11b4dcd803040af7c1ce8011e7456663

Sharing

Copy URL Twitter E-mail

General

Target

11b4dcd803040af7c1ce8011e7456663
Size

66KB
MD5

11b4dcd803040af7c1ce8011e7456663
SHA1

c3439f3dd1a1cd2dadd9527ef93b9828ca4f0d11
SHA256

9698544b37edf90cd9da8d6e64f4c47c647cdc6bbfe632c5ab091c9a72bd0b0f
SHA512

e12f42da30c0072253f85cd087eb8fa437573c439ef79bba642d0c3a6b3fcf922bf9eb85e039081de9c2e0df8b435a0c22149770d885c5d439a7275a26286aee
SSDEEP

1536:1aOx7WceEcerECMW7sMkwvJtq5S+687hi:EOlWOGbMDqgghi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11b4dcd803040af7c1ce8011e7456663

Files

11b4dcd803040af7c1ce8011e7456663
.exe windows:5 windows x86 arch:x86

0af30ac3d7ee3adbc15a3b13c01e201c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

setvbuf
_controlfp
__set_app_type
towupper
strchr
__p__fmode
strcoll
iswspace
strspn
__p__commode
time
_amsg_exit
vsprintf
swprintf
wcstoul
toupper
isxdigit
_initterm
fputc
calloc
fgetc
strcspn
_ismbblead
_XcptFilter
_exit
strerror
wcspbrk
vswprintf
wcscspn
iswdigit
getc
strstr
sprintf
mbtowc
isspace
towlower
_cexit
fflush
wcstol
__setusermatherr
strtoul
wcscpy
__getmainargs
strrchr
qsort
islower
strncmp

user32

CharLowerW
ScrollWindow
TranslateMessage
GetParent
ValidateRect
GetMessageExtraInfo
SetDlgItemTextA
GetWindowLongA
ReplyMessage
SendMessageW
GetClassLongA
GetKeyboardLayout
GetSubMenu
GetScrollInfo
LoadImageA
DrawTextA
DeleteMenu
GetTopWindow
DestroyCaret
DrawEdge
GetClassInfoW
AdjustWindowRectEx
ShowOwnedPopups
GetClipCursor
TranslateAcceleratorW
GetMonitorInfoW
GetScrollPos
ScrollWindowEx
CharNextA
DefDlgProcA
SetWindowRgn
BringWindowToTop
DestroyCursor
LockWindowUpdate
GetNextDlgTabItem
WaitMessage
DefDlgProcW
GetKeyboardType
SetForegroundWindow
DrawTextW
ShowCaret
GetDCEx
FindWindowW
CharToOemBuffA
ClipCursor
SystemParametersInfoA
GetClassInfoExW
GetScrollRange
CreateDialogParamA
GetAsyncKeyState
IsDlgButtonChecked
GetUpdateRgn
DestroyAcceleratorTable
RedrawWindow
HiliteMenuItem
CharUpperW
GetKeyNameTextW
DefWindowProcW
GetMenuItemID
CharNextExA
IsDialogMessageA
wsprintfA
CascadeWindows
GetSystemMetrics
GetClientRect
CharToOemA
GetUpdateRect
GetDlgItemTextW
EnableWindow
CloseDesktop
CopyAcceleratorTableW
GetMenu
DialogBoxIndirectParamA
GetWindowPlacement
DrawIcon
CreateIconIndirect
PostMessageW
AdjustWindowRect
GetDC
EnumChildWindows
wvsprintfA
FrameRect
InvalidateRect
OffsetRect
GetKeyState
ActivateKeyboardLayout
WaitForInputIdle
CharPrevW
ShowScrollBar
ShowWindow
EqualRect
DrawMenuBar
DragObject
GetClassLongW
SetSysColors
DispatchMessageA
GetDialogBaseUnits
SetMenuDefaultItem
TabbedTextOutW
FindWindowExW
DeferWindowPos
GetKeyboardLayoutList
GetMenuState
GetDlgItemTextA
LoadMenuA
InsertMenuW
FillRect
MonitorFromPoint
IsWindowUnicode
DestroyWindow
ChildWindowFromPoint
SetWindowTextW
mouse_event
SetWindowLongW
MapVirtualKeyExW
InternalGetWindowText
GetMenuCheckMarkDimensions
GetWindowTextW
CreateIconFromResource
SwitchToThisWindow
CreatePopupMenu
PostQuitMessage

