587da3491827dbafdcb4e6b26edea35a

Sharing

Copy URL Twitter E-mail

General

Target

587da3491827dbafdcb4e6b26edea35a
Size

975KB
MD5

587da3491827dbafdcb4e6b26edea35a
SHA1

6ca5c311c769ba7277885ab8e04fbb174d21fb0a
SHA256

eacdb267da12e3ce121c464d38f5006b6f3cf92564da833d26f574387dfd49b4
SHA512

a4eaf8fd43f2b3be6bc40d086c1cd51316dcbdb680c1022fe7507d5d67077f5bd444c927b1a4de0fa5c5897fcd0b4d87e2244446154d10ecbaaf655650366275
SSDEEP

6144:uWAIsOLTEcDpn9IkQFqgrHojg6aH+LQtghdqffvJ:+IsOnNp1V8ojg3IQ8UvJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
587da3491827dbafdcb4e6b26edea35a

Files

587da3491827dbafdcb4e6b26edea35a
.exe windows:4 windows x86 arch:x86

cb58b578000ed85c59a84104ea320735

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress

user32

GetKeyboardType
LoadStringA
MessageBoxA
CharNextA
CreateWindowExA
WindowFromPoint
WinHelpA
WaitMessage
UpdateWindow
UnregisterClassA
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoA
ShowWindow
ShowScrollBar
ShowOwnedPopups
ShowCursor
SetWindowsHookExA
SetWindowTextA
SetWindowPos
SetWindowPlacement
SetWindowLongA
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropA
SetParent
SetMenuItemInfoA
SetMenu
SetForegroundWindow
SetFocus
SetCursor
SetClipboardData
SetClassLongA
SetCapture
SetActiveWindow
SendMessageA
ScrollWindow
ScreenToClient
RemovePropA
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageA
RegisterClipboardFormatA
RegisterClassA
RedrawWindow
PtInRect
PostQuitMessage
PostMessageA
PeekMessageA
OpenClipboard
OffsetRect
OemToCharA
MsgWaitForMultipleObjects
MessageBeep
MapWindowPoints
MapVirtualKeyA
LoadKeyboardLayoutA
LoadIconA
LoadCursorA
LoadBitmapA
KillTimer
IsZoomed
IsWindowVisible
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageA
IsClipboardFormatAvailable
IsChild
InvalidateRect
IntersectRect
InsertMenuItemA
InsertMenuA
InflateRect
GetWindowThreadProcessId
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongA
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropA
GetParent
GetWindow
GetMessageTime
GetMessagePos
GetMenuStringA
GetMenuState
GetMenuItemInfoA
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextA
GetIconInfo
GetForegroundWindow
GetFocus
GetDlgItem
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardData
GetClientRect
GetClassNameA
GetClassInfoA
GetCapture
GetActiveWindow
FrameRect
FindWindowA
FillRect
EqualRect
EnumWindows
EnumThreadWindows
EnumClipboardFormats
EndPaint
EndDeferWindowPos
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextA
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DeferWindowPos
DefWindowProcA
DefMDIChildProcA
DefFrameProcA
CreatePopupMenu
CreateMenu
CreateIcon
CloseClipboard
ClientToScreen
ChildWindowFromPoint
CheckMenuItem
CallWindowProcA
CallNextHookEx
BeginPaint
BeginDeferWindowPos
CharLowerBuffA
CharLowerA
CharUpperBuffA
CharToOemA
AdjustWindowRectEx
ActivateKeyboardLayout
DrawTextExW
IMPGetIMEA
GetPropW
PostMessageW
DialogBoxParamA
CreateWindowStationA
DrawStateW
RegisterShellHookWindow
RemovePropW
OpenWindowStationW
LoadIconW
IsCharLowerW
GetDialogBaseUnits
GetInputState
AnyPopup
OpenIcon
GetThreadDesktop
VkKeyScanA

gdi32

UnrealizeObject
StretchBlt
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetMapMode
SetEnhMetaFileBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SelectPalette
SelectObject
SelectClipRgn
SaveDC
RoundRect
RestoreDC
Rectangle
RectVisible
RealizePalette
Polyline
PlayEnhMetaFile
PatBlt
MoveToEx
MaskBlt
LineTo
LPtoDP
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetTextMetricsA
GetTextExtentPoint32A
GetSystemPaletteEntries
GetStockObject
GetPixel
GetPaletteEntries
GetObjectA
GetFontLanguageInfo
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileDescriptionA
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
ExtTextOutA
ExcludeClipRect
Ellipse
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreatePenIndirect
CreatePalette
CreateHalftonePalette
CreateFontIndirectA
CreateEnhMetaFileA
CreateDIBitmap
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileA
CloseEnhMetaFile
BitBlt
AddFontResourceA
GdiComment
PATHOBJ_bEnum
GetMetaFileBitsEx
EngPaint
GetTextMetricsW
SelectBrushLocal
PtInRegion
ExtFloodFill
SelectClipPath
EngCreateSemaphore
EngDeleteClip
FONTOBJ_vGetInfo
EngFillPath
GdiQueryFonts
GdiEntry9
GdiStartPageEMF
bInitSystemAndFontsDirectoriesW
EngAcquireSemaphore
PATHOBJ_vGetBounds
CreateFontIndirectW
GdiIsMetaPrintDC
GetCharWidth32W
GdiCreateLocalMetaFilePict
CreateDIBPatternBrushPt
GetTextColor
EngUnlockSurface
GetGlyphOutlineWow
FONTOBJ_cGetGlyphs
EnumFontFamiliesA
GetEUDCTimeStampExW
GdiGetLocalFont
EngLoadModule
StrokeAndFillPath
ModifyWorldTransform
SetMetaFileBitsEx
SetColorSpace
GetLogColorSpaceW
RectInRegion
AbortPath
GetTextCharacterExtra
GdiFlush
CreatePatternBrush

comdlg32

GetSaveFileNameA
GetOpenFileNameA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegEnumValueA
RegDeleteValueA
RegCreateKeyExA
RegOpenKeyW

shell32

SHGetDiskFreeSpaceExW
SHCreateDirectoryExA
DragQueryPoint
SHFileOperationW
ShellAboutA
SHBindToParent
SHCreateProcessAsUserW
SHEmptyRecycleBinW
SHGetDiskFreeSpaceA
SHChangeNotify
SHCreateDirectoryExW

shlwapi

StrCmpNW

Sections

.text
Size: 246KB - Virtual size: 245KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data3
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 694KB - Virtual size: 693KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cb58b578000ed85c59a84104ea320735

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

shlwapi

Sections

.text Size: 246KB - Virtual size: 245KB

.data3 Size: 1024B - Virtual size: 700B

.data2 Size: 1024B - Virtual size: 700B

.data Size: 694KB - Virtual size: 693KB

.rsrc Size: 32KB - Virtual size: 32KB

.text
Size: 246KB - Virtual size: 245KB

.data3
Size: 1024B - Virtual size: 700B

.data2
Size: 1024B - Virtual size: 700B

.data
Size: 694KB - Virtual size: 693KB

.rsrc
Size: 32KB - Virtual size: 32KB