31f2dd7a001ec8b5c65f5a2bbf1f58548d14c3a4468dd9e5a8d8059396341983N

Sharing

Copy URL

Twitter E-mail

General

Target

31f2dd7a001ec8b5c65f5a2bbf1f58548d14c3a4468dd9e5a8d8059396341983N
Size

144KB
MD5

8aa6b268143e74ca234151aafab998c0
SHA1

3d6106c6caa20cd4b1b59e24222b1969efe5e0b0
SHA256

31f2dd7a001ec8b5c65f5a2bbf1f58548d14c3a4468dd9e5a8d8059396341983
SHA512

ce39dcf3923b49fcba327edd5f082f592c66e14bcc8644ffda10dafd25fc2e5d0f64afc968a671d1e9f178476b1706a55f5b355101cd175ffe1006256ad8ff47
SSDEEP

3072:M5sYrWSqGzk2l4+Nass5yYb0cRJlO75O/70:2si/mcw5xbHRq75Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31f2dd7a001ec8b5c65f5a2bbf1f58548d14c3a4468dd9e5a8d8059396341983N

Files

31f2dd7a001ec8b5c65f5a2bbf1f58548d14c3a4468dd9e5a8d8059396341983N
.exe windows:4 windows x86 arch:x86

9205fa0557e02a88d21f46053473c57d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

URLDownloadToFileA
URLDownloadToCacheFileA

shlwapi

StrStrIA
PathFindFileNameA
PathRemoveExtensionA
PathAddBackslashA

wininet

InternetCloseHandle
InternetOpenUrlA
InternetOpenW
InternetReadFile

kernel32

GetSystemInfo
VirtualProtect
HeapAlloc
GetProcessHeap
HeapFree
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExW
RaiseException
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
WriteFile
SetFilePointer
ReadFile
GetFileSize
CreateFileA
GlobalAddAtomA
lstrcatA
GetWindowsDirectoryA
lstrcpyA
DeleteFileA
GetPrivateProfileStringA
LockResource
LoadResource
SizeofResource
FindResourceW
GetLastError
FindResourceExW
WideCharToMultiByte
lstrlenW
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
lstrcpyW
GetModuleHandleW
GetModuleFileNameW
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
LoadLibraryExW
lstrcmpiW
lstrcpynW
LCMapStringW
LCMapStringA
GetCPInfo
GetOEMCP
LoadLibraryA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
GetStringTypeA
QueryPerformanceCounter
TlsGetValue
TlsSetValue
TlsFree
GetStringTypeW
GetCurrentThreadId
SetLastError
TlsAlloc
GetFileType
GetVersionExA
HeapDestroy
HeapReAlloc
HeapSize
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapCreate
VirtualFree
VirtualAlloc
VirtualQuery
GetProcAddress
TerminateProcess
GetCurrentProcess
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount

user32

wsprintfA
CharNextW

advapi32

RegSetValueExW
RegOpenKeyA
RegEnumKeyA
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegOpenKeyExW
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW

shell32

ShellExecuteA

ole32

CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateGuid
CoCreateInstance
CoInitialize

oleaut32

VarUI4FromStr
SysAllocStringLen
SysFreeString

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9205fa0557e02a88d21f46053473c57d

Headers

File Characteristics

Imports

urlmon

shlwapi

wininet

kernel32

user32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 36KB - Virtual size: 33KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 88KB - Virtual size: 108KB

.text
Size: 36KB - Virtual size: 33KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 88KB - Virtual size: 108KB