56ba590c5fe5ef4e13f28501b5fc0b5b

Sharing

Copy URL Twitter E-mail

General

Target

56ba590c5fe5ef4e13f28501b5fc0b5b
Size

142KB
MD5

56ba590c5fe5ef4e13f28501b5fc0b5b
SHA1

a2697d61882274f264fd8c3c4b904254fa6bf3ce
SHA256

b12ba286b34ae4ae0d7305962460127c97ec4c45bd8ff4b371f01c8ea798a062
SHA512

205fc1d0bae04e4bb88f816fa11d4b3935303fbb5e0e2c16db0c9fc317f31134ba0dabeb1d06fcfebde64f774b9c5955dce0cbe54ac5f3df2bacf7811887e31a
SSDEEP

3072:wDGDvq7vHFlrdnrvHqljnOLDt45cZ+1Oz131eQ8hHrcVfo:fEHFxVvHeoDtUcZ+ox1eVBrc9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56ba590c5fe5ef4e13f28501b5fc0b5b

Files

56ba590c5fe5ef4e13f28501b5fc0b5b
.exe windows:5 windows x86 arch:x86

b84e7850a9b4dbe150e700185d6f2ffc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_GetIcon
ImageList_AddMasked
CreateToolbarEx
ImageList_Create
ImageList_ReplaceIcon
CreatePropertySheetPageW

gdi32

GetCurrentObject
PatBlt
GetRgnBox
RealizePalette
CreateFontIndirectA
CreateSolidBrush
GetTextFaceW
StartDocW
CreateBitmap
ResizePalette
PtInRegion
SetBitmapBits
AddFontResourceW
OffsetRgn
GetTextMetricsW
GetMapMode
SetBkMode
SetBkColor
ExcludeClipRect
SetBrushOrgEx
GetFontData
ScaleViewportExtEx
SetWindowExtEx
TextOutW
GetPixel
CreateCompatibleBitmap
CreateBitmapIndirect
RoundRect
SetPaletteEntries
SelectClipRgn
CreatePolygonRgn
CreatePatternBrush
LineDDA
CreateRectRgnIndirect
GetTextCharsetInfo
Escape
SetDIBitsToDevice
GetDIBits
CombineRgn
GetDeviceCaps
GetTextColor
FillRgn
SetBitmapDimensionEx
PathToRegion
SetViewportExtEx
GetPaletteEntries
CreatePen
GetStockObject

user32

DrawIcon
DefDlgProcW
CharUpperBuffW
GetMenuItemRect
ReleaseDC
GetMenuItemInfoW
GetMenuItemCount
LoadCursorW
CharPrevA
DispatchMessageW
DialogBoxParamA
GetShellWindow
RedrawWindow
GetDlgItemTextA
GetKeyState
PeekMessageA
ClientToScreen
CreateDialogIndirectParamW
wsprintfA
OpenDesktopW
RemovePropW
IsDialogMessageA
GetSystemMetrics
SetPropW
ClipCursor
GetSubMenu
SendDlgItemMessageA
CharPrevW
IsCharAlphaW
CreatePopupMenu
GetTopWindow
SetDlgItemInt
GetClassInfoA
GetKeyboardLayoutNameW
GetWindow
ScreenToClient
SetScrollInfo
wsprintfW
GetKeyboardLayoutList
SetUserObjectInformationW
DefFrameProcW
InsertMenuA
CharLowerA
WaitMessage
GetClipCursor
mouse_event
SetActiveWindow
ValidateRect
ShowScrollBar
SetMenuItemBitmaps
InternalGetWindowText
GetDCEx
DialogBoxParamW
RegisterClassA
SetWindowPos
GetMessageExtraInfo
IsDlgButtonChecked
DispatchMessageA
SetDlgItemTextA
DrawFocusRect
ChildWindowFromPoint
GetMessageW
IsWindowEnabled
GetAltTabInfoW
AdjustWindowRect
SwitchToThisWindow
EnumWindows
GetMessageA
TrackPopupMenuEx
GetClientRect
MoveWindow
EnumThreadWindows
GetWindowTextA
DeferWindowPos
GetNextDlgGroupItem
GetSysColorBrush
GetMonitorInfoW
SetMenuItemInfoW
MapVirtualKeyA
DrawAnimatedRects
SystemParametersInfoA
CheckMenuRadioItem
GetWindowPlacement
GetSysColor
GetKeyNameTextW
LockWindowUpdate
TabbedTextOutW
GetClassLongW
ScrollWindow
GetMessagePos
CharNextW
SetRectEmpty
DialogBoxIndirectParamW
RegisterClassExA
ShowWindowAsync
DialogBoxIndirectParamA
InsertMenuItemW
SetDlgItemTextW
FindWindowExW
OffsetRect
MonitorFromRect
SetRect
SetCursorPos
GetMenuCheckMarkDimensions
GetMenu
UnloadKeyboardLayout
TranslateMessage
CreateDialogParamW
DrawTextExW
IsDialogMessageW
DrawTextW
CharNextA
LookupIconIdFromDirectory
GetUpdateRgn
CallWindowProcA
LoadIconA
GetParent
MapVirtualKeyExW
InSendMessageEx

