5895e88b303ea4c4c08090ab7418270f

Sharing

Copy URL Twitter E-mail

General

Target

5895e88b303ea4c4c08090ab7418270f
Size

355KB
MD5

5895e88b303ea4c4c08090ab7418270f
SHA1

ccf6f6e09314f929abca2982423d7f64e4025434
SHA256

cb7247bd91dcd226b09be56201e0472084c7a52c776a8c34c2e52ff2d1fdd7ec
SHA512

9c39a27cf076059b26ac22765a21721cddcfc8e95d04c6c97032ea54f3300b1868b066b17df324c6540b5ef12c747b4e9b4360591dfaec1a5b37663b122f1884
SSDEEP

6144:GKeVYY3Z4fLdL2rvRTLFFPn8qXmvhz0B4ABqrZLGZHs3qw1GCEyn5:GKeVR3Z4fLdarjRnXXiaHANLiHs3qw1T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5895e88b303ea4c4c08090ab7418270f

Files

5895e88b303ea4c4c08090ab7418270f
.exe windows:4 windows x86 arch:x86

e7486454129252b32a59ea90cb57db41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

CheckMenuItem
DrawTextA
SetWindowPlacement
DrawMenuBar
PostQuitMessage
EqualRect
GetWindowDC
CallWindowProcA
SetMenu
SetTimer
SetScrollInfo
InvalidateRect
GetScrollRange
GetKeyboardLayoutList
EnumWindows
FrameRect
MessageBeep
GetWindowRect
LoadCursorA
GetWindowLongW
ShowOwnedPopups
CreateIcon
RegisterClipboardFormatA
GetPropA
GetKeyNameTextA
DefMDIChildProcA
IsRectEmpty
GetDlgItem
PeekMessageA
WaitMessage
UnregisterClassA
SetRect
SetScrollPos
ShowScrollBar
EnableWindow
FindWindowA
GetMenuItemCount
MapWindowPoints
GetKeyboardType
SetWindowLongA
GetSystemMenu
SendMessageA
GetCursorPos
IsWindowVisible
RemoveMenu
GetKeyboardLayout
IsZoomed
SetWindowPos
DestroyCursor
GetWindowTextA
InsertMenuItemA
SetCursor
CallNextHookEx
RemovePropA
GetMenuState
RedrawWindow
GetKeyboardState
SendMessageW
GetDesktopWindow
SetCapture
GetClassInfoA
IsDialogMessageW
InsertMenuA
ChildWindowFromPoint
GetLastActivePopup
SetWindowTextA
CharToOemA
PostMessageA
SystemParametersInfoA
EnumThreadWindows
GetSysColor

oleaut32

SafeArrayGetElement
RegisterTypeLib
GetErrorInfo
SysStringLen

shell32

DragQueryFileA

msvcrt

log10
memmove
wcsncmp

comctl32

ImageList_Create
ImageList_Read
ImageList_Add
ImageList_DragShowNolock

version

GetFileVersionInfoA
VerInstallFileA

gdi32

GetDIBColorTable
GetObjectA
GetDIBits

shlwapi

PathIsDirectoryA
SHStrDupA
SHQueryValueExA
PathIsContentTypeA
SHQueryInfoKeyA
SHDeleteKeyA

kernel32

GlobalAlloc
VirtualAlloc
GetModuleHandleA
ExitThread
GetCommandLineA
GetCommandLineW
GetVersionExA
GetProcAddress
ExitProcess
IsBadReadPtr
GetLastError
LoadLibraryA
VirtualAllocEx
lstrlenA

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 289KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RSRC9
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC6
Size: 1024B - Virtual size: 691B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC2
Size: 1024B - Virtual size: 959B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RSRC8
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC5
Size: 512B - Virtual size: 291B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RSRC3
Size: 1024B - Virtual size: 751B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e7486454129252b32a59ea90cb57db41

Headers

File Characteristics

Imports

user32

oleaut32

shell32

msvcrt

comctl32

version

gdi32

shlwapi

kernel32

Sections

.text Size: 57KB - Virtual size: 57KB

DATA Size: 289KB - Virtual size: 288KB

.RSRC9 Size: 1KB - Virtual size: 1KB

.RSRC6 Size: 1024B - Virtual size: 691B

.RSRC2 Size: 1024B - Virtual size: 959B

.RSRC8 Size: 1KB - Virtual size: 1KB

.RSRC5 Size: 512B - Virtual size: 291B

.RSRC3 Size: 1024B - Virtual size: 751B

.rsrc Size: 1024B - Virtual size: 992B

.text
Size: 57KB - Virtual size: 57KB

DATA
Size: 289KB - Virtual size: 288KB

.RSRC9
Size: 1KB - Virtual size: 1KB

.RSRC6
Size: 1024B - Virtual size: 691B

.RSRC2
Size: 1024B - Virtual size: 959B

.RSRC8
Size: 1KB - Virtual size: 1KB

.RSRC5
Size: 512B - Virtual size: 291B

.RSRC3
Size: 1024B - Virtual size: 751B

.rsrc
Size: 1024B - Virtual size: 992B