066a34d70bb73b43fa2579e9f87f20bd

Sharing

Copy URL Twitter E-mail

General

Target

066a34d70bb73b43fa2579e9f87f20bd
Size

135KB
MD5

066a34d70bb73b43fa2579e9f87f20bd
SHA1

7dbfd474cf13fcdedb2758e85df75d069327c63d
SHA256

6a48edcc7436ced39daa01c9c0a4f93632abc7a0046159da204fb8fc7e85cbea
SHA512

bc4cd70df036e6660b3105bcd4204a0921ece8bd006ad35443d58c9318a0856aa7c274b19debe23da58b1d20643157125461d0013e0dd8adfb4fdb54f2157803
SSDEEP

3072:ajQ3F7XPgu1bV3xdB1lPpDN3/T51eE6k4THouvv:ajwFnbV3N17DdrjeE6d9n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
066a34d70bb73b43fa2579e9f87f20bd

Files

066a34d70bb73b43fa2579e9f87f20bd
.exe windows:5 windows x86 arch:x86

bd7b45a0ade67b08f41c2db7284e4292

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetSaveFileNameA
ChooseColorW
CommDlgExtendedError
FindTextW
GetOpenFileNameW
PrintDlgW

kernel32

CreateRemoteThread
WaitForSingleObject
GetCommConfig
GetCurrentThreadId
DuplicateHandle
GlobalReAlloc
SetThreadLocale
GetLastError
ExitThread
MoveFileExW
SetWaitableTimer
SetMailslotInfo
GetTempFileNameW
HeapWalk
GlobalUnlock
lstrlenA
QueryPerformanceCounter
GetWindowsDirectoryW
SetFilePointer
GlobalFree
CreateNamedPipeA
GetVersion
CreateFileMappingA
ClearCommBreak
GetStartupInfoA
MoveFileA
GetTempFileNameA
GlobalCompact
LCMapStringA
SetEndOfFile
CopyFileA
GetFileAttributesA
InitializeCriticalSection
WaitForMultipleObjects
HeapReAlloc
GetCommProperties
EnterCriticalSection
GetOEMCP
HeapValidate
GetTickCount
CreateThread
GetLocaleInfoW
GlobalFlags
GetACP
GetHandleInformation
GetCommTimeouts
GetModuleHandleA
FileTimeToDosDateTime
HeapUnlock
GetStringTypeExW
LoadLibraryA
GetSystemDirectoryW
OpenFileMappingW
MoveFileW

user32

CharUpperBuffW
GetClassNameW
CopyRect
PeekMessageA
EnableScrollBar
SetDlgItemInt
FindWindowA
GetCaretPos
IsDialogMessageA
GetDlgItemTextA
wsprintfW
InvalidateRgn
MessageBoxExW
LookupIconIdFromDirectory
IsDialogMessageW
SetSysColors
CallWindowProcW
WindowFromPoint
InSendMessageEx
GetKeyboardType
GetSystemMetrics
SetClassLongW
SetTimer
GetDlgCtrlID
GetMenuCheckMarkDimensions
CheckRadioButton
EqualRect
GetDC
RegisterClassExA
EndDialog
ScreenToClient
UnloadKeyboardLayout
SetLastErrorEx
GetCursorPos
SendMessageA
SetRectEmpty
SetMenuItemInfoW
EnumThreadWindows
SetCursor
SetWindowLongW
CharNextExA
CharPrevW
CharNextA
CascadeWindows
DrawAnimatedRects
FrameRect
DrawMenuBar
GetWindow
GetScrollInfo
PostThreadMessageA
DrawTextA
LockWindowUpdate
EnumChildWindows
DestroyWindow
GetMenuStringW
ShowScrollBar
LoadBitmapW
IsCharAlphaNumericW
GetActiveWindow
IsWindowEnabled
TileWindows
LoadCursorW
IsWindowUnicode
LoadIconA
SendDlgItemMessageW
OffsetRect
SystemParametersInfoA
CopyImage
SetScrollPos
SetWindowPos
wvsprintfW
DefFrameProcW
GetClipCursor
mouse_event
GetClientRect
GetDlgItem
CreateDialogParamW
DeleteMenu
GetClassLongA
BringWindowToTop
GetMenuState
GetWindowLongW
GetDialogBaseUnits
PostMessageW
SetCursorPos
GetMessageW
SendDlgItemMessageA
MapWindowPoints
SendMessageTimeoutW
OpenDesktopW
CharUpperA
CreateDialogParamA
ChildWindowFromPointEx
OpenIcon
InSendMessage
VkKeyScanW
CreateDialogIndirectParamW
ChildWindowFromPoint
GetMonitorInfoW
RegisterHotKey
ShowWindow
GetPropW
MessageBoxA
GetDlgItemTextW
GetKeyboardLayout
SwitchToThisWindow
ToUnicodeEx
GetDCEx
GetSysColor
RegisterWindowMessageA
SetForegroundWindow
ClientToScreen
GetSysColorBrush
AttachThreadInput
InflateRect
LoadAcceleratorsA
GetScrollPos
DrawTextW
EnableWindow
GetTopWindow

shlwapi

StrToIntW

msvcrt

fwrite
strcpy
ftell
sprintf
_controlfp
strtol
time
__set_app_type
islower
strcspn
strcoll
getenv
__p__fmode
calloc
perror
__p__commode
fprintf
_amsg_exit
_initterm
_ismbblead
_XcptFilter
atol
towlower
putc
_exit
atoi
strncmp
wcstod
gmtime
system
localtime
isdigit
_cexit
gets
isupper
wcstoul
strchr
fputc
__setusermatherr
isxdigit
iswctype
qsort
floor
strerror
__getmainargs
puts
strrchr

Exports

Exports

?GetShiftAltInfo@@YGK_KHE:O

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bit
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.insec
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.inmin
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wall
Size: 1024B - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bd7b45a0ade67b08f41c2db7284e4292

Headers

File Characteristics

Imports

comdlg32

kernel32

user32

shlwapi

msvcrt

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 7KB

.bit Size: 1KB - Virtual size: 1KB

.insec Size: 6KB - Virtual size: 5KB

.inmin Size: 512B - Virtual size: 86B

.wall Size: 1024B - Virtual size: 170KB

.zdata Size: 12KB - Virtual size: 12KB

.data Size: 2KB - Virtual size: 1KB

.tls Size: 512B - Virtual size: 512B

.rsrc Size: 103KB - Virtual size: 102KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 7KB

.bit
Size: 1KB - Virtual size: 1KB

.insec
Size: 6KB - Virtual size: 5KB

.inmin
Size: 512B - Virtual size: 86B

.wall
Size: 1024B - Virtual size: 170KB

.zdata
Size: 12KB - Virtual size: 12KB

.data
Size: 2KB - Virtual size: 1KB

.tls
Size: 512B - Virtual size: 512B

.rsrc
Size: 103KB - Virtual size: 102KB

.reloc
Size: 1KB - Virtual size: 1KB