3be1da4fc7c8487a43ada282551169e7

Sharing

Copy URL Twitter E-mail

General

Target

3be1da4fc7c8487a43ada282551169e7
Size

210KB
MD5

3be1da4fc7c8487a43ada282551169e7
SHA1

838362c16fba07d43d3da1a067071cfd2f66ee54
SHA256

51f5debb7d1b75326a3fc2912b0091c7954b616b6e63d8dbc1e8f928b420f934
SHA512

6468122e5689a82047be10ed634772f6aabc529e7ca1d642dde2d9075c25827b3653798818e9794dec27a7824f45754fcdc038e45923971bc3f637e89356a767
SSDEEP

6144:NFwW61zRKLJODiJSezy8NuZ95KdT6kM3BN/hZ0:W/KLPJU8YZf0T61RPZ0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3be1da4fc7c8487a43ada282551169e7

Files

3be1da4fc7c8487a43ada282551169e7
.exe windows:5 windows x86 arch:x86

4a7bbec57e71460f0669805d6887c413

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

ChrCmpIA

msvcrt

fprintf
putchar
clearerr
_controlfp
iswalpha
strcoll
strncmp
fgets
towupper
memset
towlower
__set_app_type
wcsncpy
qsort
strtok
isupper
isxdigit
__p__fmode
setlocale
fread
remove
__p__commode
wcscspn
mbstowcs
strerror
wcspbrk
isprint
calloc
vsprintf
clock
setvbuf
wcscoll
putc
_amsg_exit
floor
sprintf
wcscpy
printf
wcstol
mbtowc
getc
islower
fwrite
srand
puts
_initterm
perror
free
_ismbblead
malloc
_XcptFilter
_exit
fputc
vswprintf
isalpha
ftell
_cexit
__setusermatherr
wcscmp
atoi
__getmainargs

gdi32

CreatePen
CombineRgn
SetAbortProc
SetTextAlign
TextOutA
CreateDiscardableBitmap
PathToRegion
ResizePalette
ExtTextOutW
GetBitmapBits
PatBlt
CreateDIBitmap
SetLayout
GetCurrentObject
DeleteObject
CreateBitmapIndirect
TextOutW
Escape
GetPaletteEntries
StretchBlt
CreateHatchBrush
StretchDIBits
GetCharWidth32W
CreateRectRgn
SetDIBColorTable
RealizePalette
LineDDA
CreateEllipticRgnIndirect
CreateRectRgnIndirect
SaveDC
StartDocW
CreateBitmap
SetROP2
Ellipse
CreateCompatibleBitmap
SetStretchBltMode
CreatePolygonRgn
GetTextAlign
GetFontData
WidenPath
EndDoc
SetPixel
RestoreDC
GetTextCharsetInfo
GetNearestPaletteIndex
CreatePenIndirect
SetViewportExtEx
CreatePatternBrush
CreateCompatibleDC
ExtTextOutA
GetTextMetricsW
EndPath
ScaleWindowExtEx
GetROP2
TranslateCharsetInfo
CreateICW
GetDeviceCaps
GetTextMetricsA
CreateDIBSection
RectVisible
RoundRect
SetWindowOrgEx
BitBlt
EnumFontsW
GetRgnBox
GetDIBits
UnrealizeObject
CreateBrushIndirect
PolyBezier
LPtoDP

