537e4b5a655af7d70a2c91acd707a217

Sharing

Copy URL Twitter E-mail

General

Target

537e4b5a655af7d70a2c91acd707a217
Size

52KB
MD5

537e4b5a655af7d70a2c91acd707a217
SHA1

cebdf256ef7f7d0bc518b2ef4f11d5010c849c83
SHA256

5ba89651d1a7a95c959098340866fcbeec7143a21962071b6c343864661bb370
SHA512

23a80e9f79cb1c73b4855ea3d2cd94dcdd94f333bb847067bdfe916a2532866354e2bc9c6a2cc85204a012cb958331eb6d2268f0650a41312c87c23e60181557
SSDEEP

768:gACer6/Pj9VLMjnLZUU7MjSxeTd7kK0yazAzK2qVn3rGYgpOKtoS7sQ+Nnu:g5VLMjn6U7Dm5B3qcYyoSX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
537e4b5a655af7d70a2c91acd707a217

Files

537e4b5a655af7d70a2c91acd707a217
.exe windows:5 windows x86 arch:x86

f72b6839b1fbdcc675b3c5f5c18dbb79

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetOpenFileNameW
ChooseFontW
PrintDlgW
ChooseColorW
GetSaveFileNameA
GetSaveFileNameW

kernel32

GetComputerNameExA
lstrcmpiW
LockFile
SetSystemTime
UnlockFile
GlobalMemoryStatusEx
CreateEventW
FindFirstChangeNotificationW
GetLocaleInfoW
RemoveDirectoryA
GetProcessHeap
EscapeCommFunction
SearchPathA
GetSystemWindowsDirectoryW
VirtualAlloc
LoadLibraryA
AreFileApisANSI
WinExec
CallNamedPipeW
GetModuleHandleW
HeapAlloc
LocalReAlloc
SetFileAttributesW
GetFileType
LoadLibraryExA
HeapFree
GlobalSize
GetModuleFileNameW
DeleteFileA
OpenEventW
GetBinaryTypeA
GetSystemDirectoryA
PulseEvent
CompareFileTime
LeaveCriticalSection
GetStartupInfoA
FlushFileBuffers
CreateThread
GetStringTypeExW
UnmapViewOfFile
GlobalGetAtomNameA
ClearCommError
TlsFree
SetCommBreak
GetModuleFileNameA
ReadFile
GetFileAttributesExA
GlobalAddAtomA
GetComputerNameW
VirtualProtect
LoadLibraryW
GetShortPathNameA
CreateWaitableTimerW
WaitForSingleObjectEx
SetEndOfFile
GetWindowsDirectoryA
FormatMessageW
FindCloseChangeNotification

msvcrt

perror
strtoul
_controlfp
getenv
__set_app_type
__p__fmode
bsearch
system
wcscat
printf
malloc
isalpha
swprintf
strncmp
__p__commode
strtol
_amsg_exit
iswprint
_initterm
_ismbblead
strrchr
towupper
fwrite
ungetc
sprintf
wcsncpy
_XcptFilter
wcstoul
iswdigit
gets
_exit
putchar
fputs
_cexit
strncpy
wcstok
vswprintf
wcscmp
wcscspn
fread
__setusermatherr
gmtime
putc
__getmainargs
realloc
floor
towlower

user32

DestroyIcon
CharLowerBuffW
GetUpdateRect
LookupIconIdFromDirectory
CheckMenuRadioItem
GetAltTabInfoA
TranslateMessage
EnableWindow
DialogBoxIndirectParamW
CharToOemW
IsChild
CharToOemBuffA
IsCharAlphaW
GetMenuState
CallWindowProcA
CharNextExA
GetWindow
wsprintfA
CopyImage
LoadMenuW
ScreenToClient
GetClassInfoA
IsZoomed
ScrollWindow
InvalidateRgn
UnionRect
InternalGetWindowText
PostQuitMessage
TileWindows
DrawTextExW
SetDlgItemTextW
ModifyMenuW
CharLowerW
LoadCursorW
ShowWindowAsync
IsDialogMessageA
IsMenu
FillRect
PostMessageA
SendMessageTimeoutW
LoadAcceleratorsW
GetKeyboardType
GetWindowTextA
GetParent
SendMessageW
CreateAcceleratorTableW
GetClientRect
IsCharAlphaNumericW
RemoveMenu
DrawFocusRect
GetMenuItemRect
GetDlgItemInt
IsWindowEnabled
SwitchToThisWindow
ActivateKeyboardLayout
SendDlgItemMessageA
MessageBoxA
HiliteMenuItem
IntersectRect
EqualRect
InSendMessage
AppendMenuW
IsDlgButtonChecked
CharUpperBuffW
RegisterClassExA
IsWindowUnicode
EnumWindows
GetPropW
DispatchMessageW
GetSystemMenu
LoadBitmapA
CloseDesktop
SetParent
RegisterWindowMessageA
GetScrollPos
GetAsyncKeyState
SendNotifyMessageW
RegisterClassW
DefWindowProcW
SetMenu
LoadCursorA
InvalidateRect
SystemParametersInfoW
InSendMessageEx
LockWindowUpdate
RemovePropW
ValidateRect
AttachThreadInput
CopyRect
KillTimer
SetTimer
SetRect
GetForegroundWindow
HideCaret
GetMessageW
PostMessageW
DrawStateW
CheckRadioButton
DialogBoxParamW
UnloadKeyboardLayout
GetMessagePos
WindowFromPoint
GetDoubleClickTime
DialogBoxIndirectParamA
GetDlgItemTextW
SetWindowPos
EnableScrollBar
BeginPaint
GetMenu
ChangeMenuW
OffsetRect
GetUpdateRgn
MonitorFromPoint
SystemParametersInfoA
GetIconInfo
MessageBoxExW
GetKeyboardLayoutList
DestroyCursor
GetKeyboardLayoutNameW
GetMessageTime
DialogBoxParamA

Exports

Exports

?TestAccountSecDUoiJDK@@YGKGE[D

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f72b6839b1fbdcc675b3c5f5c18dbb79

Headers

File Characteristics

Imports

comdlg32

kernel32

msvcrt

user32

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 20KB

.data Size: 8KB - Virtual size: 16KB

.rsrc Size: 20KB - Virtual size: 20KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 20KB - Virtual size: 20KB

.data
Size: 8KB - Virtual size: 16KB

.rsrc
Size: 20KB - Virtual size: 20KB

.reloc
Size: 1KB - Virtual size: 1KB