58557a3e0e3c968e20200c271d1e912d

Sharing

Copy URL Twitter E-mail

General

Target

58557a3e0e3c968e20200c271d1e912d
Size

123KB
MD5

58557a3e0e3c968e20200c271d1e912d
SHA1

3b5cf5ffd08dbbbd0a2b85b15e6b69716fc704af
SHA256

7de29fcc56a04d4eeea785de2774e78f22266eaf80b73bd1bd468d115d14fb21
SHA512

8f2acb8f6b08c76bdce23305dabfd933980a9fd32a4867ac3a7e45d40061b2285db3a80b857848be472da308ca026d6f11fe0eaa028c9a98a80e8a3b6b36309a
SSDEEP

3072:WTvKOafTSydNifRzrxQP/kYlL5ZSxBRe0snuyOFdzjs5uea1:WTpySRfxQP/TlL5ZSxBRz1t5jsUP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58557a3e0e3c968e20200c271d1e912d

Files

58557a3e0e3c968e20200c271d1e912d
.exe windows:4 windows x86 arch:x86

92e218d407ea5fb417cbd41a4938a338

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileType
GetCommandLineW
lstrcmpA
MoveFileA
GetCommandLineA
GlobalAlloc
SetHandleCount
GlobalFindAtomA
GetCurrentThreadId
GetModuleHandleW
LoadLibraryA
LocalAlloc
GetOEMCP
GetModuleHandleA
GetVersionExA
GetProcAddress
WaitForSingleObject
Sleep
lstrcmpiA
CreateThread
GetTickCount
GetModuleFileNameA
GetDiskFreeSpaceA
IsBadHugeReadPtr
GetCurrentProcess
MulDiv
LoadResource
GetLocaleInfoA
GetStdHandle
ReadFile
GetCurrentProcessId
lstrcpyA
GetLastError
LoadLibraryExA
HeapAlloc
GetLocalTime
FormatMessageA
FreeLibrary
ExitProcess
SetFilePointer
EnterCriticalSection
VirtualAllocEx

gdi32

SelectPalette
GetPaletteEntries
BitBlt
GetTextAlign
SetPixel
GetCurrentPositionEx
CreateBitmap
SetBkColor
GetTextColor

user32

GetWindowRect
KillTimer
ShowWindow
GetDC
CharLowerA
RegisterWindowMessageA
UnhookWindowsHookEx
DrawIcon
SetRect
SystemParametersInfoA
FrameRect
SetWindowTextA
SetWindowLongA
DefWindowProcA
DrawEdge
DrawFrameControl
ScrollWindow
DrawIconEx
TranslateMessage
LoadStringA
EnumThreadWindows
RegisterClipboardFormatA
GetClipboardData
GetKeyboardLayout
DestroyIcon
PostMessageA
GetMenuItemID
wsprintfA
GetTopWindow
GetScrollInfo
ReleaseDC
EnumChildWindows
DispatchMessageA
IsWindowVisible
DestroyMenu
IsZoomed
GetWindowThreadProcessId
IsWindow
SetWindowPlacement
RemovePropA
GetCursor
LoadBitmapA
CharNextA
GetMenuItemCount
EnumWindows
MessageBoxA
IsWindowEnabled
CharUpperBuffA
SetMenu
GetMenu
OpenClipboard
ActivateKeyboardLayout
PeekMessageA
GetMessagePos
GetSysColor
GetKeyboardLayoutNameA
TrackPopupMenu
SetClassLongA
CharToOemA
MapWindowPoints
SetWindowPos
SetCapture
GetLastActivePopup
EmptyClipboard
RemoveMenu
IsDialogMessageA
GetSysColorBrush
GetDesktopWindow
LoadCursorA
GetSystemMenu
FindWindowA
GetWindowLongA
DispatchMessageW
CharNextW
LoadIconA
SetWindowLongW
SetFocus
GetKeyboardLayoutList
ShowScrollBar
DrawAnimatedRects
WindowFromPoint
CallNextHookEx
GetScrollRange
InvalidateRect
GetDCEx
GetFocus
EndPaint
GetActiveWindow
GetClientRect
SetActiveWindow
RedrawWindow
CreatePopupMenu
CharUpperA
SetPropA
GetCursorPos
DestroyCursor
TranslateMDISysAccel
OemToCharA
CharLowerBuffA
IsDialogMessageW
GetClassLongA
GetKeyboardType
IsCharUpperA
EnableMenuItem
SetForegroundWindow
GetPropA
ClientToScreen
OffsetRect
InsertMenuA
SetScrollRange
EnableWindow
InsertMenuItemA
GetKeyState
CallWindowProcA
MapVirtualKeyA
GetSubMenu
ChildWindowFromPoint
CreateMenu
SetMenuItemInfoA
InflateRect
SetCursor
IsCharLowerA
EnableScrollBar

advapi32

RegCreateKeyA
RegDeleteValueA
RegQueryValueExA
RegOpenKeyExA

msvcrt

clock
memcpy
wcscspn
atol
rand
calloc
sqrt
exit
mbstowcs
_acmdln
swprintf
wcschr

Exports

Exports

LyuSN
_h6Vlkm6cMGUu@4
_EJrPv@4
fqF0S@20

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

92e218d407ea5fb417cbd41a4938a338

Headers

File Characteristics

Imports

kernel32

gdi32

user32

advapi32

msvcrt

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 10KB

.rdata Size: 5KB - Virtual size: 101KB

.data Size: 105KB - Virtual size: 104KB

.rsrc Size: 1024B - Virtual size: 988B

.text
Size: 11KB - Virtual size: 10KB

.rdata
Size: 5KB - Virtual size: 101KB

.data
Size: 105KB - Virtual size: 104KB

.rsrc
Size: 1024B - Virtual size: 988B