a3bceed427167d19d50d56ba8eb2ba39a52f24d43e39550d3221008f494cd558

Sharing

Copy URL

Twitter E-mail

General

Target

a3bceed427167d19d50d56ba8eb2ba39a52f24d43e39550d3221008f494cd558
Size

2.3MB
MD5

76544e942a50665cf1e6b9bfc43c81a2
SHA1

01f2dbd24cfdc0153d5b11e13fd3529c0ce9513a
SHA256

a3bceed427167d19d50d56ba8eb2ba39a52f24d43e39550d3221008f494cd558
SHA512

e3c42df060d8d37f9ec8a4fe6bbc427a6f30df39705d297ec75521394aae78cb0bd670dca35d4786040612a962d3468979188c07e3ee78d909a52d43c52a2316
SSDEEP

49152:/1P1A151y31WY1U1c1rWA9Wz5vPg05yTD5r0UfjfNAJiM+aPe:/1P1A151y3151U1c1rWaW1vPg05yT1rd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
a3bceed427167d19d50d56ba8eb2ba39a52f24d43e39550d3221008f494cd558

Files

a3bceed427167d19d50d56ba8eb2ba39a52f24d43e39550d3221008f494cd558
.exe windows:5 windows x86 arch:x86

a01f5e495ddcd9927caa62b20257aca6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_XcptFilter
_exit
__p__fmode
_controlfp
__set_app_type
_except_handler3
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit

mpr

WNetCloseEnum

comctl32

ImageList_Read

version

VerQueryValueW
GetFileVersionInfoW

kernel32

WaitForSingleObject
WaitForMultipleObjectsEx
VirtualQueryEx
VirtualQuery
GetModuleHandleA
VirtualFree
VirtualAllocEx
VirtualAlloc
UnhandledExceptionFilter
TlsSetValue
TlsGetValue
SystemTimeToFileTime
VirtualFreeEx
SuspendThread
Sleep
SizeofResource
LoadLibraryA
LeaveCriticalSection
ExitProcess
GetTickCount
EnterCriticalSection
InitializeCriticalSection
GetCommandLineA
GetCPInfo
IsValidCodePage
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateEventW
CreateFileA
CreateFileW
CreateMutexW
CreateThread
DeleteCriticalSection
DeleteFileW
EnumCalendarInfoW
EnumResourceNamesA
EnumResourceTypesA
ExitThread
FileTimeToDosDateTime
FileTimeToLocalFileTime
FindClose
FindFirstFileW
FindNextFileW
FindResourceA
FindResourceW
FormatMessageW
FreeLibrary
FreeResource
GetACP
GetCommandLineW
GetComputerNameW
GetDateFormatW
GetDiskFreeSpaceW
GetDriveTypeW
GetEnvironmentVariableW
GetExitCodeThread
GetFileAttributesA
GetFileAttributesW
GetFileSize
GetFileType
GetFullPathNameW
GetLastError
GetLocaleInfoW
GetLocalTime
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetStartupInfoA
GetStdHandle
GetSystemInfo
GetTempPathW
GetThreadLocale
GetThreadPriority
GetVersion
GetVersionExW
GetWindowsDirectoryA
GlobalAddAtomW
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomW
GlobalFree
GlobalLock
GlobalMemoryStatus
GlobalSize
InterlockedCompareExchange
InterlockedExchangeAdd
IsValidLocale
LoadLibraryExW
LoadLibraryW
LoadResource
LocalAlloc
LocalFileTimeToFileTime
LocalFree
LockResource
lstrcatA
lstrcmpiA
lstrcmpW
lstrcpynW
lstrcpyW
lstrlenA
lstrlenW
MulDiv
MultiByteToWideChar
OpenProcess
RaiseException
ReadFile
ReadProcessMemory
RemoveDirectoryW
ResetEvent
ResumeThread
SetEndOfFile
SetErrorMode
SetEvent
SetFileAttributesW
SetFilePointer
SetLastError
SetThreadLocale
SetThreadPriority

