5849bda906128e9e50bfe7c756d519c6

Sharing

Copy URL Twitter E-mail

General

Target

5849bda906128e9e50bfe7c756d519c6
Size

173KB
MD5

5849bda906128e9e50bfe7c756d519c6
SHA1

b770cf15e405bcad8359cbd0050da888f3d657d4
SHA256

77ff19ba5daeef72b5715e7f5e1f31ca4244f7ff1ef3ba2824977474e9688075
SHA512

a7063d768d52e01bd9d02633b85bc1e5841863a70f54b4935abfcdaee6f3079622a6490f29ed404ddd27f27a1c7c6cd243e0685c4a485519bd4e35ed472b5b68
SSDEEP

3072:I/aSElYVGovWExMOy2LbLM552g0cCg9HgXyov3lVBh:IixTouJX2XL65Wzg9HKv3th

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5849bda906128e9e50bfe7c756d519c6

Files

5849bda906128e9e50bfe7c756d519c6
.exe windows:4 windows x86 arch:x86

60fbaaead14b02722e6166555230ac65

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerInstallFileA

shell32

SHGetDiskFreeSpaceA
SHGetFileInfoA
Shell_NotifyIconA
DragQueryFileA
SHFileOperationA

oleaut32

VariantCopyInd
GetErrorInfo
RegisterTypeLib
SysStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayGetUBound

kernel32

SetErrorMode
GetCommandLineA
LoadLibraryExA
GetStringTypeW
InitializeCriticalSection
ExitThread
ExitProcess
LoadLibraryA
GetFileSize
GetLastError
LocalAlloc
GetModuleHandleA
VirtualAlloc

gdi32

CreateCompatibleDC
CreateDIBSection

comdlg32

GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA
ChooseColorA
FindTextA

shlwapi

SHQueryInfoKeyA
SHQueryValueExA

ole32

CoCreateFreeThreadedMarshaler
CreateBindCtx
CLSIDFromProgID

user32

InflateRect
CreateIcon
MapVirtualKeyA
DrawTextA
RemovePropA
CharToOemA
GetClientRect
IsWindowEnabled
EnumThreadWindows
GetMenuItemInfoA
PostMessageA
InsertMenuItemA
DestroyIcon
RedrawWindow
GetDlgItem
LoadStringA
MoveWindow
EnumChildWindows
IsDialogMessageW
RegisterClassA
ChildWindowFromPoint
PostQuitMessage
OpenClipboard
ScreenToClient
GetTopWindow
GetKeyboardLayout
EnableScrollBar
SetCursor
LoadIconA
GetWindow
SetRect
FillRect
SetWindowsHookExA
GetKeyboardType
GetSystemMenu
DrawMenuBar
UnregisterClassA
CreateWindowExA
GetPropA
FindWindowA
FrameRect
LoadKeyboardLayoutA
EnumWindows
SetForegroundWindow
GetWindowTextA
RemoveMenu
GetMessagePos
BeginPaint
IsWindowUnicode
DefWindowProcA
EndPaint
UpdateWindow
GetDC
EqualRect
IsDialogMessageA
ReleaseDC
ShowOwnedPopups
DispatchMessageW
OemToCharA
SetWindowPos
MessageBoxA
ReleaseCapture
CreatePopupMenu
EnableMenuItem
RegisterClipboardFormatA
SetScrollPos
GetWindowLongW
TranslateMessage
GetDCEx
IsIconic
GetParent
CheckMenuItem
GetSystemMetrics
GetCapture
OffsetRect
PtInRect
GetKeyboardState
MessageBeep
InvalidateRect
IsWindow
DrawEdge
SetScrollInfo
EnableWindow
GetClassInfoA
PeekMessageW
GetScrollPos
SetWindowLongA
InsertMenuA
SetClipboardData
GetKeyState
DestroyCursor
UnhookWindowsHookEx
SetWindowPlacement
DrawIcon
RegisterWindowMessageA
GetKeyboardLayoutList
CallNextHookEx
LoadBitmapA
GetScrollRange
CharNextW
DrawIconEx
CharNextA
GetDesktopWindow
GetForegroundWindow
ShowScrollBar
CallWindowProcA
DefFrameProcA
SendMessageA
SetCapture
SetPropA
GetWindowDC
GetClassLongA
DefMDIChildProcA
GetKeyNameTextA
SystemParametersInfoA
GetMenuState
GetWindowLongA
GetScrollInfo
SetWindowTextA
wsprintfA
IsChild
TrackPopupMenu
SendMessageW
SetClassLongA
CharLowerA
SetTimer
GetClassNameA
IsWindowVisible
GetIconInfo
DestroyWindow
GetMenuItemID
IntersectRect
IsRectEmpty
DispatchMessageA
CharUpperBuffA
PeekMessageA
GetActiveWindow
GetKeyboardLayoutNameA
CreateMenu
TranslateMDISysAccel
GetLastActivePopup
DeleteMenu
GetWindowThreadProcessId
MsgWaitForMultipleObjects
WindowFromPoint
SetParent
ClientToScreen
GetCursorPos
GetMenu
DestroyMenu

msvcrt

pow
wcstol
tolower
mbstowcs
strcmp
memcpy

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 1024B - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

60fbaaead14b02722e6166555230ac65

Headers

File Characteristics

Imports

version

shell32

oleaut32

kernel32

gdi32

comdlg32

shlwapi

ole32

user32

msvcrt

Sections

.text Size: 31KB - Virtual size: 31KB

.bss Size: 1024B - Virtual size: 540B

.idata Size: 135KB - Virtual size: 135KB

.rdata Size: 2KB - Virtual size: 65KB

.edata Size: 2KB - Virtual size: 1KB

.text
Size: 31KB - Virtual size: 31KB

.bss
Size: 1024B - Virtual size: 540B

.idata
Size: 135KB - Virtual size: 135KB

.rdata
Size: 2KB - Virtual size: 65KB

.edata
Size: 2KB - Virtual size: 1KB