20b54556a3a3101e060d2d04621b33d5

Sharing

Copy URL

Twitter E-mail

General

Target

20b54556a3a3101e060d2d04621b33d5
Size

157KB
MD5

20b54556a3a3101e060d2d04621b33d5
SHA1

a18f78bc460e15ce2f98fae4423d4856728a3a31
SHA256

56c1a28f84e286c53178a2d631a1df4409bdb5fa0c0452a244ea9defc4d6d2ad
SHA512

59ce38cd81a14d9a76e671dc6685702a458d2dd6021ae95f18e123782e79c0ba31356426f694b3ee7c31e16953f52afc4091aeef19367a3ef86d2b857ad5ff0b
SSDEEP

3072:waFoV8RSJAm1gJ5LHRpL48eSURN5QCwJ9OcMkEeIhvryajU0of3Qw4+:waKAm1gfHR5nenTcXIH1w4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

20b54556a3a3101e060d2d04621b33d5

resource
20b54556a3a3101e060d2d04621b33d5

Files

20b54556a3a3101e060d2d04621b33d5
.exe windows:5 windows x86 arch:x86

cebfabe56e90974944dbc13a922ca6ba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

FindTextW
ChooseFontW
PrintDlgExW
ChooseColorW
PrintDlgW

user32

GetWindowRect
InflateRect
DialogBoxIndirectParamA
IsCharUpperA
DefDlgProcW
GetDlgItemTextA
GetClientRect
AllowSetForegroundWindow
wvsprintfA
CharPrevA
GetActiveWindow
GetClassInfoExA
AppendMenuA
HiliteMenuItem
CreateCursor
SetMenuDefaultItem
InsertMenuA
SetWindowTextA
MessageBoxExW
GetUpdateRgn
GetClassInfoA
EnumThreadWindows
CreateIconIndirect
GetMenuStringA
MapVirtualKeyW
ShowScrollBar
IsWindowEnabled
SendDlgItemMessageW
IsDialogMessageW
RemovePropW
DispatchMessageA
FindWindowW
InvalidateRect
IsDialogMessageA
SetClassLongW
LoadStringA
LoadCursorA
SetCursorPos
InSendMessageEx
DrawIcon
DestroyIcon
ReleaseDC
IsMenu
GetDesktopWindow
SwitchToThisWindow
DrawIconEx
CharToOemBuffA
SendInput

kernel32

CallNamedPipeW
FindNextFileA
GetWindowsDirectoryW
CompareStringA
LocalFree
RemoveDirectoryA
SetPriorityClass
GlobalAddAtomA
CancelWaitableTimer
GetExitCodeThread
GetLocalTime
HeapUnlock
CreateFileMappingA
ClearCommBreak
ClearCommError
OpenFile
lstrcatW
GetCommandLineA
IsBadStringPtrW
lstrcmpiA
GetSystemWindowsDirectoryA
SearchPathW
CompareStringW

advapi32

RegCreateKeyExW
CryptDestroyKey
RegEnumKeyA
RegSetValueExA
CryptCreateHash
LookupAccountNameW

gdi32

RealizePalette
CreateSolidBrush
Escape
CreateFontA
ScaleViewportExtEx
CreateDIBSection
BeginPath
SetViewportExtEx
StartPage
CreateBitmapIndirect
CreateBitmap
EnumFontsW
SetWindowExtEx
GetDIBColorTable
SaveDC
GetTextExtentExPointW
CreateFontIndirectA
FillRgn
GetStockObject
SetPixel
CreateRoundRectRgn

Exports

Exports

FreeTimerExA@12

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 129KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cebfabe56e90974944dbc13a922ca6ba

Headers

DLL Characteristics

File Characteristics

Imports

comdlg32

user32

kernel32

advapi32

gdi32

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 23KB

.data Size: 129KB - Virtual size: 198KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 24KB - Virtual size: 23KB

.data
Size: 129KB - Virtual size: 198KB

.reloc
Size: 3KB - Virtual size: 2KB