b8e5f7b8455559755525a086a2a7715d2f4cdba3a10362ceed42b89c1dfa0034

Sharing

Copy URL Twitter E-mail

General

Target

b8e5f7b8455559755525a086a2a7715d2f4cdba3a10362ceed42b89c1dfa0034
Size

2.9MB
MD5

294ebb604a08e160f4e69051f5e286db
SHA1

96f13c64701820bfc2859721827a9395b279fc15
SHA256

b8e5f7b8455559755525a086a2a7715d2f4cdba3a10362ceed42b89c1dfa0034
SHA512

3b6aa58c23a394539b63fb7439cca7167aa1ed495cc13d922c60ac58cbaae0ee514eb77df53e06157cd6aed8bc92d183373350a77100d697fa3f0de71527a577
SSDEEP

49152:yz1oFh96tWVjD5QgoNuvd74UluBI5yMpzt5JSXeBdH32wDmg27RnWGj:5FkK1xFpzJ7BpmwD527BWG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8e5f7b8455559755525a086a2a7715d2f4cdba3a10362ceed42b89c1dfa0034

Files

b8e5f7b8455559755525a086a2a7715d2f4cdba3a10362ceed42b89c1dfa0034
.exe windows:6 windows x64 arch:x64

a2f5137c029fd6caf3bca48e579aa53d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Projects\WinRAR\build\winrar64\Release\WinRAR.pdb

Imports

kernel32

BackupRead
BackupSeek
GetLongPathNameW
GetShortPathNameW
GetStdHandle
FlushFileBuffers
GetFileType
GetFileTime
GetDiskFreeSpaceExW
GetVersionExW
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
LoadResource
SizeofResource
FindResourceW
LoadLibraryExW
CompareStringA
SetCurrentDirectoryW
GetFullPathNameA
CreateEventW
GetCurrentThread
SetThreadPriority
SetPriorityClass
GetSystemDirectoryW
SetThreadExecutionState
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
CreateSemaphoreW
CreateThread
GetProcessAffinityMask
GetSystemTime
TzSpecificLocalTimeToSystemTime
CompareStringW
WideCharToMultiByte
GetCPInfo
IsDBCSLeadByte
GetModuleHandleExW
GetCompressedFileSizeW
EnumResourceNamesW
EnumResourceLanguagesW
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
GetLocaleInfoW
GetNumberFormatW
GetLogicalDrives
GetCurrentThreadId
SetEnvironmentVariableW
LockResource
SuspendThread
ResumeThread
GetStartupInfoW
Beep
GetSystemTimeAsFileTime
FindNextChangeNotification
SetErrorMode
GetThreadPriority
GetPriorityClass
CompareFileTime
WaitForMultipleObjects
MulDiv
HeapSize
WriteConsoleW
GetStringTypeW
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
FormatMessageW
FindFirstFileExW
SetStdHandle
LCMapStringW
GetFileSizeEx
HeapReAlloc
ExitProcess
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
SetFilePointerEx
FreeLibraryAndExitThread
ExitThread
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
RtlUnwindEx
RaiseException
RtlPcToFileHeader
InitializeSListHead
IsDebuggerPresent
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LocalFree
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
QueryPerformanceFrequency
QueryPerformanceCounter
TryEnterCriticalSection
InitializeCriticalSectionEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
GetFileInformationByHandle
GetLocalTime
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
FindFirstChangeNotificationW
FindCloseChangeNotification
ExpandEnvironmentStringsW
GetDiskFreeSpaceW
FindNextFileW
CreateHardLinkW
SetLastError
DosDateTimeToFileTime
HeapFree
HeapAlloc
HeapDestroy
HeapCreate
LocalFileTimeToFileTime
LoadLibraryW
FreeLibrary
WriteFile
SetFileTime
SetFilePointer
SetFileAttributesW
SetEndOfFile
RemoveDirectoryW
ReadFile
GetFileSize
DeleteFileW
CreateFileW
CreateDirectoryW
MoveFileW
GetTickCount
GetCPInfoExW
GetOEMCP
GetACP
GetCurrentProcessId
GetCurrentProcess
Sleep
RtlUnwind
DeviceIoControl
GetVolumeInformationW
GetDriveTypeW
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalAlloc
CreateMutexW
ReleaseMutex
GetLastError
MultiByteToWideChar
GetProcAddress
GetModuleHandleW
CopyFileW
UnmapViewOfFile
MapViewOfFile
OpenFileMappingW
CreateFileMappingW
WaitForSingleObject
CloseHandle
GetTempPathW
GetModuleFileNameW
GetCommandLineW
GetTimeFormatW
GetDateFormatW
FileTimeToSystemTime
FindFirstFileW
FindClose
FileTimeToLocalFileTime
IsValidCodePage
GetFileAttributesW

