0a56b5561922e363f0aebc1ccb19518f

Sharing

Copy URL Twitter E-mail

General

Target

0a56b5561922e363f0aebc1ccb19518f
Size

140KB
MD5

0a56b5561922e363f0aebc1ccb19518f
SHA1

4bbb6648eebe5b3d0c72d373ff636e584f1e8a11
SHA256

6d13175ed06c89c7e4ebed4c7a8a70fffe04aa718aaeacd46f0609af3ba70fb1
SHA512

f4c7347d2e41c1474f96efd201a54dbfd812c41f86c375868dcc9755d32b97ae9c48fe419435d7b590c8163a928a739d6d78493b1dc4d562c7ccdd3fb35bb867
SSDEEP

3072:xXHmGOPT81ruQ1CIpoaPgu94bacWTjt3bEOz75gJwjTTYmLL6:kxb6IGxL94GrTjt3t5rjTTYN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a56b5561922e363f0aebc1ccb19518f

Files

0a56b5561922e363f0aebc1ccb19518f
.exe windows:5 windows x86 arch:x86

16cdfe59914ee7a3c96176e6cef80bdc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strtol
remove
_controlfp
strerror
fgetc
vswprintf
free
calloc
bsearch
__set_app_type
strcpy
malloc
__p__fmode
isspace
memset
wcstod
wcstoul
tolower
strncpy
getenv
__p__commode
fclose
iswctype
_amsg_exit
qsort
strpbrk
iswdigit
_initterm
gets
clock
_ismbblead
islower
wcsncmp
setlocale
iswalpha
strchr
strcspn
wcschr
iswspace
swscanf
wcslen
system
_XcptFilter
_exit
_cexit
__setusermatherr
atoi
isalnum
__getmainargs
isupper

user32

IsCharAlphaW
SetWindowLongW
DrawMenuBar
CreateWindowExA
DestroyAcceleratorTable
CreateMenu
PostMessageW
WaitMessage
FindWindowA
LoadBitmapA
GetClassInfoExA
GetSystemMetrics
CheckMenuItem
GetKeyboardLayoutNameW
DefWindowProcW
PeekMessageA
InsertMenuA
CreateDialogParamA
InflateRect
ScreenToClient
SetScrollInfo
CharNextA
SetFocus
ReleaseDC
GetDlgItem
CreatePopupMenu
SetClassLongW
SendMessageTimeoutA
BeginDeferWindowPos
GetDlgItemTextA
WindowFromPoint
DrawIcon
DefWindowProcA
DrawTextW
SendMessageW
DestroyCaret
DestroyWindow
InternalGetWindowText
CharUpperBuffA
GetClassLongA
OemToCharBuffA
CreateAcceleratorTableW
OpenDesktopW
CheckDlgButton
SetMenuItemBitmaps
RegisterClassA
wsprintfW
GetSysColorBrush
EndPaint
OffsetRect
GetKeyNameTextW
LoadImageA
GetUpdateRect
SetSysColors
LoadCursorW
EnableScrollBar
ShowWindowAsync
CascadeWindows
GetMenuStringA
GetWindowRect
PostThreadMessageA
AttachThreadInput
SendNotifyMessageW
EnumWindows
FrameRect
CreateDialogParamW
ArrangeIconicWindows
CharUpperW
GetMenuItemInfoW
SetWindowLongA
CreateIconIndirect
CallWindowProcW
CallWindowProcA
GetScrollPos
RegisterClassExW
DefDlgProcW
DialogBoxParamA
GetDCEx
CreateCursor
PostQuitMessage
GetWindowDC
SetRect
ShowCaret
FindWindowW
LoadMenuA
GetMenuItemID
LoadImageW
DrawEdge
GetClassLongW
GetPropW
CheckRadioButton
GetClassNameW
DeferWindowPos
SetCursor
OemToCharA
SetPropW
GetClipCursor
GetFocus
LoadBitmapW
LookupIconIdFromDirectory
EndDialog
GetParent
KillTimer
DispatchMessageW
SetDlgItemInt
CharToOemA
GetMessageTime
CharUpperA
GetKeyboardLayoutList
GetMenuItemRect
SetWindowPlacement
GetMessagePos
GetClassInfoExW
UnionRect
GetDlgItemTextW
DrawFocusRect
GetDoubleClickTime
DrawIconEx
EnableMenuItem
GetCursorPos
CharPrevA
CharToOemW

kernel32

LockResource
GetProcAddress
GetThreadContext
QueryDosDeviceW
GetThreadPriority
lstrcmpiW
GetVersion
GetCommProperties
HeapLock
GetBinaryTypeW
GlobalSize
SetEndOfFile
lstrcmpA
SetCommBreak
CancelIo
CreateWaitableTimerA
FileTimeToDosDateTime
GetUserDefaultLangID
lstrlenW
LocalSize
GetCommandLineA
GlobalFindAtomW
GetCompressedFileSizeW
WinExec
GlobalMemoryStatus
CopyFileA
SetFileAttributesA
DeleteCriticalSection
GlobalGetAtomNameW
SetWaitableTimer
SetMailslotInfo
lstrcpyA
SuspendThread
GetModuleHandleA
CreateDirectoryA
TryEnterCriticalSection
SetHandleCount
SetUnhandledExceptionFilter
GlobalAddAtomA
FlushFileBuffers
GlobalLock
CreateEventW
CopyFileW
FindNextFileW
CompareStringA
FormatMessageA
GetThreadTimes
LoadLibraryExW
LCMapStringA
GetACP
GetTempFileNameA
HeapCreate
AreFileApisANSI
SearchPathA

shlwapi

PathIsUNCA

comdlg32

ReplaceTextW
ChooseColorW
GetOpenFileNameA
GetOpenFileNameW
ChooseFontW
GetSaveFileNameA

Exports

Exports

?ForwardControlItem@@YGK_KK:O

Sections

.itext
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ips1
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ips2
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.read
Size: 1024B - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ips3
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ips4
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

16cdfe59914ee7a3c96176e6cef80bdc

Headers

File Characteristics

Imports

msvcrt

user32

kernel32

shlwapi

comdlg32

Exports

Exports

Sections

.itext Size: 21KB - Virtual size: 21KB

.ips1 Size: 6KB - Virtual size: 5KB

.ips2 Size: 512B - Virtual size: 88B

.read Size: 1024B - Virtual size: 124KB

.ips3 Size: 1024B - Virtual size: 704B

.data Size: 3KB - Virtual size: 2KB

.ips4 Size: 31KB - Virtual size: 31KB

.rsrc Size: 73KB - Virtual size: 72KB

.reloc Size: 2KB - Virtual size: 1KB

.itext
Size: 21KB - Virtual size: 21KB

.ips1
Size: 6KB - Virtual size: 5KB

.ips2
Size: 512B - Virtual size: 88B

.read
Size: 1024B - Virtual size: 124KB

.ips3
Size: 1024B - Virtual size: 704B

.data
Size: 3KB - Virtual size: 2KB

.ips4
Size: 31KB - Virtual size: 31KB

.rsrc
Size: 73KB - Virtual size: 72KB

.reloc
Size: 2KB - Virtual size: 1KB