3a3835f38dda45102de352ea17e45623b1819ee4ef427038176a2840729fec6aN[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

3a3835f38dda45102de352ea17e45623b1819ee4ef427038176a2840729fec6aN.exe
Size

259KB
MD5

79364d0ccaa0879dbae93b837d0d1ac0
SHA1

154b7bedfe03dd5faab3d5b428c5265758108568
SHA256

3a3835f38dda45102de352ea17e45623b1819ee4ef427038176a2840729fec6a
SHA512

b1161d033fc2ba0228104ac873d1995f281fd22e558857424da669efd8839ed59863f8cbc794990d18d77d9502f44d9b02dc191ff8051114e52b363f5094f697
SSDEEP

6144:tMThX2hFbGr5t3IMxi5jR0qMqV4m9mDcSbO82Logn:ohX2/wt4M8sqMqVPmDcCW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a3835f38dda45102de352ea17e45623b1819ee4ef427038176a2840729fec6aN.exe

Files

3a3835f38dda45102de352ea17e45623b1819ee4ef427038176a2840729fec6aN.exe
.exe windows:4 windows x86 arch:x86

a35f7106e12bfdf0078048d413d7c372

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetReadFile
HttpOpenRequestA
InternetGetLastResponseInfoA
InternetCloseHandle
InternetQueryOptionA
HttpQueryInfoA
InternetConnectA
InternetOpenA
InternetCombineUrlA
InternetSetOptionA
InternetErrorDlg
HttpSendRequestA

oleacc

AccessibleObjectFromWindow
LresultFromObject

comdlg32

PrintDlgA
GetOpenFileNameW
GetSaveFileNameW

gdi32

GdiFlush
GetFontLanguageInfo
SetBkMode
GetCharacterPlacementW
CreateBitmap
SetTextColor
EnumFontFamiliesExA
GetDIBits
EndDoc
GetStockObject
RoundRect
BitBlt
CreateDIBPatternBrushPt
SetViewportOrgEx
GetGlyphOutlineW
SetTextAlign
ExcludeClipRect
StretchDIBits
GetMapMode
GetTextExtentPoint32W
IntersectClipRect
SaveDC
GetClipBox
Rectangle
CreateDIBSection
PatBlt
SetBrushOrgEx
CreateHatchBrush
SetStretchBltMode
TextOutW
CreatePen
SetLayout
SetWindowOrgEx
GetTextMetricsA
CreateFontA
CombineRgn
GetObjectA
TextOutA
GetTextExtentExPointW
EndPage
SetViewportExtEx
SetWindowExtEx
StartDocA
GetKerningPairsA
SetBkColor
StartPage
GetTextAlign
GetCurrentObject
GetTextExtentPoint32A
DPtoLP
CreateCompatibleDC
GetPixel
DeleteDC
GetWindowExtEx
DeleteObject
SetPixel
CreatePatternBrush
GetLayout
SelectObject
GetDeviceCaps
GetWindowOrgEx
CreateCompatibleBitmap
StretchBlt
RestoreDC
CreateSolidBrush
CreateRectRgnIndirect
GetViewportExtEx
EnumFontFamiliesExW
LPtoDP
SetMapMode
AddFontMemResourceEx
RectVisible

