ff91e59deb48842c77eae181a47e3842

Sharing

Copy URL Twitter E-mail

General

Target

ff91e59deb48842c77eae181a47e3842
Size

122KB
MD5

ff91e59deb48842c77eae181a47e3842
SHA1

bd6c205b5658fc6d3b76c850b456f6bfd7fbf312
SHA256

6e0daae63708d9671f1df9461acd83bf3add86df9ad590c01dfaa8853638ab23
SHA512

2d07f25392512f28c5d01648624bd92259ead914005b7c60a676bbcd79f78069fd0955a7beb77946d8e2cc9981f22dbc49229b2d6600bf4e2c0428f226c0bd98
SSDEEP

3072:f/NMomYZsm1txVIWTb8kcVTZ8fQqFcb7:dtf2ktDTTcuQXn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff91e59deb48842c77eae181a47e3842

Files

ff91e59deb48842c77eae181a47e3842
.exe windows:4 windows x86 arch:x86

a39160740f78356119065c683fad745d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetDiskFreeSpaceA
SHFileOperationA
Shell_NotifyIconW

oleaut32

SysFreeString

advapi32

RegOpenKeyA

msvcrt

clock
mbstowcs
exit
memcpy
atol
tolower
sprintf
wcscspn
calloc
wcsncmp
wcschr

kernel32

VirtualAlloc
lstrlenA
GetLastError
ExitProcess
VirtualAllocEx
GetCurrentThreadId
GetLocalTime

shlwapi

SHDeleteValueA
PathFileExistsA
SHQueryValueExA
SHEnumValueA
PathIsDirectoryA
SHSetValueA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
FindTextA

gdi32

GetBkMode
GetTextAlign
CreateFontIndirectA

user32

SetRect
DrawIcon
IsChild
SetParent
GetKeyboardLayoutNameA
IsIconic
RemoveMenu
GetClassNameA
GetSysColorBrush
CharNextA
CreatePopupMenu
SetForegroundWindow
GetSystemMetrics
GetWindowTextA
AdjustWindowRectEx
MoveWindow
TranslateMessage
IsWindow
GetKeyboardType
SetWindowPos
LoadIconA
IsDlgButtonChecked
GetKeyboardState
RemovePropA
GetSysColor
GetWindowTextLengthA
WindowFromPoint
GetActiveWindow
FillRect
DestroyIcon
GetCursor
SetClipboardData
IntersectRect
LoadStringA
CharUpperA
SetCursor
GetWindowDC
ScrollWindow
GetClassInfoA
GetMenu
MsgWaitForMultipleObjects
UnhookWindowsHookEx
GetWindowRect
ReleaseDC
MapVirtualKeyA
IsWindowVisible
SetScrollPos
DrawTextA
SetWindowTextA
DestroyMenu
GetKeyboardLayoutList
EnumWindows
InsertMenuA
IsRectEmpty
FrameRect
IsMenu
DrawEdge
wsprintfA
DefMDIChildProcA
GetParent
GetMenuItemInfoA
GetLastActivePopup
GetClipboardData
InflateRect
EnumChildWindows
BeginPaint
RedrawWindow
CreateIcon
SendMessageA
SetPropA
IsWindowUnicode
GetWindow
ShowWindow
IsWindowEnabled
GetDesktopWindow
DrawFrameControl
SetCapture
GetClientRect
DestroyWindow
PostMessageA
FindWindowA
GetWindowThreadProcessId
ActivateKeyboardLayout
IsCharUpperA
IsDialogMessageW
DefWindowProcA
ReleaseCapture
OffsetRect
GetIconInfo
EnumThreadWindows
GetClassLongA
GetScrollPos

ole32

CoRegisterClassObject
CoUnmarshalInterface
OleCreateStaticFromData
CreateStreamOnHGlobal
StgCreateDocfileOnILockBytes

Exports

Exports

_wbKxErj@24
_xNTpeJaWJWiwMP@12
hzhyUtTE@12
_rpTX3PBWm
0GyyLi
9JDpFZr706R@12
_xIkbKNqOaVHq7@8
_GV6qNRw
vlhzRUwzp3mN3R
ckNTknpFORH
_WyDxEMs
_LmNQxjXYOvH
8jypLAYMv
_CeBYdXHaJnr69
_ZLe5Ttj5q
emt_oqQkiD
WI8orad9Be@4
z19sjpb
2T4tTbY2@20
rkhTITX6HXX
_oK_VWEt7E9DJ
_OU0Og6WN7Vs@24
_Jb_oWgsVh@8
_MWgXIoKEdp@16
kojRUOBzfenbH
GV1q6n
_zzeEH5@24
_nIOJS6I1W61X@12
ZeKMx
_yQPna@24
Ir4g13hBww@20
PLy18T8lzwMB6C
DrNqk
oNbF6f

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a39160740f78356119065c683fad745d

Headers

File Characteristics

Imports

shell32

oleaut32

advapi32

msvcrt

kernel32

shlwapi

comdlg32

gdi32

user32

ole32

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 10KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 99KB - Virtual size: 211KB

.rsrc Size: 5KB - Virtual size: 4KB

.text
Size: 11KB - Virtual size: 10KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 99KB - Virtual size: 211KB

.rsrc
Size: 5KB - Virtual size: 4KB