3d31bf63da673e013fcbd5b8ab320392

Sharing

Copy URL Twitter E-mail

General

Target

3d31bf63da673e013fcbd5b8ab320392
Size

116KB
MD5

3d31bf63da673e013fcbd5b8ab320392
SHA1

f9db6cbf654c56c8171f5014cb195ded05627c7f
SHA256

e5f38de87c8ccc75ca0a5bcb3958ab9eb5df53ab7bf538147adf6ba175c34b23
SHA512

6961c2d525bfb50a6c8ab29042926e4953b185993119059d249a7bb052d12c6cfb982d46c126d767ae027ad3eaa2a71ffce23d8cd740fea3e3ae97c10f934b81
SSDEEP

3072:98RTVXDNJqxSA5HDc3I3nNoOsRXurRUQzj+5n/U:SZRcx5VMpOKXur2Qf+5n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d31bf63da673e013fcbd5b8ab320392

Files

3d31bf63da673e013fcbd5b8ab320392
.exe windows:4 windows x86 arch:x86

6a3a898aaad84051a2ac225fe198c37a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreatePenIndirect
SelectPalette
CreateDIBSection

version

GetFileVersionInfoSizeA
VerFindFileA
GetFileVersionInfoA

kernel32

LoadResource
LoadLibraryExA
LoadLibraryA
lstrlenA
VirtualAllocEx
InitializeCriticalSection

user32

EndDialog
SystemParametersInfoA
GetMenuItemCount
WaitMessage
TranslateMessage
PostQuitMessage
DestroyWindow
DrawEdge
RemovePropA
PeekMessageW
GetClipboardData
SetScrollInfo
EnableWindow
OpenClipboard
GetMenu
CharLowerBuffA
GetClassLongA
SetMenuItemInfoA
MessageBeep
InflateRect
GetWindowRect
ReleaseCapture
IsWindowVisible
DispatchMessageA
DestroyCursor
DrawMenuBar
ChildWindowFromPoint
CharNextW
InvalidateRect
SendMessageA
EnumChildWindows
GetKeyNameTextA
MessageBoxA
AdjustWindowRectEx
PeekMessageA
CharNextA
MsgWaitForMultipleObjects
IsMenu
GetScrollRange
WindowFromPoint
GetWindowThreadProcessId
CreatePopupMenu
UnhookWindowsHookEx
CharLowerA
DestroyMenu
IntersectRect
EnableMenuItem
GetKeyboardState
GetLastActivePopup
IsChild
IsIconic
TrackPopupMenu
SetRect
GetSystemMenu
GetWindowDC
GetKeyState
KillTimer
DefFrameProcA
SetParent
wsprintfA
SetWindowPos
EndPaint
GetKeyboardType
GetTopWindow
GetDC
DefMDIChildProcA
BeginPaint
SetScrollRange
MoveWindow
EnumThreadWindows
GetKeyboardLayoutNameA
SetScrollPos
UpdateWindow
GetParent

Exports

Exports

_D2cvaerX@24
_qGQuDZiY@16
q5obCk3S@16
_18H7KG@24
iUbTehlF1e8n
_nJ5fZj8bYRCkQF
izYHSM
_Uvyn1J4qas
jEflHjHDiP@16
_Jfeg3o1veiT
_YS3QKKguc6Y_Q
X93EFTjfWcdz8E@4
rczvj5o4eHah@16
_EDtMxN@16
_v75fhfNpnwS@4
_o7g7eH@24
WMWtLt7a8V@8
_FQG0bU_Yx27l4@12
Oz4wdVaw@16
7PmZCcu8h
Ts2J_cUhKfajX@4
lo212SxwdC5_@12
_GHMVT21NQ@4
k5SSpg89W94pNC
gizl0l@8
xaGEUtSbTSyJN@8
LXtIWw64h@8

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6a3a898aaad84051a2ac225fe198c37a

Headers

File Characteristics

Imports

gdi32

version

kernel32

user32

Exports

Exports

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 4KB - Virtual size: 143KB

.data Size: 98KB - Virtual size: 98KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 4KB - Virtual size: 143KB

.data
Size: 98KB - Virtual size: 98KB

.rsrc
Size: 2KB - Virtual size: 1KB