3b48969ab8a407e65ae163bb6982291b

Sharing

Copy URL Twitter E-mail

General

Target

3b48969ab8a407e65ae163bb6982291b
Size

71KB
MD5

3b48969ab8a407e65ae163bb6982291b
SHA1

12671bd165f7798314ab16583ff94e6bd431906f
SHA256

7bf2f28ae9d826ff705d523077f4c7bda3ef2b37f7708d1fb7fb7acc9140c2ef
SHA512

a6d0cb660d01b30ddf06b3f1f3e9fa5035636f1ede3a5c9fb21f43e97a0b70162d878784d594a10591e6d818f8d277514a9ba7f9c801a514f7be8ab93a4a38bc
SSDEEP

1536:ABqTen/QJ97NoqKTKbmVDTaWKkX1HPn9RngXhCN1U0I/c6/a:Ann/QJ97NGaWvlHnn+h61tI/g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b48969ab8a407e65ae163bb6982291b

Files

3b48969ab8a407e65ae163bb6982291b
.exe windows:5 windows x86 arch:x86

fc33a1bb432f10f2eb2712fe3ec96724

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDC
CheckRadioButton
CharLowerA
GetClientRect
IsMenu
GetSystemMenu
ShowWindow
ChangeMenuA
GetDlgItem
CalcMenuBar
SendDlgItemMessageA
GetMessagePos
SetWindowTextW
GetWindowLongA
GetWindowTextA
GetPropA
SetMenu
GetSysColorBrush
MoveWindow
UnhookWindowsHookEx
IsChild
IsIconic

advapi32

IsValidAcl
ReportEventW
SetSecurityDescriptorGroup
RegEnumValueA
GetTokenInformation
RegEnumKeyExA
RegDeleteValueA
RegOpenKeyW
OpenThreadToken
GetLengthSid
GetSecurityDescriptorDacl
RegDeleteKeyW
GetSidSubAuthorityCount
MakeSelfRelativeSD
InitializeAcl
RegOpenKeyA
CheckTokenMembership
GetUserNameA
SetSecurityDescriptorOwner

kernel32

VirtualAlloc
FormatMessageW
GetStdHandle
FreeLibrary
ExitProcess
LoadLibraryW
HeapFree
IsDBCSLeadByte
GetCurrentProcessId
GetCurrentThreadId
GlobalAlloc
MultiByteToWideChar
lstrcmpA

msvcrt

_ltow
__p__fmode
towupper
_wcsnicmp
_adjust_fdiv
__set_app_type
bsearch
__p__commode
__setusermatherr
wcsncpy
wcsspn
fseek
strncmp
_acmdln
_snwprintf
realloc
__CxxFrameHandler
wcsrchr

ole32

OleRegEnumVerbs
OleUninitialize
StringFromGUID2
WriteClassStm
CreateILockBytesOnHGlobal
OleInitialize
CreateStreamOnHGlobal
PropVariantCopy
OleRegGetMiscStatus
CreateBindCtx

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 15KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 1004B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fc33a1bb432f10f2eb2712fe3ec96724

Headers

File Characteristics

Imports

user32

advapi32

kernel32

msvcrt

ole32

Sections

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 21KB - Virtual size: 20KB

.data Size: 15KB - Virtual size: 76KB

.idata Size: 17KB - Virtual size: 17KB

.reloc Size: 1024B - Virtual size: 1004B

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 21KB - Virtual size: 20KB

.data
Size: 15KB - Virtual size: 76KB

.idata
Size: 17KB - Virtual size: 17KB

.reloc
Size: 1024B - Virtual size: 1004B