504ff3013640316c280a09594fe8c87f

Sharing

Copy URL Twitter E-mail

General

Target

504ff3013640316c280a09594fe8c87f
Size

179KB
MD5

504ff3013640316c280a09594fe8c87f
SHA1

ac630d9da25ac5307eb7b6b3509b290173abc829
SHA256

79fd8851e322f90ba0453e6f10a233c472e3975e7102fcf16171ccb2b1faaece
SHA512

81dc851e39477c9710128cb0b24ca56996b334515092e982fad353d35374aeb431fe224b3e3aeb9576683893457e61b9edd8219cf5481d0d8c01936903cf0c9b
SSDEEP

3072:6JIRH8MiYKlghdTeDco1Hxbu30/BLEypsLS88:MsH8MNrTeVN/tEyps

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
504ff3013640316c280a09594fe8c87f

Files

504ff3013640316c280a09594fe8c87f
.exe windows:4 windows x86 arch:x86

f1dd5d48c59d6b907bd24e3d42a70b7c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryExA
FindFirstFileA
lstrcmpA
GetACP
GetStdHandle
LocalAlloc
ExitProcess
LoadResource
LoadLibraryA
GetStringTypeA
ExitThread
CloseHandle
GetModuleHandleA
GetVersionExA
GetCPInfo
VirtualAllocEx

user32

IsWindowUnicode
LoadKeyboardLayoutA
IsDialogMessageW
SetClipboardData
ReleaseCapture
DrawIcon
GetSysColorBrush
GetWindowLongA
IsIconic
MapWindowPoints
SetParent
LoadCursorA
GetIconInfo
IsWindow
GetCursorPos
ScrollWindow
InsertMenuItemA
UnregisterClassA
DrawTextA
CreateIcon
RegisterClipboardFormatA
OemToCharA
GetActiveWindow
GetMenuState
GetClassNameA
CharNextW
MsgWaitForMultipleObjects
TrackPopupMenu
GetKeyboardLayout
LoadStringA
ChildWindowFromPoint
KillTimer
GetKeyState
DestroyWindow
CreatePopupMenu
CallNextHookEx
GetKeyboardType
RemovePropA
EndPaint
GetClassLongA
GetCursor
EnableWindow
LoadIconA
SetClassLongA
TranslateMessage
WindowFromPoint
FillRect
InvalidateRect
EnableMenuItem
GetDCEx
SetForegroundWindow
InsertMenuA
IsZoomed
IsRectEmpty
CloseClipboard
RegisterClassA
GetScrollRange
GetKeyNameTextA
GetSubMenu
GetDC
IsChild
FrameRect
GetSysColor
GetKeyboardLayoutNameA
GetMenuItemID
CharUpperBuffA
DestroyIcon
ClientToScreen
TranslateMDISysAccel
PeekMessageA
CharLowerA
GetClientRect
ReleaseDC
ShowOwnedPopups
GetDlgItem
GetWindowLongW
RedrawWindow
SetScrollPos
GetWindowPlacement
EqualRect
GetMessagePos
ShowWindow
GetForegroundWindow
EnableScrollBar
SetScrollInfo
DefFrameProcA
wsprintfA
WaitMessage
AdjustWindowRectEx
GetMenuStringA
GetClipboardData
PostQuitMessage
SetWindowPos
CharNextA
IntersectRect
MessageBoxA
IsWindowEnabled
DrawEdge
CreateWindowExA
GetScrollInfo
GetClassInfoA
GetKeyboardState
IsDialogMessageA
EnumWindows
SetWindowsHookExA
GetSystemMenu
SendMessageA
GetWindow
DefMDIChildProcA
SetScrollRange
SetCursor
SendMessageW
GetKeyboardLayoutList
CharLowerBuffA
DrawAnimatedRects
GetDesktopWindow
GetWindowThreadProcessId
SetWindowPlacement
GetWindowTextA
GetScrollPos
GetLastActivePopup
GetFocus
GetWindowRect
DeleteMenu

ole32

CoRevokeClassObject

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 130KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f1dd5d48c59d6b907bd24e3d42a70b7c

Headers

File Characteristics

Imports

kernel32

user32

ole32

Sections

.text Size: 35KB - Virtual size: 34KB

.data Size: 130KB - Virtual size: 237KB

.rdata Size: 2KB - Virtual size: 1KB

.rsrc Size: 10KB - Virtual size: 10KB

.text
Size: 35KB - Virtual size: 34KB

.data
Size: 130KB - Virtual size: 237KB

.rdata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 10KB - Virtual size: 10KB