5c4aa7a168e15a2cd543640e92218923

Sharing

Copy URL Twitter E-mail

General

Target

5c4aa7a168e15a2cd543640e92218923
Size

243KB
MD5

5c4aa7a168e15a2cd543640e92218923
SHA1

93d9cd5c82fc1043cacdc93d5a5781f77980f416
SHA256

ab481c5e2beadc6c31f4ca756f9f6bd439a637bf9280b09df6b8a22158fe43d9
SHA512

a38ebf1d2017ad88ba78f384b37476e2090983ac930d4bf633b48d7a29ee06a3051f952fb587236b07723468feb2e32c208974d553ecbba7da3c1c9c69dd9884
SSDEEP

6144:+zaQlcFpfPHbJvdWYoOvt2yDUeBwCN7bb83+6ynFO:2JlcHfP7JlnoOF7D76AFO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Ah Ah Follow I Follow You Deep Sea Baby I Follow ....exe

Files

5c4aa7a168e15a2cd543640e92218923
.zip
Ah Ah Follow I Follow You Deep Sea Baby I Follow ....exe
.exe windows:5 windows x86 arch:x86

c932bf6f2625453f97857223b51344f0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strcpy
ungetc
clearerr
wcsncmp
_controlfp
malloc
__set_app_type
system
__p__fmode
calloc
__p__commode
strtoul
vsprintf
wcspbrk
_amsg_exit
_initterm
isalnum
fgetc
_ismbblead
bsearch
strchr
_XcptFilter
strcoll
time
localtime
wcstoul
wcscpy
putchar
fputc
wcscat
strcspn
fseek
mbstowcs
towlower
qsort
swscanf
_exit
wcstombs
_cexit
wcsncpy
isprint
__setusermatherr
vswprintf
__getmainargs

gdi32

SetDIBColorTable
SetBrushOrgEx
CombineRgn
GetBkMode
SelectPalette
CreateBrushIndirect
CreatePolygonRgn
CreateHatchBrush
GetSystemPaletteUse
CreateFontW
CreateFontIndirectW
Polyline
GetTextMetricsA
TranslateCharsetInfo
UnrealizeObject
GetDeviceCaps
GetROP2
EnumFontFamiliesExW
CreateDiscardableBitmap
SetDIBits
DeleteDC
GetViewportOrgEx
GetSystemPaletteEntries
WidenPath
GetObjectA
GetTextMetricsW
GetPixel
RemoveFontResourceW
RectVisible
GetMapMode
StretchBlt
GetNearestPaletteIndex
SetDIBitsToDevice
GetLayout
SetTextColor
CreateEllipticRgnIndirect
GetTextColor
GetTextFaceW
CreatePalette
SetPixel
SetAbortProc
ExcludeClipRect
Ellipse
ResizePalette
SelectClipRgn
Polygon
CreateHalftonePalette

shlwapi

PathFileExistsA

kernel32

FileTimeToSystemTime
OpenFile
SearchPathA
DeleteCriticalSection
GetPriorityClass
CancelWaitableTimer
lstrlenA
GetAtomNameW
SetThreadAffinityMask
GlobalAlloc
SetHandleCount
GetTempPathW
GlobalGetAtomNameW
CreateEventA
SuspendThread
GetThreadContext
lstrcmpW
IsBadReadPtr
lstrcpynW
CreateRemoteThread
GetCurrentDirectoryW
GetShortPathNameA
CreateFileA
EnumResourceNamesA
GetModuleFileNameW
RtlUnwind
LocalAlloc
WinExec
GetModuleHandleA
GetLastError
GetComputerNameA
GetThreadLocale
GetFullPathNameW
RemoveDirectoryW
MapViewOfFile
SetTimerQueueTimer
GetHandleInformation
GetFileAttributesExA
LockFile
AreFileApisANSI
FindResourceExW
FindClose
SetMailslotInfo
FreeLibrary
ReadFile
SetThreadPriority
GetTempPathA
DeviceIoControl
FileTimeToLocalFileTime
CreateWaitableTimerA
GetVersion

user32

CheckMenuRadioItem
SetForegroundWindow
GetScrollPos
MapDialogRect
ChangeMenuW
GetClassLongW
MapVirtualKeyExW
FindWindowExA
DispatchMessageA
IsCharAlphaNumericW
CreateCaret
DrawFrameControl
CloseDesktop
DialogBoxParamW
ArrangeIconicWindows
EqualRect
LoadStringA
PeekMessageA
CharUpperW
GetDoubleClickTime
IsWindowVisible
DrawTextW
DrawMenuBar
HiliteMenuItem
TileWindows
CharLowerBuffW
CreateWindowExA
SetWindowTextA
SetRectEmpty
FrameRect
GetMessageExtraInfo
SetUserObjectInformationW
DestroyAcceleratorTable
GetMenuItemCount
keybd_event
OpenIcon
SetActiveWindow
SetSysColors
LoadMenuA
CharNextW
MessageBoxA
TranslateAcceleratorW
DefFrameProcA
SystemParametersInfoA
RegisterClassW
MessageBoxExA
CharLowerW
DialogBoxParamA
GetMessageW
SetPropW
FindWindowA
IsChild
CopyAcceleratorTableW
EnableWindow
SetScrollInfo
LoadStringW
CharToOemW
GetClipCursor
SetMenuDefaultItem
InvalidateRect
LoadBitmapA
GetForegroundWindow
DrawStateW
TranslateAcceleratorA
IsWindow
SendInput
KillTimer
LoadImageA
GetKeyboardType
DrawIcon
TabbedTextOutW
GetWindow
InflateRect
MessageBoxW
SetCursor
ToUnicodeEx
IsRectEmpty
GetClassLongA
IsWindowEnabled
SwitchToThisWindow
GetDCEx
LoadCursorA
InvalidateRgn
IsWindowUnicode
OffsetRect
CheckRadioButton
RegisterWindowMessageW
RegisterHotKey
IntersectRect
OpenInputDesktop
RegisterClassA
SetWindowRgn
LoadMenuW
GetMenuCheckMarkDimensions
DefWindowProcA
AdjustWindowRectEx
AllowSetForegroundWindow
GetWindowTextLengthW
IsIconic
SetMenuItemInfoW
SetMenu
ClipCursor
LookupIconIdFromDirectory
CharUpperA
LockWindowUpdate
GetMenuStringA
MapWindowPoints
GetTopWindow
CreateDialogParamW
GetNextDlgGroupItem
PtInRect

Exports

Exports

?HidePointerOriginal@@YGFKPAIPAD<V

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 134KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ec8ace6e

Sharing

General

Malware Config

Signatures

Files

c932bf6f2625453f97857223b51344f0

Headers

File Characteristics

Imports

msvcrt

gdi32

shlwapi

kernel32

user32

Exports

Exports

Sections

.text Size: 65KB - Virtual size: 65KB

.data Size: 134KB - Virtual size: 201KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 65KB - Virtual size: 65KB

.data
Size: 134KB - Virtual size: 201KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 2KB - Virtual size: 1KB