646d8fc3936114c8941114a232ec1d37

Sharing

Copy URL Twitter E-mail

General

Target

646d8fc3936114c8941114a232ec1d37
Size

66KB
MD5

646d8fc3936114c8941114a232ec1d37
SHA1

79d4c6cc7663d3ab9cd488aef72a72d665534f45
SHA256

cf64c13c9fe85b66081f7437f5000027582aee8b0438de802bf28d8672f2ac7e
SHA512

f5b7022c77e1141b9a9d1d745e5781345dd591aa8088fcc286fa4d1f03d7a84927fc420b80f8996cc451fe04b0ddbab2b5aaf67c06f3aa8cc3437171e4c37239
SSDEEP

1536:Q5usQsyx9MMSTCFmhHNMZcn+Gxjb2Q0NC6JRTdRTn7KnmT6:83yvMM7geZcVp2RMi7emT6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
646d8fc3936114c8941114a232ec1d37

Files

646d8fc3936114c8941114a232ec1d37
.exe windows:5 windows x86 arch:x86

cdf348bdf70f3012bcfc2642435a9736

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MapVirtualKeyA
FindWindowW
ShowCursor
SetFocus
GetParent
GetPropW
FrameRect
SystemParametersInfoA
CopyImage
AdjustWindowRectEx
CreateIconFromResource
EnumThreadWindows
SetUserObjectInformationW
DragObject
GetWindow
SetWindowTextW
ScrollWindowEx
GetMessageExtraInfo
RegisterClassExW
GetSubMenu
IsWindowVisible
CreateCaret
DefFrameProcW
CharToOemA
GetClassLongW
GetFocus
ShowOwnedPopups
LoadAcceleratorsW
CreateDialogParamA
GetMenuState
CharToOemW
RegisterClassA
IsChild
LoadMenuA
BeginPaint
GetAsyncKeyState
GetWindowModuleFileNameW
ShowCaret
OffsetRect
LookupIconIdFromDirectory
InvalidateRgn
GetScrollPos
OpenInputDesktop
InflateRect
LoadIconW
FillRect
GetClassInfoW
EnableScrollBar
wvsprintfA
GetClassInfoExA
ChangeMenuW
PostThreadMessageA
EqualRect
GetDCEx
SetDlgItemInt
IsRectEmpty
SendMessageW
InsertMenuW
ClipCursor
KillTimer
GetMenuItemCount
SendMessageA
FindWindowA
DrawStateW
LoadStringA
GetGUIThreadInfo
SendMessageTimeoutA
GetClassInfoExW
GetKeyboardLayout
IsWindowEnabled
VkKeyScanW
SetPropW
CreateWindowExA
AttachThreadInput
CharNextExA
SendDlgItemMessageW
ToUnicodeEx
GetWindowDC
WaitMessage
SetScrollPos
GetWindowLongW
DestroyCursor
MessageBoxExA
DeleteMenu
SetScrollInfo
TabbedTextOutW
LoadStringW
GetIconInfo
DrawStateA
ScreenToClient
DrawMenuBar
InSendMessageEx
DrawTextA
PostThreadMessageW
GetMenuItemID
CharLowerA
SetScrollRange
GetUpdateRgn
CharUpperW
TranslateMessage
ReplyMessage
IsMenu
RemoveMenu
LoadAcceleratorsA
AppendMenuA
CallWindowProcA
GetMessageW
DialogBoxIndirectParamA
CharUpperBuffW
CreateAcceleratorTableW
LoadBitmapW
GetCaretBlinkTime
HiliteMenuItem
LockWindowUpdate
CharLowerBuffW
DestroyMenu
IsCharAlphaW
ShowScrollBar
DialogBoxParamA
GetWindowLongA
RegisterWindowMessageW
CharPrevW
SetWindowLongW
MessageBoxA
GetClipCursor

msvcrt

wcstoul
isupper
wcsstr
tolower
strerror
_controlfp
ungetc
__set_app_type
__p__fmode
__p__commode
wcspbrk
free
getenv
islower
putchar
_amsg_exit
mbstowcs
memset
_initterm
strpbrk
strncmp
_ismbblead
fread
_XcptFilter
isalpha
wcstok
localtime
swscanf
wcsncmp
putc
iswctype
fgetc
_exit
swprintf
bsearch
_cexit
fgets
__setusermatherr
wcstol
getc
strcpy
wcscat
isalnum
fprintf
__getmainargs
atol
strtol
wcscmp

shlwapi

StrToIntW

kernel32

lstrcmpA
GetThreadContext
SetFilePointer
ReadFile
GetFileTime
MoveFileExW
FoldStringW
SetEndOfFile
GetProcessHeap
FindFirstChangeNotificationW
SystemTimeToFileTime
HeapUnlock
GetShortPathNameW
CreateMutexA
HeapCreate
GetSystemDefaultLangID
GlobalAddAtomA
SetNamedPipeHandleState
IsDBCSLeadByte
LoadLibraryW
QueryDosDeviceW
GetCurrentDirectoryW
GetHandleInformation
GlobalHandle
CreateRemoteThread
GetCurrentThreadId
GetFileAttributesW
ExitThread
SetSystemTimeAdjustment
SizeofResource
GetFileAttributesA
CreateSemaphoreW
OpenEventA
MoveFileA
SetThreadExecutionState
UnhandledExceptionFilter
GetSystemDirectoryW
SearchPathW
LeaveCriticalSection
GetACP
PulseEvent
GetModuleHandleA
OpenFile
WaitForMultipleObjects
HeapValidate
HeapFree
SetWaitableTimer
GlobalReAlloc
SetPriorityClass
LocalUnlock
CreateWaitableTimerA
HeapAlloc
WaitForSingleObjectEx
LocalAlloc
FormatMessageW
GetFileType
GlobalUnlock

Exports

Exports

?GenericOutputInfoYSUh@@YGK_KHE[D

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cdf348bdf70f3012bcfc2642435a9736

Headers

File Characteristics

Imports

user32

msvcrt

shlwapi

kernel32

Exports

Exports

Sections

.text Size: 30KB - Virtual size: 29KB

.data Size: 14KB - Virtual size: 41KB

.rsrc Size: 19KB - Virtual size: 18KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 30KB - Virtual size: 29KB

.data
Size: 14KB - Virtual size: 41KB

.rsrc
Size: 19KB - Virtual size: 18KB

.reloc
Size: 2KB - Virtual size: 1KB