3e5c807a6c9350c072c31ceb8dc1b975

Sharing

Copy URL Twitter E-mail

General

Target

3e5c807a6c9350c072c31ceb8dc1b975
Size

580KB
MD5

3e5c807a6c9350c072c31ceb8dc1b975
SHA1

0b166a8b141bb13f408a9045759f31256f41aecf
SHA256

8aa6c8795515658e71f48b3c52ef88d5b5b6c7496ee3e4a10d64fc3bca81a02a
SHA512

3a18ee8a5b1ad872c37d6f87ec3f59a448ee0a444ceab1b9388df09454a4299d6e824c2b21a201fa76934d21cccd7c4c2ec41fe935a7b3c9e99f8d07dd2b298b
SSDEEP

12288:VmTS2WU2wW62RzfzhhXJmZrOAfPVJKa/pHkrsMm7:0TSRU2wTszftJJmd1XV/QsMm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e5c807a6c9350c072c31ceb8dc1b975

Files

3e5c807a6c9350c072c31ceb8dc1b975
.exe windows:4 windows x86 arch:x86

18cad79d42d36df861e0e89431c89618

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
IsValidCodePage
HeapCreate
InterlockedDecrement
EnumSystemLocalesA
GetSystemTimeAsFileTime
TlsGetValue
IsBadWritePtr
MoveFileA
GetThreadContext
ExitProcess
GetSystemInfo
TerminateProcess
GetFileAttributesExA
GetSystemDefaultLCID
GetACP
WriteConsoleInputA
SetLastError
SetEnvironmentVariableA
SetHandleCount
MultiByteToWideChar
CloseHandle
GetOEMCP
RtlUnwind
UnmapViewOfFile
FreeEnvironmentStringsA
OpenMutexA
VirtualQuery
ReadFile
GetLocaleInfoW
GetLocaleInfoA
TlsAlloc
VirtualFree
SetFilePointer
GetLastError
GetVersionExA
LCMapStringW
GetTimeFormatA
DebugActiveProcess
ResumeThread
GetStringTypeW
EnterCriticalSection
GetCurrentProcess
CreateMutexA
LocalCompact
IsValidLocale
SetThreadPriority
GetCPInfo
LoadLibraryA
TlsSetValue
GetProcAddress
Sleep
SetConsoleWindowInfo
HeapAlloc
GetEnvironmentVariableW
GetCurrentThread
UnhandledExceptionFilter
GetTickCount
HeapReAlloc
GetConsoleCP
OutputDebugStringW
CompareStringW
WriteFile
InterlockedExchange
HeapFree
SystemTimeToFileTime
GetTimeZoneInformation
InitializeCriticalSection
FreeEnvironmentStringsW
VirtualProtect
GetEnvironmentStringsW
SetCriticalSectionSpinCount
TerminateThread
LeaveCriticalSection
WideCharToMultiByte
LCMapStringA
GetCommandLineA
GetFileType
FindFirstFileExA
GetTimeFormatW
FlushFileBuffers
TlsFree
HeapDestroy
DeleteCriticalSection
GetStartupInfoA
GetCurrentProcessId
HeapSize
GetCurrentThreadId
QueryPerformanceCounter
GetStringTypeA
CompareStringA
PulseEvent
FoldStringW
GetFileSize
lstrcmpiA
VirtualAlloc
SetStdHandle
GetStdHandle
GetUserDefaultLCID
GetModuleHandleA
GetEnvironmentStrings
GetDateFormatA

shell32

SHEmptyRecycleBinW
ShellAboutA
RealShellExecuteExA

comctl32

ImageList_GetFlags
ImageList_Read
ImageList_SetDragCursorImage
InitCommonControlsEx
ImageList_SetImageCount
InitMUILanguage
ImageList_GetImageCount
ImageList_DrawEx
GetEffectiveClientRect
ImageList_DragMove
_TrackMouseEvent
CreateStatusWindowA
ImageList_AddMasked
ImageList_Add
CreateUpDownControl
DrawStatusTextA
ImageList_BeginDrag
CreatePropertySheetPageA

user32

DdeConnect
EnableMenuItem
GetPropA
SetWindowLongA
OemToCharA
SetClipboardData
MsgWaitForMultipleObjects
GetShellWindow
GetAltTabInfo
MapDialogRect
GetMenuItemRect
UnregisterDeviceNotification
DdePostAdvise
GetDlgItemInt
PtInRect
GetKeyboardLayout
SendMessageTimeoutA
WindowFromPoint
GetScrollInfo
DdeDisconnect
LoadMenuA
GetWindowModuleFileNameA
OemToCharBuffW
DefDlgProcA
RegisterClassExA
ChangeDisplaySettingsExA
ScrollWindow
IsCharLowerA
CreateAcceleratorTableW
AppendMenuW
ShowScrollBar
GetMonitorInfoW
ClipCursor
EnumDisplayDevicesA
DdeGetLastError
AnimateWindow
PostMessageW
SetUserObjectInformationA
SetUserObjectSecurity
BeginDeferWindowPos
CallWindowProcA
TileChildWindows
ModifyMenuA
GetAsyncKeyState
RegisterClipboardFormatW
CreateCaret
DestroyWindow
GetNextDlgTabItem
wvsprintfW
CharUpperA
CascadeWindows
RealGetWindowClass
IsCharAlphaW
UnpackDDElParam
GetUserObjectInformationW
GetProcessDefaultLayout
RegisterClassA
IsDialogMessageW
SetCaretBlinkTime
GetComboBoxInfo
ShowCaret
ShowWindowAsync
SendNotifyMessageW
CharToOemBuffA
SetDlgItemTextA
MapVirtualKeyA
EmptyClipboard
GetWindowModuleFileNameW
GetQueueStatus
BringWindowToTop
ChangeMenuA
LoadAcceleratorsA
IsCharUpperA
KillTimer
VkKeyScanA
GetScrollRange
DialogBoxIndirectParamW
FreeDDElParam
GetThreadDesktop
GetMenuStringA
FindWindowExW
GetListBoxInfo
IsWindowUnicode
SetProcessDefaultLayout
CallMsgFilterW
RegisterClipboardFormatA
SetScrollRange
GetCaretBlinkTime
GetClassInfoExW
SetUserObjectInformationW
EnumClipboardFormats
DestroyMenu
FillRect
SetRectEmpty
SwitchToThisWindow
GetUpdateRect
GetSubMenu
UpdateWindow

comdlg32

GetOpenFileNameW
FindTextA
PrintDlgW
ChooseFontA

Sections

.text
Size: 184KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 252KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 116KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

18cad79d42d36df861e0e89431c89618

Headers

File Characteristics

Imports

kernel32

shell32

comctl32

user32

comdlg32

Sections

.text Size: 184KB - Virtual size: 180KB

.rdata Size: 252KB - Virtual size: 248KB

.data Size: 116KB - Virtual size: 121KB

.rsrc Size: 24KB - Virtual size: 22KB

.text
Size: 184KB - Virtual size: 180KB

.rdata
Size: 252KB - Virtual size: 248KB

.data
Size: 116KB - Virtual size: 121KB

.rsrc
Size: 24KB - Virtual size: 22KB