169655aa28e793f8af562ac30307028b

Sharing

Copy URL Twitter E-mail

General

Target

169655aa28e793f8af562ac30307028b
Size

177KB
MD5

169655aa28e793f8af562ac30307028b
SHA1

20170f4508bd3267c7c92e78ad4c37bc6d2c07b3
SHA256

b28e569288671729360c7ae0247c5cf0edee678cd29e89206895e392dbea80a0
SHA512

aecb7eec78c89150bbdfe340b35660fbcb3ea751f3b9a8e7190d20c86d626b5ad875d0c27ed55f21cb9bbe8eef4926bd9c847fa787179b17c92db1ece7c5bf27
SSDEEP

3072:6nqJDr+4P/S7OYjwRFOdcP4gLg+ZRC8ZfRDVCNfZp87c:eqJK7OYjNy4ig+Z0sJZCNgc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
169655aa28e793f8af562ac30307028b

Files

169655aa28e793f8af562ac30307028b
.exe windows:4 windows x86 arch:x86

5a7574d847105472373866353de9c3d4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetInformationJobObject
OpenEventA
SetFilePointer
OpenWaitableTimerA
OpenSemaphoreA
ProcessIdToSessionId
AllocConsole
GetWindowsDirectoryA
SetEndOfFile
ReadConsoleA
AddConsoleAliasA
WriteConsoleA
GetVersion
IsBadReadPtr
GetConsoleAliasesLengthW
GetDllDirectoryA
GetConsoleWindow
QueueUserWorkItem
SetHandleInformation
GetEnvironmentStringsA
IsValidLocale
GetModuleHandleA
SetFileApisToANSI
UnlockFileEx
TlsFree
ConnectNamedPipe
FindNextVolumeMountPointA
FileTimeToLocalFileTime
QueryDosDeviceA
TlsAlloc
ReleaseMutex
HeapLock
DisconnectNamedPipe
GetCurrentDirectoryA
GetComputerNameExA
GetConsoleTitleA
WriteConsoleInputA
_lclose
ProcessIdToSessionId
GetCommandLineA
WriteProcessMemory
VirtualAllocEx
GetThreadPriority

user32

TranslateAcceleratorA
LockWorkStation
SetSysColors
CliImmSetHotKey
GetWindow
GetWindowTextA
GetClipboardOwner
PrintWindow
GetWindow
GetUserObjectSecurity
GetDCEx
EnumDisplaySettingsExA
DialogBoxParamA
PeekMessageA
CallMsgFilterA
GetKeyboardLayoutNameA
CharToOemA
PostQuitMessage
CopyRect
CloseClipboard
CreateWindowStationW
MapVirtualKeyA
DeviceEventWorker
CallNextHookEx
CallMsgFilter
MonitorFromPoint
DispatchMessageA
GetSystemMetrics
ShowOwnedPopups
GetShellWindow
OpenClipboard
CreateMDIWindowA
SendIMEMessageExA
EnumPropsExW
InSendMessageEx
TileChildWindows
PaintDesktop

hid

HidD_SetNumInputBuffers
HidD_FlushQueue

dsound

DirectSoundCreate

Exports

Exports

Aofurquhdua
EndHsejdnnp
BeginExfomieseh
Jhtwxhrvl
Mccrallbim
CreateSxnunvhojex
CloseLuqxgyqxdgm
OpenNjsbfhqfrwb
AddFfnmluiqnf
Lqhrgon
IsMyhjtwef
GetEvjuvohrymw
WriteMwjmdtb
Rtooycply
Gixdyigkdug
OpenNyorpftobuc
ReadTudwlew
Snrpmtt
Kdwmtsbbhs
Emjtldqb
Oqmwynt
InitTcdoqwciwt
CloseGrwhwlhvlpe
SetThhgqtbmo
EndUdfjofatu
Hbbmpcx
Iaugmcesabn
Cpsnuojbkt
SetXkkbwfpo
SetCsynkayan
Ywxahhuo
IsKvovvwylf

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 532B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5a7574d847105472373866353de9c3d4

Headers

File Characteristics

Imports

kernel32

user32

hid

dsound

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 1024B - Virtual size: 532B

.data Size: 162KB - Virtual size: 161KB

.idata Size: 3KB - Virtual size: 3KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 1024B - Virtual size: 532B

.data
Size: 162KB - Virtual size: 161KB

.idata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 3KB - Virtual size: 2KB