563954507048851005c9366525f4b8f8

Sharing

Copy URL Twitter E-mail

General

Target

563954507048851005c9366525f4b8f8
Size

136KB
MD5

563954507048851005c9366525f4b8f8
SHA1

6301f29008dff628379517d3220242566c508645
SHA256

2ef3e59d0b51221d6e40336e062137fb57e191611d6acc66990b60e222c2a284
SHA512

5fe38c4e6c0a7257739411de246710a7d19b6c725703841e861305464704181f7e20fb6d6ebabba206efe9c7303e072dbf9635b380acda6a9a7fdcca274b37f0
SSDEEP

3072:Xog6VxDoSCMyFAHkPj6L/MmsW/6MNWwGrhwn5:zeLmiEmf/6MCrG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
563954507048851005c9366525f4b8f8

Files

563954507048851005c9366525f4b8f8
.exe windows:5 windows x86 arch:x86

e9a347fc127ff116b01c3ebf781072c3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

UrlGetLocationA

msvcrt

_controlfp
__set_app_type
isalpha
strncmp
strspn
bsearch
__p__fmode
wcscmp
__p__commode
_amsg_exit
fwrite
vswprintf
isxdigit
strtol
ungetc
strchr
memset
_initterm
wcscspn
getenv
qsort
towupper
strstr
wcschr
wcscpy
fclose
remove
_ismbblead
isalnum
clearerr
_XcptFilter
_exit
_cexit
__setusermatherr
wcscoll
wcsrchr
__getmainargs

user32

LoadImageW
IsCharLowerA
SendInput
GetWindowRect
FillRect
ModifyMenuW
GetMenuStringW
GetMenu
GetClientRect
CharPrevW
ChangeMenuW
SendMessageW
MessageBoxW
AllowSetForegroundWindow
GetScrollRange
CharUpperBuffW
IsWindow
DragObject
ScreenToClient
DialogBoxParamA
CharNextW
wsprintfW
DestroyAcceleratorTable
IsCharAlphaA
SetWindowRgn
TranslateAcceleratorA
FindWindowW
ShowWindow
LookupIconIdFromDirectory
BeginPaint
GetMenuItemRect
GetScrollInfo
SetRect
IsZoomed
GetParent
GetClassInfoA
EndDialog
RegisterClassExW
SetTimer
SetScrollInfo
GetWindowPlacement
GetCursorPos
CreateAcceleratorTableW
TileWindows
DialogBoxIndirectParamA
DialogBoxParamW
GetKeyNameTextW
OemToCharBuffA
GetUserObjectInformationA
ChildWindowFromPointEx
DrawTextA
GetClassLongW
TranslateMessage
EnableWindow
SetWindowTextW
RegisterClassExA
SetForegroundWindow
MapDialogRect
DestroyIcon
GetClassInfoW
VkKeyScanW
IsWindowUnicode
DrawAnimatedRects
PostMessageA
CharUpperA
GetMessageA
MessageBoxA
IsIconic
SendMessageA
SetCursorPos
GetMonitorInfoW
ShowScrollBar
DeleteMenu
GetWindowTextA
IsWindowVisible
DefDlgProcW
PostMessageW
UnloadKeyboardLayout
SetSysColors
SystemParametersInfoA
CreateCaret
SendNotifyMessageW
PeekMessageA
CreateMenu
GetMessageTime
GetWindowLongA

kernel32

SetEvent
SetLocalTime
CloseHandle
SetupComm
GetLocalTime
CreateFileMappingW
CopyFileW
GetSystemDefaultLangID
AddAtomW
GetComputerNameA
GetCurrentThreadId
CancelIo
HeapCreate
CreateWaitableTimerA
GetTempFileNameA
SetSystemTimeAdjustment
SearchPathW
GlobalAddAtomA
ResumeThread
GlobalMemoryStatusEx
LocalLock
SetFileTime
SetFilePointer
EnumResourceNamesA
GetComputerNameW
VirtualAlloc
GetFileTime
MoveFileExW
CompareStringW
GlobalReAlloc
SetMailslotInfo
InitializeCriticalSection
ReleaseSemaphore
GetModuleFileNameA
GetDateFormatW
FindResourceExA
ResetEvent
SetCommBreak
DeleteFileA

comdlg32

PrintDlgW
GetSaveFileNameA
GetFileTitleW
ChooseColorW
PrintDlgExW

Exports

Exports

?HistoryLoggingOn@@YGKDKPAX:O

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.eplan
Size: 512B - Virtual size: 91B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ainit
Size: 1024B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdbg
Size: 512B - Virtual size: 91B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.iplan
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.run
Size: 512B - Virtual size: 322B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.0dat
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e9a347fc127ff116b01c3ebf781072c3

Headers

File Characteristics

Imports

shlwapi

msvcrt

user32

kernel32

comdlg32

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 23KB

.eplan Size: 512B - Virtual size: 91B

.ainit Size: 1024B - Virtual size: 868B

.rdbg Size: 512B - Virtual size: 91B

.data Size: 2KB - Virtual size: 56KB

.iplan Size: 4KB - Virtual size: 4KB

.run Size: 512B - Virtual size: 322B

.0dat Size: 100KB - Virtual size: 99KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 24KB - Virtual size: 23KB

.eplan
Size: 512B - Virtual size: 91B

.ainit
Size: 1024B - Virtual size: 868B

.rdbg
Size: 512B - Virtual size: 91B

.data
Size: 2KB - Virtual size: 56KB

.iplan
Size: 4KB - Virtual size: 4KB

.run
Size: 512B - Virtual size: 322B

.0dat
Size: 100KB - Virtual size: 99KB

.rsrc
Size: 2KB - Virtual size: 1KB