0ff3f7a263c82c40b714198344c7be88

Sharing

Copy URL Twitter E-mail

General

Target

0ff3f7a263c82c40b714198344c7be88
Size

144KB
MD5

0ff3f7a263c82c40b714198344c7be88
SHA1

e0bdd620e588fc613aa2b7f0489807d58c2c4121
SHA256

007a67d61972195b0d6f4e972344f872a68d3bb29a0191032ac1aa7b17d6ff92
SHA512

a36ee456cc6d640634a6db1070e2883fbe1d2d159d6c23b60b661becd7982a0b5c2cc3d4c64f5e08547711c3ea38fc457be77ff0d82e30ac9b6036dc807dfe32
SSDEEP

3072:/TnGTLZP//d9MNHIMOM75J0jJDPdxVBd:7GfR/oI7cPKDrVB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ff3f7a263c82c40b714198344c7be88

Files

0ff3f7a263c82c40b714198344c7be88
.exe windows:4 windows x86 arch:x86

42f64c1360d38727bb425ed6fa8b47fc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
RegisterWindowMessageA
DefFrameProcA
GetWindowPlacement
FrameRect
DeleteMenu
SystemParametersInfoA
FillRect
GetCursorPos
GetDlgItem
GetWindowDC
GetActiveWindow
GetParent
wsprintfA
ReleaseDC
EnableWindow
SetScrollPos
GetClassLongA
WaitMessage
EnumChildWindows
InsertMenuItemA
GetClientRect
GetWindowTextA
CharToOemA
GetClassNameA
GetKeyNameTextA
DrawIconEx
GetMenu
GetSysColorBrush
GetCursor
GetDCEx
GetClipboardData
ShowWindow
GetMenuStringA
EndPaint
CallNextHookEx
SetClassLongA
GetDesktopWindow
DrawMenuBar
OemToCharA
GetSystemMenu
GetIconInfo
GetKeyboardType
GetForegroundWindow
GetScrollPos
SetPropA
GetKeyboardLayoutList
SetWindowsHookExA
LoadCursorA
MsgWaitForMultipleObjects
GetKeyboardState
SetTimer
GetMenuItemID
IsWindowUnicode
GetClassInfoA
InvalidateRect
GetMenuItemCount
EqualRect
EnableScrollBar
SetWindowPlacement
ShowOwnedPopups
KillTimer
GetSystemMetrics
MapWindowPoints
CheckMenuItem
SetWindowTextA
SetFocus
GetDC
WindowFromPoint
SetCapture
CharLowerBuffA
GetWindow
GetPropA
DrawTextA
FindWindowA
IsDialogMessageA
InsertMenuA
RegisterClassA
ClientToScreen
EnableMenuItem
GetFocus
IntersectRect
EnumThreadWindows
EmptyClipboard
IsWindowVisible
GetWindowRect
GetMenuItemInfoA
GetKeyboardLayoutNameA
SetWindowPos
DefMDIChildProcA
SendMessageW
RemoveMenu
GetKeyState
IsIconic
SetActiveWindow
CreateMenu
BeginPaint
DispatchMessageW
PostMessageA
ActivateKeyboardLayout
GetMessagePos
DestroyWindow
EnumWindows
GetLastActivePopup
CreateWindowExA
InflateRect
GetCapture
GetKeyboardLayout
CharLowerA
RegisterClipboardFormatA
LoadBitmapA
UnhookWindowsHookEx

oleaut32

SafeArrayCreate
GetErrorInfo
SafeArrayGetUBound
SafeArrayUnaccessData
OleLoadPicture
VariantCopyInd

gdi32

CreateDIBSection
SetBkMode
GetCurrentPositionEx
BitBlt
SetTextColor

kernel32

GetLastError
GetModuleHandleW
IsBadReadPtr
LoadLibraryA
ExitProcess
ExitThread
GetOEMCP
VirtualAllocEx
GetModuleHandleA
GlobalAlloc
GetProcAddress

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 739B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

42f64c1360d38727bb425ed6fa8b47fc

Headers

File Characteristics

Imports

user32

oleaut32

gdi32

kernel32

Sections

.text Size: 100KB - Virtual size: 99KB

.rdata Size: 4KB - Virtual size: 739B

.data Size: 8KB - Virtual size: 6KB

DATA Size: 8KB - Virtual size: 4KB

.gdata Size: 8KB - Virtual size: 7KB

.rsrc Size: 12KB - Virtual size: 8KB

.text
Size: 100KB - Virtual size: 99KB

.rdata
Size: 4KB - Virtual size: 739B

.data
Size: 8KB - Virtual size: 6KB

DATA
Size: 8KB - Virtual size: 4KB

.gdata
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 12KB - Virtual size: 8KB