5042c8aaaf11b8b8abecfd62919f3a68

Sharing

Copy URL Twitter E-mail

General

Target

5042c8aaaf11b8b8abecfd62919f3a68
Size

171KB
MD5

5042c8aaaf11b8b8abecfd62919f3a68
SHA1

bc95caab371ebb5e61bbfbea8b4d1ce85a881784
SHA256

0d2d449154afbb3124f6d32875849498e97cf176ac146096232917bc13c51477
SHA512

0ed2c8b6a7e36c2ee4d09b2a3e3ab5eccdcae63c911d080c7802b6324b8e5b1617d457c1d552b1a3b5dae0bf2f377bc87ceaac4060de0123d8a5051f64ddda31
SSDEEP

3072:f9Kdy0wmblLziVsbMunKIrTGofCGnCIJVRlENe7bE3nKRQeGCASvK4B5z9S8I:fOyDmblLtbMuKAGmCGCIllzQebASy4PO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5042c8aaaf11b8b8abecfd62919f3a68

Files

5042c8aaaf11b8b8abecfd62919f3a68
.exe windows:5 windows x86 arch:x86

46f61ef129437a091e6ad6d3b92b5468

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetScrollInfo
InternalGetWindowText
CreateWindowExW
IsCharAlphaW
GetWindowTextLengthW
WindowFromPoint
LoadCursorA
GetMenuStringW
InSendMessageEx
GetSubMenu
GetClassNameW
DrawEdge
DialogBoxIndirectParamA
wvsprintfA
GetWindowRect
wsprintfW
MessageBoxExW
GetMessageTime
IsRectEmpty
CheckRadioButton
GetClientRect
GetUpdateRgn
ChangeMenuW
GetActiveWindow
IsIconic
KillTimer
DrawAnimatedRects
ScrollWindow
GetIconInfo
DefDlgProcA
IsDlgButtonChecked
ClipCursor
ToUnicodeEx
GetWindowPlacement
BeginPaint
GetNextDlgGroupItem
GetWindow
CallWindowProcW
GetUserObjectInformationA
GetClassInfoA
IsCharLowerA
MapDialogRect
CreatePopupMenu
CreateCursor
MoveWindow
CharPrevA
InvalidateRect
CharUpperA
SetScrollPos
GetClassLongW
GetMessageA
CloseDesktop
InsertMenuW
IsMenu
InSendMessage
CharToOemA
SetTimer
LoadImageW
InsertMenuA
RemovePropW
WaitMessage
DragObject
ClientToScreen
AdjustWindowRect
GetDC
HideCaret
CharPrevW
LoadBitmapW
GetWindowLongW
PostMessageA
SendNotifyMessageW
UnloadKeyboardLayout
GetKeyboardLayoutNameW
GetWindowTextW
DestroyWindow
GrayStringW
ScrollWindowEx
CopyRect
LoadBitmapA
CharUpperW
GetWindowTextA
SendInput
RegisterClassW
GetPropW
SetParent
ShowCursor
SetDlgItemInt
DestroyAcceleratorTable
PostMessageW
SendMessageTimeoutA
SendMessageTimeoutW
SetDlgItemTextW
DestroyMenu
CharLowerA
ShowScrollBar
GetSysColorBrush
GetForegroundWindow
ShowOwnedPopups
DefFrameProcW
RedrawWindow
SetFocus
EndDialog
RegisterClassExA
GetScrollPos
DispatchMessageA
DefWindowProcW
GetDoubleClickTime
SetCursor
DefFrameProcA
DeleteMenu
SetUserObjectInformationW
SendMessageW
DrawMenuBar
RegisterClassA
MapVirtualKeyExW
PostThreadMessageW
EnumWindows
DrawStateA
FindWindowA
GetSystemMetrics

msvcrt

clearerr
puts
strncpy
putc
wcsncpy
perror
putchar
wcscoll
swprintf
ftell
getenv
wcstombs
atol
wcslen
isdigit
_controlfp
strtok
__set_app_type
fseek
realloc
__p__fmode
wcscpy
__p__commode
strcpy
_amsg_exit
bsearch
strpbrk
tolower
_initterm
system
_ismbblead
strspn
wcscmp
isalnum
wcstod
vsprintf
iswctype
_XcptFilter
fgetc
_exit
iswprint
_cexit
wcsncmp
__setusermatherr
__getmainargs
strrchr
wcsrchr

comdlg32

GetFileTitleW
ChooseFontW
ReplaceTextW
FindTextW

kernel32

ClearCommBreak
HeapCreate
VirtualFree
GetLastError
MulDiv
GetCommTimeouts
QueryPerformanceCounter
FindFirstChangeNotificationW
GetSystemWindowsDirectoryW
CreateSemaphoreW
LocalUnlock
HeapReAlloc
GetSystemDirectoryA
GlobalGetAtomNameW
CopyFileA
CreateThread
TlsFree
LoadLibraryA
LocalAlloc
OpenFileMappingA
GetBinaryTypeW
GetUserDefaultLangID
lstrcpynW
WaitForMultipleObjects
SearchPathW
GetTempPathW
SetCommBreak
lstrlenA
SetNamedPipeHandleState
GlobalReAlloc
GetCurrentThread
GetNumberFormatA
EnumSystemLocalesA
IsBadReadPtr
IsBadCodePtr
SearchPathA
lstrcmpiW
OpenEventW
LocalFree
ConvertDefaultLocale
OpenFileMappingW
CreateNamedPipeA
DeleteFileA
GetTempPathA
GetExitCodeThread
GetFileAttributesA
GetOverlappedResult
GetFullPathNameA
lstrcatA
ClearCommError
PulseEvent
GetFileAttributesExA
GlobalGetAtomNameA
SetThreadAffinityMask
SetFilePointer
WaitForSingleObjectEx

shlwapi

StrToIntW

Exports

Exports

?GetShiftAltInfo@@YGK_KHE:O

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bit
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.insec
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.inmin
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wall
Size: 1024B - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

46f61ef129437a091e6ad6d3b92b5468

Headers

File Characteristics

Imports

user32

msvcrt

comdlg32

kernel32

shlwapi

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

.bit Size: 1KB - Virtual size: 1KB

.insec Size: 6KB - Virtual size: 5KB

.inmin Size: 512B - Virtual size: 86B

.wall Size: 1024B - Virtual size: 258KB

.zdata Size: 12KB - Virtual size: 12KB

.data Size: 1KB - Virtual size: 1KB

.rsrc Size: 138KB - Virtual size: 138KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 7KB - Virtual size: 7KB

.bit
Size: 1KB - Virtual size: 1KB

.insec
Size: 6KB - Virtual size: 5KB

.inmin
Size: 512B - Virtual size: 86B

.wall
Size: 1024B - Virtual size: 258KB

.zdata
Size: 12KB - Virtual size: 12KB

.data
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 138KB - Virtual size: 138KB

.reloc
Size: 1KB - Virtual size: 1KB