38a5b3c012f6bf2e1daacc5624c6a4cc

Sharing

Copy URL Twitter E-mail

General

Target

38a5b3c012f6bf2e1daacc5624c6a4cc
Size

329KB
MD5

38a5b3c012f6bf2e1daacc5624c6a4cc
SHA1

9e7de1fde3e29ca9c8a6a7643425efd40ec6f7c2
SHA256

5bd93bbe6f98d63f88a51eba030e149ce784eba2c1b4a95c1fb12a93d2afe53c
SHA512

9f00d68fe6316645dac19c27dcf6fad1bbf8862fc083711049bc8c0106929bec15ad1bc93e3c662fe7a4ed9eb48bb6dd5944d9d3204e26384a473c81d89a5968
SSDEEP

6144:f83qmZq8NB31VlyhNveXqa0HdxhA3XwNuX01PuMJSfuZHMfCXpaWP7js:f8amwuHlyh0XwxO3Ao012MJSfYFhDjs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Maritza Mendez Video 1403MB.exe

Files

38a5b3c012f6bf2e1daacc5624c6a4cc
.zip
Maritza Mendez Video 1403MB.exe
.exe windows:5 windows x86 arch:x86

ace52d8d4450702239e799a8f19dc2b1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

isdigit
wcscmp
_controlfp
getenv
wcsrchr
strncpy
strcpy
__set_app_type
printf
qsort
floor
isxdigit
__p__fmode
wcstol
towupper
strncmp
__p__commode
time
getc
wcstok
iswspace
iswxdigit
_amsg_exit
wcscpy
_initterm
isalnum
strpbrk
_ismbblead
vswprintf
fgetc
_XcptFilter
wcsncpy
_exit
fclose
_cexit
putc
setlocale
__setusermatherr
fwrite
perror
atol
__getmainargs
wcsncmp
remove

user32

LockWindowUpdate
TrackPopupMenu
SetCursor
IsWindowEnabled
InSendMessageEx
DestroyAcceleratorTable
GetDoubleClickTime
IsWindowVisible
LoadIconW
keybd_event
LoadBitmapA
SetRect
FindWindowExA
GetClassLongW
SendInput
DialogBoxIndirectParamA
wsprintfA
IsChild
GetClassLongA
IsIconic
GetNextDlgGroupItem
DrawIcon
OpenInputDesktop
GetClipCursor
IsZoomed
EnableWindow
CharLowerBuffW
ClientToScreen
AdjustWindowRectEx
PostMessageA
PeekMessageA
GetPropW
CloseDesktop
MapWindowPoints
RegisterClassA
IsCharAlphaNumericW
LoadImageA
IsRectEmpty
ToUnicodeEx
GetMessageExtraInfo
GetParent
CreateWindowExA
InvalidateRect
SetWindowLongA
ReleaseDC
ChangeMenuW
CheckMenuItem
OpenIcon
IsWindowUnicode
MessageBoxA
DrawMenuBar
SetForegroundWindow
wvsprintfW
IsWindow
GetScrollPos
GetAsyncKeyState
GetDialogBaseUnits
UpdateWindow
GetDCEx
LoadCursorA
SetScrollRange
CharUpperW
UnloadKeyboardLayout
GetScrollRange
GetWindowLongW
InflateRect
RemoveMenu
DrawAnimatedRects
SetActiveWindow
DialogBoxParamA
FrameRect
IsDialogMessageW
CharPrevW
GetForegroundWindow
WaitForInputIdle
SetPropW
SetMenu
LoadCursorW
SetSysColors
TranslateAcceleratorW
DefWindowProcW
CreatePopupMenu
SetParent
DialogBoxParamW
TileWindows
CharLowerW
PeekMessageW
GetWindowTextA
GetMessageW
CharNextW
LoadStringW
ShowWindowAsync
CharUpperA
PtInRect
CallWindowProcW
DispatchMessageA
TabbedTextOutW
SendMessageW
GetUpdateRgn
DrawStateW
GetMenuCheckMarkDimensions
LoadStringA
SetRectEmpty
CreateDialogIndirectParamW
CharUpperBuffW
GetWindowTextLengthW
CharToOemW
SetMenuDefaultItem

comctl32

ImageList_SetIconSize
ImageList_Write
ImageList_ReplaceIcon
ImageList_Draw
CreatePropertySheetPageW
PropertySheetW

gdi32

CreateCompatibleBitmap
CreatePalette
IntersectClipRect
SelectObject
GetSystemPaletteUse
CreateBrushIndirect
SetMapMode
GetLayout
SetPixel
SaveDC
GetMapMode
CreateICW
CreateEllipticRgnIndirect
CreateFontA
TranslateCharsetInfo
SetPaletteEntries
SetBitmapDimensionEx
StretchBlt
CreateDiscardableBitmap
GetDIBColorTable
LineTo
SetTextAlign
PatBlt
BeginPath
CreatePenIndirect
GetTextExtentPoint32A
SetBkColor
SetROP2
CreatePolygonRgn
GetTextExtentPointW
SetWindowOrgEx
CreatePen
GetViewportOrgEx
Escape
Polygon
CreateRectRgn
GetTextExtentPoint32W
AddFontResourceW
GetDeviceCaps
GetPixel
ExtTextOutW
CreatePatternBrush
ExcludeClipRect
EnumFontFamiliesW

kernel32

GetComputerNameA
SetHandleCount
OpenFile
CreateWaitableTimerA
MapViewOfFile
SetThreadPriority
GlobalGetAtomNameW
IsBadReadPtr
DeviceIoControl
FindClose
GetModuleHandleA
FindNextChangeNotification
SetThreadAffinityMask
GetPriorityClass
GetLastError
LockFile
GetCurrentDirectoryW
AreFileApisANSI
SetMailslotInfo
CreateEventA
FindResourceExW
ReadFile
GetTempPathA
GlobalAlloc
WinExec
GetTempPathW
CreateFileA
GetThreadLocale
EnumResourceNamesA
GetFullPathNameW
FileTimeToSystemTime
CreateRemoteThread
GetVersion
DeleteCriticalSection
GetModuleFileNameW
SuspendThread
lstrcpynW
GetHandleInformation
LocalAlloc
GetThreadContext
RtlUnwind
GetAtomNameW
GetFileAttributesExA
GetShortPathNameA
SearchPathA
SetTimerQueueTimer
RemoveDirectoryW
lstrcmpW
FileTimeToLocalFileTime
CancelWaitableTimer

shlwapi

PathFindExtensionA
PathFindExtensionW

Exports

Exports

?GenerateTextW@@YGPAJ_N<V

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
eed243

Sharing

General

Malware Config

Signatures

Files

ace52d8d4450702239e799a8f19dc2b1

Headers

File Characteristics

Imports

msvcrt

user32

comctl32

gdi32

kernel32

shlwapi

Exports

Exports

Sections

.text Size: 67KB - Virtual size: 66KB

.data Size: 135KB - Virtual size: 200KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 67KB - Virtual size: 66KB

.data
Size: 135KB - Virtual size: 200KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 2KB - Virtual size: 1KB