e16dcf7fa238eec4d12be8f742b6cc6f14f090351db7bb963a3e313991e32f1c

Sharing

Copy URL

Twitter E-mail

General

Target

e16dcf7fa238eec4d12be8f742b6cc6f14f090351db7bb963a3e313991e32f1c
Size

431KB
MD5

537c29506f84fcfd64015acdeb60f453
SHA1

19a76518c74c651bbec4db7f7f80620172927738
SHA256

e16dcf7fa238eec4d12be8f742b6cc6f14f090351db7bb963a3e313991e32f1c
SHA512

b42b31b8523a837f4a7a2f67f7dbe630085d403af2060e0b01f83c2eb8baed74d1eefc5f8eb40ec88f38460e25520f927ecb985abdc7662e6f12d597895b1b90
SSDEEP

6144:Tdj7gD05mQ/kQNac4hhCuN+gm0qj8TCCtqxJZ+GLfHZ1yJ0OBfIQ:F/5T4NLm0w8T/kJZ+Kjo3Bf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
e16dcf7fa238eec4d12be8f742b6cc6f14f090351db7bb963a3e313991e32f1c

Files

e16dcf7fa238eec4d12be8f742b6cc6f14f090351db7bb963a3e313991e32f1c
.exe windows:6 windows x86 arch:x86

dcf2f9fcff3367bb9fab051bdc1c6f91

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrCmpNA

kernel32

WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
GetStringTypeW
HeapAlloc
OutputDebugStringW
RtlUnwind
LoadLibraryExW
FreeLibrary
SetConsoleCtrlHandler
IsProcessorFeaturePresent
IsDebuggerPresent
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
HeapFree
FatalAppExitA
LeaveCriticalSection
EnterCriticalSection
VirtualProtect
CloseHandle
HeapReAlloc
GetFileType
CreateSemaphoreW
GetModuleHandleW
GetTickCount
TlsFree
GetCommandLineA
GetLastError
SetLastError
GetCurrentThread
GetCurrentThreadId
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
CreateFileW
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
WriteFile
GetModuleFileNameW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue

shell32

SHEmptyRecycleBinW
SHInvokePrinterCommandA
DragQueryFileW
SHGetFileInfoA

winmm

joyGetPos
waveInGetNumDevs
mmioRenameW
midiInGetErrorTextW
midiStreamOut

winspool.drv

EnumPrintProcessorDatatypesA
AddPrintProvidorW
DeletePrintProvidorA
DevicePropertySheets

rpcrt4

NdrRpcSsDefaultAllocate
NdrByteCountPointerMarshall
NdrServerCall
NdrInterfacePointerFree
NdrConvert2

oleaut32

VarI4FromCy
VarI4FromUI4
VariantChangeTypeEx
OleLoadPictureEx
VarBoolFromDec

rtm

RtmCloseEnumerationHandle
MgmDeInitialize
MgmTakeInterfaceOwnership
MgmGetFirstMfe

comdlg32

GetSaveFileNameW
GetOpenFileNameA
PrintDlgW

user32

MessageBoxW
GetDC
GrayStringA

Sections

.text
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 217KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dcf2f9fcff3367bb9fab051bdc1c6f91

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

shell32

winmm

winspool.drv

rpcrt4

oleaut32

rtm

comdlg32

user32

Sections

.text Size: 169KB - Virtual size: 169KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 9KB - Virtual size: 16KB

.rsrc Size: 217KB - Virtual size: 217KB

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 169KB - Virtual size: 169KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 9KB - Virtual size: 16KB

.rsrc
Size: 217KB - Virtual size: 217KB

.reloc
Size: 9KB - Virtual size: 9KB