f265d4b29db29583e99619cd456204db4c1904a6c9cab9359ee0469a2a4aff98

Sharing

Copy URL Twitter E-mail

General

Target

f265d4b29db29583e99619cd456204db4c1904a6c9cab9359ee0469a2a4aff98
Size

220KB
MD5

1a2ce70ce538a2c2033e526f3a9e0467
SHA1

75bb54c79499cddbab06c3d35ed2fca02190be06
SHA256

f265d4b29db29583e99619cd456204db4c1904a6c9cab9359ee0469a2a4aff98
SHA512

a68a3fa4b494438200cb35602b2554f74d28b56e10f0730265b3b7b029defa04038091c113d4600f87ce060dcd537945f8ba86da6da65e4066d3e108e00613e8
SSDEEP

3072:SpwvFsb2kGlqSTYfyDmw/tDcGRr0O/Md/PnbHb4xkQfE0t74luk8DSmx1BakbOCL:SKvFsb2ifE/tDhgO/QPbYkkOuekb4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f265d4b29db29583e99619cd456204db4c1904a6c9cab9359ee0469a2a4aff98

Files

f265d4b29db29583e99619cd456204db4c1904a6c9cab9359ee0469a2a4aff98
.exe windows x86

932f5313cd1995eafad8f4e3109ede50

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

_TrackMouseEvent
InitCommonControlsEx
ImageList_Draw
ImageList_Destroy
ImageList_Create
ImageList_ReplaceIcon
ord6
ImageList_Add
ImageList_DrawEx
ord17

kernel32

FindNextFileA
DeleteFileA
FindFirstFileA
MoveFileA
CreateEventA
GetStringTypeA
HeapSize
WriteFile
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
LCMapStringW
FindClose
GetOEMCP
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
HeapReAlloc
ExitProcess
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
RtlUnwind
HeapFree
HeapAlloc
VirtualQuery
GetVersion
WaitForSingleObject
SetUnhandledExceptionFilter
IsBadCodePtr
SetFilePointer
SetStdHandle
FlushFileBuffers
FormatMessageA
LocalFree
Sleep
lstrcmpiA
GetFileAttributesA
CreateFileA
CloseHandle
IsBadReadPtr
GetCurrentThreadId
GetTickCount
OutputDebugStringA
LoadLibraryExA
lstrcpyA
GetModuleFileNameA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetProcAddress
InterlockedIncrement
GlobalAlloc
GlobalLock
GetStringTypeW
GlobalUnlock
GlobalFree
GetLastError
WideCharToMultiByte
GetACP
MultiByteToWideChar
InterlockedDecrement
GetLocaleInfoA
FreeLibrary
LoadLibraryA
lstrlenA
lstrcatA
FindResourceA
LoadResource
LockResource
FreeResource
LCMapStringA

user32

SetCapture
GetWindowDC
IsDialogMessageA
PeekMessageA
GetWindow
GetClassNameA
DrawTextExA
InsertMenuItemA
SetCursorPos
TrackPopupMenuEx
InflateRect
GetAsyncKeyState
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
ReleaseCapture
TranslateAcceleratorA
IsWindowVisible
PostQuitMessage
SetCursor
IsIconic
SetForegroundWindow
GetDesktopWindow
LoadAcceleratorsA
SetParent
SystemParametersInfoA
LoadBitmapA
GetSystemMetrics
SetRectEmpty
DrawTextA
GetMenuItemCount
LoadMenuA
GetSubMenu
GetMenuItemInfoA
SetMenuItemInfoA
DestroyAcceleratorTable
ValidateRgn
TrackPopupMenu
DestroyMenu
ClientToScreen
GetMessageA
TranslateMessage
DispatchMessageA
MessageBeep
GetClassInfoA
IsWindowEnabled
GetCapture
GetFocus
UpdateWindow
DefDlgProcA
DefWindowProcA
GetClassInfoExA
LoadCursorA
RegisterClassExA
RegisterClassA
GetWindowLongA
SetFocus
DrawEdge
ScreenToClient
FindWindowExA
GetPropA
SetPropA
RemovePropA
GetWindowRect
GetSysColor
PostMessageA
GetUpdateRect
GetDC
SetRect
FillRect
ReleaseDC
wsprintfA
EnableWindow
IsWindow
SetWindowPos
DialogBoxParamA
SendMessageA
GetDlgItemTextA
GetWindowTextA
SetWindowTextA
ShowWindow
LoadImageA
SendDlgItemMessageA
SetDlgItemTextA
EndDialog
GetParent
GetDlgItem
BeginPaint
EndPaint
LoadStringA
DestroyWindow
GetClientRect
CreateWindowExA
SetWindowLongA
InvalidateRect
KillTimer
SetTimer
GetCursorPos
WindowFromPoint
CallWindowProcA
IsMenu

gdi32

GetStockObject
RealizePalette
SelectPalette
CreateDIBitmap
CreatePalette
BitBlt
CreateCompatibleBitmap
LineTo
MoveToEx
CreatePen
GetDeviceCaps
CreateCompatibleDC
SetTextColor
SetBkColor
CreateSolidBrush
CreateDIBPatternBrushPt
StretchBlt
CreateFontIndirectA
CreateFontA
UpdateColors
GetTextExtentPoint32A
FillRgn
CreatePolygonRgn
TextOutA
CreateBitmapIndirect
GetNearestColor
ExcludeClipRect
SelectClipRgn
CreateRectRgn
SelectObject
DeleteDC
SetBkMode
GetObjectA
DeleteObject

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

shell32

ShellExecuteA

ole32

CoTaskMemFree
CoUninitialize
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoInitialize

oleaut32

SysFreeString
SysStringByteLen
SysAllocStringByteLen
SysReAllocStringLen
SysStringLen
SysAllocString

mxdlgsup

MXMessageBox
MXSubclassDialog
MXLoadLanguageDll

Sections

.text
Size: 128KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

whuexzo
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

932f5313cd1995eafad8f4e3109ede50

Headers

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

mxdlgsup

Sections

.text Size: 128KB - Virtual size: 126KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 20KB - Virtual size: 22KB

.rsrc Size: 52KB - Virtual size: 52KB

whuexzo Size: - Virtual size: 4KB

.text
Size: 128KB - Virtual size: 126KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 20KB - Virtual size: 22KB

.rsrc
Size: 52KB - Virtual size: 52KB

whuexzo
Size: - Virtual size: 4KB