user32

CheckMenuItem
ClientToScreen
CloseClipboard
CopyIcon
CopyImage
CopyRect
CreateAcceleratorTableW
CreateCaret
CreateIconIndirect
CreateMenu
CreatePopupMenu
CreateWindowExW
DefFrameProcW
DefMDIChildProcW
DefWindowProcW
DeleteMenu
DestroyCaret
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
DispatchMessageA
CharUpperBuffW
DrawEdge
DrawFocusRect
DrawFrameControl
DrawIconEx
DrawMenuBar
DrawTextExW
DrawTextW
EmptyClipboard
EnableMenuItem
EnableScrollBar
EnableWindow
EnumChildWindows
EnumClipboardFormats
EnumThreadWindows
EnumWindows
FillRect
FindWindowExW
FindWindowW
FrameRect
GetActiveWindow
GetAsyncKeyState
GetCapture
GetClassInfoW
GetClassLongW
GetClassNameW
GetClientRect
GetClipboardData
GetClipboardFormatNameW
GetCursorPos
GetDCEx
GetDesktopWindow
GetDlgItemTextA
GetDlgItemTextW
GetFocus
GetForegroundWindow
GetIconInfo
GetKeyboardLayoutList
GetKeyboardLayoutNameW
GetKeyboardState
GetKeyNameTextW
GetKeyState
GetLastActivePopup
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoW
GetMenuItemRect
GetMenuState
GetMenuStringW
GetMessageExtraInfo
GetMessagePos
GetMessageW
GetParent
GetPropW
GetScrollInfo
GetScrollPos
GetScrollRange
GetSubMenu
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetWindowDC
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
HideCaret
InflateRect
InsertMenuItemW
InsertMenuW
IntersectRect
InvalidateRect
IsChild
IsClipboardFormatAvailable
IsDialogMessageA
IsDialogMessageW
IsIconic
IsRectEmpty
IsWindowEnabled
IsWindowUnicode
IsWindowVisible
IsZoomed
KillTimer
LoadBitmapW
LoadCursorW
LoadIconW
LoadImageA
LoadKeyboardLayoutW
LoadStringW
MapVirtualKeyW
MapWindowPoints
MessageBeep
MessageBoxA
MessageBoxIndirectW
MessageBoxW
MoveWindow
MsgWaitForMultipleObjectsEx
OffsetRect
OpenClipboard
PeekMessageA
PeekMessageW
PostMessageW
PostQuitMessage
PtInRect
RedrawWindow
RegisterClassW
RegisterClipboardFormatW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropW
ScreenToClient
ScrollWindow
SendDlgItemMessageW
SendMessageA
SendMessageW
SetActiveWindow
SetCapture
SetCaretPos
SetClassLongW
SetClipboardData
SetCursorPos
SetFocus
SetForegroundWindow
SetMenuItemInfoW
SetParent
SetPropW
SetRect
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowsHookExW
SetWindowTextW
ShowCaret
ShowOwnedPopups
ShowScrollBar
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnregisterClassW
UpdateWindow
ValidateRect
WaitMessage
WindowFromDC
CallWindowProcW
CharLowerBuffW
CharLowerW
CharNextW
DispatchMessageW

winspool.drv

OpenPrinterW
EnumPrintersW
DocumentPropertiesW

comdlg32

PrintDlgW
GetSaveFileNameW

shell32

ShellExecuteW
ExtractIconW
SHGetFileInfoW

Sections

.text
Size: 424KB - Virtual size: 423KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 14.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 14B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 896KB - Virtual size: 896KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.flj519
Size: 999KB - Virtual size: 999KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a01f5e495ddcd9927caa62b20257aca6

Headers

File Characteristics

Imports

msvcrt

mpr

comctl32

version

kernel32

user32

winspool.drv

comdlg32

shell32

Sections

.text Size: 424KB - Virtual size: 423KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 14.0MB

.tls Size: 4KB - Virtual size: 14B

.rsrc Size: 896KB - Virtual size: 896KB

.flj519 Size: 999KB - Virtual size: 999KB

.text
Size: 424KB - Virtual size: 423KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 14.0MB

.tls
Size: 4KB - Virtual size: 14B

.rsrc
Size: 896KB - Virtual size: 896KB

.flj519
Size: 999KB - Virtual size: 999KB