kernel32

HeapFree
SetFilePointer
HeapAlloc
VirtualAlloc
GetTimeFormatW
TlsFree
GetCurrencyFormatW
AllocConsole
WaitForSingleObject
GetFileSize
ProcessIdToSessionId
CloseHandle
GetUserDefaultLCID
SetThreadLocale
FlushInstructionCache
VirtualFree
CreateFileMappingA
SizeofResource
GetDateFormatW
GetStdHandle
SetHandleInformation
GetLocalTime
FindResourceW
ReadFile
SystemTimeToFileTime
IsProcessorFeaturePresent
FreeLibrary
LoadLibraryExW
FindNextFileW
GlobalUnlock
lstrlenA
GlobalSize
TlsGetValue
CompareStringW
IsDebuggerPresent
FileTimeToSystemTime
LoadResource
EnterCriticalSection
GetComputerNameA
GetSystemTime
CreateEventA
FormatMessageA
MulDiv
CreateMutexA
GetTimeZoneInformation
GetModuleHandleW
TlsAlloc
MapViewOfFile
CreateFileW
FindClose
HeapSize
HeapDestroy
lstrlenW
FlushFileBuffers
HeapReAlloc
GetThreadLocale
SetEndOfFile
UnhandledExceptionFilter
DeleteCriticalSection
FindResourceExW
FindFirstFileW
WriteFile
GetCurrentThreadId
TlsSetValue
WideCharToMultiByte
LockResource
FindResourceA
SetUnhandledExceptionFilter
LeaveCriticalSection
GetProcessHeap
OutputDebugStringW
LocalAlloc
FlushViewOfFile
ExitThread
GlobalLock
GetSystemTimeAsFileTime
RaiseException
UnmapViewOfFile
CreateFileA
WaitForMultipleObjects
GetTempPathA
GetTempFileNameA
SetLastError
GlobalFree
SetStdHandle
CreatePipe
GetNumberFormatW
CreateThread
GlobalAlloc
GetStartupInfoA
VirtualAllocEx

urlmon

FindMimeFromData

imm32

ImmNotifyIME
ImmIsIME
ImmGetContext
ImmAssociateContextEx
ImmAssociateContext
ImmSetCandidateWindow
ImmReleaseContext
ImmGetCompositionStringW

comctl32

ImageList_DrawEx
ImageList_GetIconSize
ImageList_GetImageInfo

user32

GetAsyncKeyState
SetWindowPos
GetDoubleClickTime
FillRect
DrawEdge
GetGuiResources
TranslateMessage
WindowFromPoint
DrawTextA
ReleaseDC
PostQuitMessage
IsWindowEnabled
BeginPaint
PostMessageW
OffsetRect
LoadCursorA
DefWindowProcA
SetClipboardData
RegisterWindowMessageW
AdjustWindowRectEx
MessageBeep
SetCapture
GetIconInfo
GetWindowDC
SetForegroundWindow
SetWindowsHookExW
SetTimer
CloseClipboard
GetSystemMetrics
BeginDeferWindowPos
GetUpdateRect
CreateWindowExA
GetScrollInfo
RegisterClassExA
GetSysColor
GetClientRect
GetMenuState
DefWindowProcW
PostMessageA
SystemParametersInfoA
CallNextHookEx
ScrollDC
DestroyIcon
GetWindowPlacement
GetWindowTextW
GetDialogBaseUnits
RegisterClassExW
GetClipboardSequenceNumber
GetClassLongA
RegisterClassW
GetSysColorBrush
IsChild
CreateWindowExW
GetWindow
InvalidateRect
IsWindowVisible
SetCursor
DeferWindowPos
SetWindowLongW
SetWindowTextW
GetWindowThreadProcessId
CallWindowProcW
SendMessageW
DestroyCaret
SetActiveWindow
GetCaretBlinkTime
GetActiveWindow
PeekMessageA
CopyRect
IsClipboardFormatAvailable
GetWindowLongW
CountClipboardFormats
UnregisterClassW
EndDialog
EndPaint
DialogBoxIndirectParamW
CreateCursor
LoadCursorW
GetMonitorInfoW
EmptyClipboard
GetMessageA
EnableWindow
MapWindowPoints
SetCaretPos
ScrollWindowEx
UnhookWindowsHookEx
IsWindowUnicode
ReleaseCapture
DrawTextW
ShowWindow
GetWindowLongA
PtInRect
RegisterClipboardFormatW
RegisterClassA
MonitorFromWindow
IsWindow
EnumClipboardFormats
LoadStringW
DrawFrameControl
GetClassInfoExW
IsIconic
EnableMenuItem
UnregisterClassA
EqualRect
SendMessageTimeoutA
EndDeferWindowPos
GetCapture
SetWindowLongA
CreateDialogIndirectParamW
NotifyWinEvent
DestroyWindow
GetParent
LoadIconW
GetDesktopWindow
CreateCaret
GetKeyState
GetDlgCtrlID
LoadCursorFromFileA
MoveWindow
SetScrollInfo
InvertRect
InflateRect
SetFocus
AnimateWindow
GetSystemMenu
GetDC
GetCursorPos
GetFocus
GetWindowRect
GetClipboardData
OpenClipboard
DispatchMessageA
KillTimer
UpdateWindow
DrawIconEx
GetKeyboardLayout
FlashWindow
CreateIconFromResourceEx
RegisterWindowMessageA
SendMessageA

