3e55ce0cfdf0cd98c350ebbec3993b38

Sharing

Copy URL Twitter E-mail

General

Target

3e55ce0cfdf0cd98c350ebbec3993b38
Size

171KB
MD5

3e55ce0cfdf0cd98c350ebbec3993b38
SHA1

653ef34d2251a37e6af2f108c443624161ef723a
SHA256

55f2d433a3effeda3c8b55f8105f928a9abf9e6e7012f57d184c9d0fe7633103
SHA512

9f95465c23868a6a15f553584a5e4d2cbb8ee290cd7740ae275ee6452810c00feab9f30a47fd736d061326c03935a4537120f242fed947294f9765a151699a5d
SSDEEP

3072:89Kdy0wmblLziVsbMunKIrTGofCGnCIJVRlENe7bE3nKRQeGCASvK4B5z9S8I:8OyDmblLtbMuKAGmCGCIllzQebASy4PO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e55ce0cfdf0cd98c350ebbec3993b38

Files

3e55ce0cfdf0cd98c350ebbec3993b38
.exe windows:5 windows x86 arch:x86

46f61ef129437a091e6ad6d3b92b5468

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetScrollInfo
InternalGetWindowText
CreateWindowExW
IsCharAlphaW
GetWindowTextLengthW
WindowFromPoint
LoadCursorA
GetMenuStringW
InSendMessageEx
GetSubMenu
GetClassNameW
DrawEdge
DialogBoxIndirectParamA
wvsprintfA
GetWindowRect
wsprintfW
MessageBoxExW
GetMessageTime
IsRectEmpty
CheckRadioButton
GetClientRect
GetUpdateRgn
ChangeMenuW
GetActiveWindow
IsIconic
KillTimer
DrawAnimatedRects
ScrollWindow
GetIconInfo
DefDlgProcA
IsDlgButtonChecked
ClipCursor
ToUnicodeEx
GetWindowPlacement
BeginPaint
GetNextDlgGroupItem
GetWindow
CallWindowProcW
GetUserObjectInformationA
GetClassInfoA
IsCharLowerA
MapDialogRect
CreatePopupMenu
CreateCursor
MoveWindow
CharPrevA
InvalidateRect
CharUpperA
SetScrollPos
GetClassLongW
GetMessageA
CloseDesktop
InsertMenuW
IsMenu
InSendMessage
CharToOemA
SetTimer
LoadImageW
InsertMenuA
RemovePropW
WaitMessage
DragObject
ClientToScreen
AdjustWindowRect
GetDC
HideCaret
CharPrevW
LoadBitmapW
GetWindowLongW
PostMessageA
SendNotifyMessageW
UnloadKeyboardLayout
GetKeyboardLayoutNameW
GetWindowTextW
DestroyWindow
GrayStringW
ScrollWindowEx
CopyRect
LoadBitmapA
CharUpperW
GetWindowTextA
SendInput
RegisterClassW
GetPropW
SetParent
ShowCursor
SetDlgItemInt
DestroyAcceleratorTable
PostMessageW
SendMessageTimeoutA
SendMessageTimeoutW
SetDlgItemTextW
DestroyMenu
CharLowerA
ShowScrollBar
GetSysColorBrush
GetForegroundWindow
ShowOwnedPopups
DefFrameProcW
RedrawWindow
SetFocus
EndDialog
RegisterClassExA
GetScrollPos
DispatchMessageA
DefWindowProcW
GetDoubleClickTime
SetCursor
DefFrameProcA
DeleteMenu
SetUserObjectInformationW
SendMessageW
DrawMenuBar
RegisterClassA
MapVirtualKeyExW
PostThreadMessageW
EnumWindows
DrawStateA
FindWindowA
GetSystemMetrics

msvcrt

clearerr
puts
strncpy
putc
wcsncpy
perror
putchar
wcscoll
swprintf
ftell
getenv
wcstombs
atol
wcslen
isdigit
_controlfp
strtok
__set_app_type
fseek
realloc
__p__fmode
wcscpy
__p__commode
strcpy
_amsg_exit
bsearch
strpbrk
tolower
_initterm
system
_ismbblead
strspn
wcscmp
isalnum
wcstod
vsprintf
iswctype
_XcptFilter
fgetc
_exit
iswprint
_cexit
wcsncmp
__setusermatherr
__getmainargs
strrchr
wcsrchr

comdlg32

GetFileTitleW
ChooseFontW
ReplaceTextW
FindTextW

kernel32

ClearCommBreak
HeapCreate
VirtualFree
GetLastError
MulDiv
GetCommTimeouts
QueryPerformanceCounter
FindFirstChangeNotificationW
GetSystemWindowsDirectoryW
CreateSemaphoreW
LocalUnlock
HeapReAlloc
GetSystemDirectoryA
GlobalGetAtomNameW
CopyFileA
CreateThread
TlsFree
LoadLibraryA
LocalAlloc
OpenFileMappingA
GetBinaryTypeW
GetUserDefaultLangID
lstrcpynW
WaitForMultipleObjects
SearchPathW
GetTempPathW
SetCommBreak
lstrlenA
SetNamedPipeHandleState
GlobalReAlloc
GetCurrentThread
GetNumberFormatA
EnumSystemLocalesA
IsBadReadPtr
IsBadCodePtr
SearchPathA
lstrcmpiW
OpenEventW
LocalFree
ConvertDefaultLocale
OpenFileMappingW
CreateNamedPipeA
DeleteFileA
GetTempPathA
GetExitCodeThread
GetFileAttributesA
GetOverlappedResult
GetFullPathNameA
lstrcatA
ClearCommError
PulseEvent
GetFileAttributesExA
GlobalGetAtomNameA
SetThreadAffinityMask
SetFilePointer
WaitForSingleObjectEx

shlwapi

StrToIntW

Exports

Exports

?GetShiftAltInfo@@YGK_KHE:O

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bit
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.insec
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.inmin
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wall
Size: 1024B - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

46f61ef129437a091e6ad6d3b92b5468

Headers

File Characteristics

Imports

user32

msvcrt

comdlg32

kernel32

shlwapi

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

.bit Size: 1KB - Virtual size: 1KB

.insec Size: 6KB - Virtual size: 5KB

.inmin Size: 512B - Virtual size: 86B

.wall Size: 1024B - Virtual size: 258KB

.zdata Size: 12KB - Virtual size: 12KB

.data Size: 1KB - Virtual size: 1KB

.rsrc Size: 138KB - Virtual size: 138KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 7KB - Virtual size: 7KB

.bit
Size: 1KB - Virtual size: 1KB

.insec
Size: 6KB - Virtual size: 5KB

.inmin
Size: 512B - Virtual size: 86B

.wall
Size: 1024B - Virtual size: 258KB

.zdata
Size: 12KB - Virtual size: 12KB

.data
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 138KB - Virtual size: 138KB

.reloc
Size: 1KB - Virtual size: 1KB