696416ff0c1ef0700dc8c3093e26735a

Sharing

Copy URL Twitter E-mail

General

Target

696416ff0c1ef0700dc8c3093e26735a
Size

69KB
MD5

696416ff0c1ef0700dc8c3093e26735a
SHA1

3b9330db566f564264605265333a50f0c920ecf1
SHA256

10838bffbb0d57ef162929bf42e9ad767d2bbd4ba2d8cb02db79e43a25bee8ce
SHA512

3221e580f02895f1f9d6571823a21052e19a7186ee12536fd19e74a176cb5cf11b9c5d0aeab0d52b2ddd4e60d95dab65d860fd6f7bf2b86c0c1c9f1ac470f933
SSDEEP

1536:+ctvhfc0w+Sw8OxUlTfaaat+de18lwvKQY4bJwUJJJ:F5Tw+SwLxSfaacXKUwUJJJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
696416ff0c1ef0700dc8c3093e26735a

Files

696416ff0c1ef0700dc8c3093e26735a
.exe windows:4 windows x86 arch:x86

243467df2b4fb7e17c9b333bccc5eeb3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UnregisterClassA
GetSystemMetrics
MessageBoxA
IsZoomed
GetSystemMenu
CharLowerBuffA
IsCharUpperA
GetCursor
DispatchMessageA
DispatchMessageW
CharUpperA
CheckMenuItem
FindWindowA
ClientToScreen
GetParent
LoadBitmapA
EnumThreadWindows
FrameRect
DestroyMenu
DrawIcon
CreateWindowExA
SetWindowLongA
DrawFrameControl
EnableMenuItem
DestroyIcon
GetSysColorBrush
GetMenu
SetForegroundWindow
LoadCursorA
CharToOemA
MapWindowPoints
InflateRect
IsWindow
GetWindowLongA
InvalidateRect
GetForegroundWindow
DeleteMenu
GetClassLongA
CharNextA
GetDCEx
SetParent
IsRectEmpty
GetMenuItemInfoA
SetFocus
IsChild
GetMessagePos
GetMenuItemCount
CharUpperBuffA
OffsetRect
GetScrollInfo
RegisterWindowMessageA
IsDialogMessageW
DrawMenuBar
GetWindow
EnableScrollBar
ChildWindowFromPoint
GetScrollPos
SetWindowsHookExA
IsMenu
SetTimer
ScrollWindow
SetWindowPlacement
SetWindowPos
GetSysColor
LoadStringA
GetFocus
IsDlgButtonChecked
FillRect
GetKeyNameTextA
EmptyClipboard
ScreenToClient
DefMDIChildProcA
IsIconic
GetWindowPlacement

kernel32

GlobalAlloc
GetCurrentThread
ExitProcess
VirtualAlloc
LocalReAlloc
GetLastError
GetCommandLineW

advapi32

RegCreateKeyA
RegDeleteValueA
RegOpenKeyExA

comdlg32

FindTextA
ChooseColorA
GetSaveFileNameA
GetOpenFileNameA

gdi32

GetTextAlign
GetBkColor
GetTextColor

comctl32

ImageList_Destroy
ImageList_Draw
ImageList_GetBkColor
ImageList_Read
ImageList_Add

shell32

SHGetSpecialFolderLocation
Shell_NotifyIconW
SHGetDiskFreeSpaceA
Shell_NotifyIconA
SHFileOperationA

Exports

Exports

_SG8zZ6ormOQNgx
8BdTgl0GUfHN6@24
_ZGOVn7vyQvuFL@4
_RUNCx
_7SChWsyts@4
_vdAe7@16
_Ss17u85
itazP
_PlKzWJV_K2
_lxoAEEJpCvpn9x
_FDNeDJzsjw9N
vFHaFdxC@20
_foOq1DHB@12
_WS9co@8
xAszcR@4
HoQ_IPiF7@4
_QsUjvu2K
VixcH8Xc5vrl@4
JhFmky8moG7EhG
AiaGZ4W_Is77
uiG7Rh
_NdXpB_IAY
_R0wA_5tD@24
_nt2nN2h9h9K@4
_dVy0CqJcChn@12
_7r25Dc07K2f7@12
WG7tJH7@8
_7nMRbbp24hMiwq@12
_Curs1u6BGm56VM@12
_CQKnK@24
_Qjv8tWfKhhv@8
XksenmzfU@20
_DhAuKWqw1N

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

243467df2b4fb7e17c9b333bccc5eeb3

Headers

File Characteristics

Imports

user32

kernel32

advapi32

comdlg32

gdi32

comctl32

shell32

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 10KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 51KB - Virtual size: 75KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 11KB - Virtual size: 10KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 51KB - Virtual size: 75KB

.rsrc
Size: 2KB - Virtual size: 1KB