kernel32

LeaveCriticalSection
IsBadReadPtr
FindFirstChangeNotificationW
GetFileSize
DefineDosDeviceW
AddAtomA
GetShortPathNameA
CreateMailslotW
FoldStringW
GetFullPathNameW
IsBadCodePtr
GlobalAddAtomW
SetNamedPipeHandleState
CompareStringA
WaitCommEvent
EscapeCommFunction
SetFilePointer
LocalUnlock
WaitForMultipleObjectsEx
SearchPathW
GetFileAttributesExW
SetCommTimeouts
CreateEventW
FlushViewOfFile
RemoveDirectoryW
OpenFile
GlobalMemoryStatus
GetThreadLocale
GetFileType
CreateRemoteThread
CopyFileA
GetUserDefaultLCID
GetLastError
SetCommBreak
VirtualQuery
IsValidLocale
GetModuleFileNameA
CreateFileMappingA
LoadLibraryA
SetFileApisToOEM
FormatMessageW
EnumSystemLocalesA
GetUserDefaultLangID
InitializeCriticalSection
GetLocaleInfoA
lstrcpynA
GlobalUnlock
CreatePipe
CopyFileW
GlobalFree
MoveFileA
lstrlenA
GetVersion
lstrcatA
SetLocalTime

shlwapi

StrToIntW

gdi32

ExtTextOutA
Escape
RestoreDC
GetTextMetricsW
GetTextCharsetInfo
StartPage
PathToRegion
GetViewportOrgEx
GetSystemPaletteEntries
GetNearestPaletteIndex
CreateHalftonePalette
SetWindowExtEx
CreateHatchBrush
WidenPath
EnumFontFamiliesW
UnrealizeObject
SetTextAlign
Rectangle
MoveToEx
DPtoLP
GetCurrentObject
GetTextExtentPoint32W
GetWindowOrgEx
GetTextMetricsA
EndPage
CreatePatternBrush
CreatePalette
CreateDCW
GetCharWidth32W
ExtFloodFill
GetDIBColorTable
PtVisible
AddFontResourceW
SetLayout
GetObjectW
ScaleWindowExtEx
GetObjectA
GetMapMode
SetViewportExtEx
GetTextExtentPointW
GetLayout
RectVisible
EndPath
GetTextExtentPoint32A
SelectObject
EnumFontFamiliesExW
ExcludeClipRect
OffsetRgn
CreatePenIndirect
TranslateCharsetInfo
SetBrushOrgEx

Exports

Exports

?GetShiftAltInfo@@YGK_KHE:O

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bit
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.insec
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.inmin
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wall
Size: 512B - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0af30ac3d7ee3adbc15a3b13c01e201c

Headers

File Characteristics

Imports

msvcrt

user32

kernel32

shlwapi

gdi32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 7KB

.bit Size: 1KB - Virtual size: 1KB

.insec Size: 6KB - Virtual size: 5KB

.inmin Size: 512B - Virtual size: 86B

.wall Size: 512B - Virtual size: 42KB

.zdata Size: 12KB - Virtual size: 12KB

.data Size: 2KB - Virtual size: 1KB

.tls Size: 512B - Virtual size: 512B

.rsrc Size: 32KB - Virtual size: 31KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 7KB

.bit
Size: 1KB - Virtual size: 1KB

.insec
Size: 6KB - Virtual size: 5KB

.inmin
Size: 512B - Virtual size: 86B

.wall
Size: 512B - Virtual size: 42KB

.zdata
Size: 12KB - Virtual size: 12KB

.data
Size: 2KB - Virtual size: 1KB

.tls
Size: 512B - Virtual size: 512B

.rsrc
Size: 32KB - Virtual size: 31KB

.reloc
Size: 1KB - Virtual size: 1KB