4131186f91a56b8416c9df7dd2b3179d

Sharing

Copy URL Twitter E-mail

General

Target

4131186f91a56b8416c9df7dd2b3179d
Size

98KB
MD5

4131186f91a56b8416c9df7dd2b3179d
SHA1

b4284c0f37bb8f3846ab6e6b959986c897ed3e77
SHA256

bdc1b449a281740d46304c69614018476e1f63fdf7c78bde6e38ee31b7e00db0
SHA512

64a9723f1a51ab116eefabf5230412a1f0a3a5ee3fab5739b545c797f538c29be94ff168a51f5ff6b36932b1da1f3709b510ecc9d8d69639cd5f62292a9b00c4
SSDEEP

1536:NHOCamqHmKQYuUdxQ0EKFzm+cbn7iC79T7hXWLNK/IejaISxTlYinh:NHXavQXoxQZKBm+u7Z7VdGLNK/IHxTa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4131186f91a56b8416c9df7dd2b3179d

Files

4131186f91a56b8416c9df7dd2b3179d
.exe windows:4 windows x86 arch:x86

11494d4855892879064a3bcfe098f667

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsChild
DefFrameProcA
EnumThreadWindows
GetPropA
GetParent
IsWindowEnabled
EnableMenuItem
EndPaint
CallNextHookEx
DefWindowProcA
GetSysColorBrush
EnableWindow
GetDC
RegisterClassA
GetWindow
EndDeferWindowPos
EqualRect
CreatePopupMenu
GetLastActivePopup
GetScrollPos
GetCapture
GetForegroundWindow
MessageBoxA
GetSubMenu
ShowScrollBar
GetMenuState
GetKeyState
SetWindowTextA
SystemParametersInfoA
GetKeyNameTextA
GetScrollRange
FrameRect
DispatchMessageA
GetClipboardData
GetMenu
EnumChildWindows
DrawTextA
BeginPaint
CharLowerBuffA
GetFocus
GetDCEx
CallWindowProcA
CreateMenu
GetClassInfoA
DrawMenuBar
GetDesktopWindow
GetScrollInfo
GetMenuItemCount
SetTimer
CharLowerA
CharNextA
CreateWindowExA
DrawEdge
GetClientRect
GetCursor
GetMenuItemID
HideCaret
SetCursor
DrawIconEx
GetActiveWindow
EnumWindows
FindWindowA
GetIconInfo
GetSysColor
IsMenu
EnableScrollBar
SetWindowLongA
BeginDeferWindowPos
TrackPopupMenu
GetWindowTextA
IsWindowVisible
CreateIcon
DrawFrameControl
ShowWindow
SetWindowPos
ClientToScreen
GetMessagePos
CharToOemA

gdi32

GetDIBColorTable
BitBlt
CreateDIBitmap
GetObjectA
SelectPalette
RestoreDC

kernel32

SetEndOfFile
lstrcpynA
GetModuleHandleA
GetStringTypeW
SetThreadLocale
FindResourceA
ExitThread
FormatMessageA
GetOEMCP
GetProcAddress
GetDateFormatA
GetCurrentProcess
SetHandleCount
GetLocaleInfoA
lstrcpyA
HeapDestroy
GetLastError
FindFirstFileA
GetVersionExA
VirtualAllocEx
GetEnvironmentStrings
GetCurrentThread
EnumCalendarInfoA
WriteFile
GetLocalTime
GetACP
CompareStringA
FreeLibrary
GetFileSize
lstrlenA
GetCommandLineA
GetCPInfo
FindClose
HeapFree
GetCurrentProcessId
GlobalAlloc
CloseHandle
CreateThread
RaiseException
LoadLibraryExA
Sleep
ResetEvent
GetVersion
LocalFree
lstrcmpA
GetFileAttributesA
GetStdHandle
WideCharToMultiByte
HeapAlloc
GetStringTypeA
VirtualQuery
VirtualFree
GetCurrentThreadId
ReadFile
CreateFileA
GetProcessHeap
LoadLibraryA
LoadResource
GetFullPathNameA
DeleteCriticalSection
GlobalAddAtomA
SetFilePointer
LocalReAlloc
LocalAlloc
FreeResource
GlobalFindAtomA
GetSystemDefaultLangID
SetErrorMode
GetStartupInfoA
GetFileType
MoveFileA
MoveFileExA
MulDiv
GetTickCount
GetModuleFileNameA
SetLastError
ExitProcess
DeleteFileA
GlobalDeleteAtom
LockResource
GetThreadLocale
WaitForSingleObject
VirtualAlloc
CreateEventA
GetUserDefaultLCID
SetEvent

comdlg32

FindTextA
GetOpenFileNameA

shlwapi

PathFileExistsA
SHDeleteValueA
SHGetValueA
SHQueryInfoKeyA
SHQueryValueExA
PathIsDirectoryA

version

VerInstallFileA
VerFindFileA
GetFileVersionInfoA

oleaut32

VariantCopyInd
SysStringLen
VariantChangeType
SafeArrayGetUBound
SafeArrayGetElement
SysAllocStringLen
SysReAllocStringLen
SafeArrayUnaccessData
SafeArrayPtrOfIndex

ole32

ReleaseStgMedium
GetHGlobalFromStream
CoUninitialize
CoGetObjectContext
PropVariantClear
CoGetMalloc
StgOpenStorage

msvcrt

swprintf
wcscspn
rand
exp
strcmp
atol
log
memcpy
calloc
memmove

Sections

CODE
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

11494d4855892879064a3bcfe098f667

Headers

File Characteristics

Imports

user32

gdi32

kernel32

comdlg32

shlwapi

version

oleaut32

ole32

msvcrt

Sections

CODE Size: 49KB - Virtual size: 48KB

.idata Size: 47KB - Virtual size: 47KB

.edata Size: 512B - Virtual size: 119B

CODE
Size: 49KB - Virtual size: 48KB

.idata
Size: 47KB - Virtual size: 47KB

.edata
Size: 512B - Virtual size: 119B