49af53c60659c83371541f80a752f774

Sharing

Copy URL Twitter E-mail

General

Target

49af53c60659c83371541f80a752f774
Size

104KB
MD5

49af53c60659c83371541f80a752f774
SHA1

87cfe535373da900c79a76638f1c99889a0431bb
SHA256

d46c4f5e9c4ea0854e36d8f017e93f2476975872e964b987e84e9d76823b24c9
SHA512

1786d8e24169108661ee0e6abdbed1f384f4fc7bc8bee5a546ff037633c9ae7d146caccaa8767dbf38344fef545e71d80dd59b495b7c55da3c73095306d5e799
SSDEEP

3072:VZfYznexZKRQNLXt/cA30lWTfheRsPw2aS:VtyexZDBJcA3T7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49af53c60659c83371541f80a752f774

Files

49af53c60659c83371541f80a752f774
.exe windows:4 windows x86 arch:x86

33b0262c0e31183c3fe4409c1c8caf39

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileSectionA
WritePrivateProfileStringA
GetLogicalDrives
GetDriveTypeA
lstrlenA
OpenFile
_lread
_lclose
WinExec
ExitThread
GetExitCodeThread
GetPrivateProfileIntA
GetPrivateProfileStringA
Sleep
MultiByteToWideChar
WaitForSingleObject
CreateThread
CloseHandle
SetErrorMode
ExitProcess
SearchPathA
GetUserDefaultLCID
GetLastError
GetLocaleInfoA
LocalFree
RtlZeroMemory
RtlMoveMemory
GetProcAddress
GetModuleHandleA
InterlockedDecrement
GetCommandLineA
InterlockedIncrement
GetTickCount
LocalAlloc

user32

GetWindowThreadProcessId
IsIconic
FindWindowA
MessageBoxA
SetFocus
GetLastActivePopup
GetForegroundWindow
SetTimer
EnumChildWindows
ReleaseDC
GetDC
EnableMenuItem
SetWindowPos
DispatchMessageA
DefWindowProcA
PostMessageA
DialogBoxParamA
DestroyWindow
SetWindowTextA
GetWindowLongA
KillTimer
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
GetWindowDC
LoadCursorA
wvsprintfA
CheckMenuItem
DeleteMenu
PostQuitMessage
DefDlgProcA
GetDesktopWindow
LoadIconA
BringWindowToTop
CharUpperBuffA
SetWindowPlacement
GetWindowPlacement
WindowFromPoint
SendDlgItemMessageA
EndDialog
SetDlgItemTextA
TranslateAcceleratorA
GetDlgItemTextA
SetCursor
ScreenToClient
PtInRect
ChildWindowFromPoint
RegisterWindowMessageA
SetCapture
ClientToScreen
GetParent
ReleaseCapture
GetCursorPos
DrawIcon
EndPaint
GetWindowTextA
BeginPaint
PeekMessageA
DrawTextA
SetDlgItemInt
GetDlgItemInt
RedrawWindow
RegisterClassA
CreateDialogParamA
LoadStringA
LoadAcceleratorsA
ShowWindow
UpdateWindow
SetForegroundWindow
GetFocus
LoadBitmapA
EnableWindow
TranslateMessage
GetMessageA
IsDialogMessageA
GetSubMenu
GetMenu
InvalidateRect
GetWindowRect
GetSystemMetrics
wsprintfA
GetDlgCtrlID
CallWindowProcA
CopyRect
DrawFocusRect
RemovePropA
CreateWindowExA
GetDlgItem
SetPropA
SetWindowLongA
GetClientRect
MapWindowPoints
SendMessageA
GetPropA
SetRect
DrawEdge
GetSysColor
IsWindow
WinHelpA
IsWindowVisible

crtdll

_amsg_exit
_XcptFilter
exit
_except_handler2
_exit
_initterm
_acmdln_dll
_commode_dll
_fmode_dll
_aexit_rtn_dll
__GetMainArgs
rand
strchr
strcspn
strspn
strncpy
sscanf
srand

gdi32

SaveDC
IntersectClipRect
RestoreDC
SetTextAlign
GetTextMetricsA
ExtTextOutA
SetBkColor
SelectObject
DeleteObject
CreateBitmap
CreateCompatibleDC
DeleteDC
BitBlt
PatBlt
CreateSolidBrush
SetTextColor
CreateFontIndirectA
GetDeviceCaps
GetTextExtentPoint32A
GetTextExtentPointA
GetStockObject
GetObjectA

comctl32

ord8
CreateToolbarEx
ord6

shell32

DragAcceptFiles
DragQueryFileA
SHGetFileInfoA
DragFinish
ShellAboutA

winmm

mciSendCommandA

advapi32

RegCloseKey
RegSetValueExA
RegOpenKeyA
RegQueryValueExA
RegCreateKeyA

ole32

CoCreateInstance
OleInitialize
OleUninitialize

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.CRT
Size: 4KB - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1381.2MB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

33b0262c0e31183c3fe4409c1c8caf39

Headers

File Characteristics

Imports

kernel32

user32

crtdll

gdi32

comctl32

shell32

winmm

advapi32

ole32

Sections

.text Size: 52KB - Virtual size: 51KB

.sdata Size: 4KB - Virtual size: 4B

.data Size: 4KB - Virtual size: 3KB

.idata Size: 8KB - Virtual size: 4KB

.CRT Size: 4KB - Virtual size: 20B

.rsrc Size: 20KB - Virtual size: 20KB

.reloc Size: 1381.2MB - Virtual size: 5KB

.text
Size: 52KB - Virtual size: 51KB

.sdata
Size: 4KB - Virtual size: 4B

.data
Size: 4KB - Virtual size: 3KB

.idata
Size: 8KB - Virtual size: 4KB

.CRT
Size: 4KB - Virtual size: 20B

.rsrc
Size: 20KB - Virtual size: 20KB

.reloc
Size: 1381.2MB - Virtual size: 5KB