35f26796a1c85bb258a753e595c8c46388f1d1ab99da16ba328726143c5dfbc3N

Sharing

Copy URL

Twitter E-mail

General

Target

35f26796a1c85bb258a753e595c8c46388f1d1ab99da16ba328726143c5dfbc3N
Size

803KB
MD5

191c8572b9ea2a164669c1aac7ac8f20
SHA1

5ba240cb6b70e5366c6b217a62871b951f96c631
SHA256

35f26796a1c85bb258a753e595c8c46388f1d1ab99da16ba328726143c5dfbc3
SHA512

0e7afc32729768074eaa086c86f6f9e1525f26b456c80d92252d776c2390b364cbee1d316bd211304062b239dc0a142c798dbdb11b08ec07074a80b2286ee6a2
SSDEEP

24576:1Y62km64M5KWbI6YM2nMulOL+HSlYceKd:s3M5KWLY2snHS+ceS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35f26796a1c85bb258a753e595c8c46388f1d1ab99da16ba328726143c5dfbc3N

Files

35f26796a1c85bb258a753e595c8c46388f1d1ab99da16ba328726143c5dfbc3N
.exe windows:4 windows x86 arch:x86

47d45818a3c4f3f3e3a2e858ff0a2f6a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetFileTitleA

wininet

HttpCheckDavCompliance
FtpRemoveDirectoryA
InternetSetDialState
InternetErrorDlg
InternetLockRequestFile

kernel32

FlushFileBuffers
HeapCreate
InterlockedIncrement
SetCriticalSectionSpinCount
CreateSemaphoreA
SetConsoleScreenBufferSize
GetCPInfo
GetStringTypeExW
OutputDebugStringA
GetLongPathNameA
SetWaitableTimer
GetCommandLineW
GetTimeFormatA
SetVolumeLabelW
GetConsoleCursorInfo
GetNumberFormatW
InitializeCriticalSection
GetLocaleInfoA
IsBadWritePtr
RtlUnwind
InterlockedExchange
GetLocaleInfoW
TlsSetValue
CreateMutexW
WaitForSingleObjectEx
FindNextFileW
GetDiskFreeSpaceW
DeleteCriticalSection
SetEnvironmentVariableA
GetModuleFileNameA
GetDiskFreeSpaceExW
LCMapStringW
GetCurrentProcess
SetConsoleCtrlHandler
SetHandleCount
QueryPerformanceCounter
GetVersionExA
IsBadReadPtr
HeapValidate
IsValidLocale
DebugBreak
GetStartupInfoW
GetCurrentThread
GetLocalTime
GetCurrentThreadId
GetCommandLineA
FlushInstructionCache
GetFileType
EnumCalendarInfoA
GetStringTypeW
DeleteAtom
WriteFile
VirtualQuery
GetProcessHeap
CompareStringW
UnhandledExceptionFilter
VirtualProtect
GetDateFormatA
TlsGetValue
SetFilePointer
GetModuleFileNameW
HeapFree
GetSystemInfo
TerminateProcess
WriteConsoleOutputA
EnterCriticalSection
CreateSemaphoreW
GetStdHandle
VirtualAlloc
IsValidCodePage
GetLastError
SetLastError
GetTimeZoneInformation
LoadLibraryA
GetCurrentDirectoryW
HeapDestroy
TlsAlloc
WideCharToMultiByte
GetStringTypeA
FreeEnvironmentStringsA
CreateMutexA
SetConsoleCursorInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
HeapReAlloc
GlobalFree
FindClose
CommConfigDialogW
VirtualFree
LCMapStringA
ExitProcess
GetACP
GetPrivateProfileStructW
SetVolumeLabelA
GetUserDefaultLCID
InterlockedDecrement
MultiByteToWideChar
GetProcessAffinityMask
ReadConsoleOutputA
GetModuleHandleA
ReleaseMutex
LeaveCriticalSection
SetStdHandle
GetPrivateProfileSectionNamesA
GetEnvironmentStringsW
GetStartupInfoA
CompareStringA
FreeEnvironmentStringsW
GetTickCount
CreateEventA
GetCompressedFileSizeW
GlobalAddAtomW
TlsFree
DeleteFileW
CreateWaitableTimerW
GetProcAddress
UnmapViewOfFile
RtlMoveMemory
HeapAlloc
GetEnvironmentStrings
EnumCalendarInfoW
CloseHandle
SetThreadIdealProcessor
ReadFile
GetOEMCP
EnumResourceLanguagesA
OpenMutexA
WaitForMultipleObjectsEx
EnumSystemLocalesA
AllocConsole

