77df63d69045df607dea95d7750bb1f5

Sharing

Copy URL Twitter E-mail

General

Target

77df63d69045df607dea95d7750bb1f5
Size

254KB
MD5

77df63d69045df607dea95d7750bb1f5
SHA1

87b7428258cd225559a65dcd9ca5917d5508ad92
SHA256

b049212c9e22d019be015c6c5d53465551836747b3b13497fbac72cc281a9aa9
SHA512

1d3cf3e921519800df582a7be75bbbe0e0a19609531540b44679ec72d14b189623f1fbfe82d00ff8298633380db21b90af263150244de4e5b8e3d9d0435cfb84
SSDEEP

6144:Z5by1fWCwiifJodbelpG7n1/dVI/SPx8cfnG/hgsM:Z5yfHwLfJo1eixVVI/SZfGu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77df63d69045df607dea95d7750bb1f5

Files

77df63d69045df607dea95d7750bb1f5
.exe windows:4 windows x86 arch:x86

311e7c945f0f0f1fea1b9700ccf7ea58

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
LocalLock
LockFile
UnhandledExceptionFilter
GetConsoleMode
QueryDosDeviceW
GetStartupInfoW
TransactNamedPipe
GlobalGetAtomNameW
OpenFileMappingW
LocalFree
HeapCreate
EnumResourceLanguagesW
ConvertDefaultLocale
SetStdHandle
ReleaseMutex
CompareStringW
EnumSystemLocalesA
GetSystemTimeAsFileTime
GetCurrentThread
TlsAlloc
DuplicateHandle
OpenMutexA
lstrcmpA
WriteConsoleW
ReadFile
GetDriveTypeW
CreateFileMappingW
GetLongPathNameW
QueryDosDeviceA
CompareStringA
CreateEventA
GetSystemDefaultUILanguage
Beep
LoadLibraryW
GetShortPathNameW
FileTimeToLocalFileTime
GetTempFileNameA
FindFirstFileW
GetSystemDefaultLangID
GetTimeFormatA
ExitThread
IsValidCodePage
RemoveDirectoryW
IsDBCSLeadByteEx
GetUserDefaultLangID
HeapSetInformation
GlobalHandle
FindResourceExW
GetSystemDirectoryW
GetLocaleInfoA
SystemTimeToTzSpecificLocalTime
EnumResourceLanguagesA
GetModuleHandleA
AddAtomA
CreateSemaphoreW
VirtualAlloc
GetStartupInfoA

ole32

CoInitializeSecurity
CoTaskMemAlloc
CreateFileMoniker
CreateItemMoniker
GetRunningObjectTable
OleTranslateAccelerator
CoRevokeClassObject
OleCreateLinkToFile
CreateOleAdviseHolder
OleRegEnumVerbs
CoMarshalInterThreadInterfaceInStream
CoGetTreatAsClass

shlwapi

PathGetCharTypeA

oleaut32

VariantClear

shell32

DragAcceptFiles
SHGetSpecialFolderLocation

user32

GetInputState
DdeDisconnect
NotifyWinEvent
EnumDisplayMonitors
InsertMenuA
CreatePopupMenu
SetLayeredWindowAttributes
GetClassInfoExW
SetWindowsHookExA
GrayStringA
CloseClipboard
ModifyMenuA
RegisterClassA
CreateAcceleratorTableW
RegisterClassExA
DialogBoxParamW
TranslateAcceleratorW
SetMenuItemInfoW
CreateDialogParamW
GetWindowRect
EnumWindows
GetClassNameW
GetLastActivePopup
CharUpperA
SendMessageTimeoutA
SendDlgItemMessageA
ScrollWindow
SetWindowRgn
SetWindowTextA
CheckMenuRadioItem
ReleaseCapture
SendMessageW
SetClipboardData
GetMenuItemID
IsCharAlphaNumericA
IsWindowEnabled
RedrawWindow
GetWindowPlacement
GetDlgItemTextW
MessageBoxW
GetClassNameA
GetKeyState
PostMessageW
GetWindowModuleFileNameA
FrameRect
UpdateLayeredWindow
SetScrollPos
GetDC
EnumThreadWindows
EmptyClipboard
AdjustWindowRectEx
SetClassLongW
PtInRect
EnumClipboardFormats
FlashWindowEx
OpenIcon
SetDlgItemTextW
RegisterClassExW
GetCapture
UnhookWindowsHookEx
GetQueueStatus
OffsetRect
AdjustWindowRect
ScrollWindowEx
IsDlgButtonChecked
GetDesktopWindow
MonitorFromPoint
ShowScrollBar
ReleaseDC
GetWindowTextA
ClientToScreen
EndPaint
InvalidateRgn
DeferWindowPos
ShowWindow
CreateDialogIndirectParamW
DefWindowProcA
WinHelpW
SetWindowContextHelpId

advapi32

CloseServiceHandle
CryptGenRandom

msvcrt

__getmainargs
_controlfp
_except_handler3
__set_app_type
__p__fmode
_XcptFilter
_exit
longjmp
_ecvt
_itow
_expand
_mbsrchr
_msize
_wcsnicmp
swprintf
_wtol
localtime
_strlwr
atoi
_fpreset
_beginthreadex
wcstod
wcstoul
free
srand
exit
toupper
rand
_c_exit
wcslen
wcstok
towlower
fread
strchr
_errno
_stricmp
_iob
ceil
_wsplitpath
wcscpy
_vsnwprintf
wcschr
_wcsupr
_strnicmp
_CxxThrowException
wcsncpy
wcscmp
_snwprintf
__p__commode
_wcsdup
qsort
sprintf
wcsspn
setlocale
wcsncmp
fclose
strncpy
wcscspn
_initterm
__setusermatherr
_adjust_fdiv
_acmdln

Sections

.text
Size: 215KB - Virtual size: 215KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

311e7c945f0f0f1fea1b9700ccf7ea58

Headers

File Characteristics

Imports

kernel32

ole32

shlwapi

oleaut32

shell32

user32

advapi32

msvcrt

Sections

.text Size: 215KB - Virtual size: 215KB

.rdata Size: 25KB - Virtual size: 25KB

.data Size: 11KB - Virtual size: 11KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 215KB - Virtual size: 215KB

.rdata
Size: 25KB - Virtual size: 25KB

.data
Size: 11KB - Virtual size: 11KB

.rsrc
Size: 1KB - Virtual size: 1KB