15d4db943bbf40e3f4ff099e46b2b5ba

Sharing

Copy URL Twitter E-mail

General

Target

15d4db943bbf40e3f4ff099e46b2b5ba
Size

352KB
MD5

15d4db943bbf40e3f4ff099e46b2b5ba
SHA1

30f6d0e950abff5ec64011371eaa29bfb3539ab5
SHA256

47a62518a6ae7ca42728847eb1cd98f11cdd39d0f1d59b7f8752cce0136220e0
SHA512

22c3fb8d07c34737be4efd50353397e66434f961702a50d0946703a05ad49c75d36aef83907c6acde963554907c51a7186d1d7dc460ea5ea79707f4ac9555365
SSDEEP

6144:FZwxeeqSjqfVi/1TC3EMO5fNmK0fl1je0woj3LTv45t4atc0lKfXfSqqc:FZQv+fVi/1TbmFjeAVat7+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15d4db943bbf40e3f4ff099e46b2b5ba

Files

15d4db943bbf40e3f4ff099e46b2b5ba
.exe windows:4 windows x86 arch:x86

f1468f8107aa7a36d4a20be321aafc42

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileA
GetFullPathNameA
CreateDirectoryA
GetVersionExA
SetEndOfFile
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
FlushFileBuffers
GetDriveTypeA
GetCurrentDirectoryA
HeapSize
GetFileType
GetStdHandle
SetHandleCount
SetFilePointer
WriteFile
SetUnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
FreeLibrary
GetEnvironmentVariableA
GetVersion
GetStartupInfoA
TerminateProcess
ExitProcess
GetLastError
RtlUnwind
RaiseException
HeapFree
HeapAlloc
GetModuleFileNameA
CloseHandle
ReadFile
GetFileSize
CreateFileA
Sleep
GetCommandLineA
QueryPerformanceCounter
QueryPerformanceFrequency
LoadLibraryA
DeleteFileA
GetProcAddress
GetFileAttributesA
SetPriorityClass
FindClose
GetModuleHandleA
GetCurrentProcess
GetTempPathA

user32

SetDlgItemTextA
ScreenToClient
ClientToScreen
DispatchMessageA
GetCursorPos
GetAsyncKeyState
EnableWindow
SendDlgItemMessageA
IsDlgButtonChecked
EndDialog
SetWindowTextA
SendMessageA
EnableMenuItem
KillTimer
SetCursor
GetWindowTextA
GetDlgItem
CheckDlgButton
GetDlgItemTextA
GetParent
CheckRadioButton
CharNextA
LoadIconA
LoadCursorA
RegisterClassExA
LoadAcceleratorsA
CreateWindowExA
ShowWindow
UpdateWindow
SetFocus
PeekMessageA
TranslateAcceleratorA
TranslateMessage
SetCursorPos
GetMessageA
PostQuitMessage
DefWindowProcA
BeginPaint
EndPaint
PostMessageA
ChildWindowFromPoint
GetDlgCtrlID
GetWindowRect
SetMenuItemInfoA
SetForegroundWindow
DialogBoxParamA
MessageBoxA
GetSystemMetrics
SetRect
GetWindowLongA
AdjustWindowRectEx
SetWindowLongA
SetMenu
SetWindowPos
GetMenu
SetTimer
GetMenuItemCount
DeleteMenu
AppendMenuA
DrawMenuBar
GetSubMenu
CheckMenuRadioItem
GetClientRect
GetDC
ReleaseDC
GetForegroundWindow

gdi32

DeleteDC
CreateCompatibleDC
CreateDIBSection
BitBlt
RealizePalette
GetStockObject
SetDIBColorTable
AnimatePalette
SetPaletteEntries
SelectPalette
DeleteObject
StretchBlt
SelectObject
CreatePalette

advapi32

RegCloseKey
RegCreateKeyA
RegSetValueExA
RegSetValueA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA

shlwapi

PathAddBackslashA
PathRemoveFileSpecA
PathUnquoteSpacesA
PathFindFileNameA
PathRemoveExtensionA
StrChrA

shell32

DragFinish
DragQueryFileA
DragAcceptFiles
SHBrowseForFolderA
DragQueryPoint
SHGetPathFromIDListA
SHGetMalloc

winmm

timeBeginPeriod
timeGetTime
timeEndPeriod

comctl32

ord17

comdlg32

GetSaveFileNameA
GetOpenFileNameA

ddraw

DirectDrawEnumerateA
DirectDrawCreate

dsound

ord1

dinput

DirectInputCreateA

Sections

.text
Size: 280KB - Virtual size: 279KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 24KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f1468f8107aa7a36d4a20be321aafc42

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shlwapi

shell32

winmm

comctl32

comdlg32

ddraw

dsound

dinput

Sections

.text Size: 280KB - Virtual size: 279KB

.rdata Size: 24KB - Virtual size: 21KB

.data Size: 24KB - Virtual size: 63KB

.rsrc Size: 20KB - Virtual size: 19KB

.text
Size: 280KB - Virtual size: 279KB

.rdata
Size: 24KB - Virtual size: 21KB

.data
Size: 24KB - Virtual size: 63KB

.rsrc
Size: 20KB - Virtual size: 19KB