58e5cb6a2e7e055965f461ecddcf8d56

Sharing

Copy URL Twitter E-mail

General

Target

58e5cb6a2e7e055965f461ecddcf8d56
Size

280KB
MD5

58e5cb6a2e7e055965f461ecddcf8d56
SHA1

6a9b05744f20403ca6983f0027bcfe53f42f2558
SHA256

e5f5af396614b2800c3d41c82a86fe639fbf579e491b606be16870e40c6bf197
SHA512

adc88f7b0bb22cf3835f397ff48b566b1ea85536fd4525563d0a4dac67e4621a934b3224f559a1802240fe28e440bcdaae3235fcc096913cde17709a42c3ac15
SSDEEP

6144:dKlFMeNdVaJdhWZADtqKaXDCbtx7MRGcKQGue:dV6VaJMAUKXtsIQGue

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58e5cb6a2e7e055965f461ecddcf8d56

Files

58e5cb6a2e7e055965f461ecddcf8d56
.exe windows:4 windows x86 arch:x86

1288d1bea9c5ac1e2ced4151b4a53786

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

atl

AtlAxDialogBoxA
AtlAxGetControl

comctl32

InitCommonControlsEx
CreatePropertySheetPage
PropertySheet

gdi32

SetTextColor
DeleteObject
SetBkMode
GetObjectA
CreateFontIndirectA
SelectObject
GetStockObject

kernel32

IsDBCSLeadByte
GetCPInfo
GetTickCount
SetThreadPriority
GetCurrentThread
Sleep
GetFileSize
GlobalFree
GlobalAlloc
GetLocalTime
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
HeapDestroy
WriteFile
HeapCreate
GetFullPathNameA
GetStartupInfoA
CreateProcessA
GetModuleFileNameA
RaiseException
SystemTimeToFileTime
GetSystemInfo
FileTimeToSystemTime
DeleteFileA
MultiByteToWideChar
WideCharToMultiByte
GetModuleHandleA
CompareStringA
GetVersionExA
GetFileType
SetFilePointer
GetStdHandle
ReadFile
CreateFileA
CreateFileW
CloseHandle
FormatMessageA
LocalFree
GetLastError
HeapAlloc

msvcrt

__dllonexit
__p___argc
__p___argv
atoi
?_set_new_mode@@YAHH@Z
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
fclose
fopen
fread
sprintf
sscanf
_isctype
_pctype
__mb_cur_max
_itoa
strncat
_i64toa
pow
div
_beginthread
_except_handler3
memmove
strpbrk
strrchr
isdigit
??2@YAPAXI@Z
vsprintf
exit
strchr
_strnicmp
strncpy
_onexit
_exit
_XcptFilter
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
realloc
malloc
free
__CxxFrameHandler
_mbsdup
_strcmpi
_acmdln

oleaut32

SysAllocString
SysFreeString

shell32

SHGetSpecialFolderLocation
ShellExecuteA
Shell_NotifyIcon
SHGetMalloc
SHGetPathFromIDList

shlwapi

SHGetValueA
SHSetValueA

user32

CharLowerA
OemToCharA
CharUpperA
KillTimer
LoadCursorA
LoadImageA
MessageBoxA
DestroyWindow
CreateDialogParamA
UpdateWindow
EnableWindow
SetMenuDefaultItem
CreatePopupMenu
InsertMenuA
InsertMenuItemA
CallWindowProcA
CheckDlgButton
SetForegroundWindow
GetDoubleClickTime
ShowWindow
SendMessageA
CheckRadioButton
IsDlgButtonChecked
GetDlgItem
GetWindowTextLengthA
LoadMenuA
DestroyMenu
GetSubMenu
TrackPopupMenuEx
GetWindowRect
PostMessageA
GetDlgItemInt
GetDlgItemTextA
GetDlgCtrlID
SetWindowLongA
GetParent
SetDlgItemInt
SetDlgItemTextA
wsprintfA
DialogBoxParamA
EndDialog
SendDlgItemMessageA
SetTimer
SetClassLongA

comdlg32

GetSaveFileNameA
GetOpenFileNameA

ole32

CoInitialize
CoUninitialize
CoCreateInstance

Sections

.text
Size: 110KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 55KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.patin
Size: 72KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.couffin
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mackt
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1288d1bea9c5ac1e2ced4151b4a53786

Headers

File Characteristics

Imports

atl

comctl32

gdi32

kernel32

msvcrt

oleaut32

shell32

shlwapi

user32

comdlg32

ole32

Sections

.text Size: 110KB - Virtual size: 112KB

.data Size: 1KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 8KB

.data Size: 55KB - Virtual size: 56KB

.data Size: 8KB - Virtual size: 12KB

.rsrc Size: 17KB - Virtual size: 20KB

.patin Size: 72KB - Virtual size: 76KB

.couffin Size: 4KB - Virtual size: 4KB

.mackt Size: 4KB - Virtual size: 8KB

.text
Size: 110KB - Virtual size: 112KB

.data
Size: 1KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 8KB

.data
Size: 55KB - Virtual size: 56KB

.data
Size: 8KB - Virtual size: 12KB

.rsrc
Size: 17KB - Virtual size: 20KB

.patin
Size: 72KB - Virtual size: 76KB

.couffin
Size: 4KB - Virtual size: 4KB

.mackt
Size: 4KB - Virtual size: 8KB