6d23e5c876bf29ff279a5bd03d522335

Sharing

Copy URL Twitter E-mail

General

Target

6d23e5c876bf29ff279a5bd03d522335
Size

203KB
MD5

6d23e5c876bf29ff279a5bd03d522335
SHA1

f7e70c171857c05668b9ac499d2f3c65c65e5346
SHA256

c0b5073510c27b9b10d39c2b208c1d1c79b25e81129a9aad369ee48da4c5164b
SHA512

c5d17babd3a53cd9931b5aa27d1e7ecbd43b5ae41d66aecafd34d5068220be0ee5138411579a372808eff159b2ea7ebf4ec8fca2907de83651a2ed81a894393b
SSDEEP

3072:4Wg5h0R/csfpmsq4hCD1pBy0z0jL9z3cK0k+kxr0WmcocQ+5fGhi/JVg6CDYFtf:wtshXHsBAL9YKZxrXmRqbqEt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d23e5c876bf29ff279a5bd03d522335

Files

6d23e5c876bf29ff279a5bd03d522335
.exe windows:5 windows x86 arch:x86

c932bf6f2625453f97857223b51344f0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strcpy
ungetc
clearerr
wcsncmp
_controlfp
malloc
__set_app_type
system
__p__fmode
calloc
__p__commode
strtoul
vsprintf
wcspbrk
_amsg_exit
_initterm
isalnum
fgetc
_ismbblead
bsearch
strchr
_XcptFilter
strcoll
time
localtime
wcstoul
wcscpy
putchar
fputc
wcscat
strcspn
fseek
mbstowcs
towlower
qsort
swscanf
_exit
wcstombs
_cexit
wcsncpy
isprint
__setusermatherr
vswprintf
__getmainargs

gdi32

SetDIBColorTable
SetBrushOrgEx
CombineRgn
GetBkMode
SelectPalette
CreateBrushIndirect
CreatePolygonRgn
CreateHatchBrush
GetSystemPaletteUse
CreateFontW
CreateFontIndirectW
Polyline
GetTextMetricsA
TranslateCharsetInfo
UnrealizeObject
GetDeviceCaps
GetROP2
EnumFontFamiliesExW
CreateDiscardableBitmap
SetDIBits
DeleteDC
GetViewportOrgEx
GetSystemPaletteEntries
WidenPath
GetObjectA
GetTextMetricsW
GetPixel
RemoveFontResourceW
RectVisible
GetMapMode
StretchBlt
GetNearestPaletteIndex
SetDIBitsToDevice
GetLayout
SetTextColor
CreateEllipticRgnIndirect
GetTextColor
GetTextFaceW
CreatePalette
SetPixel
SetAbortProc
ExcludeClipRect
Ellipse
ResizePalette
SelectClipRgn
Polygon
CreateHalftonePalette

shlwapi

PathFileExistsA

kernel32

FileTimeToSystemTime
OpenFile
SearchPathA
DeleteCriticalSection
GetPriorityClass
CancelWaitableTimer
lstrlenA
GetAtomNameW
SetThreadAffinityMask
GlobalAlloc
SetHandleCount
GetTempPathW
GlobalGetAtomNameW
CreateEventA
SuspendThread
GetThreadContext
lstrcmpW
IsBadReadPtr
lstrcpynW
CreateRemoteThread
GetCurrentDirectoryW
GetShortPathNameA
CreateFileA
EnumResourceNamesA
GetModuleFileNameW
RtlUnwind
LocalAlloc
WinExec
GetModuleHandleA
GetLastError
GetComputerNameA
GetThreadLocale
GetFullPathNameW
RemoveDirectoryW
MapViewOfFile
SetTimerQueueTimer
GetHandleInformation
GetFileAttributesExA
LockFile
AreFileApisANSI
FindResourceExW
FindClose
SetMailslotInfo
FreeLibrary
ReadFile
SetThreadPriority
GetTempPathA
DeviceIoControl
FileTimeToLocalFileTime
CreateWaitableTimerA
GetVersion

user32

CheckMenuRadioItem
SetForegroundWindow
GetScrollPos
MapDialogRect
ChangeMenuW
GetClassLongW
MapVirtualKeyExW
FindWindowExA
DispatchMessageA
IsCharAlphaNumericW
CreateCaret
DrawFrameControl
CloseDesktop
DialogBoxParamW
ArrangeIconicWindows
EqualRect
LoadStringA
PeekMessageA
CharUpperW
GetDoubleClickTime
IsWindowVisible
DrawTextW
DrawMenuBar
HiliteMenuItem
TileWindows
CharLowerBuffW
CreateWindowExA
SetWindowTextA
SetRectEmpty
FrameRect
GetMessageExtraInfo
SetUserObjectInformationW
DestroyAcceleratorTable
GetMenuItemCount
keybd_event
OpenIcon
SetActiveWindow
SetSysColors
LoadMenuA
CharNextW
MessageBoxA
TranslateAcceleratorW
DefFrameProcA
SystemParametersInfoA
RegisterClassW
MessageBoxExA
CharLowerW
DialogBoxParamA
GetMessageW
SetPropW
FindWindowA
IsChild
CopyAcceleratorTableW
EnableWindow
SetScrollInfo
LoadStringW
CharToOemW
GetClipCursor
SetMenuDefaultItem
InvalidateRect
LoadBitmapA
GetForegroundWindow
DrawStateW
TranslateAcceleratorA
IsWindow
SendInput
KillTimer
LoadImageA
GetKeyboardType
DrawIcon
TabbedTextOutW
GetWindow
InflateRect
MessageBoxW
SetCursor
ToUnicodeEx
IsRectEmpty
GetClassLongA
IsWindowEnabled
SwitchToThisWindow
GetDCEx
LoadCursorA
InvalidateRgn
IsWindowUnicode
OffsetRect
CheckRadioButton
RegisterWindowMessageW
RegisterHotKey
IntersectRect
OpenInputDesktop
RegisterClassA
SetWindowRgn
LoadMenuW
GetMenuCheckMarkDimensions
DefWindowProcA
AdjustWindowRectEx
AllowSetForegroundWindow
GetWindowTextLengthW
IsIconic
SetMenuItemInfoW
SetMenu
ClipCursor
LookupIconIdFromDirectory
CharUpperA
LockWindowUpdate
GetMenuStringA
MapWindowPoints
GetTopWindow
CreateDialogParamW
GetNextDlgGroupItem
PtInRect

Exports

Exports

?HidePointerOriginal@@YGFKPAIPAD<V

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 134KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c932bf6f2625453f97857223b51344f0

Headers

File Characteristics

Imports

msvcrt

gdi32

shlwapi

kernel32

user32

Exports

Exports

Sections

.text Size: 65KB - Virtual size: 65KB

.data Size: 134KB - Virtual size: 201KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 65KB - Virtual size: 65KB

.data
Size: 134KB - Virtual size: 201KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 2KB - Virtual size: 1KB