386df6381ca99ff5f30977440f6fc657

Sharing

Copy URL Twitter E-mail

General

Target

386df6381ca99ff5f30977440f6fc657
Size

111KB
MD5

386df6381ca99ff5f30977440f6fc657
SHA1

84c845a959944f7f6c1187fde02bf2d8b95698cf
SHA256

8fe8a10b33447a2816009f816731c02d2a65e47443a4c730d4c2b78b39e22e8a
SHA512

dd3241f804f71f76ecbe3ca535db31b1ab277c424330a9ca283cb97aa8411eb6f744e8e62c73568f86625d7605d5f7977ff9ea0da18eab30b98cd067f169fc98
SSDEEP

1536:OVejHMLv3OeRp/UvZupD6dqBQ5Xf50c1gST6ypX2BGZqW+kp4U2:OVejHMT31RCaDOLhiWX2BSqW+jU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
386df6381ca99ff5f30977440f6fc657

Files

386df6381ca99ff5f30977440f6fc657
.exe windows:4 windows x86 arch:x86

bdd268077206dfc747de7f67a81bb943

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetDIBits
GetClipBox
SaveDC
CopyEnhMetaFileA

user32

SetClassLongA
DrawAnimatedRects
GetClassLongA
GetLastActivePopup
UnregisterClassA
CharNextW
UpdateWindow
MsgWaitForMultipleObjects
GetKeyboardLayout
GetDesktopWindow
GetMessagePos
FindWindowA
GetDC
SetWindowsHookExA
SetRect
GetFocus
ShowWindow
IntersectRect
RemovePropA
IsDialogMessageW
GetWindowDC
DispatchMessageW
MoveWindow
GetKeyboardLayoutNameA
RegisterWindowMessageA
IsWindowVisible
SetWindowTextA
ShowScrollBar
LoadKeyboardLayoutA
DestroyIcon
CloseClipboard
ClientToScreen
OpenClipboard
EnumChildWindows
IsDialogMessageA
SetActiveWindow
GetMenuItemID
ChildWindowFromPoint
GetWindowRect
SetTimer
DefMDIChildProcA
DrawMenuBar
SetParent
IsWindowEnabled
GetWindowThreadProcessId
InvalidateRect
IsZoomed
MapVirtualKeyA
SetWindowPos
GetKeyboardType
GetKeyState
wsprintfA
SetScrollInfo
GetCursor
GetClipboardData
GetMenuStringA
MessageBeep
RegisterClassA
GetCursorPos
GetIconInfo
MapWindowPoints
GetClassInfoA
DestroyMenu
PeekMessageA
SetMenu
CharLowerBuffA
DestroyWindow
SetWindowLongW
ActivateKeyboardLayout
CallNextHookEx
SetScrollPos
GetSystemMetrics
EqualRect
EmptyClipboard
RedrawWindow
DrawTextA
GetClassNameA
GetActiveWindow
UnhookWindowsHookEx
OffsetRect
ReleaseCapture
EnableWindow
RegisterClipboardFormatA
GetForegroundWindow
KillTimer
GetWindow
AdjustWindowRectEx
GetWindowLongA
SetMenuItemInfoA
LoadStringA
ReleaseDC
LoadCursorA
GetMenu
GetWindowLongW
GetKeyboardState
CreatePopupMenu

shell32

DragQueryFileA
Shell_NotifyIconA
SHGetDesktopFolder

oleaut32

VariantChangeType
SysAllocStringLen
SysStringLen

kernel32

lstrlenA
ExitThread
GetLastError
lstrcatA
SetEvent
GetModuleHandleA
VirtualAlloc
SetLastError
GetVersionExA
VirtualAllocEx
Sleep
GlobalFindAtomA
CreateEventA
ExitProcess
LocalAlloc
GetProcAddress
GetSystemDefaultLangID

version

VerInstallFileA
VerFindFileA
VerQueryValueA

shlwapi

SHEnumValueA
PathFileExistsA
SHSetValueA
SHDeleteKeyA
SHQueryInfoKeyA
PathGetCharTypeA
PathIsContentTypeA

comctl32

ImageList_Create

Sections

CODE
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bdd268077206dfc747de7f67a81bb943

Headers

File Characteristics

Imports

gdi32

user32

shell32

oleaut32

kernel32

version

shlwapi

comctl32

Sections

CODE Size: 28KB - Virtual size: 27KB

.data Size: 75KB - Virtual size: 75KB

.idata Size: 3KB - Virtual size: 3KB

.tls Size: 1024B - Virtual size: 520B

DATA Size: 2KB - Virtual size: 1KB

CODE
Size: 28KB - Virtual size: 27KB

.data
Size: 75KB - Virtual size: 75KB

.idata
Size: 3KB - Virtual size: 3KB

.tls
Size: 1024B - Virtual size: 520B

DATA
Size: 2KB - Virtual size: 1KB