4b66d116ae8f6c5c1bf40f8663e3dcbd

Sharing

Copy URL

Twitter E-mail

General

Target

4b66d116ae8f6c5c1bf40f8663e3dcbd
Size

99KB
MD5

4b66d116ae8f6c5c1bf40f8663e3dcbd
SHA1

118c48c4c416022044462b1cde5d527dd44efa1c
SHA256

c61145569be40ad0c88c997c46823b6acd7074a3eca53de37b3eb69515a8e057
SHA512

7939b749590ccdc927896f446af94f3f4dbeec1d41606d1471734a5fba9bd2acb78cf7a2ba10583978eef3ab28df77b86c0fcf73d30855352eed94ebd37411b5
SSDEEP

1536:1LGMiQzmE0pQNd0QVrJolnhDlK1k9ebvjyrV7vKhv8k5n:pN0Yd0QTYnV4kIby9k5n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b66d116ae8f6c5c1bf40f8663e3dcbd

Files

4b66d116ae8f6c5c1bf40f8663e3dcbd
.exe windows:4 windows x86 arch:x86

eb17893ae6f20f78094e44bc4b5e2a32

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetFileInfoA
SHGetSpecialFolderLocation
SHFileOperationA
SHGetDesktopFolder

oleaut32

SafeArrayCreate
SysReAllocStringLen
SafeArrayUnaccessData
SafeArrayGetUBound
SafeArrayPtrOfIndex
GetErrorInfo
SysFreeString
VariantCopyInd
OleLoadPicture

user32

SetWindowLongA
MessageBoxA
IsMenu
CreatePopupMenu
DefFrameProcA
CreateIcon
GetCursor
DrawMenuBar
GetMenuItemInfoA
EnableMenuItem
EnumWindows
FrameRect
RegisterClassA
EnableScrollBar
GetMenuState
EnableWindow
CallNextHookEx
GetClassInfoA
CreateWindowExA
GetForegroundWindow
DrawFrameControl
EndDeferWindowPos
HideCaret
ClientToScreen
GetDCEx
DefMDIChildProcA
GetClientRect
FillRect
GetCapture
EnumThreadWindows
DeferWindowPos
SetTimer
CheckMenuItem
ShowScrollBar
GetWindow
GetDesktopWindow
GetKeyNameTextA
SetWindowTextA
SetCursor
EqualRect
GetDlgItem
IsChild
GetScrollPos
GetScrollInfo
EnumChildWindows
CallWindowProcA
BeginDeferWindowPos
CharLowerA
GetSysColorBrush
CharToOemA
GetClassLongA
IsWindowEnabled
GetWindowTextA
GetMenuItemCount
GetSysColor
GetMenuItemID
CheckMenuItem
GetDCEx
DrawFrameControl
EnumChildWindows
ShowScrollBar
CreatePopupMenu
CallWindowProcA
GetScrollPos
GetSubMenu
CreateWindowExA
DispatchMessageA
DrawTextA
GetPropA
SetWindowPos
EnableWindow
GetMenuStringA
DefMDIChildProcA
SetWindowTextA
GetCursorPos
CharToOemA
GetForegroundWindow
GetMenu
IsChild
CreateMenu
GetFocus
GetIconInfo
GetMenuState
GetActiveWindow
DrawIconEx
GetCursor
BeginDeferWindowPos
DeferWindowPos
DispatchMessageW
GetDesktopWindow
GetLastActivePopup
CharLowerBuffA
GetDlgItem
DrawIcon
EnumThreadWindows
DrawEdge
EnumWindows
EnableScrollBar
GetWindow
GetCapture
CharNextA
CreateIcon
DefFrameProcA
GetScrollInfo
CallNextHookEx
TrackPopupMenu
GetClassInfoA
RegisterClassA
GetMessagePos
ClientToScreen
FrameRect

msvcrt

strcmp
cos
memcpy

comdlg32

GetSaveFileNameA

ole32

GetHGlobalFromStream
CreateOleAdviseHolder
CoUnmarshalInterface
WriteClassStm
CoGetContextToken
OleRegGetUserType

advapi32

RegDeleteValueA
RegCreateKeyExA

gdi32

CreatePalette
GetClipBox
SelectObject
SetBkColor
SetTextColor
SetBkMode
GetRgnBox
GetBitmapBits

version

VerInstallFileA
VerQueryValueA
VerFindFileA

shlwapi

SHGetValueA

kernel32

LoadLibraryA
GetVersionExA
GetModuleHandleA
VirtualAllocEx
GlobalAlloc
LoadLibraryExA
ExitProcess

comctl32

ImageList_Read
ImageList_Add
ImageList_Create
ImageList_Draw
ImageList_Remove
ImageList_GetBkColor
ImageList_DrawEx
ImageList_Write

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb17893ae6f20f78094e44bc4b5e2a32

Headers

File Characteristics

Imports

shell32

oleaut32

user32

msvcrt

comdlg32

ole32

advapi32

gdi32

version

shlwapi

kernel32

comctl32

Sections

.text Size: 43KB - Virtual size: 43KB

.init Size: 5KB - Virtual size: 4KB

.edata Size: 50KB - Virtual size: 49KB

.text
Size: 43KB - Virtual size: 43KB

.init
Size: 5KB - Virtual size: 4KB

.edata
Size: 50KB - Virtual size: 49KB