user32

GetClassLongW
GetShellWindow
GetMessageExtraInfo
GetDlgCtrlID
CharNextW
ScreenToClient
DrawFocusRect
WindowFromPoint
FillRect
SetWindowTextW
InSendMessage
ReplyMessage
SendDlgItemMessageA
LoadIconA
GetMenuCheckMarkDimensions
FindWindowW
GetWindowLongA
GetWindowRect
EndPaint
ShowScrollBar
RemovePropW
DeleteMenu
GetNextDlgTabItem
GetCaretPos
CharUpperBuffW
ChildWindowFromPoint
SetCursorPos
LoadStringA
DialogBoxIndirectParamW
CreateIconIndirect
LookupIconIdFromDirectory
PtInRect
ScrollWindowEx
DialogBoxParamA
ArrangeIconicWindows
SetFocus
TranslateAcceleratorW
CharNextA
GetDesktopWindow
SendInput
MapWindowPoints
GetMenuStringW
SetTimer
SetScrollRange
SetMenu
TileWindows
RegisterClassW
TranslateMessage
GetMenuItemCount
ClipCursor
LoadAcceleratorsA
MonitorFromPoint
SwapMouseButton
MapVirtualKeyW
MonitorFromRect
SetMenuItemBitmaps
CreateDialogParamA
GetMenuStringA
SendMessageW
CreateCaret
wsprintfW
SetCaretPos
CharPrevA
DrawStateA
GetMenuState
IsDialogMessageW
InsertMenuA
DestroyAcceleratorTable
SetDlgItemTextW
GetKeyNameTextW
RegisterHotKey
LoadAcceleratorsW
ShowWindow
ChangeMenuW
GetKeyboardType
SystemParametersInfoW
AppendMenuA
SetWindowLongA
SendMessageTimeoutW
LoadMenuW
DrawIconEx
InflateRect
CheckDlgButton
LoadCursorA
InsertMenuW
GetWindowTextLengthW
TrackPopupMenuEx
MessageBoxExW
IsWindow
CreateDialogParamW
ScrollWindow
FindWindowExW
wvsprintfW
ModifyMenuW
GetClassNameW
GetMenuItemInfoW
DefDlgProcW
IntersectRect
DispatchMessageW
CheckRadioButton
CharNextExA
LoadBitmapA
ExitWindowsEx
IsCharLowerA
InternalGetWindowText
DrawStateW
GetMessageTime
GetActiveWindow
InvalidateRgn
RegisterWindowMessageA
DrawEdge
ActivateKeyboardLayout
ShowOwnedPopups
GetFocus
SetWindowPlacement
GetAsyncKeyState
MessageBoxW
CreateWindowExW
CharPrevW
DefWindowProcW
GetDialogBaseUnits
CharUpperA
SetDlgItemInt
TrackPopupMenu
OemToCharA
GetSubMenu
GetClassInfoExA
UpdateWindow
InSendMessageEx
SetLastErrorEx
TranslateAcceleratorA
SendMessageA
CreateAcceleratorTableW
EndDialog
SetCursor
GetSysColorBrush
GetWindow
IsZoomed
BringWindowToTop
RegisterClassExW
SwitchToThisWindow
GetWindowLongW
CharToOemA
AttachThreadInput
CreateMenu
GetMenuItemRect
IsMenu
LoadMenuA
GetDlgItemInt
ChildWindowFromPointEx
GetClipCursor
CharToOemBuffA
CallWindowProcW
GetParent
IsDlgButtonChecked
CharUpperW
DefDlgProcA
RegisterClassA
SetWindowPos
SetActiveWindow
IsWindowEnabled
IsCharAlphaW
CascadeWindows
PostThreadMessageA
GetCaretBlinkTime
GetNextDlgGroupItem
GetIconInfo

kernel32

SleepEx
CallNamedPipeW
IsDBCSLeadByteEx
HeapSize
ReleaseSemaphore
GetAtomNameA
GetTickCount
GlobalFindAtomW
DeleteFileA
GetProcAddress
FreeResource
DuplicateHandle
MultiByteToWideChar
EnumResourceLanguagesA
DisconnectNamedPipe
SetFileAttributesA
ClearCommBreak
LocalSize
GetUserDefaultUILanguage
RemoveDirectoryW
ResumeThread
SetCommState
CreateSemaphoreW
GetFileSize
CreateFileW
CreateWaitableTimerA
WideCharToMultiByte
SetEndOfFile
SuspendThread
CreateMutexW
EscapeCommFunction
OpenFile
TlsSetValue
GetCurrentThread
GetModuleFileNameA
GetTimeZoneInformation
RaiseException
GetTempPathA
SystemTimeToFileTime
FindResourceW
SetThreadAffinityMask
GetTimeFormatW
GetLocalTime
CreateMailslotW
IsBadCodePtr
GetFileTime
SizeofResource
LoadLibraryExW
LCMapStringA
LocalUnlock
DeleteCriticalSection
FileTimeToLocalFileTime
OpenFileMappingW
GetOEMCP
CloseHandle
GetSystemDirectoryA
MulDiv
ConnectNamedPipe
HeapValidate
GetFileAttributesA
OpenSemaphoreW
SearchPathA
SetFileAttributesW
GetExitCodeThread
GetCommTimeouts
MoveFileExA
IsBadReadPtr
GetThreadLocale
lstrcmpA
GetPriorityClass
GetModuleHandleA
GetSystemTime
CreateMutexA
UnlockFile
EnumResourceNamesW
GetCommConfig

Exports

Exports

?IsValidPenEx@@IJMHF@X

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4a7bbec57e71460f0669805d6887c413

Headers

File Characteristics

Imports

shlwapi

msvcrt

gdi32

user32

kernel32

Exports

Exports

Sections

.text Size: 53KB - Virtual size: 53KB

.code Size: 12KB - Virtual size: 12KB

.data Size: 12KB - Virtual size: 84KB

.rsrc Size: 134KB - Virtual size: 134KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 53KB - Virtual size: 53KB

.code
Size: 12KB - Virtual size: 12KB

.data
Size: 12KB - Virtual size: 84KB

.rsrc
Size: 134KB - Virtual size: 134KB

.reloc
Size: 2KB - Virtual size: 1KB