1daf5169da5057d551b9f6e596901766

Sharing

Copy URL Twitter E-mail

General

Target

1daf5169da5057d551b9f6e596901766
Size

519KB
MD5

1daf5169da5057d551b9f6e596901766
SHA1

5d0068280ded90bd4e2808013ab4054b97262e6c
SHA256

76fe65138bf6d561b05a44323eede23397a3ce7f2422d48d7b5e62177ae7e5ea
SHA512

b9787a6e3781c7b6a70fb7f4cc6f1541ed54917e9677e48b4e375f3191bdabe8eb233583c8b8af1e96889941ab50e9617aae6f5301449d447a71672c9eeffce4
SSDEEP

12288:rF6JmEWAonwmdnYShoOJyA/WZH90xNGx88rEu4n0+3C4:rFcmEWHnwmdYqpJRuZ90xN78OJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1daf5169da5057d551b9f6e596901766

Files

1daf5169da5057d551b9f6e596901766
.exe windows:4 windows x86 arch:x86

e74655f4b077d422d0c92f2aac6ccde9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsRectEmpty
PtInRect
AppendMenuA
DlgDirListComboBoxW
DefDlgProcA
LookupIconIdFromDirectory
RegisterClassExA
MapVirtualKeyW
GetLastActivePopup
GetClipboardOwner
DrawTextW
GetWindowTextLengthA
wvsprintfW
LoadKeyboardLayoutW
ScrollDC
InvalidateRect
DlgDirListComboBoxA
SendMessageTimeoutW
RegisterWindowMessageA
DefMDIChildProcA
DlgDirSelectComboBoxExA
RegisterClassA

kernel32

InterlockedDecrement
SetConsoleCtrlHandler
lstrcpyn
GetCurrentProcess
GetDateFormatA
SetStdHandle
GetDateFormatW
GetStringTypeW
GetSystemDefaultLangID
WaitForSingleObjectEx
CreateFileA
GetCurrentProcessId
GetStartupInfoA
GetProfileSectionA
CreateMutexA
ReadConsoleOutputW
GetTickCount
Sleep
HeapFree
CompareStringA
SetLastError
FreeEnvironmentStringsA
GetConsoleOutputCP
WriteConsoleA
SetEnvironmentVariableA
lstrcmpi
GetLocaleInfoA
WideCharToMultiByte
TerminateProcess
GetProcAddress
QueryPerformanceCounter
DeleteCriticalSection
WriteConsoleW
InitializeCriticalSection
TlsFree
LeaveCriticalSection
ExitProcess
HeapCreate
GetLastError
GetTempPathW
HeapDestroy
RtlUnwind
GetUserDefaultLCID
LoadLibraryA
HeapSize
TlsAlloc
GetModuleHandleA
IsDebuggerPresent
GetLocaleInfoW
ReadFile
GetProfileIntW
GetPrivateProfileStructW
GetTimeFormatA
CompareStringW
GetSystemTimeAsFileTime
GetConsoleMode
GetOEMCP
EnterCriticalSection
LCMapStringW
HeapAlloc
TlsSetValue
GetCommandLineA
OpenMutexA
GetConsoleCP
GetCommandLineW
IsValidLocale
TlsGetValue
GetPrivateProfileSectionNamesA
WriteFile
LCMapStringA
SetFilePointer
CloseHandle
GetCPInfo
VirtualQuery
FreeEnvironmentStringsW
GetProcessHeap
GetCurrentThreadId
SetUnhandledExceptionFilter
GetEnvironmentStrings
GetStdHandle
FoldStringA
SetEvent
lstrcat
IsValidCodePage
FlushInstructionCache
GetTimeZoneInformation
GetACP
HeapReAlloc
GetFileType
InterlockedIncrement
OpenMutexW
GetVersionExA
MultiByteToWideChar
UnhandledExceptionFilter
FreeLibrary
GetModuleFileNameA
CreateWaitableTimerW
GetCurrentThread
GetStringTypeA
InterlockedExchange
GetEnvironmentStringsW
FlushFileBuffers
SetHandleCount
CreateSemaphoreA
EnumSystemLocalesA
VirtualFree
ResumeThread
VirtualAlloc

comctl32

InitCommonControlsEx

Sections

.text
Size: 363KB - Virtual size: 362KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e74655f4b077d422d0c92f2aac6ccde9

Headers

File Characteristics

Imports

user32

kernel32

comctl32

Sections

.text Size: 363KB - Virtual size: 362KB

.rdata Size: 41KB - Virtual size: 69KB

.data Size: 106KB - Virtual size: 106KB

.rsrc Size: 7KB - Virtual size: 7KB

.text
Size: 363KB - Virtual size: 362KB

.rdata
Size: 41KB - Virtual size: 69KB

.data
Size: 106KB - Virtual size: 106KB

.rsrc
Size: 7KB - Virtual size: 7KB