1bd77a2a510105cce7c24280e2eb38a1

Sharing

Copy URL Twitter E-mail

General

Target

1bd77a2a510105cce7c24280e2eb38a1
Size

60KB
MD5

1bd77a2a510105cce7c24280e2eb38a1
SHA1

27c9c707cebf8e51de5a48c9217c59da9e352b55
SHA256

4f7b4b2eedcaa93c0bf6eeeae8b228d356c7ed26690674da4b824dc60c331d03
SHA512

8fe469dfa392120798dd81189b3707e3e67605bc287c694deab26627add9fd9c41f7dc6e78765cc67e03762199a224383f877d073223e4e2cd6297672c16eb5e
SSDEEP

1536:L1dtRLTl+uNjCnULX6e69sQOqeZLxzARdGf20vtqWeS7UkX:5RTlEULqe69sQOhDSuLle4Uk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bd77a2a510105cce7c24280e2eb38a1

Files

1bd77a2a510105cce7c24280e2eb38a1
.exe windows:5 windows x86 arch:x86

40d75a74dbd94accd2da5d3b143f98ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassA
BringWindowToTop
ShowWindowAsync
DrawIcon
KillTimer
GetClassLongW
VkKeyScanW
DestroyAcceleratorTable
CreateCaret
GetKeyboardLayoutNameW
LoadAcceleratorsW
SetDlgItemInt
OpenInputDesktop
OemToCharA
GetCursorPos
CharLowerA
CreateAcceleratorTableW
LoadStringA
IsCharAlphaW
IsWindowEnabled
LoadBitmapW
VkKeyScanA
IsCharLowerA
EnumWindows
SendMessageA
SetLastErrorEx
DeferWindowPos
GetWindowTextLengthW
SetMenuDefaultItem
ScrollWindowEx
IsWindowVisible
CreateMenu
SystemParametersInfoW
SetSysColors
LoadImageA
GetKeyboardType
GetForegroundWindow
DrawMenuBar
CharLowerW
GetTopWindow
UnloadKeyboardLayout
GetFocus
SendDlgItemMessageW
DefWindowProcW
SendMessageTimeoutA
CheckMenuRadioItem
SetCursor
CreateCursor
GetClassInfoA
SetScrollInfo
GetDlgItemInt
CallWindowProcA
CharNextExA
wvsprintfA
IsChild
TranslateAcceleratorA
mouse_event
DefDlgProcA
PostMessageA
keybd_event
DrawTextA
LoadImageW
GetClassInfoExW
GetSystemMetrics
DrawStateW
GetSysColorBrush
ChangeMenuW
CheckRadioButton
GetMessagePos
SetTimer
EnableMenuItem
SetParent
DestroyWindow
DrawAnimatedRects
MapVirtualKeyW
MessageBoxA
RemovePropW
GetParent
BeginDeferWindowPos
TrackPopupMenuEx
InflateRect
InvalidateRgn
ValidateRect
BeginPaint
GetUpdateRgn
SetWindowLongW
CharUpperBuffW
EnableScrollBar
GetMenuStringA
TabbedTextOutW
AppendMenuA
GetMessageExtraInfo
SetRect
MapVirtualKeyA
CreateDialogIndirectParamW
CreateWindowExW
DialogBoxIndirectParamW
GetWindowRect
IsCharAlphaNumericW
GetDC
SendMessageW
GetWindowDC
AttachThreadInput
AdjustWindowRect
CharLowerBuffW
SetMenu
InternalGetWindowText
DefWindowProcA
ChildWindowFromPoint
FindWindowA
CreateWindowExA
LoadMenuA
CopyImage
SetForegroundWindow
SetDlgItemTextA
MessageBoxW
SendInput
LoadStringW
IsCharAlphaA
DragObject

comdlg32

GetOpenFileNameA
ChooseColorW
FindTextW
ReplaceTextW

comctl32

CreatePropertySheetPageA
ImageList_GetIcon
ImageList_AddMasked
ImageList_Destroy
ImageList_GetIconSize
CreateToolbarEx

kernel32

GetShortPathNameW
GetTickCount
GetStdHandle
FindResourceA
ReleaseMutex
GetFullPathNameW
PulseEvent
CallNamedPipeW
AddAtomW
IsBadReadPtr
SetFileAttributesA
WaitCommEvent
GetModuleFileNameA
CompareStringA
GetTempFileNameW
EnumSystemLocalesA
HeapFree
HeapAlloc
SetWaitableTimer
CreateNamedPipeW
LeaveCriticalSection
TerminateThread
IsBadWritePtr
lstrlenA
GlobalCompact
CreateWaitableTimerA
VerSetConditionMask
FlushFileBuffers
CreateFileMappingA
GetSystemTimeAsFileTime
GlobalGetAtomNameW
SizeofResource
LockFile
SetThreadContext
SetupComm
SetHandleInformation
SetEndOfFile
GetSystemDirectoryW
WriteFile
GlobalSize
GetCommModemStatus
lstrcpyW
SetNamedPipeHandleState
FormatMessageA
GetComputerNameExA
WaitForMultipleObjects
ResumeThread
EnterCriticalSection
VirtualFree
GetBinaryTypeW
SetFilePointer
LocalSize
lstrcmpiW
SystemTimeToFileTime

msvcrt

strchr
strcoll
strncpy
getenv
swprintf
ungetc
isalnum
_controlfp
__set_app_type
calloc
strpbrk
free
floor
isxdigit
__p__fmode
__p__commode
_amsg_exit
gets
setvbuf
putchar
localtime
atoi
fclose
_initterm
isprint
mbtowc
memset
islower
_ismbblead
fputs
_XcptFilter
atol
wcscmp
realloc
mbstowcs
_exit
vsprintf
strtok
mktime
towlower
iswxdigit
_cexit
wcsncmp
system
fwrite
__setusermatherr
swscanf
__getmainargs

Exports

Exports

?RegenerateMainValues@@YGKPBDDPAX:O

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.emnar
Size: 512B - Virtual size: 126B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fire
Size: 1KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imper
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wchar
Size: 1024B - Virtual size: 515B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wdata
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

40d75a74dbd94accd2da5d3b143f98ee

Headers

File Characteristics

Imports

user32

comdlg32

comctl32

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 22KB - Virtual size: 21KB

.emnar Size: 512B - Virtual size: 126B

.fire Size: 1KB - Virtual size: 40KB

.data Size: 2KB - Virtual size: 1KB

.imper Size: 6KB - Virtual size: 5KB

.wchar Size: 1024B - Virtual size: 515B

.wdata Size: 512B - Virtual size: 192B

.tls Size: 512B - Virtual size: 512B

.rsrc Size: 23KB - Virtual size: 23KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 22KB - Virtual size: 21KB

.emnar
Size: 512B - Virtual size: 126B

.fire
Size: 1KB - Virtual size: 40KB

.data
Size: 2KB - Virtual size: 1KB

.imper
Size: 6KB - Virtual size: 5KB

.wchar
Size: 1024B - Virtual size: 515B

.wdata
Size: 512B - Virtual size: 192B

.tls
Size: 512B - Virtual size: 512B

.rsrc
Size: 23KB - Virtual size: 23KB

.reloc
Size: 2KB - Virtual size: 1KB