3ccacfb8accb6c350caeea67e9f425488837a4b424ff76bd195d62452dd6e4e4

Sharing

Copy URL

Twitter E-mail

General

Target

3ccacfb8accb6c350caeea67e9f425488837a4b424ff76bd195d62452dd6e4e4
Size

1017KB
MD5

938653d01f87de709153a10e455ebb8a
SHA1

547e50eb0f492b0bcf37343f40f635c167cd5b7a
SHA256

3ccacfb8accb6c350caeea67e9f425488837a4b424ff76bd195d62452dd6e4e4
SHA512

5e6d7506b64ccab882b16bc0afa00d08ff9c5256f60801d4e978509ef8afe3ef43e1134d45e5fc5a0af0ce7e985e60e3b63639157be3adcd4abfbd8150ef5859
SSDEEP

24576:eKI7etHLvLqhHb8LAKdqWDMlZ17RRS685GykIMpc5:k6tXqhHbiAKdqWDMlZlUr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ccacfb8accb6c350caeea67e9f425488837a4b424ff76bd195d62452dd6e4e4

Files

3ccacfb8accb6c350caeea67e9f425488837a4b424ff76bd195d62452dd6e4e4
.exe windows:4 windows x86 arch:x86

ed794b16380bcc81cb03fc61693c9d94

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoW
CreateThread
TerminateThread
FindFirstFileW
FindClose
FormatMessageW
GetEnvironmentVariableW
GetComputerNameW
GetLocaleInfoW
Sleep
LocalFree
CreateMutexW
MulDiv
lstrcpynW
OutputDebugStringA
GetLocalTime
GetPrivateProfileStringW
WritePrivateProfileStringW
CreateDirectoryW
GetUserDefaultLangID
GetFileAttributesW
InitializeCriticalSection
DeleteCriticalSection
GlobalHandle
FreeResource
DeleteFileW
lstrcmpW
lstrcatW
CopyFileW
GetTempPathW
GetTimeZoneInformation
GetModuleFileNameW
GetModuleHandleW
GetCurrentThreadId
GetVersionExW
GlobalReAlloc
FindResourceW
LoadResource
LockResource
FreeLibrary
LoadLibraryW
GetProcAddress
lstrlenA
InterlockedDecrement
InterlockedIncrement
GetLastError
WriteFile
CreateFileW
GetFileSize
ReadFile
CloseHandle
OutputDebugStringW
lstrcmpiW
GlobalSize
MultiByteToWideChar
WideCharToMultiByte
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
EnterCriticalSection
LeaveCriticalSection
lstrlenW
GetCurrentProcess
FlushInstructionCache
lstrcpyW
InterlockedExchange

user32

GetWindowRect
IsWindowVisible
FindWindowExW
PtInRect
GetCursorPos
ScreenToClient
GetWindowTextW
GetDlgCtrlID
GetScrollPos
SetWindowTextW
GetKeyState
SetFocus
LoadCursorW
SendMessageW
RegisterClassExW
CreateWindowExW
LoadImageW
GetWindowLongW
GetSysColor
DefWindowProcW
CallWindowProcW
SetMenuItemInfoW
EndDialog
SystemParametersInfoW
CharNextW
EnumClipboardFormats
GetClipboardFormatNameW
GetClipboardData
MessageBoxW
RegisterClipboardFormatW
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SetWindowLongW
EnumChildWindows
CharLowerW
SetParent
CopyRect
DestroyWindow
PostQuitMessage
KillTimer
GetActiveWindow
SetTimer
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
CreateDialogParamW
GetSystemMetrics
MapWindowPoints
GetSysColorBrush
ReleaseDC
GetDC
GetClientRect
GetDlgItem
LoadBitmapW
SetWindowPos
ShowWindow
IsDialogMessageW
GetParent
IsChild
GetFocus
TrackPopupMenuEx
DestroyMenu
GetWindow
CreateDialogIndirectParamW
GetClassInfoExW
RegisterWindowMessageW
GetWindowTextLengthW
EndPaint
FillRect
BeginPaint
IsWindow
RedrawWindow
GetClassNameW
GetDesktopWindow
CreateAcceleratorTableW
wsprintfW
LoadStringW
ReleaseCapture
GetIconInfo
SetCapture
DrawAnimatedRects
DestroyIcon
CopyImage
GetKeyboardState
MessageBoxA
DrawEdge
GetCapture
SetCursor
GetMessagePos
GetSubMenu
SetRectEmpty
GetWindowPlacement
RegisterHotKey
UnregisterHotKey
UnhookWindowsHookEx
SetDlgItemTextW
GetDlgItemTextW
EnableWindow
IsCharLowerW
SendMessageA
EnableMenuItem
CheckMenuItem
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
GetCaretPos
SetRect
SetForegroundWindow
SetActiveWindow
GetMenuItemRect
GetMenuItemCount
GetMenuState
GetMenuItemID
CreatePopupMenu
CharUpperW
keybd_event
MapVirtualKeyW
DialogBoxParamW
GetDlgItemInt
UpdateWindow
LoadIconW
LoadAcceleratorsW
EnumWindows
SendMessageTimeoutW
AppendMenuW
DrawFocusRect
InflateRect
IntersectRect
IsRectEmpty
ClientToScreen
MoveWindow
PostMessageW
SetWindowsHookExW
CallNextHookEx
GetWindowDC
GetMenuItemInfoW
OffsetRect
SetPropW
InvalidateRgn
DrawTextW
InvalidateRect
CreateIconIndirect