msvcrt

floor
fgets
vsprintf
_controlfp
free
bsearch
isdigit
fseek
strstr
vswprintf
__set_app_type
setvbuf
__p__fmode
calloc
__p__commode
wcsncmp
strspn
strcpy
_amsg_exit
wcstombs
_initterm
realloc
fflush
islower
_acmdln
exit
_ismbblead
_XcptFilter
iswdigit
strncpy
printf
mbtowc
strcoll
isspace
swscanf
_exit
iswctype
setlocale
isalnum
isprint
_cexit
fclose
__setusermatherr
sscanf
fputs
iswspace
atoi
strrchr
__getmainargs

kernel32

SetEndOfFile
GetShortPathNameW
GetModuleHandleA
MoveFileA
TlsGetValue
AddAtomW
GetCommState
DefineDosDeviceW
FindFirstFileW
LocalSize
SetFileApisToOEM
VirtualProtect
FindResourceExA
FoldStringW
lstrlenW
GetModuleFileNameW
OpenEventW
FindNextChangeNotification
CloseHandle
lstrcmpW
DeleteFileW
GetLocaleInfoA
ReleaseSemaphore
GetCommandLineA
LocalLock
OpenSemaphoreW
LockFile
EnterCriticalSection
QueryPerformanceCounter
GetComputerNameExW
SetSystemTime
SetNamedPipeHandleState
FindFirstFileA
GetTempFileNameW
GetThreadPriority
GetWindowsDirectoryA
GlobalAlloc
HeapFree
WaitForSingleObjectEx
UnhandledExceptionFilter
LoadLibraryW
CopyFileW
SetCommBreak
GetCommTimeouts
SetThreadContext
FindResourceW
lstrcpynA
CreateMutexA
SetCommState
PulseEvent
DisconnectNamedPipe
GetThreadTimes
HeapReAlloc
AreFileApisANSI

comdlg32

CommDlgExtendedError
GetSaveFileNameW
PrintDlgExW
ChooseFontW
PrintDlgW

Exports

Exports

?RtlWindowInfoOld@@YGPAXPAK]A
?FormatScreenOld@@YGXPAK]A
?BitCounterArrayIdeDunAs@@YGKGE@Z

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b84e7850a9b4dbe150e700185d6f2ffc

Headers

File Characteristics

Imports

comctl32

gdi32

user32

msvcrt

kernel32

comdlg32

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 20KB

.data Size: 4KB - Virtual size: 128KB

.rsrc Size: 115KB - Virtual size: 115KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 20KB - Virtual size: 20KB

.data
Size: 4KB - Virtual size: 128KB

.rsrc
Size: 115KB - Virtual size: 115KB

.reloc
Size: 1KB - Virtual size: 1KB