34bdbf081baf0d8a85a935545bc1ef23

Sharing

Copy URL Twitter E-mail

General

Target

34bdbf081baf0d8a85a935545bc1ef23
Size

288KB
MD5

34bdbf081baf0d8a85a935545bc1ef23
SHA1

4c3bc694d9c02f05ca065d9b6779b2419033a44e
SHA256

44d8652f7fe21fe1828827ee5459fda88b4bf03ce91ca383f7cc3b0d55772389
SHA512

92b6647f850bd30bdc0b509f64ad7970923cf37b63dfff7bab46ce1a5e2fe2c9498e93e32caccb57caba1905c44937953f14c176aa43ff1e6c36b89d047ca7fa
SSDEEP

6144:Gv1u6cQE/qdyctYrT7/PsW8EZd40seWs9Zxip:Wu6cQE/qbtYLPsfEHlWs9ap

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34bdbf081baf0d8a85a935545bc1ef23

Files

34bdbf081baf0d8a85a935545bc1ef23
.exe windows:4 windows x86 arch:x86

65076f412a3c0a389d46177e0a3683a8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_Add
ImageList_Create
ImageList_Destroy
ord6
InitCommonControlsEx

kernel32

ReadFile
CloseHandle
CreateFileA
lstrcpyA
lstrcpynA
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
GetSystemInfo
VirtualProtect
GetLocaleInfoA
LCMapStringW
LCMapStringA
GetCPInfo
GetOEMCP
GetACP
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
LoadLibraryA
GetFileType
SetHandleCount
WriteFile
GetLastError
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
SetUnhandledExceptionFilter
HeapSize
GetCurrentProcess
TerminateProcess
GetProcAddress
GetModuleFileNameA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
GetFileSize
lstrcatA
VirtualQuery
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
lstrlenA
GetModuleHandleA
GetEnvironmentStringsW

user32

LoadBitmapA
SendDlgItemMessageA
LoadIconA
EndDialog
SetTimer
SendMessageA
SetMenuItemInfoA
CheckDlgButton
SetDlgItemTextA
GetDlgItem
SetWindowLongA
IsDlgButtonChecked
GetDlgItemTextA
CharUpperA
GetClassInfoA
CallWindowProcA
GetDlgCtrlID
GetParent
MessageBoxA
LoadCursorA
DialogBoxParamA
RegisterClassA
GetSystemMetrics
CreateWindowExA
LoadMenuA
SetMenu
ShowWindow
UpdateWindow
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
DestroyAcceleratorTable
PostQuitMessage
DefWindowProcA
DestroyMenu
MoveWindow
GetWindowRect
GetClientRect
wsprintfA
wvsprintfA
KillTimer

gdi32

DeleteObject

comdlg32

GetSaveFileNameA
GetOpenFileNameA

shell32

DragFinish
DragAcceptFiles
DragQueryFileA

ole32

CoUninitialize
CoInitialize
CoCreateInstance

oleaut32

SysAllocString
VariantChangeType

msvcrt

__getmainargs

imagehlp

ImageNtHeader
ImageRvaToVa

Sections

.text
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tc
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

65076f412a3c0a389d46177e0a3683a8

Headers

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

comdlg32

shell32

ole32

oleaut32

msvcrt

imagehlp

Sections

.text Size: 76KB - Virtual size: 72KB

.rsrc Size: 12KB - Virtual size: 10KB

.tc Size: 196KB - Virtual size: 196KB

.text
Size: 76KB - Virtual size: 72KB

.rsrc
Size: 12KB - Virtual size: 10KB

.tc
Size: 196KB - Virtual size: 196KB