gdi32

LPtoDP
RestoreDC
LineTo
MoveToEx
CreatePen
SaveDC
DPtoLP
CreatePatternBrush
SetBitmapBits
GetBitmapBits
SetPixel
GetPixel
SetWindowOrgEx
GetBkColor
ExcludeClipRect
SetPixelV
GetTextExtentPoint32W
OffsetWindowOrgEx
GetClipBox
CreateSolidBrush
GetDeviceCaps
CreateDCW
CreateEnhMetaFileW
CloseEnhMetaFile
SelectPalette
RealizePalette
CreateCompatibleBitmap
GetCurrentObject
CreateBitmap
GetStockObject
SetBkMode
SetTextColor
GetDIBits
GetObjectW
CreateDIBSection
CreateCompatibleDC
SelectObject
SetBkColor
ExtTextOutW
CreateFontIndirectW
DeleteObject
BitBlt
DeleteDC
PatBlt

comdlg32

GetOpenFileNameW

advapi32

CryptAcquireContextW
CryptDestroyHash
CryptReleaseContext
CryptHashData
CryptGetHashParam
RegDeleteValueW
RegSetValueExW
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyW
GetUserNameW
CryptCreateHash
OpenProcessToken
GetTokenInformation
RegOpenKeyExW

shell32

SHGetFileInfoW
SHAppBarMessage
Shell_NotifyIconW
SHGetDesktopFolder
ord25
ord155
SHGetMalloc
ExtractIconExW
SHGetSpecialFolderPathW
ShellExecuteW
ShellExecuteExW

ole32

RegisterDragDrop
CreateStreamOnHGlobal
CoInitialize
CoCreateInstance
OleInitialize
OleUninitialize
CLSIDFromProgID
CLSIDFromString
StringFromCLSID
OleLockRunning
CoTaskMemAlloc
DoDragDrop
CoTaskMemFree

oleaut32

VariantTimeToSystemTime
OleCreateFontIndirect
SysAllocStringLen
SafeArrayDestroy
VariantInit
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocString
SysStringLen
LoadRegTypeLi
DispCallFunc
VariantClear
SysFreeString
SystemTimeToVariantTime

comctl32

ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_GetImageCount
ImageList_Create
ImageList_Add
ImageList_Draw
ord17
ImageList_LoadImageW
InitCommonControlsEx
ImageList_DrawEx

Sections

.text
Size: 233KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 242KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 681KB - Virtual size: 680KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ed794b16380bcc81cb03fc61693c9d94

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

Sections

.text Size: 233KB - Virtual size: 232KB

.rdata Size: 30KB - Virtual size: 29KB

.data Size: 72KB - Virtual size: 242KB

.rsrc Size: 681KB - Virtual size: 680KB

.text
Size: 233KB - Virtual size: 232KB

.rdata
Size: 30KB - Virtual size: 29KB

.data
Size: 72KB - Virtual size: 242KB

.rsrc
Size: 681KB - Virtual size: 680KB