13b4c9d465685c3c503a24673ddd6601146c84a9bc82d3a9148f964346e85a86

General

Target

13b4c9d465685c3c503a24673ddd6601146c84a9bc82d3a9148f964346e85a86
Size

56KB
MD5

f5247cd91dedb24e973afa83d9241140
SHA1

092274810c57a8e5f0ffa9e8fbf82dee03cdb044
SHA256

13b4c9d465685c3c503a24673ddd6601146c84a9bc82d3a9148f964346e85a86
SHA512

3f3c612383ff69608c8b22135fa92e573d1b4141553ccfdb69ef1f7be7bffe882741362074c2131852880b7de94e03dc4bb66e983cece3070d655807c9956ce9
SSDEEP

768:Pjru8xAKaEU3FShWN+BpQhzjQ7FJ+gChNv4Yqq15Agwcw9m4XZcCho:Pjru8xI+WIQhHQ7FcxgYL1C9m47e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13b4c9d465685c3c503a24673ddd6601146c84a9bc82d3a9148f964346e85a86

Files

13b4c9d465685c3c503a24673ddd6601146c84a9bc82d3a9148f964346e85a86
.exe windows x86

c9f7d501c980cfb7048c528a20a3c327

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileStringA
Sleep
CreateThread
GetPrivateProfileIntA
GetCurrentDirectoryA
GetStartupInfoA
GetModuleHandleA
LoadLibraryA
GetProcAddress
lstrcmpA
FreeLibrary

user32

GetDlgItemTextA
EndDialog
GetForegroundWindow
MoveWindow
GetDlgItem
GetWindowLongA
SetWindowPos
EnumChildWindows
ClipCursor
SetDlgItemTextA
GetCursorPos
GetDC
SendMessageA
FindWindowA
GetDesktopWindow
GetWindow
GetClassNameA
GetWindowTextA
wsprintfA
DialogBoxParamA

gdi32

GetPixel

ole32

CoInitialize

mfc42

ord2864
ord537
ord2915
ord2818
ord540
ord4033
ord2141
ord800
ord434
ord5575

msvcrt

_onexit
__dllonexit
atoi
printf
atol
__CxxFrameHandler
_exit
_XcptFilter
_itoa
exit
_acmdln
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__getmainargs

comctl32

ord17

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c9f7d501c980cfb7048c528a20a3c327

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

mfc42

msvcrt

comctl32

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 8KB - Virtual size: 5KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 8KB - Virtual size: 5KB

.rsrc
Size: 4KB - Virtual size: 1KB