59b57edbdef00afe1b261b22c881dddd

Sharing

Copy URL Twitter E-mail

General

Target

59b57edbdef00afe1b261b22c881dddd
Size

111KB
MD5

59b57edbdef00afe1b261b22c881dddd
SHA1

00cc59bb440fd4134ec22d9eee4c35528a8a2f6c
SHA256

870e1c40255ef39732808a69df6f5a6bb0d1c7e3afb9d2f0b134fe0afe18d8e3
SHA512

278754bfcd950a0979902113ca4447c878ddf00f07ebb3b9ec56b81f112a83f1dcf8173947c9dc4a28d545b93d677867211288a59e9168e1158ca0a13f6dc233
SSDEEP

1536:sFlX2AKQpKRxL/VbUFNUrRwlUPWoidPvVoMOiFuD1uFB3cpKoTWfbi0:2XxKQpKJ4MROUOTVoPsnFB3XoTybi0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59b57edbdef00afe1b261b22c881dddd

Files

59b57edbdef00afe1b261b22c881dddd
.exe windows:4 windows x86 arch:x86

8189989a4cea6d12bac2f4d1903d1c9f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

OleRun
CLSIDFromString
WriteClassStm
CoCreateInstanceEx
CoRegisterClassObject

user32

PeekMessageA
GetWindow
ShowWindow
SetWindowPlacement
IsDialogMessageA
DrawIcon
GetMenu
RegisterClassA
IntersectRect
DefMDIChildProcA
GetClipboardData
DispatchMessageW
OpenClipboard
wsprintfA
DestroyWindow
GetWindowRect
ChildWindowFromPoint
SetCursor
GetPropA
ScrollWindow
MoveWindow
GetSubMenu
GetKeyState
GetActiveWindow
SetWindowLongA
DestroyIcon
KillTimer
UnhookWindowsHookEx
EnumChildWindows
ReleaseDC
GetCursorPos
GetMessagePos
CheckMenuItem
SetForegroundWindow
DeleteMenu
GetScrollPos
ClientToScreen
LoadKeyboardLayoutA
GetWindowDC
DrawAnimatedRects
GetScrollRange
MessageBoxA
LoadIconA
CharLowerBuffA
CreateWindowExA
LoadCursorA
GetCursor
RemovePropA
InsertMenuA
GetMenuState
GetScrollInfo
GetIconInfo
InflateRect
InvalidateRect
MessageBeep
SetTimer
SetWindowPos
SetPropA
GetClientRect
EnableWindow
RedrawWindow
GetSysColorBrush
DrawTextA
CharToOemA
SetCapture
GetKeyboardState
SetWindowTextA
RegisterWindowMessageA
DestroyCursor
ShowOwnedPopups
BeginPaint
SetWindowLongW
GetClassLongA
IsRectEmpty
OemToCharA
DefWindowProcA
GetClassNameA
LoadStringA
GetWindowPlacement
PostMessageA
IsWindowVisible
CallNextHookEx
IsZoomed
DrawFrameControl
SetClipboardData
GetDCEx
TranslateMessage
SetWindowsHookExA
RegisterClipboardFormatA
GetKeyNameTextA
EnableScrollBar
SetScrollInfo
IsWindowUnicode
TranslateMDISysAccel
SetScrollPos
GetSystemMenu
AdjustWindowRectEx
GetDlgItem
OffsetRect
DestroyMenu
FillRect
GetLastActivePopup
FrameRect
ReleaseCapture
DefFrameProcA
IsIconic
CharUpperBuffA
SetScrollRange
GetClassInfoA
DispatchMessageA
ShowScrollBar
GetMenuItemCount
GetFocus
EmptyClipboard
CharNextA
GetSystemMetrics
PtInRect
GetWindowLongA
MapWindowPoints
GetDC
CreateIcon
PostQuitMessage
WaitMessage
GetCapture
GetWindowLongW
WindowFromPoint
SetMenuItemInfoA
GetForegroundWindow

gdi32

SelectObject
SetBkColor
BitBlt
GetObjectA
CreateDIBSection
GetDIBColorTable
CreateCompatibleBitmap
SetPixel

oleaut32

SysAllocStringLen
SysStringLen
VariantChangeType
RegisterTypeLib
SafeArrayPtrOfIndex
OleLoadPicture
SafeArrayGetElement

comdlg32

ChooseColorA

kernel32

SetLastError
GetCPInfo
lstrcpynA
GlobalAlloc
GlobalFindAtomA
GetTickCount
MulDiv
LoadLibraryExA
RaiseException
GetModuleHandleA
GetProcAddress
GetThreadLocale
MoveFileExA
CompareStringA
GetFileSize
GetDateFormatA
GetProcessHeap
ExitThread
LockResource
LoadLibraryA
LocalReAlloc
GetFileAttributesA
VirtualFree
GetStdHandle
FindClose
SizeofResource
Sleep
SetHandleCount
FormatMessageA
MoveFileA
LoadResource
InitializeCriticalSection
LocalAlloc
FindFirstFileA
GetModuleFileNameA
SetEvent
VirtualAllocEx
lstrcmpiA
DeleteFileA
GetLocalTime
FreeLibrary
GetStringTypeW
VirtualQuery
lstrcatA
GetSystemDefaultLangID
GlobalAddAtomA
GetCurrentThreadId
GetLastError
lstrcmpA
HeapAlloc
GetStringTypeA
GetUserDefaultLCID
EnumCalendarInfoA
ResetEvent
WideCharToMultiByte
CreateThread
GetCommandLineA
SetFilePointer
GetCurrentThread
lstrlenA
WriteFile
CreateFileA
FreeResource
HeapDestroy
GetLocaleInfoA
SetEndOfFile

msvcrt

log
memcpy
memmove
asin
mbstowcs

advapi32

RegEnumKeyA
RegEnumKeyExA
RegQueryValueExA
RegCreateKeyA

shell32

SHFileOperationA
SHGetFolderPathA
SHGetFileInfoA
SHGetDiskFreeSpaceA

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 623B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 314B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8189989a4cea6d12bac2f4d1903d1c9f

Headers

File Characteristics

Imports

ole32

user32

gdi32

oleaut32

comdlg32

kernel32

msvcrt

advapi32

shell32

Sections

.text Size: 32KB - Virtual size: 31KB

.idata Size: 1024B - Virtual size: 623B

.edata Size: 76KB - Virtual size: 75KB

.data Size: 512B - Virtual size: 314B

.text
Size: 32KB - Virtual size: 31KB

.idata
Size: 1024B - Virtual size: 623B

.edata
Size: 76KB - Virtual size: 75KB

.data
Size: 512B - Virtual size: 314B