65553c842f142ca8b60717e62b50addf

Sharing

Copy URL Twitter E-mail

General

Target

65553c842f142ca8b60717e62b50addf
Size

101KB
MD5

65553c842f142ca8b60717e62b50addf
SHA1

14dd18ca020293439a59a04b8ded54e774fc8569
SHA256

75e7f590d3facbe373c41aa829c229b4764acd4d55fe2d0e621b2306f2e481d0
SHA512

2fbbd44c6a1b0113007fb8312a92189af868dcf961761d21835c49b5bfa780e53dfe81f5e06a74179150abcd9869ded8e32843146fa9cbf72bd28a5ab3a12587
SSDEEP

1536:0wWLNiGR1tN5gqt9RMscA4D0DqokB6gz47Wgs0LZ8Lzdq8H4:xGR1NgqRcAehRgsIgzdqn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65553c842f142ca8b60717e62b50addf

Files

65553c842f142ca8b60717e62b50addf
.exe windows:4 windows x86 arch:x86

9ebce803811a8492073923e35733c9ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteValueA
RegLoadKeyA

gdi32

GetDIBits
CreatePenIndirect
CreateFontIndirectA
GetPixel
SelectObject
GetCurrentPositionEx
SaveDC
CopyEnhMetaFileA

kernel32

LocalAlloc
FreeLibrary
GlobalFindAtomA
ExitProcess
VirtualAllocEx
GetProcAddress
LoadLibraryExA
ExitThread
GetModuleHandleA
GetFileSize
GetLocalTime

user32

DispatchMessageA
ChildWindowFromPoint
InsertMenuA
GetClientRect
InvalidateRect
GetScrollRange
GetCursor
SetTimer
GetWindowThreadProcessId
SetForegroundWindow
IsWindowEnabled
TranslateMDISysAccel
SendMessageW
CheckMenuItem
GetCapture
CreateWindowExA
ClientToScreen
DefWindowProcA
IsDialogMessageA
DestroyIcon
GetMessagePos
GetKeyboardLayoutNameA
UnregisterClassA
OpenClipboard
IntersectRect
GetKeyState
CallNextHookEx
WaitMessage
TranslateMessage
GetWindowDC
PostQuitMessage
GetKeyboardState
SystemParametersInfoA
SetWindowPlacement
GetDC
CharNextW
ScrollWindow
EnableWindow
PeekMessageW
EmptyClipboard
LoadIconA
SetWindowsHookExA
SetParent
SetPropA
SetCursor
ShowScrollBar
GetWindowRect
MessageBeep
SetClassLongA
FindWindowA
AdjustWindowRectEx
IsIconic
GetPropA
PeekMessageA
GetClassLongA
GetMenuState
GetFocus
TrackPopupMenu
RegisterClipboardFormatA
CreateMenu
DrawIconEx
ReleaseCapture
UnhookWindowsHookEx
CharLowerA
EnableMenuItem
CharLowerBuffA
ReleaseDC
EqualRect
GetKeyNameTextA
ActivateKeyboardLayout
DrawFrameControl
SetFocus
GetSystemMetrics
GetSystemMenu
SetScrollRange
IsChild
MoveWindow
OffsetRect
InsertMenuItemA
GetTopWindow
RemovePropA
RegisterWindowMessageA
KillTimer
EnumThreadWindows
IsWindow
SetRect
GetWindowLongW
DeleteMenu
GetMenuItemCount
DrawTextA
RemoveMenu
GetSubMenu
GetLastActivePopup
EndPaint
GetMenuItemInfoA
SetWindowLongA
GetDlgItem
FrameRect
SetScrollInfo
GetIconInfo
SetCapture
EnableScrollBar
EnumWindows
LoadBitmapA
GetForegroundWindow
MapWindowPoints
PostMessageA
GetKeyboardLayoutList
CharNextA
ShowOwnedPopups
InflateRect
GetMenuStringA
DrawIcon
ShowWindow
GetSysColorBrush
ScreenToClient
DestroyWindow
DestroyMenu
GetActiveWindow

oleaut32

SafeArrayUnaccessData
SysFreeString
SafeArrayGetElement
VariantCopyInd
SysReAllocStringLen

shlwapi

SHStrDupA
SHSetValueA
SHGetValueA

comdlg32

GetOpenFileNameA
FindTextA
ChooseColorA

shell32

SHGetDiskFreeSpaceA

msvcrt

log
calloc
strncmp
memcpy

version

GetFileVersionInfoSizeA
VerQueryValueA
VerInstallFileA

ole32

CoReleaseMarshalData
CreateStreamOnHGlobal
CoUninitialize
CoFreeUnusedLibraries
CreateOleAdviseHolder
MkParseDisplayName
CreateBindCtx
OleRun
StringFromIID
CoRegisterClassObject

comctl32

ImageList_Destroy
ImageList_Read
ImageList_DragShowNolock
ImageList_DrawEx
ImageList_Add
ImageList_Draw
ImageList_Create
ImageList_Write

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 1024B - Virtual size: 599B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9ebce803811a8492073923e35733c9ea

Headers

File Characteristics

Imports

advapi32

gdi32

kernel32

user32

oleaut32

shlwapi

comdlg32

shell32

msvcrt

version

ole32

comctl32

Sections

.text Size: 30KB - Virtual size: 29KB

.bss Size: 1024B - Virtual size: 599B

.idata Size: 68KB - Virtual size: 68KB

.text
Size: 30KB - Virtual size: 29KB

.bss
Size: 1024B - Virtual size: 599B

.idata
Size: 68KB - Virtual size: 68KB