30837d8466d865fefe6a757b2a492b82

Sharing

Copy URL Twitter E-mail

General

Target

30837d8466d865fefe6a757b2a492b82
Size

213KB
MD5

30837d8466d865fefe6a757b2a492b82
SHA1

c1c032fea44cb52d1e063e9d79b8309ca20a02f8
SHA256

26d29701b36363a274e1288e0124eff9e9b30fae14ac02b3e88e12f37fc0c479
SHA512

84997e395968ff108696c373c251573313c1b0b6460e9826621216d9ce3e2c494854a06b680ed73c0e1fa083e064580f8e2ef73f76147f5e407266e0ceff44da
SSDEEP

6144:y6UZADtVxWWnpuRrOLg5UZC1Y9s18zTO7b:yBZADtVxW7FO0Gg1d1ceb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30837d8466d865fefe6a757b2a492b82

Files

30837d8466d865fefe6a757b2a492b82
.exe windows:5 windows x86 arch:x86

9e0687e4fd8f298b83112862552b06c1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateRoundRectRgn
GetTextAlign
ExtFloodFill
CreateBitmapIndirect
CreateSolidBrush
SetBitmapBits
CreateBrushIndirect
RoundRect
TranslateCharsetInfo
GetWindowOrgEx
Escape
CreateDIBitmap
CreateRectRgnIndirect
CreateBitmap
BitBlt
StretchDIBits
PolyBezier
GetRgnBox
RectInRegion
SelectClipRgn
GetTextMetricsA
CreateFontA
CreateRectRgn
SelectPalette
SetDIBitsToDevice
ScaleWindowExtEx
SetBrushOrgEx
EndPage
EnumFontFamiliesExW
LineTo
ResizePalette
SetDIBits
CreatePenIndirect
GetDIBits
SetTextAlign

comdlg32

PageSetupDlgW
GetOpenFileNameA
FindTextW
GetFileTitleW
GetSaveFileNameA

msvcrt

getc
iswalpha
isalnum
strpbrk
_controlfp
vswprintf
qsort
atol
iswdigit
strchr
wcschr
localtime
__set_app_type
__p__fmode
__p__commode
rand
fputs
_amsg_exit
remove
_initterm
gets
puts
fputc
iswspace
_acmdln
exit
mbtowc
setlocale
_ismbblead
iswctype
_XcptFilter
bsearch
_exit
_cexit
__setusermatherr
towupper
__getmainargs
wcstoul
strrchr

kernel32

ResetEvent
GetSystemTime
SetCommTimeouts
SetWaitableTimer
FindResourceExW
ClearCommBreak
ConvertDefaultLocale
GetStartupInfoW
GetBinaryTypeA
GetFileAttributesA
OpenFileMappingW
BuildCommDCBAndTimeoutsW
DisconnectNamedPipe
SetHandleCount
GlobalDeleteAtom
RaiseException
MoveFileExA
EscapeCommFunction
IsDBCSLeadByte
SetThreadAffinityMask
GetCommTimeouts
IsBadWritePtr
GetAtomNameA
MultiByteToWideChar
GetSystemDirectoryW
SetLastError
DefineDosDeviceW
DeleteFileA
GetShortPathNameW
DeleteFileW
MoveFileA
CompareStringA
GetTimeFormatW
LocalAlloc
SetThreadExecutionState
CreateSemaphoreA
CreateRemoteThread
OpenFileMappingA
GlobalReAlloc
SetCurrentDirectoryA
QueryDosDeviceW

user32

DrawTextA
LoadIconW
CreateCursor
RemoveMenu
GetClipCursor
GetKeyState
InSendMessageEx
SendMessageTimeoutW
SetRectEmpty
GetKeyboardLayoutList
IsChild
GetSystemMetrics
GetKeyboardLayout
SetDlgItemInt
MessageBoxExA
PostMessageW
GetMessageTime
SendMessageA
SetDlgItemTextA
AdjustWindowRectEx
DestroyMenu
SetForegroundWindow
LoadBitmapA
GetScrollPos
GetMenuItemID
IsCharUpperA
TileWindows
EndTask
GetMenuItemCount
AdjustWindowRect
FillRect
IsIconic
RegisterWindowMessageA
SetWindowPos
RemovePropW
IsCharLowerA
PeekMessageW
LoadMenuA
GetKeyboardType
LoadCursorW
GetDlgItemInt
LookupIconIdFromDirectory
GetClassInfoA
IsWindowUnicode
DefWindowProcW
CreatePopupMenu
EnableScrollBar
DrawFrameControl
CreateIconFromResource
LoadCursorA
ValidateRect
CharNextExA
SetCaretPos
MessageBoxExW
UnionRect
DestroyWindow
SwitchToThisWindow
InvalidateRgn
CopyAcceleratorTableW
IsWindow
GetFocus
OemToCharBuffA
CopyRect
SendDlgItemMessageW
SetRect
GetClassInfoExW
SetUserObjectInformationW
RegisterClassExA
MapDialogRect
GetWindow
GetDlgItem
GetShellWindow
TabbedTextOutW
TrackPopupMenuEx
EqualRect
GetScrollRange
EnumWindows
wsprintfW
GetMenu
SendDlgItemMessageA
CopyImage
LoadImageW
InsertMenuItemW
TranslateMessage
DeferWindowPos
CreateDialogParamA
InSendMessage
DefWindowProcA

comctl32

ImageList_Draw
DestroyPropertySheetPage
PropertySheetA
ImageList_Write
CreateToolbarEx

Exports

Exports

?ReleaseSemaphoreQWiieiuIUDf@@YGKEPA_WG@Z
?ReleaseSemaphoreUDIOijlkdLI@@YGKEPA_WG@Z
?ReleaseSemaphoreUDSuJDJKDOIUD@@YGKEPA_WG@Z
?ReleaseSemaphoreUkudkKJDiu@@YGKEPA_WG@Z

Sections

.text
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e0687e4fd8f298b83112862552b06c1

Headers

File Characteristics

Imports

gdi32

comdlg32

msvcrt

kernel32

user32

comctl32

Exports

Exports

Sections

.text Size: 75KB - Virtual size: 74KB

.data Size: 14KB - Virtual size: 14KB

.rdata Size: 6KB - Virtual size: 68KB

.rsrc Size: 114KB - Virtual size: 114KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 75KB - Virtual size: 74KB

.data
Size: 14KB - Virtual size: 14KB

.rdata
Size: 6KB - Virtual size: 68KB

.rsrc
Size: 114KB - Virtual size: 114KB

.reloc
Size: 2KB - Virtual size: 1KB