639337d6d46a4c0d2e4b093630e18605

General

Target

639337d6d46a4c0d2e4b093630e18605
Size

41KB
MD5

639337d6d46a4c0d2e4b093630e18605
SHA1

0047400cd19cb4669ab6697af7c615a36710a690
SHA256

324b654fc87b0faacf3aba49330663b2464660d1044f8068dd9bad7074f9b07a
SHA512

e196dd2dc49a3c676370aa1fd975fa0a5fc00cb3af87294072b7ca0496e44d794c1bfbfd681c67050c55459c2f21000b649ea19439fd26eeb4f27030299cd5a4
SSDEEP

768:wRmFMqqt1iIcI//zU+m3fy3XIikftFStILxxuEnL8tgJHiCPqObUXvu:cmuL1QnyHxk1F7rYwCklUXvu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
639337d6d46a4c0d2e4b093630e18605

Files

639337d6d46a4c0d2e4b093630e18605
.exe windows:4 windows x86 arch:x86

e3c8e958e3c2946467b35e6f9cc88cbc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetConsoleCursorMode
GetSystemTime
CommConfigDialogA
CancelIo
DosPathToSessionPathW
FindFirstChangeNotificationA
PeekConsoleInputW
VirtualProtect
VerifyVersionInfoW
FatalAppExitA
SetConsoleInputExeNameW
OpenWaitableTimerW
QueueUserAPC
DuplicateHandle
CreateFileA
IsBadWritePtr
GetConsoleFontInfo
EndUpdateResourceW
GetProcessHeap
CreateJobObjectW
FindResourceW
ReadConsoleOutputAttribute

user32

SendMessageW
RegisterLogonProcess
DdeGetQualityOfService
LoadAcceleratorsW
PrivateSetDbgTag
CreateDialogIndirectParamAorW
GetKeyNameTextA
UnpackDDElParam
GetKeyState
MessageBoxA
OpenClipboard
GetWindowDC
EnumDisplaySettingsExW
DestroyMenu
UserLpkTabbedTextOut
SystemParametersInfoW

gdi32

GdiGetSpoolMessage
Arc
PolyBezierTo
GetDeviceGammaRamp
LPtoDP
CheckColorsInGamut
FONTOBJ_pxoGetXform
GetTextAlign
GdiAlphaBlend
EngAcquireSemaphore
SetPixelV

comdlg32

CommDlgExtendedError
FindTextA
GetFileTitleA
ChooseFontA
ChooseColorW
dwOKSubclass
GetFileTitleW
GetOpenFileNameW
ReplaceTextW
ReplaceTextA
FindTextW
PrintDlgA
GetSaveFileNameW
GetOpenFileNameA
LoadAlterBitmap
PrintDlgExW
PrintDlgExA
ChooseColorA

Sections

.text
Size: 4KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e3c8e958e3c2946467b35e6f9cc88cbc

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

Sections

.text Size: 4KB - Virtual size: 1.0MB

.data Size: 34KB - Virtual size: 36KB

.idata Size: 2KB - Virtual size: 4KB

.text
Size: 4KB - Virtual size: 1.0MB

.data
Size: 34KB - Virtual size: 36KB

.idata
Size: 2KB - Virtual size: 4KB