13df8bdb0abd401314425cec58bdc158

General

Target

13df8bdb0abd401314425cec58bdc158
Size

181KB
MD5

13df8bdb0abd401314425cec58bdc158
SHA1

0be3b0bb58c0481d25b0013525951a6b9a1fad13
SHA256

e1740a4465bdbad66d631deb836589376a4a0ce674f1b911d49ed1cda79e40f4
SHA512

e87c7817d62ffb44dd402148c46a0a53702667240927f831047891b3243a058313640042e9534c57c02db846406f7a2a3e2fe1914ecd46fae86f10b35477d0a7
SSDEEP

3072:NHthAaPVgW7aBty0+fL1SZB55HDCaR63rzM:fhBVKngL4V5HWSUrzM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13df8bdb0abd401314425cec58bdc158

Files

13df8bdb0abd401314425cec58bdc158
.exe windows:4 windows x86 arch:x86

410a4c2022ac97c7732842903034c9da

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathIsSystemFolderA
StrCSpnA
SHStrDupW
UrlUnescapeW
SHCreateStreamOnFileA
PathRemoveBackslashA

shell32

ord169
ord192
SHGetSpecialFolderLocation
ord149
SHParseDisplayName
DragFinish

gdi32

IntersectClipRect
GetCharWidthFloatA
DeleteDC
RestoreDC
GetSystemPaletteEntries
CreateFontIndirectW

comctl32

ord13
ord3

kernel32

CopyFileExW
ReadFile
SetHandleInformation
GetShortPathNameW
CreateProcessW
IsValidLocale
OpenMutexA
VirtualFreeEx
GetProcAddress
LoadLibraryA
GetModuleHandleA
lstrcmpiA
CreateThread
GetDriveTypeA
DeleteCriticalSection
IsValidCodePage
ConvertFiberToThread
CreatePipe
GetVersion
OpenEventW
DeleteFiber
GetConsoleFontSize
HeapWalk
GetStartupInfoA

user32

SetMenu
InsertMenuItemW
GetClassInfoW
GetDlgItemInt
UnhookWinEvent
GetListBoxInfo
GetAsyncKeyState
SendMessageTimeoutW
CreateMenu
CallNextHookEx
GetKeyNameTextA
EnableScrollBar

msvcrt

iswgraph
memchr
vfwprintf
feof
gmtime
putchar
ldiv
realloc
getenv
mktime
tmpfile
wcsncmp
ispunct
wcscoll
_c_exit
_exit
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
memset
memmove
memcpy
_sleep
malloc
strtol

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 150KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

410a4c2022ac97c7732842903034c9da

Headers

File Characteristics

Imports

shlwapi

shell32

gdi32

comctl32

kernel32

user32

msvcrt

Sections

.text Size: 17KB - Virtual size: 17KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 150KB - Virtual size: 200KB

.text
Size: 17KB - Virtual size: 17KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 150KB - Virtual size: 200KB