f614282e885f4711ff410d1f09536c052b697d8f7d819a367b2ff776bebd49f9

Sharing

Copy URL Twitter E-mail

General

Target

f614282e885f4711ff410d1f09536c052b697d8f7d819a367b2ff776bebd49f9
Size

76KB
MD5

3044bdbac19f073efd5619c58a5906a7
SHA1

7caebfc7bc293c5c0cd2dea3979e7935e48aeef2
SHA256

f614282e885f4711ff410d1f09536c052b697d8f7d819a367b2ff776bebd49f9
SHA512

4b3619894f38a03159a12a6cd37b21b6cd2aacf2bb632d762d00eb79e2fa012fe6cd53262cbb117f6df5461ca73a22273b8047bab837030e5001fa9fd77f5e0c
SSDEEP

768:lOfCB4ViVPQ1II8/o60jw4H8AcTFl7btsOjcaIG3JONtTmVxPlYad9is:l74rGIooi4RAl7btsEuG3J0tTVad0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f614282e885f4711ff410d1f09536c052b697d8f7d819a367b2ff776bebd49f9

Files

f614282e885f4711ff410d1f09536c052b697d8f7d819a367b2ff776bebd49f9
.exe windows:4 windows x86

9c128ccf520a3054a9fdf74e42c61c4f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
RegCloseKey
RegSetValueExA
RegOpenKeyA
RegCreateKeyA

gdi32

GetObjectA
GetDeviceCaps
CreateFontIndirectA
SelectObject
AbortDoc
EndDoc
DeleteDC
StartPage
StartDocA
EndPage
GetTextExtentPointA
CreateFontA
SetAbortProc
SetBkMode
SetMapMode
GetTextMetricsA
SetWindowExtEx
SetViewportExtEx
LPtoDP
CreateDCA
GetTextCharset
DeleteObject
GetStockObject

kernel32

_hwrite
DeleteFileA
_lclose
_lopen
LocalUnlock
_lcreat
_llseek
LocalReAlloc
LocalAlloc
LocalLock
GlobalAlloc
GetLocalTime
GetTimeFormatA
GetDateFormatA
lstrcmpiA
GetStartupInfoA
GetModuleHandleA
ExitProcess
lstrlen
lstrcpyn
RtlMoveMemory
lstrcmp
IsDBCSLeadByte
GetProfileStringA
lstrcat
FindFirstFileA
FindClose
MulDiv
GetLastError
CreateFileA
GlobalFree
lstrcpy
GetLocaleInfoA
LocalFree
GetCommandLineA
GlobalUnlock
_hread
GlobalLock

shell32

DragFinish
ShellAboutA
ShellExecuteA
DragAcceptFiles
SHGetSpecialFolderPathA
DragQueryFile

user32

wsprintfA
CloseClipboard
IsClipboardFormatAvailable
OpenClipboard
GetMenu
LoadStringA
LoadAcceleratorsA
GetSystemMenu
RegisterClipboardFormatA
SetWindowLongA
CreateWindowExA
LoadCursorA
RegisterClassExA
GetSystemMetrics
UpdateWindow
CharPrevA
GetClientRect
PeekMessageA
SetDlgItemTextA
TabbedTextOutA
CreateDialogParamA
EnableWindow
GetWindowTextA
SendDlgItemMessageA
GetDlgCtrlID
ChildWindowFromPoint
ScreenToClient
GetCursorPos
GetDlgItemTextA
GetSubMenu
CheckMenuItem
SetWindowTextA
IsDialogMessage
TranslateMessage
DispatchMessageA
GetMessageA
DestroyWindow
MessageBeep
GetLastActivePopup
ShowWindow
EndDialog
SetForegroundWindow
WinHelpA
LoadIconA
GetDC
ReleaseDC
SetCursor
SendMessageA
GetFocus
PostMessageA
SetFocus
InvalidateRect
MoveWindow
CharNextA
IsIconic
PostQuitMessage
TranslateAccelerator

comdlg32

GetOpenFileNameA
ChooseFontA
FindTextA
PageSetupDlgA
GetSaveFileNameA
CommDlgExtendedError
GetFileTitleA

Sections

.text
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rdata
Size: 972B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mackt
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9c128ccf520a3054a9fdf74e42c61c4f

Headers

File Characteristics

Imports

advapi32

gdi32

kernel32

shell32

user32

comdlg32

Sections

.text Size: 15KB - Virtual size: 16KB

.data Size: 2KB - Virtual size: 4KB

.idata Size: 3KB - Virtual size: 4KB

.rsrc Size: 17KB - Virtual size: 24KB

.text Size: 17KB - Virtual size: 20KB

.rdata Size: 972B - Virtual size: 4KB

.data Size: 8KB - Virtual size: 12KB

.mackt Size: 4KB - Virtual size: 4KB

.text
Size: 15KB - Virtual size: 16KB

.data
Size: 2KB - Virtual size: 4KB

.idata
Size: 3KB - Virtual size: 4KB

.rsrc
Size: 17KB - Virtual size: 24KB

.text
Size: 17KB - Virtual size: 20KB

.rdata
Size: 972B - Virtual size: 4KB

.data
Size: 8KB - Virtual size: 12KB

.mackt
Size: 4KB - Virtual size: 4KB