LOQUENDO FULL PORTABLE (manuD25)[.]rar

Sharing

Copy URL

Twitter E-mail

General

Target

LOQUENDO FULL PORTABLE (manuD25).rar
Size

161.9MB
MD5

922fa131d7fa4ef99210714a53018938
SHA1

e2f9c8d177c218715f9f6edc5dd1c23400e80baf
SHA256

6c6d1a5193f35c021113a3e0828daf166d83f74087a78f34384d5e039dcd8961
SHA512

b6508be3191012de88021733b4184e412d6570f6167645b0b7a9075cb12f645f42280b4d420faf2732d57bb5ddac3454a7ffc9f91eaa2604e55ae12d793ed74e
SSDEEP

3145728:fHnTBCZ8q4dfyGmW04NzGirv2y2GJ3gAfhohJmEVFz15COr80MqzCtm:fM8zfyGE8APGJ3JAFVBCOY0Mnm

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/LOQUENDO PORTABLE (manuDT25)/Stubs/8b576feed38e25f11ec16a5efe11a155cf71b4f5/TextAloudMP3.exe
unpack001/LOQUENDO PORTABLE (manuDT25)/TextAloud.exe

Files

LOQUENDO FULL PORTABLE (manuD25).rar
.rar
LOQUENDO PORTABLE (manuDT25)/%ProgramFilesDir%/TextAloud/TextAloudMP3.elf
LOQUENDO PORTABLE (manuDT25)/Registry.rw.tvr
LOQUENDO PORTABLE (manuDT25)/Registry.rw.tvr.lck
LOQUENDO PORTABLE (manuDT25)/Registry.tvr.backup
LOQUENDO PORTABLE (manuDT25)/Stubs/8b576feed38e25f11ec16a5efe11a155cf71b4f5/TextAloudMP3.exe
.exe windows:1 windows x86

0957287b16f4d58ba4d8c06063bbd080

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleFileNameW
GetModuleHandleW
Sleep
GetLastError
MoveFileW
GetSystemTimeAsFileTime
DeleteFileW
lstrcpyW
lstrlenW
GetEnvironmentVariableW
lstrcmpA
lstrlenA
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingW
VirtualFree
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
HeapFree
FreeLibrary
HeapAlloc
GetProcessHeap
LoadLibraryW
MapViewOfFileEx
UnmapViewOfFile
ReadFile
SetFilePointer
ExitProcess
FormatMessageA
SetEnvironmentVariableW
GetFileSize
CreateFileW
WideCharToMultiByte
lstrcpynW

user32

MessageBoxA
wsprintfW

Sections

.text
Size: 24KB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
LOQUENDO PORTABLE (manuDT25)/TextAloud.exe
.exe windows:1 windows x86

0957287b16f4d58ba4d8c06063bbd080

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleFileNameW
GetModuleHandleW
Sleep
GetLastError
MoveFileW
GetSystemTimeAsFileTime
DeleteFileW
lstrcpyW
lstrlenW
GetEnvironmentVariableW
lstrcmpA
lstrlenA
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingW
VirtualFree
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
HeapFree
FreeLibrary
HeapAlloc
GetProcessHeap
LoadLibraryW
MapViewOfFileEx
UnmapViewOfFile
ReadFile
SetFilePointer
ExitProcess
FormatMessageA
SetEnvironmentVariableW
GetFileSize
CreateFileW
WideCharToMultiByte
lstrcpynW

user32

MessageBoxA
wsprintfW

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.res
Size: 8KB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0957287b16f4d58ba4d8c06063bbd080

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 24KB - Virtual size: 3.4MB

0957287b16f4d58ba4d8c06063bbd080

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 24KB - Virtual size: 24KB

.res Size: 8KB - Virtual size: 3.4MB

.text
Size: 24KB - Virtual size: 3.4MB

.text
Size: 24KB - Virtual size: 24KB

.res
Size: 8KB - Virtual size: 3.4MB