75c038e5768c77e58c682a41703f545b

Sharing

Copy URL Twitter E-mail

General

Target

75c038e5768c77e58c682a41703f545b
Size

204KB
MD5

75c038e5768c77e58c682a41703f545b
SHA1

752102c4185d593039cc15cec06ef30095be9c54
SHA256

9d7eac840d2e6ea0d582c5fad3c290e0327dde110816698c2dd117d1f1e442a1
SHA512

84583932d26886d42063605eaddd91faa7829830cd5c4e05a97bbe864fec32b1e3ac805fca9d20ace951e5e84d856ca82d6f21fb84752581962ccc8a178bb9e8
SSDEEP

3072:bBA5n76/++TuRsFOWLrS3yBBLCUXcLGXrWvgYtMw4SWr+A:QoVLhrn7UMwxd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75c038e5768c77e58c682a41703f545b

Files

75c038e5768c77e58c682a41703f545b
.exe windows:4 windows x86 arch:x86

8a54f5eb76bf73360ab59c621a70e07d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SafeArrayCreate
SysReAllocStringLen
GetErrorInfo
VariantCopyInd
SysFreeString
OleLoadPicture
SafeArrayPtrOfIndex
SysAllocStringLen
SysStringLen

shell32

SHGetFolderPathA
Shell_NotifyIconA
SHGetSpecialFolderLocation
SHGetFileInfoA

shlwapi

SHQueryValueExA

version

VerInstallFileA
VerQueryValueA
VerFindFileA

user32

SendMessageW
SetFocus
AdjustWindowRectEx
MapWindowPoints
ShowScrollBar
SetActiveWindow
SetClipboardData
EqualRect
MessageBeep
OemToCharA
ReleaseDC
EnableWindow
DrawTextA
DrawAnimatedRects
DispatchMessageW
GetWindowPlacement
GetIconInfo
OpenClipboard
MapVirtualKeyA
CreateIcon
SetScrollRange
GetCursor
GetMenuStringA
PeekMessageA
LoadIconA
MessageBoxA
wsprintfA
EnableScrollBar
CloseClipboard
GetKeyboardState
SetScrollInfo
GetKeyState
GetClientRect
CallWindowProcA
IntersectRect
SetCapture
RemoveMenu
IsChild
GetMessagePos
GetScrollInfo
InsertMenuItemA
SetParent
DestroyWindow
SetWindowTextA
GetClassInfoA
ReleaseCapture
GetSystemMenu
WaitMessage
GetMenuState
GetPropA
ChildWindowFromPoint
MsgWaitForMultipleObjects
GetWindowLongW
WindowFromPoint
SendMessageA
GetWindowDC
DestroyCursor
ScreenToClient
DrawFrameControl
GetWindowRect
GetSysColorBrush
GetMenuItemCount
UnhookWindowsHookEx
SetTimer
GetFocus
PostQuitMessage
GetCursorPos
ShowOwnedPopups
DefWindowProcA
GetClassNameA
IsWindowUnicode
DeleteMenu
InvalidateRect
GetCapture
GetLastActivePopup
MoveWindow
GetMenuItemID
SetForegroundWindow
GetScrollPos
SystemParametersInfoA
GetWindowTextA
DrawMenuBar
GetKeyboardLayoutNameA
CharUpperBuffA
PeekMessageW
RedrawWindow
GetDC
DestroyIcon
SetPropA
SetRect
SetWindowPlacement
RegisterClassA
CheckMenuItem
SetWindowsHookExA
IsWindowVisible
CallNextHookEx
GetForegroundWindow
UnregisterClassA
EmptyClipboard
SetMenuItemInfoA
CharToOemA
CreateMenu
GetDlgItem
CreatePopupMenu
DestroyMenu
BeginPaint
SetMenu
LoadKeyboardLayoutA
GetWindow
LoadCursorA
SetClassLongA
TrackPopupMenu
DrawIconEx
GetTopWindow
GetDCEx
EnumWindows
GetClassLongA
CharNextA
GetClipboardData
GetSubMenu
TranslateMessage
IsWindowEnabled
FrameRect
CharNextW

kernel32

IsBadReadPtr
LoadLibraryA
GetCommandLineA
GetModuleHandleA
VirtualAlloc
ExitThread
LoadLibraryExA
ExitProcess
lstrlenW
GetProcAddress
GetModuleHandleW
GetLastError
GlobalAlloc
lstrlenA

Sections

CODE
Size: 104KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8a54f5eb76bf73360ab59c621a70e07d

Headers

File Characteristics

Imports

oleaut32

shell32

shlwapi

version

user32

kernel32

Sections

CODE Size: 104KB - Virtual size: 100KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 12KB - Virtual size: 8KB

.bss Size: 60KB - Virtual size: 56KB

.cdata Size: 8KB - Virtual size: 6KB

.rsrc Size: 12KB - Virtual size: 8KB

CODE
Size: 104KB - Virtual size: 100KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 12KB - Virtual size: 8KB

.bss
Size: 60KB - Virtual size: 56KB

.cdata
Size: 8KB - Virtual size: 6KB

.rsrc
Size: 12KB - Virtual size: 8KB