31a481c8b69a460be98a39c6110ea3a3

Sharing

Copy URL Twitter E-mail

General

Target

31a481c8b69a460be98a39c6110ea3a3
Size

140KB
MD5

31a481c8b69a460be98a39c6110ea3a3
SHA1

1136d505fd8fca2e260e5de6d05f8adbfecbad27
SHA256

47de2c5d59d3196ef3cff9871f7d159ab8ec6cc84c4ea358da37520ce9b51c66
SHA512

e62cad4c0168d3e27435ce57f073794712cd4722de504d9f92e2cb561ee24d18a53b180e5532f03079bcb557787b5943ace4fb315c5bbb29a9d7bb2fa8c99c86
SSDEEP

3072:25OvwQqmwRoNm8WuFzQq9oMyjTDqMGyClgLIflBCxHGD5pfWuK:nomwRozzFzB6MyjTDtGytQlB6HGDvfW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31a481c8b69a460be98a39c6110ea3a3

Files

31a481c8b69a460be98a39c6110ea3a3
.exe windows:5 windows x86 arch:x86

4807ababc00910adafb72f808114aaf5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

isxdigit
_controlfp
wcschr
free
wcsrchr
wcstoul
strtoul
islower
swprintf
memset
isspace
towlower
ftell
__set_app_type
strcoll
iswxdigit
putc
__p__fmode
mbstowcs
__p__commode
fwrite
_amsg_exit
iswprint
strtol
wcspbrk
isalnum
floor
_initterm
gmtime
_ismbblead
fclose
iswctype
_XcptFilter
srand
_exit
setlocale
tolower
fread
isprint
vsprintf
strstr
_cexit
printf
setvbuf
wcstok
__setusermatherr
__getmainargs
towupper

user32

GetKeyboardLayoutNameW
GetShellWindow
CreateMenu
MapVirtualKeyExW
GetAsyncKeyState
DestroyAcceleratorTable
CheckRadioButton
DispatchMessageW
IsDialogMessageA
ToUnicodeEx
GetMenuItemInfoW
SendDlgItemMessageW
GetFocus
GetClassNameW
TileWindows
IsWindowEnabled
IsWindow
SetMenu
GetWindowLongW
DrawStateA
EnableMenuItem
RemoveMenu
ValidateRect
GetUpdateRgn
InSendMessageEx
EndDialog
HiliteMenuItem
GetClassLongA
ExitWindowsEx
DeferWindowPos
CharUpperW
GetWindow
GetKeyboardLayout
DialogBoxIndirectParamW
ChildWindowFromPoint
GetNextDlgGroupItem
EnumChildWindows
IsCharAlphaA
DialogBoxParamA
GetMenu
MessageBoxW
GetParent
DrawIconEx
DrawStateW
SendMessageA
MapVirtualKeyA
SendMessageW
SendNotifyMessageW
SetCursor
SendDlgItemMessageA
SetRectEmpty
GetActiveWindow
wvsprintfA
EndPaint
GetSystemMenu
GetDlgItem
LoadImageW
DrawTextExW
GetClassInfoA
EqualRect
GetCaretPos
AppendMenuW
GetKeyNameTextW
ShowWindow
RegisterClassExA
CloseDesktop
CallWindowProcA
GetDlgItemTextW
GetDlgCtrlID
DefDlgProcW
wvsprintfW
GetScrollInfo
SetWindowLongW
ShowOwnedPopups
SetPropW
DrawTextA
CharToOemW
CharUpperBuffA
SetFocus
CharUpperA
DefWindowProcW
GetWindowPlacement
GetClassLongW
wsprintfA
CreateCaret
InsertMenuW
GetClientRect
CreateIconIndirect
GetIconInfo
DialogBoxParamW
LoadCursorA
RegisterClassExW
CreateIconFromResource
FindWindowA
WindowFromPoint
SetDlgItemTextA
RegisterHotKey
PostThreadMessageW
SetDlgItemTextW
IsDlgButtonChecked
DefFrameProcA
KillTimer
SetWindowTextW
FindWindowExW
GetMenuStringW
SetClassLongW
IsCharAlphaNumericW
WaitMessage
GetClassInfoExA
CreateDialogIndirectParamW
ModifyMenuW
GetForegroundWindow
VkKeyScanA
ReplyMessage
WaitForInputIdle
ShowCaret
MoveWindow
DestroyCursor
GetSysColor
IsCharUpperA
DestroyWindow
IntersectRect
GetWindowTextW
SendMessageTimeoutW

comdlg32

GetSaveFileNameW
GetFileTitleW
PrintDlgExW
PrintDlgW

kernel32

lstrcpyW
lstrcmpW
GlobalFree
LoadLibraryExA
GlobalDeleteAtom
FileTimeToLocalFileTime
FindResourceW
HeapAlloc
GetStartupInfoA
IsBadWritePtr
lstrcpynA
FlushViewOfFile
GetCommandLineA
CreateRemoteThread
SetCommBreak
RaiseException
GetModuleFileNameA
GlobalAddAtomW
GetACP
CreateDirectoryA
CreateEventW
SetupComm
ClearCommBreak
lstrlenA
GetDateFormatA
CompareStringW
MoveFileExW
GetVersionExA
SetLastError
HeapReAlloc
HeapLock
CreateDirectoryW
SetHandleCount
SystemTimeToFileTime
GetFileAttributesA
ResetEvent
DeviceIoControl
GetWindowsDirectoryW
EnumSystemLocalesA
SetUnhandledExceptionFilter
SizeofResource
GetThreadContext
GetFileInformationByHandle
VerifyVersionInfoW
lstrcpynW
GetCurrentThread
CompareStringA
GlobalGetAtomNameA
GetSystemTimeAdjustment
GetSystemTimeAsFileTime
CreateSemaphoreW
GetStdHandle
SetEvent
SetErrorMode
FindResourceA
GetModuleFileNameW

Exports

Exports

?ForceTriangulateA@@YGKDDPAX:O

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reat
Size: 512B - Virtual size: 121B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uac
Size: 1KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.riat
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.byte
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vdata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4807ababc00910adafb72f808114aaf5

Headers

File Characteristics

Imports

msvcrt

user32

comdlg32

kernel32

Exports

Exports

Sections

.text Size: 22KB - Virtual size: 21KB

.reat Size: 512B - Virtual size: 121B

.uac Size: 1KB - Virtual size: 124KB

.riat Size: 6KB - Virtual size: 5KB

.byte Size: 512B - Virtual size: 276B

.vdata Size: 1024B - Virtual size: 704B

.data Size: 2KB - Virtual size: 1KB

.rsrc Size: 104KB - Virtual size: 103KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 22KB - Virtual size: 21KB

.reat
Size: 512B - Virtual size: 121B

.uac
Size: 1KB - Virtual size: 124KB

.riat
Size: 6KB - Virtual size: 5KB

.byte
Size: 512B - Virtual size: 276B

.vdata
Size: 1024B - Virtual size: 704B

.data
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 104KB - Virtual size: 103KB

.reloc
Size: 2KB - Virtual size: 1KB