42bb390b6ac7ec34cbc6de6efd7728af

General

Target

42bb390b6ac7ec34cbc6de6efd7728af
Size

52KB
MD5

42bb390b6ac7ec34cbc6de6efd7728af
SHA1

0312f66604a283b08306dfd990518acf09bbcdc8
SHA256

5a6bf3e5a6b29350e539b99abb90836c42c3bc5031a3dc60483521e060e3bea3
SHA512

d3150a5acba7139b7897c3ab86319eb11ca6710fa22d8794eb878496d74fd3ad05c45cf865faf84a3c0a712e675ff6632e57cd20a58ab461d862813e45ade5ee
SSDEEP

1536:lMGkCdgXH5KMAj/6NKlIoEAWwkIJMVQS+:aGk8gXH5KeK+VzWd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42bb390b6ac7ec34cbc6de6efd7728af

Files

42bb390b6ac7ec34cbc6de6efd7728af
.exe windows:5 windows x86 arch:x86

375fffe99ae794415ccc5c3b7f2ba138

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetForegroundWindow
MsgWaitForMultipleObjects
PeekMessageW
ToUnicode
ExitWindowsEx
FindWindowExW
GetWindowThreadProcessId
GetDlgItemTextW
GetDlgItem
GetIconInfo
GetKeyboardState
GetMessageA
GetClassNameW
CloseWindowStation
PeekMessageA
DispatchMessageW
GetMessageW
LoadCursorW
GetClipboardData
CloseDesktop
GetWindowTextW
GetCursorPos
SendMessageW
OpenWindowStationA
EndDialog
OpenDesktopA
CharLowerBuffA
GetKeyState
GetWindowLongW
SetProcessWindowStation
GetDlgItemTextA
SetThreadDesktop
DrawIcon

kernel32

SetFilePointer
FindResourceW
GetComputerNameW
GetLogicalDrives
CreateFileW
lstrcmpiA
GetTickCount
GetExitCodeProcess
FindClose
lstrcpyA
OpenProcess
LeaveCriticalSection
IsBadReadPtr
CreateMutexW
GetLocalTime
GetFileSize
GetTempPathW
SetFileTime
SetLastError
OpenMutexW
GetTimeZoneInformation
GlobalUnlock
GetThreadPriority
GlobalLock
GetCurrentProcessId
GetUserDefaultUILanguage
GetDriveTypeW
CopyFileW

Sections

.tkrmp
Size: 18KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idwjsr
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.junyp
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cvil
Size: 25KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

375fffe99ae794415ccc5c3b7f2ba138

Headers

File Characteristics

Imports

user32

kernel32

Sections

.tkrmp Size: 18KB - Virtual size: 39KB

.idwjsr Size: 5KB - Virtual size: 10KB

.junyp Size: 1024B - Virtual size: 1KB

.cvil Size: 25KB - Virtual size: 132KB

.rsrc Size: 1KB - Virtual size: 4KB

.tkrmp
Size: 18KB - Virtual size: 39KB

.idwjsr
Size: 5KB - Virtual size: 10KB

.junyp
Size: 1024B - Virtual size: 1KB

.cvil
Size: 25KB - Virtual size: 132KB

.rsrc
Size: 1KB - Virtual size: 4KB