2a3b539204b1139efee7fa42d93fe76a

Sharing

Copy URL Twitter E-mail

General

Target

2a3b539204b1139efee7fa42d93fe76a
Size

140KB
MD5

2a3b539204b1139efee7fa42d93fe76a
SHA1

b29025fee20b00fd0919de28f28bd4dbe123793e
SHA256

d4963a588c106e4a4ac9bef5ca4393c67364d25e4ab514348b22a0edcdd723c1
SHA512

34b245a8449f640d5f8c017e11f0cee51a9870f974ac91d1d23e9f72abed170acce9ec0d9118e6276b6f23e3f1a1f6b5b66c8198aac46d8a722f6613737057d7
SSDEEP

3072:ltwG/qB1bp9dqKMqfaRuNwfhkFyNAQ7CeWsGI3UT:leSI1bpdpouNwfhCLewI3q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a3b539204b1139efee7fa42d93fe76a

Files

2a3b539204b1139efee7fa42d93fe76a
.exe windows:4 windows x86 arch:x86

0f3ed6c57dbf02cda6f8d160d26fe963

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterWindowMessageW
GetSysColorBrush
CreatePopupMenu
DialogBoxIndirectParamW
GetWindowRect
CreateDialogIndirectParamW
GetClientRect
BeginDeferWindowPos
DeferWindowPos
CreateMenu
TranslateMessage
UnregisterHotKey
GetForegroundWindow

ole32

OleUninitialize
CoSuspendClassObjects
StgCreateDocfile
CoInitialize
OleCreate
CoUninitialize
OleInitialize

wtsapi32

WTSQueryUserToken
WTSOpenServerW
WTSCloseServer

comdlg32

ChooseFontW
CommDlgExtendedError
GetSaveFileNameW
GetOpenFileNameW
GetFileTitleW
FindTextW

comctl32

ImageList_Draw
CreatePropertySheetPageW
ImageList_SetDragCursorImage
PropertySheetW

kernel32

GetModuleFileNameA
WriteFile
RtlUnwind
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetCommandLineA
GetCommandLineW
GetEnvironmentStrings
GetEnvironmentStringsW
FlushFileBuffers
MultiByteToWideChar
FreeEnvironmentStringsA
GetModuleFileNameW
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
SetEndOfFile
GetStartupInfoA
GetStdHandle
SetHandleCount
SetStdHandle
ReadFile
SetFilePointer
IsBadWritePtr
CreateFileA
GetProcAddress
LoadLibraryA
FreeEnvironmentStringsW
HeapAlloc
GetCurrentThread
DuplicateHandle
PeekNamedPipe
GetEnvironmentVariableW
ResetEvent
FindFirstChangeNotificationW
DeleteFileW
OpenMutexW
CreateMutexW
ReleaseMutex
MoveFileW
CreateThread
LocalFree
LocalAlloc
WriteConsoleW
Sleep
GetLastError
LockFile
UnlockFile
CloseHandle
GetFileType
CreateFileW
HeapFree
GetVersion
ExitProcess
EnterCriticalSection
LeaveCriticalSection
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
FatalAppExitA
VirtualAlloc
HeapReAlloc

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 449KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0f3ed6c57dbf02cda6f8d160d26fe963

Headers

File Characteristics

Imports

user32

ole32

wtsapi32

comdlg32

comctl32

kernel32

Sections

.text Size: 76KB - Virtual size: 73KB

.rdata Size: 28KB - Virtual size: 25KB

.data Size: 32KB - Virtual size: 449KB

.text
Size: 76KB - Virtual size: 73KB

.rdata
Size: 28KB - Virtual size: 25KB

.data
Size: 32KB - Virtual size: 449KB