369f5feaae3e8a5620ddaabdb8cccb9b

Sharing

Copy URL Twitter E-mail

General

Target

369f5feaae3e8a5620ddaabdb8cccb9b
Size

101KB
MD5

369f5feaae3e8a5620ddaabdb8cccb9b
SHA1

f1b430f5c8f9400f864841c1a91139eb97355df5
SHA256

7df4e266baf167c714df215e38f6a8f8b7b00eb24031ed5eab7a0bcc9d688a56
SHA512

40e8793440d150020f961489c3926538f3cab10dc61e01545f1320d95686bf6b6e965296409c15911e31b81b1adffd03bdc6556da25800121db3a57249bee326
SSDEEP

1536:0wWLNiGR1tN5gqt9RMscA4D0DqokB6gz47Wgs0LZ8LzdqhH4:xGR1NgqRcAehRgsIgzdqe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
369f5feaae3e8a5620ddaabdb8cccb9b

Files

369f5feaae3e8a5620ddaabdb8cccb9b
.exe windows:4 windows x86 arch:x86

9ebce803811a8492073923e35733c9ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteValueA
RegLoadKeyA

gdi32

GetDIBits
CreatePenIndirect
CreateFontIndirectA
GetPixel
SelectObject
GetCurrentPositionEx
SaveDC
CopyEnhMetaFileA

kernel32

LocalAlloc
FreeLibrary
GlobalFindAtomA
ExitProcess
VirtualAllocEx
GetProcAddress
LoadLibraryExA
ExitThread
GetModuleHandleA
GetFileSize
GetLocalTime

user32

DispatchMessageA
ChildWindowFromPoint
InsertMenuA
GetClientRect
InvalidateRect
GetScrollRange
GetCursor
SetTimer
GetWindowThreadProcessId
SetForegroundWindow
IsWindowEnabled
TranslateMDISysAccel
SendMessageW
CheckMenuItem
GetCapture
CreateWindowExA
ClientToScreen
DefWindowProcA
IsDialogMessageA
DestroyIcon
GetMessagePos
GetKeyboardLayoutNameA
UnregisterClassA
OpenClipboard
IntersectRect
GetKeyState
CallNextHookEx
WaitMessage
TranslateMessage
GetWindowDC
PostQuitMessage
GetKeyboardState
SystemParametersInfoA
SetWindowPlacement
GetDC
CharNextW
ScrollWindow
EnableWindow
PeekMessageW
EmptyClipboard
LoadIconA
SetWindowsHookExA
SetParent
SetPropA
SetCursor
ShowScrollBar
GetWindowRect
MessageBeep
SetClassLongA
FindWindowA
AdjustWindowRectEx
IsIconic
GetPropA
PeekMessageA
GetClassLongA
GetMenuState
GetFocus
TrackPopupMenu
RegisterClipboardFormatA
CreateMenu
DrawIconEx
ReleaseCapture
UnhookWindowsHookEx
CharLowerA
EnableMenuItem
CharLowerBuffA
ReleaseDC
EqualRect
GetKeyNameTextA
ActivateKeyboardLayout
DrawFrameControl
SetFocus
GetSystemMetrics
GetSystemMenu
SetScrollRange
IsChild
MoveWindow
OffsetRect
InsertMenuItemA
GetTopWindow
RemovePropA
RegisterWindowMessageA
KillTimer
EnumThreadWindows
IsWindow
SetRect
GetWindowLongW
DeleteMenu
GetMenuItemCount
DrawTextA
RemoveMenu
GetSubMenu
GetLastActivePopup
EndPaint
GetMenuItemInfoA
SetWindowLongA
GetDlgItem
FrameRect
SetScrollInfo
GetIconInfo
SetCapture
EnableScrollBar
EnumWindows
LoadBitmapA
GetForegroundWindow
MapWindowPoints
PostMessageA
GetKeyboardLayoutList
CharNextA
ShowOwnedPopups
InflateRect
GetMenuStringA
DrawIcon
ShowWindow
GetSysColorBrush
ScreenToClient
DestroyWindow
DestroyMenu
GetActiveWindow

oleaut32

SafeArrayUnaccessData
SysFreeString
SafeArrayGetElement
VariantCopyInd
SysReAllocStringLen

shlwapi

SHStrDupA
SHSetValueA
SHGetValueA

comdlg32

GetOpenFileNameA
FindTextA
ChooseColorA

shell32

SHGetDiskFreeSpaceA

msvcrt

log
calloc
strncmp
memcpy

version

GetFileVersionInfoSizeA
VerQueryValueA
VerInstallFileA

ole32

CoReleaseMarshalData
CreateStreamOnHGlobal
CoUninitialize
CoFreeUnusedLibraries
CreateOleAdviseHolder
MkParseDisplayName
CreateBindCtx
OleRun
StringFromIID
CoRegisterClassObject

comctl32

ImageList_Destroy
ImageList_Read
ImageList_DragShowNolock
ImageList_DrawEx
ImageList_Add
ImageList_Draw
ImageList_Create
ImageList_Write

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 1024B - Virtual size: 599B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9ebce803811a8492073923e35733c9ea

Headers

File Characteristics

Imports

advapi32

gdi32

kernel32

user32

oleaut32

shlwapi

comdlg32

shell32

msvcrt

version

ole32

comctl32

Sections

.text Size: 30KB - Virtual size: 29KB

.bss Size: 1024B - Virtual size: 599B

.idata Size: 68KB - Virtual size: 68KB

.text
Size: 30KB - Virtual size: 29KB

.bss
Size: 1024B - Virtual size: 599B

.idata
Size: 68KB - Virtual size: 68KB