3a8878b0f59f45499101f7fe888528cd

General

Target

3a8878b0f59f45499101f7fe888528cd
Size

118KB
MD5

3a8878b0f59f45499101f7fe888528cd
SHA1

e5086158d579ae098f52f953cf6759528083eb61
SHA256

e51efa1e32f0ee0af9dfdcad4c3cd471b35c7e937c0b7636454385e1ff3f383a
SHA512

690ad90851a95187901a4d3e0721f86708abec89f26ca1ef45d1bc129d273818316a82f702e1e01b0b3d81968e423cc715486dc3d1c9028994a1da0b495ef93e
SSDEEP

3072:xg+Pk9DBWjvJv5yf5C63pLNL9+WHwpYig4iMDA1Yn49w99xgrnwO:mCmBWjfSC61PHQiili6A1W+wWw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a8878b0f59f45499101f7fe888528cd

Files

3a8878b0f59f45499101f7fe888528cd
.exe windows:5 windows x86 arch:x86

bed500907555d997df11b141bb9541ba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetCharWidth32W
CreateFontIndirectA
SetBrushOrgEx
CreateBitmap
CreatePen
MoveToEx
Ellipse
StartPage

user32

DefFrameProcA
wsprintfW
RegisterClassA
ChildWindowFromPointEx
GetWindow
SendDlgItemMessageW
SwitchToThisWindow
GetWindowLongA
ActivateKeyboardLayout
GetMenuState
MessageBoxA
GetScrollPos

kernel32

UnlockFile
GetProcAddress
LoadLibraryExW
SetFileAttributesA
CreateRemoteThread
GetCommTimeouts
LocalReAlloc
LocalSize
LoadLibraryW
GetSystemWindowsDirectoryW
WaitCommEvent
lstrcmpiW
GetShortPathNameA
OpenEventW

comctl32

ImageList_Write
InitCommonControlsEx
ImageList_GetImageCount

comdlg32

ReplaceTextW
PrintDlgW
GetSaveFileNameA

Exports

Exports

?nIcfejbbl@@YGPAKPAMN@Z
?bmohtnOq@@YGPAJPAE@Z
?MFdJNyfufaJHqf@@YGEI@Z
?bghxEZlueyapIwkfLfwyta@@YGJPAI@Z

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 81KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bed500907555d997df11b141bb9541ba

Headers

File Characteristics

Imports

gdi32

user32

kernel32

comctl32

comdlg32

Exports

Exports

Sections

.text Size: 23KB - Virtual size: 23KB

.idata Size: 1KB - Virtual size: 1KB

.data Size: 81KB - Virtual size: 85KB

.crt Size: 4KB - Virtual size: 4KB

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 23KB - Virtual size: 23KB

.idata
Size: 1KB - Virtual size: 1KB

.data
Size: 81KB - Virtual size: 85KB

.crt
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 3KB - Virtual size: 3KB