ole32

ReleaseStgMedium
CoCreateGuid
DoDragDrop
CoCreateInstance
OleInitialize
RevokeDragDrop
RegisterDragDrop

oleaut32

SysAllocStringLen

winmm

timeSetEvent
timeGetTime
PlaySoundA
timeGetDevCaps
timeKillEvent

esent

JetFreeBuffer
JetSetColumn
JetOpenTempTable
JetGetSystemParameter
JetTruncateLog
JetMakeKey
JetCreateInstance
JetGetCurrentIndex
JetGetSecondaryIndexBookmark
JetDefragment
JetEndSession

colbact

PartitionAccessCheck
GetClassInfoForCurrentUser
GetDefaultPartitionForSid
GetDefaultPartitionForCurrentUser

Sections

.DWTQiC
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_MEM_READ

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.VlzF
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sqUxn
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.WvofIO
Size: 1024B - Virtual size: 740B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hfrBl
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 242KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 215KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.XzWS
Size: 1024B - Virtual size: 825B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.QpqOi
Size: 1024B - Virtual size: 854B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.npDBI
Size: 512B - Virtual size: 139B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qKwY
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a35f7106e12bfdf0078048d413d7c372

Headers

DLL Characteristics

File Characteristics

Imports

wininet

oleacc

comdlg32

gdi32

kernel32

urlmon

imm32

comctl32

user32

ole32

oleaut32

winmm

esent

colbact

Sections

.DWTQiC Size: 3KB - Virtual size: 8KB

.text Size: 17KB - Virtual size: 17KB

.VlzF Size: 2KB - Virtual size: 2KB

.sqUxn Size: 3KB - Virtual size: 2KB

.WvofIO Size: 1024B - Virtual size: 740B

.hfrBl Size: 2KB - Virtual size: 2KB

.data Size: 7KB - Virtual size: 242KB

.rdata Size: 215KB - Virtual size: 214KB

.XzWS Size: 1024B - Virtual size: 825B

.QpqOi Size: 1024B - Virtual size: 854B

.npDBI Size: 512B - Virtual size: 139B

.rsrc Size: 2KB - Virtual size: 1KB

.qKwY Size: 1KB - Virtual size: 1KB

.DWTQiC
Size: 3KB - Virtual size: 8KB

.text
Size: 17KB - Virtual size: 17KB

.VlzF
Size: 2KB - Virtual size: 2KB

.sqUxn
Size: 3KB - Virtual size: 2KB

.WvofIO
Size: 1024B - Virtual size: 740B

.hfrBl
Size: 2KB - Virtual size: 2KB

.data
Size: 7KB - Virtual size: 242KB

.rdata
Size: 215KB - Virtual size: 214KB

.XzWS
Size: 1024B - Virtual size: 825B

.QpqOi
Size: 1024B - Virtual size: 854B

.npDBI
Size: 512B - Virtual size: 139B

.rsrc
Size: 2KB - Virtual size: 1KB

.qKwY
Size: 1KB - Virtual size: 1KB