3321b2c1b6e7b68c231110b1b47baab8

Sharing

Copy URL

Twitter E-mail

General

Target

3321b2c1b6e7b68c231110b1b47baab8
Size

209KB
MD5

3321b2c1b6e7b68c231110b1b47baab8
SHA1

7a46adbd30a8c7d974a8a73350f2be70343e5ed7
SHA256

12e3284fb85c3c82c0ee47988d31c3f5caccbc3726d8144d58a940c6847023e5
SHA512

f50a3dca3a9e3741ed6dd6620953bc3dc3514103df2f284f9d7d895bb3b2213b837ab358ba9a04763855a497dca7c83dc6ea5c9af32aada25194f827cc49fe76
SSDEEP

3072:edOAcg9tZnLDuiNVPx1K6tGbBsn2lRtPHY8mgEaZhtkdXhYIjxu3QtCgb6:edOAcaVU6tN0YCZhtkdXNxu3Ii

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3321b2c1b6e7b68c231110b1b47baab8

Files

3321b2c1b6e7b68c231110b1b47baab8
.exe windows:4 windows x86 arch:x86

6aaf10ff2a33b2f0209a94bb059f7dc2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CallWindowProcA
EndPaint
GetClassNameA
GetDesktopWindow
GetMenuStringA
GetScrollPos
GetWindowRect
InsertMenuItemA
InvalidateRect
IsChild
IsWindowEnabled
LoadStringA
MessageBoxA
OffsetRect
PostMessageA
ScrollWindow
SetActiveWindow
SetCapture
SetClipboardData
SetForegroundWindow
SetRect
UnregisterClassA
UpdateWindow

kernel32

CompareStringA
CreateEventW
ExitThread
FileTimeToDosDateTime
FindResourceA
FlushFileBuffers
GetACP
GetCPInfo
GetCurrentProcess
GetCurrentProcessId
GetDriveTypeA
GetFileSize
GetFileTime
GetShortPathNameA
GetStartupInfoW
GetStdHandle
GetStringTypeA
GlobalLock
HeapReAlloc
LoadLibraryA
SetErrorMode
SetHandleCount
WaitForSingleObject
WriteConsoleA
lstrcmpiA

shell32

ExtractIconW
SHBrowseForFolderA
SHGetFileInfoA
SHGetFolderPathW
SHGetPathFromIDList
SHGetPathFromIDListA

comctl32

CreatePropertySheetPageA
CreatePropertySheetPageW
CreateStatusWindowA
CreateToolbarEx
DestroyPropertySheetPage
ImageList_BeginDrag
ImageList_Destroy
ImageList_DragLeave
ImageList_DragShowNolock
ImageList_Draw
ImageList_EndDrag
ImageList_GetImageInfo
ImageList_LoadImageA
ImageList_Remove
ImageList_SetBkColor
ImageList_SetIconSize
ImageList_Write
InitCommonControls
PropertySheetA

gdi32

CreateCompatibleBitmap
CreatePenIndirect
EnumFontFamiliesA
GdiFlush
GetROP2
GetTextFaceA
GetTextFaceW
GetViewportExtEx
SelectClipPath
SetTextAlign
SetTextCharacterExtra
UnrealizeObject

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

ZzauCKrr
Size: 1KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6aaf10ff2a33b2f0209a94bb059f7dc2

Headers

File Characteristics

Imports

user32

kernel32

shell32

comctl32

gdi32

Sections

.text Size: 88KB - Virtual size: 87KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 98KB - Virtual size: 98KB

.rsrc Size: 18KB - Virtual size: 17KB

ZzauCKrr Size: 1KB - Virtual size: 120KB

.text
Size: 88KB - Virtual size: 87KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 98KB - Virtual size: 98KB

.rsrc
Size: 18KB - Virtual size: 17KB

ZzauCKrr
Size: 1KB - Virtual size: 120KB