6486829da68f444c85493d3bf6ac73d4

Sharing

Copy URL Twitter E-mail

General

Target

6486829da68f444c85493d3bf6ac73d4
Size

154KB
MD5

6486829da68f444c85493d3bf6ac73d4
SHA1

922497bcc61ae3ec733daa0cb47962a053db205e
SHA256

34cf2fff72d08a1ff1e712286655a826f2e46e6947a5a8910c147ec8bcd745ad
SHA512

ad4174bd0c9efdcc2c86cad53fdb5ef3f8e62dda46430ad73e6335381125aaa4b1e5c7af8c38570010de8d37e12172a6fcf1d6c215a90c91704cf3d6e4b4445c
SSDEEP

3072:SN5/lMR3r1hC3YBXtcbObBD0A40wb3r2RMBbdzLMk7W4S9+Dn15+M7Nz2x:l3rW3YB9VtrQb3r2m7XMpVS5+el

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6486829da68f444c85493d3bf6ac73d4

Files

6486829da68f444c85493d3bf6ac73d4
.exe windows:5 windows x86 arch:x86

b51bdaf4a6381bdc4dd90a4ef3b057e1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

gets
fprintf
_controlfp
bsearch
malloc
iswctype
mktime
qsort
tolower
isalnum
isspace
__set_app_type
calloc
__p__fmode
getenv
islower
system
fclose
memset
__p__commode
isupper
swprintf
wcscmp
strerror
_amsg_exit
_initterm
isdigit
strncpy
fgets
strncmp
perror
_ismbblead
iswprint
_XcptFilter
towupper
wcsrchr
_exit
wcstol
_cexit
strpbrk
vswprintf
strcoll
__setusermatherr
__getmainargs
wcstombs
ftell
fgetc
exit

comdlg32

GetOpenFileNameA
GetOpenFileNameW
GetFileTitleW
PageSetupDlgW
ReplaceTextW
GetSaveFileNameW

kernel32

FlushFileBuffers
SetThreadContext
DisconnectNamedPipe
SetThreadAffinityMask
SystemTimeToFileTime
GetACP
RegisterWaitForSingleObject
MapViewOfFile
HeapFree
CreateRemoteThread
OpenSemaphoreW
EnterCriticalSection
SetCurrentDirectoryW
GetFileAttributesW
HeapLock
CreateFileW
GetProcessHeap
GetStringTypeExW
ConnectNamedPipe
GetWindowsDirectoryA
VerifyVersionInfoW
CreateFileA
GetCurrentThread
DeleteCriticalSection
WinExec
GetLocalTime
GetModuleFileNameW
LocalFree
IsDBCSLeadByteEx
ConvertDefaultLocale
lstrcatA
GetTempFileNameA
GetCurrentThreadId
GetCommandLineA
DeleteAtom
LockFile
IsBadStringPtrW
GetOverlappedResult
CopyFileA
MoveFileA
SetThreadPriority
GetTempPathA
GlobalCompact
GetAtomNameA
SetHandleCount
FileTimeToLocalFileTime
GetModuleHandleA
HeapAlloc
SetFileTime
EnumResourceLanguagesA
MoveFileW
OpenEventA
GetFileInformationByHandle
OpenEventW
CompareFileTime
GetTimeZoneInformation
lstrcmpW
SetMailslotInfo
VirtualFree

shlwapi

StrToIntW

user32

WindowFromPoint
EnumChildWindows
RegisterHotKey
EnumWindows
GetWindowTextW
CharPrevW
IntersectRect
MapVirtualKeyExW
GetMessageW
LookupIconIdFromDirectory
keybd_event
GetDlgItemTextW
RegisterWindowMessageA
LoadBitmapW
InflateRect
GetMessagePos
VkKeyScanW
GetKeyNameTextW
FindWindowExA
RegisterClassExW
GetWindowDC
HideCaret
GetScrollInfo
CharUpperBuffW
CallWindowProcA
FindWindowA
MapDialogRect
GetClassInfoExW
SetPropW
GetDC
CreatePopupMenu
GetWindowRect
CharToOemBuffA
MessageBoxExA
AdjustWindowRectEx
SetSysColors
SystemParametersInfoA
CheckDlgButton
RegisterClassW
IsCharLowerA
WaitForInputIdle
SetWindowTextA
GetSubMenu
GetMenuItemCount
InsertMenuA
GetDlgCtrlID
CharNextExA
ReplyMessage
UpdateWindow
DialogBoxParamW
LoadStringA
MapVirtualKeyW
MonitorFromRect
FillRect
SendMessageTimeoutW
SendDlgItemMessageW
IsIconic
GetForegroundWindow
SetParent
PeekMessageA
MapVirtualKeyA
LoadBitmapA
ShowScrollBar
IsChild
InSendMessage
GetClassInfoExA
DrawIconEx
ExitWindowsEx
CreateDialogParamW
GetWindowModuleFileNameW
TileWindows
SetLastErrorEx
CharUpperBuffA
GetParent
EnumThreadWindows
MonitorFromPoint
GetMenu
IsZoomed
GetFocus
GetMessageExtraInfo
SetWindowLongA
InsertMenuW
GetCaretBlinkTime
wsprintfW
RegisterClassExA
LoadCursorA
GetSystemMenu
SetMenuItemInfoW
GetGUIThreadInfo
AttachThreadInput
SetRect
DrawFocusRect
ClientToScreen
CheckMenuItem
IsRectEmpty
MapWindowPoints
BeginPaint
GetMenuCheckMarkDimensions
IsMenu
wvsprintfW
GetDlgItemInt
CharPrevA
SetMenuDefaultItem
EnableScrollBar
GetKeyState
GetClipCursor
SetMenuItemBitmaps
GetDlgItem
SetCaretPos
AdjustWindowRect
CharUpperA
AllowSetForegroundWindow
PostQuitMessage
SendDlgItemMessageA
CharToOemA
UnionRect
ScrollWindow
DestroyAcceleratorTable
ReleaseDC
SwitchToThisWindow
SetForegroundWindow
GetWindowTextA
IsCharUpperA
SetScrollRange
GetKeyboardType
IsDialogMessageA
GetDCEx

Exports

Exports

?GenericOutputInfoYSUh@@YGK_KHE[D

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b51bdaf4a6381bdc4dd90a4ef3b057e1

Headers

File Characteristics

Imports

msvcrt

comdlg32

kernel32

shlwapi

user32

Exports

Exports

Sections

.text Size: 67KB - Virtual size: 66KB

.data Size: 15KB - Virtual size: 80KB

.rsrc Size: 69KB - Virtual size: 68KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 67KB - Virtual size: 66KB

.data
Size: 15KB - Virtual size: 80KB

.rsrc
Size: 69KB - Virtual size: 68KB

.reloc
Size: 2KB - Virtual size: 1KB