5016b601edb1277d4ec4d969005b8d60

Sharing

Copy URL

Twitter E-mail

General

Target

5016b601edb1277d4ec4d969005b8d60
Size

200KB
MD5

5016b601edb1277d4ec4d969005b8d60
SHA1

4ab4a7d63a12741edcb69caf1a6053ec01223f7a
SHA256

32bca0433defbb11cd4732002af882040126eabbafab42db53e589026684c24a
SHA512

a4d369aaf43e6de030c45adcaedd03418dcf29d720879041803a6206afeebe9d07c8da507a44376a3070eff559f9060b8f0e576fafe43eceaf97007ef6e4f3e0
SSDEEP

3072:VpwvFsb2kGlqSTYfyDmw/tDcGRr0O/Md/PnbHb4OkQfE0t74lYU8xxU7dC:VKvFsb2ifE/tDhgO/QPbfkKQC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5016b601edb1277d4ec4d969005b8d60

Files

5016b601edb1277d4ec4d969005b8d60
.exe windows:4 windows x86 arch:x86

932f5313cd1995eafad8f4e3109ede50

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

_TrackMouseEvent
InitCommonControlsEx
ImageList_Draw
ImageList_Destroy
ImageList_Create
ImageList_ReplaceIcon
ord6
ImageList_Add
ImageList_DrawEx
ord17

kernel32

FindNextFileA
DeleteFileA
FindFirstFileA
MoveFileA
CreateEventA
GetStringTypeA
HeapSize
WriteFile
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
LCMapStringW
FindClose
GetOEMCP
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
HeapReAlloc
ExitProcess
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
RtlUnwind
HeapFree
HeapAlloc
VirtualQuery
GetVersion
WaitForSingleObject
SetUnhandledExceptionFilter
IsBadCodePtr
SetFilePointer
SetStdHandle
FlushFileBuffers
FormatMessageA
LocalFree
Sleep
lstrcmpiA
GetFileAttributesA
CreateFileA
CloseHandle
IsBadReadPtr
GetCurrentThreadId
GetTickCount
OutputDebugStringA
LoadLibraryExA
lstrcpyA
GetModuleFileNameA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetProcAddress
InterlockedIncrement
GlobalAlloc
GlobalLock
GetStringTypeW
GlobalUnlock
GlobalFree
GetLastError
WideCharToMultiByte
GetACP
MultiByteToWideChar
InterlockedDecrement
GetLocaleInfoA
FreeLibrary
LoadLibraryA
lstrlenA
lstrcatA
FindResourceA
LoadResource
LockResource
FreeResource
LCMapStringA

user32

SetCapture
GetWindowDC
IsDialogMessageA
PeekMessageA
GetWindow
GetClassNameA
DrawTextExA
InsertMenuItemA
SetCursorPos
TrackPopupMenuEx
InflateRect
GetAsyncKeyState
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
ReleaseCapture
TranslateAcceleratorA
IsWindowVisible
PostQuitMessage
SetCursor
IsIconic
SetForegroundWindow
GetDesktopWindow
LoadAcceleratorsA
SetParent
SystemParametersInfoA
LoadBitmapA
GetSystemMetrics
SetRectEmpty
DrawTextA
GetMenuItemCount
LoadMenuA
GetSubMenu
GetMenuItemInfoA
SetMenuItemInfoA
DestroyAcceleratorTable
ValidateRgn
TrackPopupMenu
DestroyMenu
ClientToScreen
GetMessageA
TranslateMessage
DispatchMessageA
MessageBeep
GetClassInfoA
IsWindowEnabled
GetCapture
GetFocus
UpdateWindow
DefDlgProcA
DefWindowProcA
GetClassInfoExA
LoadCursorA
RegisterClassExA
RegisterClassA
GetWindowLongA
SetFocus
DrawEdge
ScreenToClient
FindWindowExA
GetPropA
SetPropA
RemovePropA
GetWindowRect
GetSysColor
PostMessageA
GetUpdateRect
GetDC
SetRect
FillRect
ReleaseDC
wsprintfA
EnableWindow
IsWindow
SetWindowPos
DialogBoxParamA
SendMessageA
GetDlgItemTextA
GetWindowTextA
SetWindowTextA
ShowWindow
LoadImageA
SendDlgItemMessageA
SetDlgItemTextA
EndDialog
GetParent
GetDlgItem
BeginPaint
EndPaint
LoadStringA
DestroyWindow
GetClientRect
CreateWindowExA
SetWindowLongA
InvalidateRect
KillTimer
SetTimer
GetCursorPos
WindowFromPoint
CallWindowProcA
IsMenu

gdi32

GetStockObject
RealizePalette
SelectPalette
CreateDIBitmap
CreatePalette
BitBlt
CreateCompatibleBitmap
LineTo
MoveToEx
CreatePen
GetDeviceCaps
CreateCompatibleDC
SetTextColor
SetBkColor
CreateSolidBrush
CreateDIBPatternBrushPt
StretchBlt
CreateFontIndirectA
CreateFontA
UpdateColors
GetTextExtentPoint32A
FillRgn
CreatePolygonRgn
TextOutA
CreateBitmapIndirect
GetNearestColor
ExcludeClipRect
SelectClipRgn
CreateRectRgn
SelectObject
DeleteDC
SetBkMode
GetObjectA
DeleteObject

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

shell32

ShellExecuteA

ole32

CoTaskMemFree
CoUninitialize
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoInitialize

oleaut32

SysFreeString
SysStringByteLen
SysAllocStringByteLen
SysReAllocStringLen
SysStringLen
SysAllocString

mxdlgsup

MXMessageBox
MXSubclassDialog
MXLoadLanguageDll

Sections

.text
Size: 128KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uuu9
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

932f5313cd1995eafad8f4e3109ede50

Headers

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

mxdlgsup

Sections

.text Size: 128KB - Virtual size: 126KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 20KB - Virtual size: 22KB

.rsrc Size: 24KB - Virtual size: 21KB

.uuu9 Size: 8KB - Virtual size: 6KB

.text
Size: 128KB - Virtual size: 126KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 20KB - Virtual size: 22KB

.rsrc
Size: 24KB - Virtual size: 21KB

.uuu9
Size: 8KB - Virtual size: 6KB