1332d9a394f7fd266afe4ab095364159

Sharing

Copy URL

Twitter E-mail

General

Target

1332d9a394f7fd266afe4ab095364159
Size

137KB
MD5

1332d9a394f7fd266afe4ab095364159
SHA1

d656d6d918230600446fec6627a9c9ca50f68585
SHA256

dc219c36a2a12e33c5c70cb4608427a14dbc0419457b187da051e694178a9dca
SHA512

783798315cc1a37c5930d6aa6dfbeb7321ee7ae0527a06fdb5a16c13ca259c2bbe3128b28f3072c261324972f8d88473436a65da718f948fce623d837bdf2fd1
SSDEEP

1536:R1na56fl7V8VFkFOKT9Jv3B/k6VdVzj10hU3brxtvK+jQGyRQC7HOHFCAZ44thfw:R1R7/F5tzx4QxtvFNyRfuHFCOhbloMY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1332d9a394f7fd266afe4ab095364159

Files

1332d9a394f7fd266afe4ab095364159
.exe windows:4 windows x86 arch:x86

2972ae6b0c832fb22f3ea80d705ee8e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
strncpy
_strnicmp
strncmp
_strdup
free
memmove
strlen
strcpy
strcat
strcmp
memcpy
floor
sprintf
_stricmp
fclose
fabs
ceil
malloc

kernel32

GetModuleHandleA
HeapCreate
GetLocaleInfoA
GetDateFormatA
HeapDestroy
ExitProcess
GetTimeFormatA
ExpandEnvironmentStringsA
GetFullPathNameA
GetFileAttributesA
GetCurrentThreadId
lstrcmpA
SetEndOfFile
SetFileAttributesA
HeapFree
HeapAlloc
MulDiv
GetCurrentProcessId
CloseHandle
InitializeCriticalSection
GetModuleFileNameA
GetCommandLineA
GetVersionExA
HeapReAlloc
LoadLibraryA
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
FreeLibrary
SetLastError
TlsAlloc
GetCurrentDirectoryA
SetCurrentDirectoryA
GetDriveTypeA
FindFirstFileA
FindClose
GetLastError
FindNextFileA
DeleteFileA
MoveFileA
WriteFile
CreateFileA
ReadFile
SetFilePointer
GetFileSize

comctl32

InitCommonControls
InitCommonControlsEx
ImageList_Destroy
ImageList_Remove
ImageList_AddMasked
ImageList_Create
ImageList_Add
ImageList_ReplaceIcon

user32

GetWindowLongA
SetWindowLongA
SendMessageA
FindWindowA
ShowWindow
SetForegroundWindow
SetWindowTextA
InvalidateRect
GetAsyncKeyState
GetCursorPos
SetTimer
KillTimer
GetCaretPos
GetDC
ReleaseDC
CheckMenuRadioItem
CharUpperBuffA
CharLowerBuffA
ClientToScreen
MessageBeep
MessageBoxA
CharLowerA
CallWindowProcA
GetFocus
GetActiveWindow
EnableWindow
SetFocus
GetWindowRect
PtInRect
SetMenuItemInfoA
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
UnregisterHotKey
RegisterHotKey
LoadImageA
GetWindowTextLengthA
GetWindowTextA
OpenClipboard
GetClipboardData
CloseClipboard
AnimateWindow
ScreenToClient
DestroyIcon
CreateIconIndirect
CharUpperA
GetForegroundWindow
GetWindowThreadProcessId
IsWindowVisible
IsWindowEnabled
EnumWindows
SetMenu
DestroyMenu
GetPropA
GetMenu
CreateMenu
SetPropA
AppendMenuA
EnableMenuItem
GetSystemMetrics
CreatePopupMenu
GetMenuItemInfoA
ModifyMenuA
TrackPopupMenu
DestroyWindow
GetClientRect
FillRect
DefWindowProcA
RedrawWindow
LoadCursorA
RegisterClassExA
CreateWindowExA
SetClassLongA
SetWindowPos
GetParent
GetWindow
UpdateWindow
GetIconInfo
DrawStateA
GetSysColorBrush
FrameRect
DrawFocusRect
ValidateRect
GetSysColor
InflateRect
GetWindowDC
RemovePropA
IsWindow
SetParent
SetCursor
BeginPaint
MapWindowPoints
DrawFrameControl
EndPaint
GetCapture
SetCapture
GetClassNameA
GetKeyState
ReleaseCapture
MoveWindow
PeekMessageA
TranslateMessage
DispatchMessageA
EnumPropsExA
SetActiveWindow
UnregisterClassA
DestroyAcceleratorTable
LoadIconA
RegisterClassA
AdjustWindowRectEx
CreateAcceleratorTableA
IsZoomed
IsIconic
MsgWaitForMultipleObjects
GetMessageA
TranslateAcceleratorA
EnumChildWindows
PostMessageA
DefFrameProcA
SetCursorPos
SystemParametersInfoA
IsChild

gdi32

SelectObject
GetTextMetricsA
GetObjectType
DeleteObject
CreateDCA
GetDeviceCaps
DeleteDC
GetStockObject
CreateRectRgn
SelectClipRgn
GetObjectA
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
SetBkColor
SetTextColor
ExcludeClipRect
CreateRectRgnIndirect
SetBkMode
TextOutA
GetTextExtentPoint32A
CreatePen
MoveToEx
LineTo
CreateSolidBrush
StretchBlt
GetClipRgn
ExtSelectClipRgn
GetDIBits
CreateDIBSection
CreateBitmap
SetPixel
CreateFontA

comdlg32

ChooseColorA
GetSaveFileNameA
GetOpenFileNameA
ChooseFontA

advapi32

CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptEncrypt
CryptDecrypt
CryptDestroyKey
CryptDestroyHash
CryptReleaseContext

shell32

DragAcceptFiles
ExtractIconExA
ShellExecuteA
DragQueryFileA
DragFinish
Shell_NotifyIconA

ole32

CoInitialize
RevokeDragDrop

Sections

.code
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 806B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2972ae6b0c832fb22f3ea80d705ee8e9

Headers

File Characteristics

Imports

msvcrt

kernel32

comctl32

user32

gdi32

comdlg32

advapi32

shell32

ole32

Sections

.code Size: 61KB - Virtual size: 61KB

.text Size: 52KB - Virtual size: 51KB

.rdata Size: 1024B - Virtual size: 806B

.data Size: 11KB - Virtual size: 14KB

.rsrc Size: 11KB - Virtual size: 10KB

.code
Size: 61KB - Virtual size: 61KB

.text
Size: 52KB - Virtual size: 51KB

.rdata
Size: 1024B - Virtual size: 806B

.data
Size: 11KB - Virtual size: 14KB

.rsrc
Size: 11KB - Virtual size: 10KB