user32

keybd_event
FlashWindowEx
CreateIcon
EnumWindows
SetForegroundWindow
IsCharAlphaW
CopyRect
RegisterClassExW
GetSysColor
ValidateRect
DrawIconEx
LoadImageW
SystemParametersInfoW
GetSystemMenu
KillTimer
SetTimer
MessageBoxIndirectW
CharLowerW
CharUpperW
ExitWindowsEx
LoadStringW
SetProcessDefaultLayout
OemToCharBuffW
CharToOemBuffW
OemToCharBuffA
OemToCharA
GetComboBoxInfo
RedrawWindow
EnumDisplayMonitors
RegisterWindowMessageW
GetMessageW
TranslateMessage
DispatchMessageW
GetForegroundWindow
BringWindowToTop
CreateDialogIndirectParamW
TranslateAcceleratorW
SetPropW
GetPropW
RemovePropW
FindWindowW
CreateIconIndirect
GetIconInfo
IsDialogMessageW
PostThreadMessageW
CreateDialogParamW
MessageBoxW
LoadIconW
GetClipboardData
ScrollWindowEx
SetScrollPos
SetScrollRange
SendMessageW
DefWindowProcW
CreateWindowExW
DestroyWindow
SetFocus
GetWindowTextW
GetWindowLongW
SetWindowLongW
SetWindowPos
GetWindowPlacement
PostQuitMessage
RegisterClassW
IsChild
LoadAcceleratorsW
LoadMenuW
SetMenu
FillRect
FlashWindow
CopyImage
GetMenuItemID
GetLastActivePopup
MessageBeep
CharToOemA
EmptyClipboard
FindWindowExW
CloseClipboard
OpenClipboard
PeekMessageW
SetWindowPlacement
IsWindowVisible
DialogBoxParamW
EndDialog
GetDlgItem
SetDlgItemTextW
GetDlgItemTextW
SendDlgItemMessageW
GetWindowRect
MapWindowPoints
GetParent
DestroyIcon
ShowWindow
UpdateWindow
CheckDlgButton
PostMessageW
InvalidateRect
EnumChildWindows
GetMenuState
SetClipboardData
GetScrollInfo
EnableMenuItem
CheckMenuItem
GetFocus
MoveWindow
GetWindowTextLengthW
EndPaint
BeginPaint
AppendMenuW
GetMenuItemCount
DrawMenuBar
wsprintfW
SetWindowLongPtrW
ScreenToClient
ClientToScreen
CallWindowProcW
PtInRect
SetMenuItemInfoW
GetMenuItemInfoW
InsertMenuItemW
TrackPopupMenu
DeleteMenu
InsertMenuW
GetSubMenu
DestroyMenu
CreatePopupMenu
GetMenu
IsWindow
WaitForInputIdle
LoadCursorW
GetWindowThreadProcessId
WindowFromPoint
GetCursorPos
SetCursor
GetKeyState
RegisterClipboardFormatW
GetWindow
GetDesktopWindow
GetWindowLongPtrW
IntersectRect
GetClientRect
SetWindowTextW
ReleaseDC
GetDC
GetSystemMetrics
EnableWindow
IsIconic
IsWindowEnabled
IsDlgButtonChecked
GetDlgItemInt
SetDlgItemInt
CharToOemBuffA
GetClassNameW

gdi32

TextOutA
SetPixel
Rectangle
CreateSolidBrush
CreateDIBSection
GetPixel
DPtoLP
StretchBlt
SetMapMode
GetMapMode
GetDeviceCaps
CreateCompatibleBitmap
CreateBitmap
ExtTextOutW
SetBkColor
DeleteDC
CreateCompatibleDC
BitBlt
GetObjectW
GetTextExtentPoint32W
TextOutW
MoveToEx
SetTextColor
LineTo
CreatePen
GetTextFaceW
GetTextMetricsW
SelectObject
DeleteObject
CreateFontW

comdlg32

ChooseFontW
GetSaveFileNameW
GetOpenFileNameW
CommDlgExtendedError

advapi32

SetFileSecurityW
AccessCheck
DuplicateToken
GetFileSecurityW
MapGenericMask
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
IsTextUnicode
RegSetValueExW
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
OpenProcessToken
GetSecurityDescriptorLength
CryptGenRandom
CryptReleaseContext
CryptAcquireContextW
LookupPrivilegeValueW
AdjustTokenPrivileges

shell32

FindExecutableW
DragFinish
DragQueryFileW
Shell_NotifyIconW
DragAcceptFiles
ShellExecuteW
SHGetSpecialFolderLocation
SHGetMalloc
ord100
SHAddToRecentDocs
SHFileOperationW
SHGetFolderPathW
ShellExecuteExW
SHChangeNotify
SHGetDesktopFolder
SHGetFolderLocation
SHGetPathFromIDListW
SHGetFileInfoW

ole32

RevokeDragDrop
RegisterDragDrop
OleUninitialize
OleInitialize
CoSetProxyBlanket
CLSIDFromString
CreateStreamOnHGlobal
CoTaskMemAlloc
OleSetClipboard
DoDragDrop
CoTaskMemFree
CoCreateInstance
CoInitializeEx
CoUninitialize

oleaut32

VariantClear
SysAllocString
SysFreeString

shlwapi

StrCmpLogicalW
SHAutoComplete

powrprof

SetSuspendState

comctl32

ord381
CreateStatusWindowW
ImageList_Create
ImageList_ReplaceIcon
InitCommonControlsEx
PropertySheetW

uxtheme

IsThemeActive
IsAppThemed

gdiplus

GdiplusShutdown
GdiplusStartup
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipDisposeImage
GdipCloneImage
GdipFree
GdipAlloc
GdipCreateBitmapFromHBITMAP
GdipBitmapGetPixel
GdipBitmapSetPixel

msimg32

GradientFill

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 216KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 715KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 862KB - Virtual size: 864KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 572KB - Virtual size: 576KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a2f5137c029fd6caf3bca48e579aa53d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

powrprof

comctl32

uxtheme

gdiplus

msimg32

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 216KB - Virtual size: 216KB

.data Size: 46KB - Virtual size: 715KB

.pdata Size: 39KB - Virtual size: 39KB

_RDATA Size: 512B - Virtual size: 244B

.rsrc Size: 862KB - Virtual size: 864KB

.reloc Size: 572KB - Virtual size: 576KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 216KB - Virtual size: 216KB

.data
Size: 46KB - Virtual size: 715KB

.pdata
Size: 39KB - Virtual size: 39KB

_RDATA
Size: 512B - Virtual size: 244B

.rsrc
Size: 862KB - Virtual size: 864KB

.reloc
Size: 572KB - Virtual size: 576KB