fc852a6d9cf7897876a229a49827a63366c5e78a20c6d156b0f2b9f7f766148e

Sharing

Copy URL

Twitter E-mail

General

Target

fc852a6d9cf7897876a229a49827a63366c5e78a20c6d156b0f2b9f7f766148e
Size

3.7MB
MD5

3d43a6bc516ead23366722de85f2d29e
SHA1

7def8c22d6f6648294eb579b4f42453c16ad9587
SHA256

fc852a6d9cf7897876a229a49827a63366c5e78a20c6d156b0f2b9f7f766148e
SHA512

a792e9e496fb0b04ee1ced566481dbbb0c44373d6b79dc4470261f103fbeba1d21bc3f4ee270e965d43240237bafa42604c1fb1251267dc6dcfaad6a29eb74c8
SSDEEP

98304:J03GZpn+8vcAAWrX+ndJAOscZ3/hMZMI0JfVy:J0Wrc6OnsOscZGf0J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc852a6d9cf7897876a229a49827a63366c5e78a20c6d156b0f2b9f7f766148e

Files

fc852a6d9cf7897876a229a49827a63366c5e78a20c6d156b0f2b9f7f766148e
.exe windows:4 windows x86 arch:x86

bb0b91cda84243a916a30f08e44d7094

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
lstrcatW
GetTickCount
LoadLibraryW
lstrcmpiA
VirtualQuery
HeapAlloc
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
SetLastError
HeapFree
GetProcessHeap
HeapReAlloc
FindResourceExA
GetUserDefaultUILanguage
CompareStringA
GetLastError
GetEnvironmentVariableA
CompareStringW
SetEvent
GetCurrentProcessId
CloseHandle
WaitForSingleObject
GetSystemTimeAsFileTime
WriteFile
SetFileTime
lstrcpyW
FindFirstFileW
FindClose
FormatMessageA
CreateFileA
ReadFile
IsBadReadPtr
CreateEventA
GetModuleFileNameA
SetFilePointer
GetCurrentProcess
GetWindowsDirectoryA
GetVolumeInformationA
FindNextFileA
IsWow64Process
GetFileAttributesExA
GetFullPathNameA
FindFirstFileExA
Sleep
FreeLibrary
SetEnvironmentVariableW
FlushInstructionCache
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
QueryPerformanceCounter
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetConsoleMode
GetConsoleCP
GetStartupInfoA
GetFileType
SetHandleCount
GetTimeZoneInformation
IsValidCodePage
GetOEMCP
GetCurrentThreadId
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
HeapCreate
VirtualFree
GetCPInfo
LCMapStringW
LCMapStringA
RtlUnwind
GetStartupInfoW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
CreateThread
ResumeThread
ExitThread
GetSystemInfo
VirtualAlloc
GetThreadLocale
GetLocaleInfoA
GetACP
HeapSize
HeapDestroy
GetVersionExA
RaiseException
WideCharToMultiByte
lstrlenW
lstrcmpiW
SetEnvironmentVariableA
IsBadWritePtr
VirtualProtect
ExitProcess
lstrcmpA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
InterlockedExchange
GlobalFree
GlobalUnlock
LeaveCriticalSection
GlobalLock
EnterCriticalSection
GlobalAlloc
LockResource
LoadResource
SizeofResource
FindResourceA
lstrcpyA
lstrlenA
GetModuleHandleA

user32

UnregisterClassA
MessageBoxW
SetCursor
GetWindowRect
CallWindowProcA
GetWindowLongA
LoadCursorA
GetSystemMetrics
SetWindowLongA
GetParent
GetCursorPos
GetDesktopWindow
MapWindowPoints
SetWindowPos
SendMessageA
SetForegroundWindow
ReleaseCapture
PostMessageA
BeginPaint
GetMessageA
TranslateMessage
DrawIcon
DispatchMessageA
LoadIconA
CreateDialogIndirectParamA
SetTimer
EndPaint
KillTimer
DestroyWindow
EndDialog
LoadStringA
PtInRect
GetDC
FillRect
GetClientRect
ReleaseDC
SetClassLongA
TrackMouseEvent
SetWindowTextA
SetActiveWindow
IsDialogMessageA
EnableWindow
GetActiveWindow
UpdateWindow
AdjustWindowRectEx
CreateWindowExA
RegisterClassExA
DefWindowProcA
ShowWindow
SetFocus
TranslateAcceleratorA
DrawFocusRect
DrawTextA
SetCapture
GetWindowTextA
DrawEdge
InvalidateRect
OffsetRect
LoadImageA
GetClassNameA
PostQuitMessage
ScreenToClient
GetWindowTextLengthA
MessageBoxA
wsprintfA

gdi32

GetDIBColorTable
SetDIBColorTable
StretchBlt
CreateFontIndirectA
DeleteObject
CreateDIBSection
CreateSolidBrush
SelectObject
MoveToEx
CreatePen
CreateCompatibleBitmap
BitBlt
CreateCompatibleDC
TextOutA
DeleteDC
SetTextColor
GetStockObject
SetBkMode
GetTextExtentPointA
LineTo
GetObjectA

advapi32

RegQueryValueExA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
RegSetValueExA

shell32

SHGetFolderPathA

ole32

CoInitializeEx
CoCreateInstance
CoSetProxyBlanket
CreateStreamOnHGlobal

oleaut32

SafeArrayDestroy
GetErrorInfo
SafeArrayGetElement
SafeArrayPutElement
SafeArrayGetLBound
SafeArrayGetUBound
VariantChangeType
VariantClear
VariantTimeToSystemTime
SystemTimeToVariantTime
SysFreeString
SysStringLen
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocString
SysAllocStringLen
VariantInit

shlwapi

StrRChrW
StrChrW

gdiplus

GdipAlloc
GdipFree
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromScan0
GdipDisposeImage
GdipGetImagePalette
GdipDeleteGraphics
GdipGetImagePaletteSize
GdipGetImageGraphicsContext
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipDrawImageI
GdipCreateBitmapFromStream

msimg32

TransparentBlt
AlphaBlend

iphlpapi

GetAdaptersInfo

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

Sections

.text
Size: 404KB - Virtual size: 401KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.LZ1
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 208KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bb0b91cda84243a916a30f08e44d7094

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

gdiplus

msimg32

iphlpapi

version

Sections

.text Size: 404KB - Virtual size: 401KB

.rdata Size: 120KB - Virtual size: 118KB

.data Size: 1.2MB - Virtual size: 1.2MB

.LZ1 Size: 1.8MB - Virtual size: 1.8MB

.rsrc Size: 208KB - Virtual size: 204KB

.text
Size: 404KB - Virtual size: 401KB

.rdata
Size: 120KB - Virtual size: 118KB

.data
Size: 1.2MB - Virtual size: 1.2MB

.LZ1
Size: 1.8MB - Virtual size: 1.8MB

.rsrc
Size: 208KB - Virtual size: 204KB