66d75670811158e9c3b1d9e22e5b738c

Sharing

Copy URL Twitter E-mail

General

Target

66d75670811158e9c3b1d9e22e5b738c
Size

444KB
MD5

66d75670811158e9c3b1d9e22e5b738c
SHA1

48b99364a1838cfce5e8ef5c7037beac47b05a07
SHA256

4ee8297f8b3d6c6165777613f8d9e9dd0b8313eb9a25249a6c5532f155d18470
SHA512

5e88b37b254a43d8a56b4cf6f247430d4d520cf14179c38bf3ae1108c7b49996da917595db2d6952eac857269af3f02ce61440467b7e699a6bf6e52415e5bdf6
SSDEEP

6144:IpSsvxlJNpklIP68x0+36ynotp256+srVlQ5THpCSn+L6BI0Dx+e81KH+xZ8o4pQ:I4cz3klIP6HunoL2zDkoSMxh88+zu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66d75670811158e9c3b1d9e22e5b738c

Files

66d75670811158e9c3b1d9e22e5b738c
.exe windows:4 windows x86 arch:x86

437517e0dde1b0cfbace3fd167efb234

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindow
GetDCEx
RegisterClassA
DdeReconnect
GetAsyncKeyState
RegisterClassExA
FindWindowW
SubtractRect
GetUpdateRect
CharPrevExA
UnloadKeyboardLayout
SetCapture
GetDesktopWindow
GetKBCodePage
DefMDIChildProcW
GetScrollRange
GetMenuCheckMarkDimensions

shell32

SHGetSpecialFolderPathW
SHBrowseForFolderW
SHBrowseForFolderA
DragQueryFileAorW
DragQueryFileA

comctl32

InitCommonControlsEx

kernel32

FlushFileBuffers
VirtualQuery
GetStringTypeW
TlsAlloc
WideCharToMultiByte
GetTickCount
ReadConsoleOutputAttribute
SetConsoleCtrlHandler
GetCurrentThread
SetFilePointer
GetCPInfo
GetProcAddress
LoadLibraryA
EnterCriticalSection
CreateFileA
WriteConsoleA
TlsFree
GetCurrentThreadId
GetLocaleInfoA
InterlockedExchange
GetOEMCP
MultiByteToWideChar
CreateMutexA
DeleteCriticalSection
GetStringTypeA
InterlockedDecrement
FreeEnvironmentStringsW
VirtualAlloc
OpenMutexA
GetCurrentProcess
VirtualFree
GetTimeFormatA
SetEnvironmentVariableA
HeapCreate
HeapDestroy
GetEnvironmentStrings
LeaveCriticalSection
HeapSize
HeapReAlloc
TerminateProcess
GetConsoleMode
GetStdHandle
GetSystemTimeAsFileTime
GetCommandLineA
UnlockFileEx
GetLocaleInfoW
GetModuleHandleA
HeapFree
FindFirstFileExA
GetTimeZoneInformation
GetDateFormatA
IsValidCodePage
OpenProcess
GetModuleHandleW
RtlUnwind
SetUnhandledExceptionFilter
InterlockedIncrement
SetStdHandle
CompareStringW
GetLastError
ReadFile
WriteConsoleW
GetFileType
GetConsoleOutputCP
GetEnvironmentStringsW
IsValidLocale
SetLastError
SetHandleCount
FreeLibrary
LCMapStringA
WriteFile
FreeEnvironmentStringsA
TlsGetValue
EnumSystemLocalesA
UnhandledExceptionFilter
IsDebuggerPresent
CompareStringA
CloseHandle
HeapAlloc
InitializeCriticalSectionAndSpinCount
GetStartupInfoA
LCMapStringW
SetConsoleMode
Sleep
ExitProcess
GetCurrentProcessId
QueryPerformanceCounter
GetACP
GetUserDefaultLCID
GetConsoleCP
TlsSetValue
lstrcpynA
GetModuleFileNameA

Sections

.text
Size: 214KB - Virtual size: 214KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 212KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

437517e0dde1b0cfbace3fd167efb234

Headers

File Characteristics

Imports

user32

shell32

comctl32

kernel32

Sections

.text Size: 214KB - Virtual size: 214KB

.rdata Size: 9KB - Virtual size: 23KB

.data Size: 212KB - Virtual size: 211KB

.rsrc Size: 7KB - Virtual size: 7KB

.text
Size: 214KB - Virtual size: 214KB

.rdata
Size: 9KB - Virtual size: 23KB

.data
Size: 212KB - Virtual size: 211KB

.rsrc
Size: 7KB - Virtual size: 7KB