3eec040c0a4f266cda6959c7613ba0fa

Sharing

Copy URL Twitter E-mail

General

Target

3eec040c0a4f266cda6959c7613ba0fa
Size

172KB
MD5

3eec040c0a4f266cda6959c7613ba0fa
SHA1

085ab5fba8d22b9e13f4e5277d2f1d7b7926111d
SHA256

e2912488415118e0cb40ca77251313b7a4905f98a41273a1b78014cfe139142f
SHA512

40c4f79b2fdbea07ac3fbea620775f84ca58c777b94f9a3c60ed0bc0e54125638b9b6f64a546d892425b6c0709ce86254ccce910a05bad7046862eea852587a2
SSDEEP

3072:e9IkMjGC0nSRmwTCb8Hvflp0aQxxpxllh08D:TzmwTCb4p0k8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3eec040c0a4f266cda6959c7613ba0fa

Files

3eec040c0a4f266cda6959c7613ba0fa
.exe windows:4 windows x86 arch:x86

28ac7595656c551a60e2459d20417712

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadBitmapA
GetCursorPos
GetDC
ReleaseCapture
RegisterWindowMessageA
SetWindowRgn
RegisterRawInputDevices
GetSysColor
GetRegisteredRawInputDevices
SendMessageA
GetDlgItemTextA
DestroyMenu
SetWindowPos
PostQuitMessage
InsertMenuItemA
ReleaseDC
EnumDisplayDevicesA
SetWindowTextA
IsIconic
SetFocus
CreatePopupMenu
SetWindowLongA
GetWindowLongA
InvalidateRect
GetAsyncKeyState
GetMessageA
UnregisterDeviceNotification
TrackPopupMenu
GetWindow
TranslateMessage
SetForegroundWindow
GetSystemMetrics
DefWindowProcA
AdjustWindowRectEx
LoadCursorA
MessageBoxIndirectA
ShowWindow
DispatchMessageA
IsWindowVisible
DestroyWindow
EnumDisplaySettingsA
SystemParametersInfoA
MessageBoxA
RegisterHotKey
UnregisterHotKey
RegisterClassExA
SetTimer
KillTimer
SetMenu
LoadImageA
GetDlgItem
PostMessageA
BeginPaint
CreateMenu
IsWindow
SetLayeredWindowAttributes
GetRawInputData
CreateWindowExA
SetCursorPos
EnableWindow
IsWindowEnabled
CharUpperA
EndPaint
ClientToScreen
wsprintfA
CheckMenuItem
RegisterDeviceNotificationA
GetWindowRect
IsDialogMessageA
LoadIconA
SetDlgItemTextA
GetClientRect

kernel32

HeapFree
WriteFile
GetModuleHandleA
CreateThread
HeapReAlloc
CompareStringA
OutputDebugStringA
GetLastError
lstrcatA
Sleep
lstrlenA
lstrcmpA
lstrcpyA
CreateMutexA
DeleteFileA
RtlMoveMemory
GetSystemDirectoryA
ReadFile
DeviceIoControl
lstrcmpiA
GetExitCodeThread
InitializeCriticalSection
GetFileSize
RtlZeroMemory
RtlFillMemory
CloseHandle
ExitProcess
CopyFileA
TerminateThread
LeaveCriticalSection
HeapAlloc
GetCurrentDirectoryA
GetProcessHeap
GetFileAttributesA
CreateFileA
EnterCriticalSection

comctl32

InitCommonControlsEx
CreateUpDownControl
CreateStatusWindowA

gdi32

StretchBlt
SelectObject
CreateCompatibleDC
BitBlt
CreateSolidBrush
GetPixel
GetDIBits
CreateRectRgn
CombineRgn
GetObjectA
RectVisible
DeleteObject
DeleteDC
CreateCompatibleBitmap
CreateFontA

shell32

Shell_NotifyIconA

advapi32

RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA

shlwapi

SHDeleteKeyA

Sections

.text
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

28ac7595656c551a60e2459d20417712

Headers

File Characteristics

Imports

user32

kernel32

comctl32

gdi32

shell32

advapi32

shlwapi

Sections

.text Size: 116KB - Virtual size: 116KB

.idata Size: 4KB - Virtual size: 4KB

.sdata Size: 8KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 5KB

.rsrc Size: 36KB - Virtual size: 33KB

.text
Size: 116KB - Virtual size: 116KB

.idata
Size: 4KB - Virtual size: 4KB

.sdata
Size: 8KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 5KB

.rsrc
Size: 36KB - Virtual size: 33KB