703597f53573e13bc944a3a41d4f9093

Sharing

Copy URL Twitter E-mail

General

Target

703597f53573e13bc944a3a41d4f9093
Size

191KB
MD5

703597f53573e13bc944a3a41d4f9093
SHA1

3894371be4a4ac4c5600ad29afd8b992859df3b4
SHA256

23c806f19b7b2798f06432c601e3cafc1b3c058a2a69344d4504c69c2c4a9e01
SHA512

e1fda8096d210ed395b90c7bfa64048ecb6da4d69bccfab07c528d2120fa6d09797af9d4397cca3c2256b2500ea37b4b23906c9716c02c250d3228aeed8ad6ba
SSDEEP

3072:kOli0vNE8gcRGJX80QeCt9da4rJXaO5P2ZT+W6KPsRVyCA2KIz7:kO4JRcRGZ8b/NKAPqT+W6KP6yh3+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
703597f53573e13bc944a3a41d4f9093

Files

703597f53573e13bc944a3a41d4f9093
.exe windows:5 windows x86 arch:x86

9e010315b1b854069decec73d0f269e8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetOpenFileNameW
ChooseColorW
ReplaceTextW
GetSaveFileNameW

gdi32

GetROP2
TextOutA
ResizePalette
LPtoDP
SetLayout
CreateRectRgnIndirect
CreateHatchBrush
LineDDA
SetBitmapBits
GetPaletteEntries
CreateFontA
WidenPath
SelectPalette
SetPaletteEntries
SetBkColor
EndPage
Polyline
GetBkMode
GetRgnBox
CreatePalette
RemoveFontResourceW
IntersectClipRect
GetBitmapBits
SetMapMode
AddFontResourceW
GetTextAlign
SetDIBColorTable
CreateBitmapIndirect
CreateSolidBrush
GetTextExtentPointW
PtInRegion
GetNearestColor
Escape
CreatePolygonRgn
SetViewportOrgEx
PolyBezier
StretchDIBits
GetDeviceCaps
SetTextAlign
CombineRgn
GetTextMetricsA
GetTextCharsetInfo
GetSystemPaletteUse
CreateRoundRectRgn
CreateDIBitmap

comctl32

CreatePropertySheetPageA
ImageList_Draw
ImageList_GetIconSize
ImageList_Write
DestroyPropertySheetPage
CreateToolbarEx

kernel32

lstrcpyA
TryEnterCriticalSection
FindResourceA
EnumResourceTypesA
GetLastError
HeapAlloc
GetTempPathW
FindAtomW
SetCommMask
IsDBCSLeadByte
GlobalReAlloc
HeapWalk
SetTimerQueueTimer
WideCharToMultiByte
WaitCommEvent
GetTimeFormatA
HeapReAlloc
FindAtomA
GlobalMemoryStatus
GetStartupInfoW
RtlUnwind
GlobalAlloc
GetCurrentThread
GlobalGetAtomNameW
GetPriorityClass
GetFileAttributesA
GetSystemWindowsDirectoryA
LeaveCriticalSection
GetNumberFormatW
GetCommandLineA
GetComputerNameExW
FoldStringW
GlobalCompact
GetEnvironmentStringsW
MoveFileW
GetCPInfo
CreateRemoteThread
UnlockFile
GlobalAddAtomW
CopyFileA
GetThreadLocale
GetCompressedFileSizeW
FindFirstChangeNotificationW
WaitForMultipleObjectsEx
lstrcatA
GetSystemInfo
GetUserDefaultLangID
FormatMessageW
VirtualLock
ConnectNamedPipe
GetModuleHandleW
GetStringTypeExW
SetCurrentDirectoryW
GetThreadTimes

user32

IsRectEmpty
GetClassLongW
SetMenuItemBitmaps
IntersectRect
GetClassLongA
MessageBoxW
PtInRect
IsChild
InvertRect
GetClientRect
GetMessageW
RegisterClassA
DrawFrameControl
CreateAcceleratorTableW
CheckMenuItem
GetNextDlgGroupItem
UpdateWindow
MapVirtualKeyA
CharNextW
InvalidateRgn
GetAsyncKeyState
LoadCursorA
GetScrollPos
FrameRect
MonitorFromRect
SetParent
FindWindowExA
CopyImage
ScrollWindow
LockWindowUpdate
ScrollWindowEx
UnionRect
GetMenuStringA
GetUpdateRect
GetUserObjectInformationA
TranslateAcceleratorA
DialogBoxParamW
GetClassInfoW
GetMenuCheckMarkDimensions
IsDialogMessageW
GetParent
GetMenuItemCount
GetMenu
SetWindowPos
SetDlgItemTextA
CharLowerA
GetWindowTextA
BeginPaint
CharLowerW
GetSysColorBrush
PostThreadMessageW
DispatchMessageA
GetWindow
InvalidateRect
LoadAcceleratorsW
EnumChildWindows
CreateCursor
ShowWindowAsync
DrawTextA
CreateWindowExW
GetClipCursor
SendMessageW
InsertMenuItemW
GetWindowTextW
OemToCharA
SwitchToThisWindow
GetMenuItemInfoW
CreateWindowExA
CharToOemBuffA
LoadStringW
ReplyMessage
LoadBitmapA
InflateRect
GetActiveWindow
SetCursor
ToUnicodeEx
OpenInputDesktop
DefDlgProcA
CallWindowProcW
OpenDesktopW
EndDialog
SetCaretPos
mouse_event
GetDlgItemInt
GetForegroundWindow
GetClassInfoExA
DefFrameProcA
CharToOemW
RegisterWindowMessageA
LoadIconA
TrackPopupMenuEx
DrawStateW
RegisterClassExA
keybd_event
GetUpdateRgn
SetRectEmpty
DrawMenuBar
SendDlgItemMessageA
ClipCursor
SetForegroundWindow
GetIconInfo
CreateCaret
SetUserObjectInformationW
MonitorFromPoint
SetTimer
SendNotifyMessageW
GetNextDlgTabItem
SetDlgItemTextW
CallWindowProcA

msvcrt

strspn
_controlfp
free
realloc
__set_app_type
mbtowc
__p__fmode
wcsstr
sprintf
__p__commode
strncmp
fprintf
_amsg_exit
gmtime
remove
vswprintf
towupper
wcsrchr
_initterm
_ismbblead
fflush
gets
strpbrk
strtoul
srand
setlocale
exit
strcpy
isalpha
bsearch
_XcptFilter
fgets
_exit
wcslen
clock
_cexit
clearerr
__setusermatherr
atoi
mbstowcs
islower
wcstoul
wcstod
__getmainargs

Exports

Exports

?SetSystem@@YG_NIPAGDPAM<V

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 122KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e010315b1b854069decec73d0f269e8

Headers

File Characteristics

Imports

comdlg32

gdi32

comctl32

kernel32

user32

msvcrt

Exports

Exports

Sections

.text Size: 66KB - Virtual size: 65KB

.data Size: 122KB - Virtual size: 205KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 66KB - Virtual size: 65KB

.data
Size: 122KB - Virtual size: 205KB

.reloc
Size: 2KB - Virtual size: 1KB