

VariantInit
SysAllocString
OleCreateFontIndirect
VariantTimeToSystemTime
SafeArrayDestroy
SysFreeString
SystemTimeToVariantTime
SysAllocStringLen
VariantCopy
SysStringLen
VariantClear
OleLoadPicture
VariantChangeType

comctl32

ImageList_LoadImageW

shlwapi

PathRemoveExtensionW
PathFindFileNameW
PathFindExtensionW
PathFileExistsW
PathStripToRootW
PathIsUNCW

wldap32

ord201

Sections

.text
Size: 474KB - Virtual size: 473KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 343KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b4db4123328d33fd6f8ed3e7509e9363

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

wldap32

Sections

.text Size: 474KB - Virtual size: 473KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 343KB - Virtual size: 364KB

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 474KB - Virtual size: 473KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 343KB - Virtual size: 364KB

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 3KB - Virtual size: 3KB