user32

SetForegroundWindow
GetMenuInfo
GetNextDlgTabItem
DialogBoxParamW
DrawMenuBar
DestroyWindow
GetDlgItem
CharNextA
GetDlgItemInt
GetClipboardViewer
EnumThreadWindows
CallNextHookEx
TileChildWindows
MessageBoxIndirectW
WaitMessage
ChangeDisplaySettingsExW
PeekMessageA
DrawTextExW
RegisterClassA
CloseWindowStation
DdeConnectList
PeekMessageW
DdeAccessData
SendIMEMessageExW
DestroyMenu
SendIMEMessageExA
OemToCharW
ReleaseCapture
IsCharUpperW
DdeQueryStringA
SendMessageTimeoutW
ChangeMenuW
SetScrollInfo
TabbedTextOutA
SetThreadDesktop
EnumPropsW
EnumDisplayDevicesA
DefMDIChildProcA
EnableWindow
MapVirtualKeyExA
GetUpdateRgn
MessageBoxW
DrawTextA
WINNLSGetEnableStatus
DefWindowProcA
DrawEdge
IsDialogMessageW
GetClassNameA
InsertMenuItemW
GetParent
EditWndProc
WinHelpW
CascadeChildWindows
OpenClipboard
SwitchDesktop
GetOpenClipboardWindow
ShowCursor
GetNextDlgGroupItem
InsertMenuA
WinHelpA
CallMsgFilterA
SendInput
LoadCursorFromFileW
RemovePropA
GetIconInfo
GetUpdateRect
SetClipboardData
GetListBoxInfo
EnumWindowStationsW
MessageBoxExW
LoadImageW
SetFocus
GetPropA
GetWindowWord
SetProcessDefaultLayout
GetDCEx
GetMenuItemInfoA
ShowWindow
RegisterClassExA
EnumWindows
BroadcastSystemMessageA
ChildWindowFromPoint
CharToOemBuffA
MessageBeep
GetMenuStringA
SetLastErrorEx
wvsprintfW
RegisterDeviceNotificationA
DdePostAdvise
EnableScrollBar
CreateWindowExA
GetMessagePos
SetWindowContextHelpId
DrawTextExA
WINNLSEnableIME
SetCaretBlinkTime

comctl32

CreateStatusWindow
ImageList_Copy
ImageList_SetFilter
ImageList_Remove
ImageList_SetIconSize
ImageList_GetDragImage
ImageList_Read
InitCommonControlsEx
DrawStatusTextA
CreateMappedBitmap
CreateStatusWindowW
ImageList_DragLeave
ImageList_DrawIndirect
ImageList_ReplaceIcon
ImageList_GetImageInfo
ImageList_DrawEx

Sections

.text
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 455KB - Virtual size: 455KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

47d45818a3c4f3f3e3a2e858ff0a2f6a

Headers

File Characteristics

Imports

comdlg32

wininet

kernel32

user32

comctl32

Sections

.text Size: 122KB - Virtual size: 122KB

.rdata Size: 455KB - Virtual size: 455KB

.data Size: 127KB - Virtual size: 126KB

.rsrc Size: 97KB - Virtual size: 97KB

.text
Size: 122KB - Virtual size: 122KB

.rdata
Size: 455KB - Virtual size: 455KB

.data
Size: 127KB - Virtual size: 126KB

.rsrc
Size: 97KB - Virtual size: 97KB