3be5f4bb79f3f6cf7250993ed985a00a

Sharing

Copy URL

Twitter E-mail

General

Target

3be5f4bb79f3f6cf7250993ed985a00a
Size

203KB
MD5

3be5f4bb79f3f6cf7250993ed985a00a
SHA1

126eec52ecbd6ff7dc006e14c87df9002a848e16
SHA256

dd61b9c06b0c1dde1f7cb47925430f17c258f4bc99aae99491eaa1f2d1f42061
SHA512

528c9fd6d8503efba4c6f7f94f860c972d7c23fe7391f9f6c88f8f2b7e502f4b7aed3f205947b8526c698e577d86f2f56242b8db7261106d01efbae0c2dc3dec
SSDEEP

3072:E9/hnvuqg1X6xlr0Uxl2K9TVDYFIVMJTqU+m3dYICnMh:Ehhnv3giqUxwCZYiVMFr+c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3be5f4bb79f3f6cf7250993ed985a00a

Files

3be5f4bb79f3f6cf7250993ed985a00a
.exe windows:4 windows x86 arch:x86

ca82d11716f80e06bbc787cd93f15c6e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord4627
ord4425
ord3597
ord324
ord4234
ord2411
ord2023
ord4218
ord2578
ord6055
ord1776
ord4398
ord5290
ord3402
ord3582
ord1146
ord1168
ord860
ord540
ord567
ord2294
ord2362
ord2301
ord2299
ord2302
ord3619
ord3626
ord2414
ord6334
ord4224
ord6199
ord3092
ord1641
ord4160
ord2863
ord3663
ord2379
ord755
ord470
ord2086
ord823
ord6215
ord537
ord4220
ord2584
ord3654
ord2438
ord2621
ord6270
ord1644
ord2546
ord1176
ord291
ord2642
ord3089
ord4476
ord858
ord924
ord926
ord2055
ord2486
ord4003
ord6453
ord2864
ord535
ord5572
ord2915
ord2614
ord4278
ord6662
ord6874
ord6877
ord4277
ord6283
ord4204
ord5856
ord4202
ord941
ord939
ord5710
ord4129
ord6663
ord6927
ord940
ord6282
ord3742
ord818
ord1270
ord1232
ord4275
ord2152
ord2859
ord2380
ord3797
ord6197
ord3920
ord4299
ord2818
ord3755
ord4083
ord1920
ord3289
ord2514
ord800
ord616
ord641
ord815
ord825
ord561
ord3738
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2648
ord4441
ord4837
ord3798
ord5280
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1775
ord4078
ord6052
ord4710
ord4998
ord4853
ord4376
ord5265
ord2623
ord1134
ord2982
ord5714
ord5289
ord5307
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord2455
ord4673
ord1576

msvcrt

_itoa
__CxxFrameHandler
atoi
_mbscmp
_ftol
rand
_mbsstr
strtoul
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_setmbcp

kernel32

lstrcmpiA
GetModuleHandleA
GetWindowsDirectoryA
MulDiv
lstrcpyA
lstrcatA
lstrlenA
WinExec
LoadLibraryExA
LoadLibraryA
GetProcAddress
FreeLibrary
GetPrivateProfileStringA
GetCurrentDirectoryA
WritePrivateProfileStringA
GlobalAddAtomA
GetStartupInfoA

user32

SetRect
WindowFromPoint
IsWindowEnabled
ChildWindowFromPoint
GetParent
ClientToScreen
GetClassNameA
GetWindowTextA
PtInRect
IsRectEmpty
CopyRect
GetMenu
GetMenuItemCount
GetMenuItemID
IsWindow
LoadMenuA
GetSubMenu
UnregisterHotKey
AnimateWindow
mouse_event
KillTimer
SetCursorPos
SetWindowRgn
SetTimer
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
SendMessageA
RegisterHotKey
LoadIconA
SetRectEmpty
GetClassInfoA
DefWindowProcA
OffsetRect
LoadImageA
DestroyCursor
GetSysColor
CopyIcon
DestroyIcon
FillRect
CreateIconIndirect
GetDC
ReleaseDC
GetIconInfo
EqualRect
GetCursorPos
ScreenToClient
LoadCursorA
SetCursor
SetCapture
ReleaseCapture
SystemParametersInfoA
GetWindowLongA
SetWindowLongA
EnableWindow
GetWindowRect
SetWindowPos
SetForegroundWindow
PostMessageA

gdi32

CreateCompatibleBitmap
SetTextColor
LineTo
MoveToEx
CreatePen
GetTextMetricsA
SetBkColor
SetBkMode
CreateFontIndirectA
TextOutA
GetTextExtentPoint32A
CreateSolidBrush
GetDeviceCaps
FrameRgn
SelectClipRgn
FillRgn
OffsetRgn
CombineRgn
CreateRectRgn
CreatePolygonRgn
CreateRoundRectRgn
CreateBitmap
StretchBlt
GetObjectA
CreateDIBSection
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
SetTextJustification
CreateFontA
DeleteObject

advapi32

RegQueryValueA
RegOpenKeyExA
RegCloseKey

shell32

ShellExecuteA
Shell_NotifyIconA

comctl32

ImageList_GetIcon
ImageList_GetImageCount
ord17

msvcp60

??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ

Sections

.text
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca82d11716f80e06bbc787cd93f15c6e

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

gdi32

advapi32

shell32

comctl32

msvcp60

Sections

.text Size: 124KB - Virtual size: 122KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 8KB - Virtual size: 9KB

.rsrc Size: 100KB - Virtual size: 98KB

.text
Size: 124KB - Virtual size: 122KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 8KB - Virtual size: 9KB

.rsrc
Size: 100KB - Virtual size: 98KB