65caa2917da7c4b72b9f7548fa119fe7

Sharing

Copy URL Twitter E-mail

General

Target

65caa2917da7c4b72b9f7548fa119fe7
Size

72KB
MD5

65caa2917da7c4b72b9f7548fa119fe7
SHA1

925363ccd4f2be9675c4bec1d9dba482e66f07ba
SHA256

0055c6cb2fba61ef21e0fef4592efae742b7d9f6f192760680658e4562cf4ab8
SHA512

c62b3404fa4211f3c1bfec02ecb9fa7ef691ae36bd9467274e03b6c1e00ba2b09383b1156293affb32dc3bc9126c70c544c2044cebdc51df054aabd1f8e5ea20
SSDEEP

768:xDkfWemN0AQn7N6c2V7RfPrkHr8fxCU3imrGf+DmjpiMH19kF4x4UwNsQd4imL:qfWeK0tgc2VVLpffqHjpp19VxRw6QLmL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65caa2917da7c4b72b9f7548fa119fe7

Files

65caa2917da7c4b72b9f7548fa119fe7
.exe windows:4 windows x86 arch:x86

16e2b3e20238008b693eb578d1ea4717

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalDeleteAtom
GetProcessHeap
IsBadReadPtr
DeleteFileA
ExitProcess
GlobalAlloc
WriteFile
RaiseException
WaitForSingleObject
ReadFile
lstrlenA
GetTickCount
GetCommandLineW
GetUserDefaultLCID
VirtualAlloc
GlobalFindAtomA
HeapAlloc
LoadLibraryA
LocalAlloc
GetCurrentProcessId
VirtualQuery
GetLastError
GetLocaleInfoA

user32

RegisterWindowMessageA
GetMenuStringA
SetScrollPos
SendMessageW
DispatchMessageW
SetWindowsHookExA
IsDlgButtonChecked
CharNextW
MsgWaitForMultipleObjects
GetPropA
LoadIconA
GetKeyboardLayout
DispatchMessageA
SetParent
CallWindowProcA
GetWindowLongW
SetScrollInfo
DefFrameProcA
SetClassLongA
UpdateWindow
GetLastActivePopup
KillTimer
IsCharUpperA
GetIconInfo
SetPropA
RemovePropA
DefMDIChildProcA
GetSystemMenu
IsChild
ClientToScreen
IsWindow
GetWindowPlacement
GetKeyState
TranslateMDISysAccel
GetSysColorBrush
DrawFrameControl
PostMessageA
GetKeyboardState
IsZoomed
GetSysColor
GetTopWindow
CharLowerBuffA
BeginPaint
EqualRect
IsWindowUnicode
TranslateMessage
wsprintfA
FindWindowA
SetRect
GetWindowTextA
DrawIcon
GetClientRect
GetScrollPos
EnumWindows
SetTimer
GetWindowLongA
SetCursor
PtInRect
GetMenu
DrawMenuBar
MapVirtualKeyA
PostQuitMessage
ScreenToClient
InsertMenuItemA
GetWindowRect
EndPaint
ActivateKeyboardLayout
CreatePopupMenu
WindowFromPoint
SetCapture
DrawTextA
GetClassInfoA
GetActiveWindow
GetWindowTextLengthA
DestroyMenu
SetWindowPos
SetMenu
IsWindowEnabled
ShowWindow
DefWindowProcA
ShowScrollBar
InvalidateRect
GetKeyboardLayoutList
GetMenuItemInfoA
InsertMenuA
AdjustWindowRectEx
ScrollWindow
IsDialogMessageW
SetWindowTextA
DestroyCursor
LoadStringA
GetCursorPos
RedrawWindow
UnregisterClassA
SendMessageA
IsIconic
GetKeyboardLayoutNameA
SetFocus
CallNextHookEx
EnumThreadWindows
DrawEdge
GetDesktopWindow
DestroyWindow
EnableMenuItem
RegisterClipboardFormatA
GetFocus
EmptyClipboard
IsMenu
GetMenuItemCount
LoadKeyboardLayoutA
GetForegroundWindow
CharUpperBuffA
SetClipboardData
GetMenuState
DestroyIcon

gdi32

GetDIBColorTable
SelectObject
SelectPalette
CreateFontIndirectA

ole32

CoRevokeClassObject
CLSIDFromProgID

comdlg32

ChooseColorA
GetFileTitleA
GetOpenFileNameA

Exports

Exports

lSgk9k4tn@12
qWST4fDOEOaPp@16
yoDcC8vk_F
_Nf3jnN@20
_d420jRrL@12

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

16e2b3e20238008b693eb578d1ea4717

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

comdlg32

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 5KB - Virtual size: 37KB

.data Size: 55KB - Virtual size: 54KB

.rsrc Size: 1024B - Virtual size: 1020B

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 5KB - Virtual size: 37KB

.data
Size: 55KB - Virtual size: 54KB

.rsrc
Size: 1024B - Virtual size: 1020B