065275522c26879878e49072a72e5b84652ad417f0964eff108de370368295fa

Sharing

Copy URL

Twitter E-mail

General

Target

065275522c26879878e49072a72e5b84652ad417f0964eff108de370368295fa
Size

228KB
MD5

a6f3406d38a7ca5f2ed875e18ffa89a3
SHA1

7fb8dd9b906ff48901f1a391ef61ad14356e7c3d
SHA256

065275522c26879878e49072a72e5b84652ad417f0964eff108de370368295fa
SHA512

921c86d7310daf2fe78e47260a6a0aa91045c51c0c0ad02567c2ba52a080b3c46360e63215859a826c4b8722e9766746c89c0906dd352b116da67246e6f420b6
SSDEEP

6144:C27rPq/qQOMIR1xGEtTBlTLABV+UdvrEFp7hKl2:C27rPq/qQERrtT3gBjvrEH7v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
065275522c26879878e49072a72e5b84652ad417f0964eff108de370368295fa

Files

065275522c26879878e49072a72e5b84652ad417f0964eff108de370368295fa
.exe windows:4 windows x86 arch:x86

874f58bcea0697ff83fa212d2ad1148d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
GetModuleFileNameA
GetModuleHandleA
GetDiskFreeSpaceA
GetDiskFreeSpaceExA
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExA
GetVersion
CreateSemaphoreA
WaitForSingleObject
ResumeThread
SetThreadPriority
CopyFileA
GetTempPathA
FreeResource
GlobalFree
GlobalHandle
LockResource
LoadResource
FindResourceA
GlobalAlloc
lstrlenW
lstrlenA
GlobalUnlock
GlobalLock
InterlockedIncrement
InterlockedDecrement
lstrcmpA
FlushInstructionCache
GetCurrentProcess
GetFileSize
GetTempFileNameA
CreateDirectoryA
GetLastError
DeleteFileA
WriteFile
SetFileTime
CreateProcessA
SetFilePointer
ReadFile
GetCurrentThreadId
GetTickCount
GetStartupInfoA
EnterCriticalSection
CreateFileA
GetFileInformationByHandle
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
LeaveCriticalSection

gdi32

GetStockObject
GetObjectA
GetDeviceCaps
CreateSolidBrush
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
BitBlt
DeleteObject
CreateDCA
CreateDIBitmap
DeleteDC

shell32

SHGetSpecialFolderLocation
SHBrowseForFolderA
SHGetPathFromIDListA

comctl32

ord17

shlwapi

PathIsDirectoryA
PathAddBackslashA

user32

GetDesktopWindow
BeginPaint
CallWindowProcA
EndPaint
RedrawWindow
IsWindow
FillRect
EnableWindow
ReleaseDC
SendMessageA
GetDC
wsprintfA
GetClassNameA
InvalidateRgn
SetCapture
ReleaseCapture
CreateAcceleratorTableA
GetParent
IsChild
GetSysColor
CreateDialogIndirectParamA
GetWindowTextLengthA
GetWindowTextA
GetWindow
DefWindowProcA
RegisterWindowMessageA
GetClassInfoExA
LoadCursorA
RegisterClassExA
DialogBoxIndirectParamA
LoadIconA
ShowWindow
GetMessageA
ExitWindowsEx
PeekMessageA
IsDialogMessageA
DispatchMessageA
UpdateWindow
EndDialog
KillTimer
InvalidateRect
IsWindowEnabled
SetTimer
SetWindowPos
MessageBoxA
SetFocus
GetFocus
SetWindowTextA
DestroyWindow
PostQuitMessage
GetDlgItem
GetWindowPlacement
SendDlgItemMessageA
GetWindowLongA
SetWindowLongA
MoveWindow
BringWindowToTop
GetClientRect
CreateWindowExA
GetActiveWindow

olepro32

ord253

advapi32

GetUserNameA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA

ole32

OleLockRunning
CoTaskMemAlloc
StringFromCLSID
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

LoadRegTypeLi
SysStringLen
SysAllocStringLen
VariantClear
SysAllocString
SysFreeString

msvcrt

__p__commode
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
?terminate@@YAXXZ
_except_handler3
_onexit
__dllonexit
free
malloc
_purecall
_endthreadex
_ftol
_beginthreadex
abs
_chdir
localtime
time
asctime
_findnext
strncpy
_i64toa
sprintf
memcmp
_findfirst
_findclose
memset
_itoa
strtoul
??3@YAXPAX@Z
atol
strstr
__CxxFrameHandler
strcpy
strlen
memcpy
??2@YAPAXI@Z
strcmp
strcat
exit
__p__fmode
__set_app_type
_controlfp
_stricmp
_ultoa
_adjust_fdiv

Sections

.text
Size: 92KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

874f58bcea0697ff83fa212d2ad1148d

Headers

File Characteristics

Imports

kernel32

gdi32

shell32

comctl32

shlwapi

user32

olepro32

advapi32

ole32

oleaut32

msvcrt

Sections

.text Size: 92KB - Virtual size: 90KB

.rdata Size: 32KB - Virtual size: 28KB

.data Size: 12KB - Virtual size: 24KB

.rsrc Size: 12KB - Virtual size: 11KB

.text
Size: 92KB - Virtual size: 90KB

.rdata
Size: 32KB - Virtual size: 28KB

.data
Size: 12KB - Virtual size: 24KB

.rsrc
Size: 12KB - Virtual size: 11KB