70d7edf93dfcaed905a546affcbe3831

Sharing

Copy URL

Twitter E-mail

General

Target

70d7edf93dfcaed905a546affcbe3831
Size

228KB
MD5

70d7edf93dfcaed905a546affcbe3831
SHA1

670d55426b2fe412d358f9221ce7bfd8e3f0cc93
SHA256

471722c9ee8048cdc1509d4690802aa6f332ec7e1da189b4b436d33f534728af
SHA512

7e28f1e587927f7f7f8351025e7adac3677b836af8fce4f83f4fba0fdfcc4b8eadedf0c42b8b9ed5f06730c9ae167769bc5a7a00943526f687c0541945e8d5c6
SSDEEP

6144:7/Q1+7/uoav99Kqrpbn8TqzhQU1UdCWsMc0qXasM8:7/QfVF93lbnJ+agdc7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70d7edf93dfcaed905a546affcbe3831

Files

70d7edf93dfcaed905a546affcbe3831
.exe windows:4 windows x86 arch:x86

6ddc7f2968346a852c13b52a7e897a21

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetRectEmpty
ClientToScreen
SetWindowTextA
SendMessageW
KillTimer
SetFocus
SendDlgItemMessageA
EnumThreadWindows
ReleaseDC
ValidateRect
GetClassNameW
DialogBoxParamW
CallNextHookEx
wsprintfA
DeleteMenu
PtInRect
InflateRect
DestroyWindow
LoadImageW
IsWindowEnabled
TranslateMessage
LoadIconW
GetSysColor
InvalidateRect
MessageBoxW

kernel32

SetLastError
GetACP
SetHandleCount
GetCurrentProcess
WriteFile
VirtualFree
TerminateProcess
GetProcessHeap
EnterCriticalSection
GetProcAddress
GetCurrentThreadId
SetFileAttributesW
CreateDirectoryW
QueryPerformanceFrequency
VirtualProtect
HeapCreate
GetCurrentThread
GetOEMCP
GetStringTypeW
MultiByteToWideChar
DisableThreadLibraryCalls
lstrlenW
SetUnhandledExceptionFilter
RtlUnwind
IsBadCodePtr
HeapReAlloc
InterlockedExchange
GetLastError
WideCharToMultiByte
GetLocaleInfoA
GlobalAlloc
InterlockedCompareExchange
lstrcmpW
MapViewOfFile
LoadLibraryW
WaitForSingleObject
SetStdHandle
FindResourceW
GetFileAttributesW
LCMapStringW
ExitProcess
lstrcpyW
GetCurrentProcessId
UnhandledExceptionFilter
CreateEventW
SetConsoleCP
LeaveCriticalSection
LoadResource
GetStartupInfoA
GetFullPathNameA
QueryPerformanceCounter
SetFilePointer
InterlockedDecrement
SetFileAttributesA
CloseHandle
lstrcatA
HeapAlloc
GetEnvironmentStrings
GetLocaleInfoW
FormatMessageW
DeleteCriticalSection
lstrcmpiW
GetModuleHandleA
GetStdHandle
GlobalUnlock
GetCurrentDirectoryA
GetCommandLineW
TlsGetValue
FreeLibrary
GetCommandLineA

msvcrt

malloc
_iob
memcpy
_exit
_onexit
_lock
_XcptFilter
realloc
_wcsicmp
??1type_info@@UAE@XZ
_adjust_fdiv
?terminate@@YAXXZ
_vsnwprintf
??3@YAXPAX@Z
_cexit
_amsg_exit
__CxxFrameHandler
qsort

gdi32

CreateFontIndirectW
GetPixel
CreateSolidBrush
SetROP2
SetBkMode
CreatePalette
SaveDC
StretchBlt
CreatePen

ole32

CLSIDFromProgID
CoTaskMemAlloc
CoInitialize
CoUninitialize
StringFromCLSID

advapi32

CloseServiceHandle
RegCreateKeyExW
AllocateAndInitializeSid
RegQueryInfoKeyW
RegDeleteValueA
RegCloseKey
AdjustTokenPrivileges
CryptReleaseContext

rpcrt4

RpcStringFreeW

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 174KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6ddc7f2968346a852c13b52a7e897a21

Headers

File Characteristics

Imports

user32

kernel32

msvcrt

gdi32

ole32

advapi32

rpcrt4

Sections

.text Size: 45KB - Virtual size: 45KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 174KB - Virtual size: 385KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 45KB - Virtual size: 45KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 174KB - Virtual size: 385KB

.rsrc
Size: 2KB - Virtual size: 2KB