3f7e26b0ddadf7c4c184e7af7ea0fbf5

Sharing

Copy URL Twitter E-mail

General

Target

3f7e26b0ddadf7c4c184e7af7ea0fbf5
Size

120KB
MD5

3f7e26b0ddadf7c4c184e7af7ea0fbf5
SHA1

e7444b694897e96a943a0970f7c6dcc5f96f2294
SHA256

b2cd82e40fcff4d9c5e6966b9055b148089547b6bf50cd2df5daf7e177fbf51e
SHA512

5bb56e9ba9243c1a8ae037d96d9f703d59cfa7c356eed061d7b4c123c67770a6f3b0edc69cf39f1034d26341f425345b7db0d93c9a89833c50fdaca5215e739e
SSDEEP

1536:ZlHpPpo03z0oHwLVLrvXe3b0IscbC9EzCJu79+EaNaBQhgj7xTOs:Zlo0D0s4ZrfeBVzNJM7+j7cs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f7e26b0ddadf7c4c184e7af7ea0fbf5

Files

3f7e26b0ddadf7c4c184e7af7ea0fbf5
.exe windows:4 windows x86 arch:x86

970f9af4ce99135fad2e79ab0eea0dc4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalDeleteAtom
GetCurrentProcess
GetVersionExA
SetEvent
GetFileSize
GetOEMCP
GetACP
GetProcAddress
VirtualAllocEx
CompareStringA
GetDateFormatA
SetHandleCount
lstrcmpiA
ExitThread
CloseHandle
GetModuleHandleA
LocalAlloc

comctl32

ImageList_Draw
ImageList_GetBkColor
ImageList_Destroy
ImageList_Write

gdi32

GetBitmapBits
CreateBrushIndirect
CreateDIBitmap
GetDIBColorTable
SetPixel
CopyEnhMetaFileA
RestoreDC
GetDIBits
GetObjectA
CreatePalette

shell32

SHGetDesktopFolder
SHGetFolderPathA
SHGetFileInfoA
SHFileOperationA
SHGetSpecialFolderLocation

ole32

CoReleaseMarshalData
WriteClassStm
CoRegisterClassObject
CoFreeUnusedLibraries
GetHGlobalFromStream
CreateStreamOnHGlobal
CoUnmarshalInterface
CoGetContextToken

version

GetFileVersionInfoA
VerFindFileA
VerInstallFileA

shlwapi

SHQueryInfoKeyA
SHGetValueA
SHQueryValueExA
PathFileExistsA
SHSetValueA
PathGetCharTypeA
PathIsDirectoryA
SHDeleteKeyA

user32

GetDlgItem
OpenClipboard
GetMenuItemID
SetClassLongA
IsWindowVisible
MessageBoxA
DefWindowProcA
CharNextA
CloseClipboard
GetMenuItemInfoA
EmptyClipboard
ShowWindow
GetForegroundWindow
WindowFromPoint
TranslateMDISysAccel
GetSysColor
OffsetRect
DrawEdge
GetDC
GetClassLongA
GetWindow
SetWindowLongW
AdjustWindowRectEx
InsertMenuA
EnableScrollBar
UpdateWindow
RegisterWindowMessageA
GetKeyboardState
EnableMenuItem
GetWindowTextA
GetWindowLongW
IsZoomed
SetWindowPos
EnumWindows
EnumChildWindows
GetPropA
GetWindowLongA
CreateMenu
SetActiveWindow
GetSysColorBrush
IsDialogMessageW
GetKeyboardType
GetWindowPlacement
GetFocus
GetScrollInfo
SetClipboardData
ShowOwnedPopups
CharLowerBuffA
PeekMessageA
CheckMenuItem
MapWindowPoints
LoadIconA
TrackPopupMenu
TranslateMessage
WaitMessage
SendMessageW
SetMenuItemInfoA
LoadCursorA
SetScrollRange
GetKeyboardLayoutNameA
SetTimer
RemovePropA
DefFrameProcA
GetKeyboardLayoutList
EndPaint
GetKeyboardLayout
IsWindowUnicode
GetClassNameA
DefMDIChildProcA
GetTopWindow
IsRectEmpty
SendMessageA
GetMenuState
GetScrollRange
SetScrollInfo
DestroyCursor
SetCapture
GetDesktopWindow
EqualRect
LoadKeyboardLayoutA
IsWindow
GetActiveWindow
InflateRect
DrawFrameControl
GetCursor
MessageBeep
InvalidateRect
SetParent
RegisterClipboardFormatA
DestroyWindow
DispatchMessageA
IsChild
SetMenu
SetRect
ReleaseCapture
FrameRect
GetIconInfo
DrawAnimatedRects
SetForegroundWindow
DrawIconEx
DrawMenuBar
GetKeyNameTextA
SystemParametersInfoA
PostQuitMessage
KillTimer
DrawIcon
SetScrollPos
PtInRect
DestroyIcon
IsIconic
SetWindowPlacement
ScreenToClient
FindWindowA
wsprintfA
MsgWaitForMultipleObjects
IsWindowEnabled
ClientToScreen
SetWindowsHookExA
GetCursorPos
FillRect
CharToOemA
DestroyMenu
GetClassInfoA
GetWindowDC
GetWindowRect
GetClipboardData
GetMenuItemCount
ShowScrollBar
SetPropA
EnumThreadWindows
MoveWindow
SetWindowLongA
IsDialogMessageA
CharNextW
ChildWindowFromPoint
SetFocus
GetMenuStringA
BeginPaint
GetWindowThreadProcessId
ScrollWindow
CreateWindowExA
DrawTextA
OemToCharA
GetSystemMetrics
DispatchMessageW
RemoveMenu
GetSubMenu
ActivateKeyboardLayout
RegisterClassA
GetDCEx
GetScrollPos
GetSystemMenu
PeekMessageW
InsertMenuItemA
MapVirtualKeyA
GetParent
GetKeyState
RedrawWindow
CallNextHookEx
UnregisterClassA
PostMessageA
GetCapture
GetClientRect
CharUpperBuffA
CreateIcon
SetCursor
LoadBitmapA
ReleaseDC
CharLowerA
UnhookWindowsHookEx
DeleteMenu
CallWindowProcA
CreatePopupMenu
EnableWindow
SetWindowTextA
IntersectRect
LoadStringA
GetMessagePos

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1024B - Virtual size: 926B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

970f9af4ce99135fad2e79ab0eea0dc4

Headers

File Characteristics

Imports

kernel32

comctl32

gdi32

shell32

ole32

version

shlwapi

user32

Sections

.text Size: 29KB - Virtual size: 28KB

DATA Size: 7KB - Virtual size: 6KB

BSS Size: 80KB - Virtual size: 80KB

.edata Size: 1024B - Virtual size: 926B

.data Size: 1KB - Virtual size: 1KB

.text
Size: 29KB - Virtual size: 28KB

DATA
Size: 7KB - Virtual size: 6KB

BSS
Size: 80KB - Virtual size: 80KB

.edata
Size: 1024B - Virtual size: 926B

.data
Size: 1KB - Virtual size: 1KB