b73ff0059f7676c1da145948123e43fc395ec93bca856491c1266c2b169d1a71N

Sharing

Copy URL

Twitter E-mail

General

Target

b73ff0059f7676c1da145948123e43fc395ec93bca856491c1266c2b169d1a71N
Size

135KB
MD5

6f0fa006c0dd486d0f61a251554e15a0
SHA1

f4cd68a6f66bca94b51d545bec93e7c5be4f240a
SHA256

b73ff0059f7676c1da145948123e43fc395ec93bca856491c1266c2b169d1a71
SHA512

4ffde7a9b063e2535b12484a63d269f26430c6e1d5bc7d00b369de69a5adb3dca480b353e7add5695d526c9ccc4ab2fdb111cb4167d6993e7614d6fbd71d6975
SSDEEP

3072:8gr6VutmzgApobYr1fpCjeAaacVoh3EYvp3zoodIy:8q6sEgAmYhfpCCAjNBXd7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b73ff0059f7676c1da145948123e43fc395ec93bca856491c1266c2b169d1a71N

Files

b73ff0059f7676c1da145948123e43fc395ec93bca856491c1266c2b169d1a71N
.exe windows:4 windows x86 arch:x86

e043befb9ef1f4fe48f2d3182b440d00

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msi

ord30
ord8
ord57

gdi32

GetMetaFileBitsEx
OffsetWindowOrgEx
SetBoundsRect
GetEnhMetaFileW
CreateEnhMetaFileA
CreateBitmapIndirect
CreateHalftonePalette
GetBkColor
StrokePath
GetBoundsRect
ExtFloodFill
GetTextExtentPoint32W
GetTextMetricsW
PathToRegion
SetWindowExtEx
SetGraphicsMode
GetCurrentObject
GetTextExtentPointA

oleaut32

VarDateFromR4
VarI2FromDisp
DispGetParam
SysReAllocString
VarUI1FromR8
VarUI1FromI1

version

GetFileVersionInfoSizeW

kernel32

GetModuleHandleA
GetStartupInfoA
GlobalFindAtomW
FlushFileBuffers
GetModuleHandleW

wininet

SetUrlCacheEntryInfoA
FindNextUrlCacheEntryExA
InternetSetCookieW
InternetCloseHandle
CreateUrlCacheEntryW
FindFirstUrlCacheEntryA
InternetAutodialHangup
HttpSendRequestExW
FtpRenameFileA
RetrieveUrlCacheEntryStreamW
InternetSetFilePointer
GopherCreateLocatorA

ole32

StgCreatePropSetStg

winspool.drv

DeletePrinterConnectionW
AddPortA
EnumPrinterDriversW
AddPrintProcessorW
EnumPrinterDataA
DeletePrintProcessorA
FindNextPrinterChangeNotification
FindFirstPrinterChangeNotification
DeleteMonitorA
SetPortA
DocumentPropertiesA
EnumFormsA

setupapi

SetupCloseLog

pdh

PdhValidatePathA
PdhGetLogFileSize

user32

CallMsgFilterW
DdeAccessData
GetWindowContextHelpId
DeleteMenu
InsertMenuA
CharUpperBuffW
SendMessageTimeoutA
GetClassInfoExW
DdeQueryConvInfo
CreateDialogParamA
GetMessagePos
SetProcessWindowStation
MessageBoxW
CallNextHookEx
IsWindow
DrawFrameControl
GetNextDlgTabItem
GetClipboardFormatNameW
GetWindowTextLengthW
GetKeyboardType
DrawAnimatedRects
GetMessageA

msvcrt

_adjust_fdiv
_except_handler3
_exit
_controlfp
__set_app_type
__p__fmode
__p__commode
memcmp
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter

advapi32

SetNamedSecurityInfoW
EnumServicesStatusW
RegOpenKeyW
RegEnumValueA
RegUnLoadKeyW
RegEnumKeyExA
CreateProcessAsUserW
AdjustTokenPrivileges

rpcrt4

RpcMgmtInqStats
I_RpcBindingIsClientLocal
NdrNonEncapsulatedUnionUnmarshall
NDRSContextUnmarshallEx
RpcAsyncInitializeHandle
NdrConformantStructMarshall
RpcSmSetThreadHandle
I_RpcFreeBuffer
NdrEncapsulatedUnionMemorySize
I_RpcBindingCopy
MIDL_wchar_strcpy
float_from_ndr
NdrFreeBuffer
NdrUserMarshalSimpleTypeConvert
RpcServerUseProtseqExW
NdrSimpleStructFree
I_RpcGetCurrentCallHandle
I_RpcBindingInqTransportType
I_RpcAsyncSetHandle
RpcBindingInqAuthClientW
UuidFromStringA
NdrSimpleStructMarshall

imm32

ImmGetIMEFileNameW

rasapi32

RasDialA

oleacc

WindowFromAccessibleObject

Sections

.text
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e043befb9ef1f4fe48f2d3182b440d00

Headers

File Characteristics

Imports

msi

gdi32

oleaut32

version

kernel32

wininet

ole32

winspool.drv

setupapi

pdh

user32

msvcrt

advapi32

rpcrt4

imm32

rasapi32

oleacc

Sections

.text Size: 105KB - Virtual size: 104KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 25KB - Virtual size: 3.5MB

.text
Size: 105KB - Virtual size: 104KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 25KB - Virtual size: 3.5MB