3117b3ec275dbde1ca5f793d2c64f8b6

Sharing

Copy URL

Twitter E-mail

General

Target

3117b3ec275dbde1ca5f793d2c64f8b6
Size

105KB
MD5

3117b3ec275dbde1ca5f793d2c64f8b6
SHA1

d0d06f8c2fb7db66562574d3975c1c4a7fd03f0d
SHA256

c1b854b38181f970121c18f96f6c84a43d6c4fb027fb6c17fdc08cf3c7c81ce4
SHA512

f96604f05091d332de799bd8cae8e2eeed42b3affa68fe273d307a8f817bf9d1c6a9cca4479baf3440a32a7f5df3034a3949f0ce2ac71cec6a3f8811e82f1c0c
SSDEEP

1536:9toh4HDp+5M2ie7u/EWa5XGcyzfKQTE3x3EpP+GvWw:7oh4jpHXeoEf52cyzfnE3x3UP+d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3117b3ec275dbde1ca5f793d2c64f8b6

Files

3117b3ec275dbde1ca5f793d2c64f8b6
.exe windows:4 windows x86 arch:x86

433c54d67d00cef044dc6905105ae97b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetClipBox
CreateCompatibleBitmap
RestoreDC
GetCurrentPositionEx
CreateBitmap
GetDIBColorTable
GetRgnBox
CopyEnhMetaFileA

msvcrt

memcpy
calloc
memmove
wcscspn
log

kernel32

DeleteFileA
GetThreadLocale
ReadFile
SetErrorMode
MoveFileA
SizeofResource
GetStringTypeW
FindClose
ResetEvent
LocalReAlloc
WriteFile
VirtualQuery
LockResource
GetCurrentProcess
CloseHandle
InitializeCriticalSection
FreeLibrary
lstrlenA
VirtualAlloc
CreateThread
GetVersion
FindFirstFileA
CreateEventA
FormatMessageA
GetCurrentProcessId
lstrcpynA
GetModuleHandleA
WideCharToMultiByte
GetStdHandle
lstrcpyA
VirtualFree
EnterCriticalSection
FindResourceA
GetEnvironmentStrings
GlobalDeleteAtom
GetUserDefaultLCID
HeapFree
lstrcmpiA
lstrcatA
GetACP
GlobalAlloc
GetCurrentThreadId
GlobalFindAtomA
MoveFileExA
GetModuleFileNameA
Sleep
SetLastError
EnumCalendarInfoA
LoadLibraryA
HeapDestroy
GetOEMCP
LoadResource
SetEvent
ExitThread
LocalFree
GetFileSize
LoadLibraryExA
GetProcessHeap
GlobalAddAtomA
SetHandleCount
VirtualAllocEx
ExitProcess
HeapAlloc
FreeResource
GetFullPathNameA
SetThreadLocale
RaiseException
lstrcmpA
GetLocalTime
CompareStringA
WaitForSingleObject
LocalAlloc
SetFilePointer
DeleteCriticalSection
GetDiskFreeSpaceA
GetDateFormatA
MulDiv
GetProcAddress
GetVersionExA
GetSystemDefaultLangID
GetCurrentThread
GetLocaleInfoA
CreateFileA
GetTickCount
GetStartupInfoA
GetCPInfo
GetFileAttributesA
GetLastError

oleaut32

SysReAllocStringLen
SysStringLen
SafeArrayCreate
RegisterTypeLib
VariantChangeType
SafeArrayUnaccessData
SafeArrayGetUBound
SafeArrayPtrOfIndex

user32

DrawMenuBar
SetParent
SetWindowPos
CreateWindowExA
GetFocus
DrawAnimatedRects
GetDesktopWindow
GetIconInfo
EnableScrollBar
GetKeyboardState
GetScrollInfo
GetDCEx
BeginPaint
SetCapture
MessageBeep
GetKeyState
RegisterClipboardFormatA
DrawTextA
MapVirtualKeyA
DrawIconEx
InsertMenuItemA
GetMessagePos
DestroyCursor
CharUpperBuffA
UnregisterClassA
GetWindow
SetScrollInfo
LoadIconA
ReleaseCapture
SetCursor
WaitMessage
GetClassNameA
SetClipboardData
GetDlgItem
DefMDIChildProcA
GetClassLongA
SetScrollRange
DispatchMessageW
IsWindowVisible
FillRect
GetClientRect
GetWindowThreadProcessId
MessageBoxA
OpenClipboard
ShowWindow
IsDialogMessageW
SetPropA
OemToCharA
CreateMenu
CharLowerBuffA
DispatchMessageA
GetWindowTextA
CallWindowProcA
ScreenToClient
SetRect
CloseClipboard
TrackPopupMenu
FrameRect
UpdateWindow
FindWindowA
GetLastActivePopup
SetWindowLongW
GetMenuItemCount
GetClipboardData
RemovePropA
DeleteMenu
PtInRect
InsertMenuA
GetWindowRect
RegisterClassA
CharLowerA
CheckMenuItem
UnhookWindowsHookEx
EndPaint
GetSubMenu
InvalidateRect
GetCursor
GetKeyboardLayout
EnumThreadWindows
CharNextW
PeekMessageW
ChildWindowFromPoint
EnumWindows
SetForegroundWindow
IsIconic
CreatePopupMenu
ReleaseDC
TranslateMDISysAccel
SetActiveWindow
GetSysColorBrush
GetKeyboardLayoutNameA
IsWindow
GetWindowLongA
IsZoomed
SendMessageW
RedrawWindow
CallNextHookEx
LoadBitmapA
SetFocus
DefWindowProcA
PostMessageA
IsWindowUnicode
GetSystemMetrics
GetCapture
PeekMessageA
LoadKeyboardLayoutA
ActivateKeyboardLayout
ShowScrollBar
GetForegroundWindow
AdjustWindowRectEx
SetWindowTextA
GetClassInfoA
DrawEdge
WindowFromPoint
OffsetRect
InflateRect
GetPropA
DrawIcon
GetWindowDC
LoadCursorA
SystemParametersInfoA
GetMenuState
IntersectRect
RegisterWindowMessageA
CharToOemA
DestroyIcon
DestroyWindow
GetMenu
SetWindowsHookExA
GetKeyNameTextA
DrawFrameControl
EnumChildWindows
GetKeyboardLayoutList
CreateIcon
IsChild
IsWindowEnabled
LoadStringA
GetSysColor
EnableMenuItem
SetWindowLongA
DestroyMenu
MapWindowPoints
RemoveMenu
GetScrollRange
ScrollWindow
GetActiveWindow
SetScrollPos
GetMenuItemID
GetParent
GetMenuStringA
SetTimer
wsprintfA
GetScrollPos
IsDialogMessageA
GetTopWindow
TranslateMessage
GetKeyboardType
GetDC
EmptyClipboard
SetMenuItemInfoA
MsgWaitForMultipleObjects
EqualRect
SendMessageA
IsRectEmpty
MoveWindow
KillTimer
GetWindowPlacement
ShowOwnedPopups
PostQuitMessage
GetMenuItemInfoA

Sections

CODE
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

433c54d67d00cef044dc6905105ae97b

Headers

File Characteristics

Imports

gdi32

msvcrt

kernel32

oleaut32

user32

Sections

CODE Size: 91KB - Virtual size: 91KB

.init Size: 7KB - Virtual size: 7KB

.tls Size: 4KB - Virtual size: 4KB

CODE
Size: 91KB - Virtual size: 91KB

.init
Size: 7KB - Virtual size: 7KB

.tls
Size: 4KB - Virtual size: 4KB