71a4889b1c09e457c5428d42ce7a67484ca600e2add55390f6a73c33db9d32d5[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

71a4889b1c09e457c5428d42ce7a67484ca600e2add55390f6a73c33db9d32d5.exe
Size

351KB
MD5

262d0e536e780d320b8bba84a8914d33
SHA1

3863c343fca696711be85e4dbd8b58da238d0fbe
SHA256

71a4889b1c09e457c5428d42ce7a67484ca600e2add55390f6a73c33db9d32d5
SHA512

777dda75f198b3c6b6880da1b1d75036a6f5169bdc795fb0d3ffb982de16d01e758828b630db2d3990768f0fd386f2ea7c15a67e80c3c51ad10b4857f9d80a23
SSDEEP

6144:Tn/A0HosZjgJ7H1g/RzGC46oAV3Hc89fTLBf0dJ5TTBZbspom7bXnv:LNIsMOV8+V3c8xN0VTTbM//

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71a4889b1c09e457c5428d42ce7a67484ca600e2add55390f6a73c33db9d32d5.exe

Files

71a4889b1c09e457c5428d42ce7a67484ca600e2add55390f6a73c33db9d32d5.exe
.dll windows:5 windows x86 arch:x86

afe4a7fcf10a0727b9ebde9dc70e7f49

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CopyFileW
LocalAlloc
GetEnvironmentVariableW
WideCharToMultiByte
lstrcmpW
GetSystemTime
CreateMailslotW
GlobalAlloc
CancelIo
GetOverlappedResult
ResetEvent
CreateEventW
GlobalFree
GetMailslotInfo
GetModuleHandleA
GetShortPathNameW
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
DeleteFileW
MultiByteToWideChar
GetSystemDefaultLangID
IsBadWritePtr
GetPrivateProfileSectionW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetFileAttributesW
SetFileAttributesW
FindFirstFileW
FindNextFileW
FindClose
RemoveDirectoryW
GetSystemWindowsDirectoryW
GetComputerNameW
WriteFile
CreateDirectoryW
CreateFileW
GetFileSize
ReadFile
lstrcpynW
FormatMessageW
LocalFree
MulDiv
GetTickCount
GetModuleFileNameW
CreateProcessW
EnterCriticalSection
LeaveCriticalSection
ReleaseSemaphore
WaitForSingleObject
Sleep
GetCommandLineW
lstrlenW
lstrcpyW
CreateMutexW
GetLastError
SetProcessShutdownParameters
lstrcmpiW
GetStartupInfoW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetSystemDirectoryW
lstrcatW
LoadLibraryW
GetProcAddress
GetVersionExW
CreateSemaphoreW
HeapAlloc
FreeLibrary
HeapFree
GetProcessHeap
CloseHandle
VerSetConditionMask
QueryPerformanceCounter
VerifyVersionInfoW
LoadLibraryA

msvcrt

malloc
_adjust_fdiv
free
_endthreadex
wcsncpy
wcslen
wcstok
strtol
sprintf
wcsncmp
_wmakepath
_snwprintf
wcsstr
_wcsnicmp
_wsplitpath
towupper
_vsnwprintf
wcstol
wcsrchr
_beginthreadex
_except_handler3
_wcslwr
wcscmp
_itow
wcscpy
_wtoi
wcschr
_initterm

winspool.drv

FreePrinterNotifyInfo
ClosePrinter
GetPrinterDataW
OpenPrinterW
GetJobW
FindClosePrinterChangeNotification
EnumJobsW
FindNextPrinterChangeNotification
SetPrinterDataW
EnumPortsW
FindFirstPrinterChangeNotification
StartDocPrinterW
WritePrinter
EndDocPrinter
GetPrinterDriverW
GetPrinterW
SetJobW

comctl32

InitCommonControlsEx
ImageList_Destroy
ImageList_Draw
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_AddMasked
ImageList_Create
ord17

wsock32

gethostname
WSAStartup
WSACleanup
inet_addr
gethostbyname

shell32

SHGetFolderPathW

ole32

CoTaskMemFree
CoInitializeEx
CoCreateInstance
CoUninitialize
CoInitialize

mpr

WNetGetUserW

netapi32

NetApiBufferFree
NetRemoteTOD

user32

CharPrevW
GetActiveWindow
WinHelpW
InflateRect
LoadStringW
RegisterClassExW
LoadImageW
CreateWindowExW
DispatchMessageW
TranslateMessage
IsDialogMessageW
GetMessageW
PostMessageW
SendMessageW
IsWindow
GetForegroundWindow
MessageBoxW
GetPropW
DestroyWindow
CreateDialogParamW
SetActiveWindow
SetPropW
PostQuitMessage
RemovePropW
FlashWindow
ShowWindow
IsIconic
DefWindowProcW
InvalidateRect
SetTimer
SetFocus
GetWindowRect
SystemParametersInfoW
IsWindowVisible
EndPaint
DrawEdge
GetSystemMetrics
GetClientRect
BeginPaint
EndDialog
KillTimer
DestroyMenu
IsMenu
GetMenu
SetClassLongW
GetMenuItemCount
GetSubMenu
EnableMenuItem
CheckMenuItem
OffsetRect
AdjustWindowRectEx
GetWindowLongW
GetMenuItemID
SetWindowPos
SetWindowLongW
SetRect
MapWindowPoints
InsertMenuW
GetMenuStringW
DrawMenuBar
DeleteMenu
SetMenu
LoadMenuW
DialogBoxParamW
GetKeyState
GetNextDlgTabItem
GetDlgItem
GetParent
EnableWindow
wsprintfW
DrawTextExW
GetSysColor
CopyRect
SetWindowTextW
SetDlgItemTextW
GetFocus
GetWindowTextW
ReleaseDC
GetDC
FindWindowExW
GetDlgCtrlID
GetDialogBaseUnits
GetWindow
GetSysColorBrush
IsWindowEnabled
CheckDlgButton
MessageBeep
GetNextDlgGroupItem
GetWindowTextLengthW
CallWindowProcW
EnumChildWindows
CharNextW
FillRect
DrawTextW
GetClassNameW
SetForegroundWindow
AttachThreadInput
GetWindowThreadProcessId

gdi32

CreateSolidBrush
CreatePatternBrush
SetTextAlign
GetObjectW
GetPixel
BitBlt
CreateCompatibleDC
DeleteDC
CreateCompatibleBitmap
SelectObject
SetTextColor
SetBkMode
SetBrushOrgEx
DeleteObject
GetStockObject

advapi32

RegOpenKeyExA
RegSetValueExW
RegOpenKeyExW
RegConnectRegistryW
RegQueryValueExW
GetUserNameW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegQueryValueExA
RegCloseKey

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Exports

Exports

StatusMonitorEntryPoint

Sections

.text
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 162KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

afe4a7fcf10a0727b9ebde9dc70e7f49

Headers

File Characteristics

Imports

kernel32

msvcrt

winspool.drv

comctl32

wsock32

shell32

ole32

mpr

netapi32

user32

gdi32

advapi32

version

Exports

Exports

Sections

.text Size: 135KB - Virtual size: 135KB

.data Size: 512B - Virtual size: 248B

.rsrc Size: 44KB - Virtual size: 43KB

.reloc Size: 8KB - Virtual size: 7KB

.text Size: 162KB - Virtual size: 164KB

.text
Size: 135KB - Virtual size: 135KB

.data
Size: 512B - Virtual size: 248B

.rsrc
Size: 44KB - Virtual size: 43KB

.reloc
Size: 8KB - Virtual size: 7KB

.text
Size: 162KB - Virtual size: 164KB