141af22ebe796aaeb4a535e7bc366b7d

Sharing

Copy URL Twitter E-mail

General

Target

141af22ebe796aaeb4a535e7bc366b7d
Size

154KB
MD5

141af22ebe796aaeb4a535e7bc366b7d
SHA1

5bfa5380c630cd72df8f94bee91b52a73a484529
SHA256

cb74617a79214985f830315a3b0df7b8827254e11803e91bbaf2c1c1a78c7b37
SHA512

702b6b6df2ade023f96d5dde7bc624a722da8b9504f5332756062af7976172f6174fe6dcecefee4ac559be17a8e1e1c0447eb8b30bc8b5b571ba3f98aa994d55
SSDEEP

3072:3RBStgLjFqTkDQB8AT8Or5xgzLGBL2ziBW1m/MhGjMV19:3RBStEqQHAVr52QL2zi2GjMB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
141af22ebe796aaeb4a535e7bc366b7d

Files

141af22ebe796aaeb4a535e7bc366b7d
.exe windows:4 windows x86 arch:x86

3401987d45cb1f4afcf3ed66bd5fe90f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_Add
ImageList_Read
ImageList_Remove
ImageList_DrawEx
ImageList_DragShowNolock

kernel32

SetFilePointer
ExitThread
VirtualAllocEx
GetDateFormatA
GetUserDefaultLCID
GlobalAddAtomA
GetCurrentThreadId
lstrcpyA
LockResource
lstrcmpiA
LocalFree
RaiseException
InitializeCriticalSection
GetLastError
GetVersion
LocalAlloc
HeapFree
Sleep
ExitProcess
ReadFile
CreateThread
GlobalAlloc
HeapAlloc
SetEvent
GetFileType
GetStartupInfoA
GetStringTypeA
GetStdHandle
SetLastError
GetModuleHandleA
GetCommandLineA
DeleteCriticalSection
MoveFileExA
FindFirstFileA
LoadLibraryExA
GetCurrentProcess
WideCharToMultiByte
VirtualAlloc
GetVersionExA
SetErrorMode
CreateEventA
MoveFileA
GetCurrentThread
FindResourceA

gdi32

CreateDIBSection
GetPixel

user32

GetLastActivePopup
IsMenu
CallWindowProcA
ShowWindow
DefMDIChildProcA
GetSubMenu
IsWindowVisible
DrawIcon
DrawMenuBar
GetDCEx
DefFrameProcA
SetWindowLongA
EndDeferWindowPos
MessageBoxA
GetCapture
GetMessagePos
GetSysColorBrush
SystemParametersInfoA
GetDesktopWindow
FillRect
BeginDeferWindowPos
CreatePopupMenu
GetScrollRange
FindWindowA
GetScrollPos
EnumWindows
TrackPopupMenu
GetMenu
IsChild
SetCursor
GetDC
GetCursorPos
FrameRect
CallNextHookEx
EndPaint
CharLowerBuffA
GetForegroundWindow
GetIconInfo
EnableScrollBar
GetKeyState
GetKeyNameTextA
DefWindowProcA
GetClientRect
GetDlgItem
IsDialogMessageA
DeferWindowPos
GetCursor
DispatchMessageW
GetPropA
DrawTextA
GetMenuState
GetClassInfoA
CreateIcon
CharToOemA
DrawFrameControl
SetWindowPos
ShowScrollBar
CharLowerA
CreateWindowExA
EnumChildWindows
GetMenuItemCount
GetActiveWindow
EqualRect
EnableWindow
CharNextA
GetScrollInfo
DrawEdge
CreateMenu
GetParent
SetTimer
BeginPaint
DrawIconEx
IsWindowEnabled
GetFocus
GetWindowTextA
GetSysColor
DispatchMessageA
ClientToScreen
GetClipboardData
EnumThreadWindows
GetClassLongA
CheckMenuItem
GetMenuStringA
SetWindowTextA
GetWindow
GetMenuItemID

msvcrt

calloc
srand
malloc
wcstol
clock
atol
rand
tolower
exit
time
_acmdln
memcpy
memmove
sqrt
sprintf
wcsncmp
wcschr
wcscspn
swprintf
strlen
mbstowcs

Sections

.CODE
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 512B - Virtual size: 275B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3401987d45cb1f4afcf3ed66bd5fe90f

Headers

File Characteristics

Imports

comctl32

kernel32

gdi32

user32

msvcrt

Sections

.CODE Size: 30KB - Virtual size: 30KB

.rdata Size: 114KB - Virtual size: 114KB

.data Size: 6KB - Virtual size: 65KB

.idata Size: 1KB - Virtual size: 1KB

.bss Size: 512B - Virtual size: 275B

.CODE
Size: 30KB - Virtual size: 30KB

.rdata
Size: 114KB - Virtual size: 114KB

.data
Size: 6KB - Virtual size: 65KB

.idata
Size: 1KB - Virtual size: 1KB

.bss
Size: 512B - Virtual size: 275B