623802d474e7b49609e766a987b529a1

Sharing

Copy URL Twitter E-mail

General

Target

623802d474e7b49609e766a987b529a1
Size

72KB
MD5

623802d474e7b49609e766a987b529a1
SHA1

43bd347eab443f8cad6f03a6740060dcc7bdb6ae
SHA256

16bd053706b9ff7f833dccba09a541c283e39ba315ef41a692ddf1a6023cdeaf
SHA512

a98c1dfb47930d6161d682b41e6c12edbc666590092cb36d731ae6fcaf72af8fa89c55a741787036b0348600a074974ae3b504e59524e830278c7776fa47a56d
SSDEEP

768:xDkfWemN0AQn7N6c2V7RfPrkHr8fxCU3imrGf+DmjpiMH19kF4x4UwNsQd4imL:qfWeK0tgc2VVLpffqHjpp19VxRw6QLmL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
623802d474e7b49609e766a987b529a1

Files

623802d474e7b49609e766a987b529a1
.exe windows:4 windows x86 arch:x86

16e2b3e20238008b693eb578d1ea4717

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalDeleteAtom
GetProcessHeap
IsBadReadPtr
DeleteFileA
ExitProcess
GlobalAlloc
WriteFile
RaiseException
WaitForSingleObject
ReadFile
lstrlenA
GetTickCount
GetCommandLineW
GetUserDefaultLCID
VirtualAlloc
GlobalFindAtomA
HeapAlloc
LoadLibraryA
LocalAlloc
GetCurrentProcessId
VirtualQuery
GetLastError
GetLocaleInfoA

user32

RegisterWindowMessageA
GetMenuStringA
SetScrollPos
SendMessageW
DispatchMessageW
SetWindowsHookExA
IsDlgButtonChecked
CharNextW
MsgWaitForMultipleObjects
GetPropA
LoadIconA
GetKeyboardLayout
DispatchMessageA
SetParent
CallWindowProcA
GetWindowLongW
SetScrollInfo
DefFrameProcA
SetClassLongA
UpdateWindow
GetLastActivePopup
KillTimer
IsCharUpperA
GetIconInfo
SetPropA
RemovePropA
DefMDIChildProcA
GetSystemMenu
IsChild
ClientToScreen
IsWindow
GetWindowPlacement
GetKeyState
TranslateMDISysAccel
GetSysColorBrush
DrawFrameControl
PostMessageA
GetKeyboardState
IsZoomed
GetSysColor
GetTopWindow
CharLowerBuffA
BeginPaint
EqualRect
IsWindowUnicode
TranslateMessage
wsprintfA
FindWindowA
SetRect
GetWindowTextA
DrawIcon
GetClientRect
GetScrollPos
EnumWindows
SetTimer
GetWindowLongA
SetCursor
PtInRect
GetMenu
DrawMenuBar
MapVirtualKeyA
PostQuitMessage
ScreenToClient
InsertMenuItemA
GetWindowRect
EndPaint
ActivateKeyboardLayout
CreatePopupMenu
WindowFromPoint
SetCapture
DrawTextA
GetClassInfoA
GetActiveWindow
GetWindowTextLengthA
DestroyMenu
SetWindowPos
SetMenu
IsWindowEnabled
ShowWindow
DefWindowProcA
ShowScrollBar
InvalidateRect
GetKeyboardLayoutList
GetMenuItemInfoA
InsertMenuA
AdjustWindowRectEx
ScrollWindow
IsDialogMessageW
SetWindowTextA
DestroyCursor
LoadStringA
GetCursorPos
RedrawWindow
UnregisterClassA
SendMessageA
IsIconic
GetKeyboardLayoutNameA
SetFocus
CallNextHookEx
EnumThreadWindows
DrawEdge
GetDesktopWindow
DestroyWindow
EnableMenuItem
RegisterClipboardFormatA
GetFocus
EmptyClipboard
IsMenu
GetMenuItemCount
LoadKeyboardLayoutA
GetForegroundWindow
CharUpperBuffA
SetClipboardData
GetMenuState
DestroyIcon

gdi32

GetDIBColorTable
SelectObject
SelectPalette
CreateFontIndirectA

ole32

CoRevokeClassObject
CLSIDFromProgID

comdlg32

ChooseColorA
GetFileTitleA
GetOpenFileNameA

Exports

Exports

lSgk9k4tn@12
qWST4fDOEOaPp@16
yoDcC8vk_F
_Nf3jnN@20
_d420jRrL@12

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

16e2b3e20238008b693eb578d1ea4717

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

comdlg32

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 5KB - Virtual size: 37KB

.data Size: 55KB - Virtual size: 54KB

.rsrc Size: 1024B - Virtual size: 1020B

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 5KB - Virtual size: 37KB

.data
Size: 55KB - Virtual size: 54KB

.rsrc
Size: 1024B - Virtual size: 1020B