3ded19713ee54adc419ef8d6a4fbc63a630e946e492ae587c07267116016ca56

General

Target

3ded19713ee54adc419ef8d6a4fbc63a630e946e492ae587c07267116016ca56
Size

8.6MB
MD5

0e46bdc32019e19d40eb43b4c6fc633e
SHA1

173acd64755b71723bcf1c6d0431b4d3cfa01ece
SHA256

3ded19713ee54adc419ef8d6a4fbc63a630e946e492ae587c07267116016ca56
SHA512

682319a4f686ed621fe537f423f2999ca54538ff3c26854192f19393d37c9060d0f7c729bc4920eb5c7b3f838cbaa98436bfd84bb71013a3e7d48cbf8f9f2688
SSDEEP

98304:wLtSBfcraOfaarYxPnOnMVJPEgdy4VAZuJBAUZLX/1tcX6p2bWVJBAUZLYwoj:pBoaacxwMVd7QuJVbAqpWWVJVUwoj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ded19713ee54adc419ef8d6a4fbc63a630e946e492ae587c07267116016ca56

Files

3ded19713ee54adc419ef8d6a4fbc63a630e946e492ae587c07267116016ca56
.exe windows x86

aefd2ba79f4a30d123544d14415dd5f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetProcAddress
GetModuleHandleExA
lstrcpynA
RtlMoveMemory
GetCurrentProcess
ReadProcessMemory
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
GetModuleFileNameA
CloseHandle
WriteFile
CreateFileA
ReadFile
GetFileSize
GetLocalTime
FreeLibrary
LoadLibraryA
LCMapStringA

msvcrt

atoi
_ftol
??2@YAPAXI@Z
??3@YAXPAX@Z
_atoi64
atof
sprintf
free
malloc
strchr
realloc
modf
memmove
strncmp
__CxxFrameHandler

user32

GetWindowTextA
GetWindowTextLengthA
GetWindowLongA
SetWindowPos
ScreenToClient
GetWindowRect
SetWindowLongA
ShowWindow
GetDlgItem
wsprintfA
PostQuitMessage
DestroyWindow
DispatchMessageA
TranslateMessage
SendMessageA
GetMessageA
UpdateWindow
CreateDialogIndirectParamA
SetWindowTextA
MessageBoxA

shlwapi

PathFileExistsA

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6.8MB - Virtual size: 6.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 184KB - Virtual size: 568KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

xeng
Size: 424KB - Virtual size: 424KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

aefd2ba79f4a30d123544d14415dd5f4

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

shlwapi

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 6.8MB - Virtual size: 6.8MB

.data Size: 184KB - Virtual size: 568KB

.rsrc Size: 32KB - Virtual size: 30KB

xeng Size: 424KB - Virtual size: 424KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 6.8MB - Virtual size: 6.8MB

.data
Size: 184KB - Virtual size: 568KB

.rsrc
Size: 32KB - Virtual size: 30KB

xeng
Size: 424KB - Virtual size: 424KB