36b9422124080d05861ffda08a1024f6

Sharing

Copy URL Twitter E-mail

General

Target

36b9422124080d05861ffda08a1024f6
Size

212KB
MD5

36b9422124080d05861ffda08a1024f6
SHA1

cb349387cf4708107598e14bb087eb296ff038af
SHA256

3e40ba981c8e3ae6279ef4b8f11838be03a94ccbec88059c2fc4066b963b54ca
SHA512

8274420d0a1ef16155d50ab2f1ff93c127c6ed0c5317f4119b7ba4a5d048b9ff51545580097021f9ec7268dfbc416f35eee7f68edc45f3354ed8db145f0af836
SSDEEP

6144:oceZFSJDLGm1ZJOujV06dii4+frYcSaQ:oc8aLRZJOx64jDr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36b9422124080d05861ffda08a1024f6

Files

36b9422124080d05861ffda08a1024f6
.exe windows:5 windows x86 arch:x86

655851dc3eac04edfd92d656fcc037f1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassA
IsMenu
AdjustWindowRectEx
EndTask
RemoveMenu
SetTimer
TranslateMessage
CreateDialogIndirectParamW
SystemParametersInfoA
ShowOwnedPopups
ChildWindowFromPoint
LoadMenuA
LoadImageW
MapWindowPoints
OpenDesktopW
WindowFromPoint
SendDlgItemMessageW
TrackPopupMenu
PostMessageA
GetMenuItemID
CharPrevW
GetMenuItemRect
ChildWindowFromPointEx
CreateWindowExW
EnableScrollBar
SetScrollInfo
GetClientRect
GetMenuStringA
GetClassInfoW
SetMenu
SendDlgItemMessageA
DragObject
CopyRect
AppendMenuA
GetKeyNameTextW
UnionRect
MessageBoxExA
DispatchMessageA
GetKeyboardLayoutList
MonitorFromPoint
HiliteMenuItem
CreateMenu
DestroyWindow
CheckMenuRadioItem
SendMessageTimeoutA
EnumChildWindows
GetKeyState
GetUpdateRect
SwapMouseButton
SetLastErrorEx
GetIconInfo
SetPropW
WaitForInputIdle
SetCaretPos
BeginPaint
GetDCEx
InvalidateRgn
RegisterWindowMessageW
GetDlgCtrlID
MessageBoxA
DrawIconEx
HideCaret
GetMenuCheckMarkDimensions
FrameRect
GetUserObjectInformationA
SystemParametersInfoW
GetDesktopWindow
TileWindows
GetWindowRect
DefFrameProcW
AppendMenuW
SwitchToThisWindow
SetWindowPos
GetKeyboardType
EndPaint
SetCursor
PostQuitMessage
CharLowerA
SetSysColors
RemovePropW
IsDialogMessageA
UpdateWindow
ScrollWindow
GetClipCursor
GetClassInfoA
GetClassLongA
GetSystemMetrics
CharToOemA

gdi32

CreateSolidBrush
CreatePatternBrush
CreateFontIndirectW
GetTextExtentExPointW
CreateFontIndirectA
FillRgn
CreateDIBitmap
PolyBezier
Polygon
EnumFontFamiliesW
GetObjectA
SetWindowOrgEx
CreatePolygonRgn
GetPixel
ExcludeClipRect
GetTextFaceW
CreateRectRgnIndirect
CreateRectRgn
SetStretchBltMode
GetPaletteEntries
GetTextMetricsW
SetViewportOrgEx
SetAbortProc
SelectObject
CreateBrushIndirect
GetLayout
ExtFloodFill
CreateBitmap
SetROP2
SetLayout
BitBlt
RemoveFontResourceW
CreatePenIndirect
BeginPath
SetMapMode
OffsetRgn
GetNearestPaletteIndex

kernel32

GetHandleInformation
DeleteCriticalSection
SetWaitableTimer
GetComputerNameW
GetStartupInfoW
FindFirstChangeNotificationW
WinExec
CreateFileMappingA
IsBadStringPtrW
GetTempFileNameW
GetDateFormatA
GetDateFormatW
GetThreadLocale
ConvertDefaultLocale
ReleaseMutex
SearchPathW
GlobalReAlloc
GetTimeZoneInformation
HeapValidate
GlobalAddAtomW
RaiseException
HeapReAlloc
GetTickCount
SetUnhandledExceptionFilter
HeapFree
HeapAlloc
IsDBCSLeadByte
FindResourceExA
GetSystemDirectoryA
SetHandleInformation
lstrlenW
BuildCommDCBAndTimeoutsW
GetOEMCP
SetFilePointer
SetEvent
FormatMessageW
MoveFileExW
GetFileTime
FileTimeToLocalFileTime
UnmapViewOfFile

msvcrt

_controlfp
__set_app_type
strtoul
__p__fmode
towupper
ftell
clearerr
puts
sscanf
isalnum
__p__commode
_amsg_exit
rand
wcspbrk
_initterm
wcsrchr
wcsstr
_acmdln
iswdigit
exit
gmtime
_ismbblead
vsprintf
_XcptFilter
_exit
_cexit
setlocale
strspn
remove
wcscoll
strtol
floor
wcsncmp
__setusermatherr
wcscat
wcstoul
iswprint
wcslen
ungetc
__getmainargs

Exports

Exports

?ReleaseSemaphoreQWiieiuIUDf@@YGKEPA_WG@Z
?ReleaseSemaphoreUDIOijlkdLI@@YGKEPA_WG@Z
?ReleaseSemaphoreUDSuJDJKDOIUD@@YGKEPA_WG@Z
?ReleaseSemaphoreUkudkKJDiu@@YGKEPA_WG@Z

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

655851dc3eac04edfd92d656fcc037f1

Headers

File Characteristics

Imports

user32

gdi32

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 80KB - Virtual size: 79KB

.data Size: 14KB - Virtual size: 14KB

.rdata Size: 5KB - Virtual size: 63KB

.rsrc Size: 109KB - Virtual size: 108KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 80KB - Virtual size: 79KB

.data
Size: 14KB - Virtual size: 14KB

.rdata
Size: 5KB - Virtual size: 63KB

.rsrc
Size: 109KB - Virtual size: 108KB

.reloc
Size: 2KB - Virtual size: 1KB