77db9083932fca0e4783ae50d7c1b4a5

Sharing

Copy URL

Twitter E-mail

General

Target

77db9083932fca0e4783ae50d7c1b4a5
Size

28KB
MD5

77db9083932fca0e4783ae50d7c1b4a5
SHA1

be85b78c4a41bcc9fbe232b7efe02740cb238705
SHA256

ead509e13e827d9bd60f7db952a47e3abeea7ca15ac864cabd3b0871280f2d51
SHA512

0704d1891f13968cc17551e6a191cf05aef875b68e008732a758d99a45d119d8893c31dfd69e2e48de5035680868ed3cd0064f9b1b7ed1a71fe60d2f08671216
SSDEEP

384:WJzBUga6XKKWqGiecGUAGzvSLm5musuJf+qvX/zEv2fIgOvr3p331dRMRetQliXy:wdaKWN0GpSqLm5muiqvX5I9cRDE2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77db9083932fca0e4783ae50d7c1b4a5

Files

77db9083932fca0e4783ae50d7c1b4a5
.dll windows:4 windows x86 arch:x86

9bab1511bbb198e3e40817da360540c4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

CreateDialogParamA
SetWindowTextA
SetWindowLongA
CreateWindowExA
SetFocus
SetDlgItemTextA
SetCursor
SetCapture
SendMessageA
ReleaseDC
ReleaseCapture
RegisterClassExA
PostQuitMessage
PeekMessageA
MoveWindow
MessageBoxA
LockWindowUpdate
LoadStringA
LoadMenuA
LoadIconA
TranslateMessage
LoadBitmapA
IsRectEmpty
IsDlgButtonChecked
IsClipboardFormatAvailable
GetWindowRect
GetSystemMetrics
GetSysColor
GetSubMenu
GetMessageA
GetMenuItemCount
GetMenu
GetDlgItemTextA
GetDlgItem
GetDC
GetClientRect
FillRect
EndDialog
EnableMenuItem
DrawTextA
TrackPopupMenu
LoadCursorA
ShowWindow
DispatchMessageA
DestroyWindow
DefWindowProcA
DefDlgProcA
DdeDisconnect
DdeCreateDataHandle
DdeCmpStringHandles
CheckMenuItem
CallWindowProcW
CallWindowProcA
UpdateWindow
wsprintfA

kernel32

lstrlenA
lstrcpynA
lstrcpyA
lstrcmpiA
lstrcatA
WriteFile
SystemTimeToFileTime
SleepEx
Sleep
RtlZeroMemory
RtlMoveMemory
ReadFile
OpenMutexA
LoadLibraryExA
LoadLibraryA
InitAtomTable
HeapAlloc
GetTickCount
GetSystemTime
GetProcessHeaps
GetProcessHeap
GetProcAddress
GetModuleHandleA
GetLastError
GetCurrentDirectoryA
GetCommandLineA
FreeLibrary
FlushViewOfFile
ExpandEnvironmentStringsA
ExitThread
ExitProcess
DeviceIoControl
DeleteAtom
CreateFileA
CloseHandle
BeginUpdateResourceA
AddAtomA
Beep

ole32

CoInitialize
CoUninitialize

gdi32

SetTextColor
SetBkColor
GetGlyphIndicesA
GetDeviceCaps
DeleteObject
CreateSolidBrush
CreateFontIndirectA

comdlg32

GetOpenFileNameA
ChooseFontA
ChooseColorA
GetSaveFileNameA

Exports

Exports

cnatxf

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9bab1511bbb198e3e40817da360540c4

Headers

File Characteristics

Imports

user32

kernel32

ole32

gdi32

comdlg32

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 20KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 1KB - Virtual size: 71KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 20KB - Virtual size: 20KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 1KB - Virtual size: 71KB

.reloc
Size: 2KB - Virtual size: 2KB