1591a8b8c229560989aa8e9255d8218b

Sharing

Copy URL

Twitter E-mail

General

Target

1591a8b8c229560989aa8e9255d8218b
Size

444KB
MD5

1591a8b8c229560989aa8e9255d8218b
SHA1

5487c47f7ba55fe623e46dbc4ab33e31cd57b62f
SHA256

48a54fc074f3af07e6bf382f3a342f96562a3f8c5aff18a690deb9c64cf2ccc1
SHA512

dfb922f91c68949273aecd781f90991bb2f21230148ff5b77b2ec8f10720cdcd7f342430d74c5033693732058706629c6d8370e4fbdd5236f6fc644f699191a5
SSDEEP

12288:KS/9s2DKdRhUBBN7ziwcT3d5fpfW8DPyb:Ps2WdTU5YFWk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1591a8b8c229560989aa8e9255d8218b

Files

1591a8b8c229560989aa8e9255d8218b
.exe windows:5 windows x86 arch:x86

09123fcf9c5f88c62cdc45398890414d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegEnumKeyExW
RegQueryInfoKeyW
CloseServiceHandle
RegCreateKeyExW
RegQueryValueExW

user32

GetWindowLongW
SetDlgItemTextW
GetForegroundWindow
EnableWindow
RegisterClassExW
MessageBoxIndirectW
KillTimer
IsWindow
InvalidateRect
GetCursorPos
SetCursor
CopyIcon
SetForegroundWindow
BeginPaint
GetWindowTextW
IsDlgButtonChecked
SetWindowLongW
CharUpperBuffW
LoadImageW
PtInRect
SendNotifyMessageW
DestroyWindow
DrawTextW
IsWindowVisible
wsprintfW
DeferWindowPos
PostThreadMessageW
FrameRect

gdi32

Ellipse
CreateCompatibleDC
LineTo
GetTextMetricsW
StretchBlt
DeleteDC
GetObjectW
DeleteObject

ole32

FreePropVariantArray
CoTaskMemFree
CoTaskMemAlloc
PropVariantClear
StringFromCLSID
CoAllowSetForegroundWindow
CLSIDFromString

gdiplus

GdipGetImageGraphicsContext
GdipRemovePropertyItem
GdipGetImageWidth
GdipGetImageHeight
GdiplusStartup
GdipGetImageDecodersSize

kernel32

MultiByteToWideChar
GetHandleInformation
FindClose
GetTickCount
GetStartupInfoW
FreeLibraryAndExitThread
CreateEventA
CopyFileW
CreateEventW
LocalAlloc
lstrcpynW
MapViewOfFile
VirtualAllocEx
LocalFree
CloseHandle
HeapDestroy
WaitForSingleObject
WriteFile
GetCommandLineW
LoadLibraryExW
SizeofResource
lstrlenW
GetTickCount
GetSystemDirectoryW
GetFileAttributesW
InterlockedIncrement
WaitForSingleObject
CreateDirectoryW
GetShortPathNameW
UnmapViewOfFile
MoveFileW
QueryPerformanceCounter
GetLocalTime
GetFullPathNameW
GetLastError

shlwapi

PathFindFileNameW
ord437
StrToIntExW

msvcrt

_adjust_fdiv
_vsnwprintf
_except_handler3
free
wcsncpy
?terminate@@YAXXZ
_wcmdln
_cexit

shell32

SHChangeNotify
ord155
SHParseDisplayName
ord152
SHBrowseForFolderW
ord16
SHOpenFolderAndSelectItems
SHGetSpecialFolderLocation

Sections

.text
Size: 410KB - Virtual size: 410KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

09123fcf9c5f88c62cdc45398890414d

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

user32

gdi32

ole32

gdiplus

kernel32

shlwapi

msvcrt

shell32

Sections

.text Size: 410KB - Virtual size: 410KB

.data Size: 27KB - Virtual size: 26KB

.rsrc Size: 6KB - Virtual size: 280KB

.text
Size: 410KB - Virtual size: 410KB

.data
Size: 27KB - Virtual size: 26KB

.rsrc
Size: 6KB - Virtual size: 280KB