779cc8a03605d469814c6aa32830f384

Sharing

Copy URL Twitter E-mail

General

Target

779cc8a03605d469814c6aa32830f384
Size

114KB
MD5

779cc8a03605d469814c6aa32830f384
SHA1

6102a6162501006079bed882df8d67c8547aa9c7
SHA256

98beb5d6c4ca21a9e458c156c48996c1043d58c45c6778e0c4133fb410d53c99
SHA512

a90db5f4dc3d9fcbe0cfc9ef382aa63d9c4e8b6235be5d499915bc3d26197cbf7575544db42d23078238b78cfd4b3f77bd92340e55ce7bd8b0fa7e97c3fc42bd
SSDEEP

1536:9a8bHvFg6frxQStfr/kd47PkF3WSEx+aCitR9AfqNW6cY:QePxTGStfLkd4DkF3vEx+GtbnDcY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
779cc8a03605d469814c6aa32830f384

Files

779cc8a03605d469814c6aa32830f384
.exe windows:4 windows x86 arch:x86

a4aa1fd55734578f7897c3e0a5cfb17a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_DrawEx

gdi32

SetTextColor
GetPixel
SetBkColor
CreatePenIndirect
CreateBrushIndirect
GetObjectA

msvcrt

memcpy
wcscspn
memset
strlen
sprintf
memmove
strcmp
pow

kernel32

LoadLibraryExA
ExitProcess
SetErrorMode
GlobalDeleteAtom
VirtualAllocEx
GetModuleHandleA
GlobalAddAtomA
FreeLibrary
FindResourceA
LoadLibraryA

shell32

SHGetDesktopFolder
SHGetFolderPathA

advapi32

RegCreateKeyA
RegQueryInfoKeyA

user32

IsWindowVisible
SetForegroundWindow
ShowOwnedPopups
GetWindowLongA
OpenClipboard
GetClassInfoA
ScrollWindow
AdjustWindowRectEx
GetWindowRect
SetScrollInfo
GetScrollPos
DrawMenuBar
EqualRect
UpdateWindow
ScreenToClient
CharToOemA
EndPaint
TranslateMDISysAccel
EnumThreadWindows
IntersectRect
SetWindowTextA
ReleaseCapture
SetMenuItemInfoA
GetScrollRange
GetDCEx
EnableWindow
GetLastActivePopup
CharUpperBuffA
WindowFromPoint
DefWindowProcA
CreatePopupMenu
CreateIcon
UnhookWindowsHookEx
FillRect
EnumWindows
FindWindowA
IsDialogMessageA
GetDesktopWindow
RegisterWindowMessageA
GetMessagePos
DispatchMessageA
MessageBeep
ChildWindowFromPoint
SystemParametersInfoA
GetFocus
CallNextHookEx
DestroyMenu
SetPropA
SetScrollRange
GetKeyboardLayoutNameA
GetForegroundWindow
BeginPaint
MessageBoxA
GetWindowLongW
GetWindow
GetWindowTextA
DrawAnimatedRects
IsWindowEnabled
ActivateKeyboardLayout
GetKeyboardLayout
CheckMenuItem
SetWindowLongW
GetKeyboardType
GetSystemMenu
InvalidateRect
SetMenu
DeleteMenu
CharNextA
CallWindowProcA
GetDlgItem
DrawIconEx
GetMenu
SetWindowLongA
DefFrameProcA
LoadStringA
DrawTextA
PostMessageA
DrawIcon
IsChild
GetMenuState
EnableScrollBar
SetClipboardData
DrawEdge
GetMenuItemInfoA
GetSystemMetrics
LoadKeyboardLayoutA
TrackPopupMenu
SendMessageA
SetScrollPos
GetSysColor
GetActiveWindow
GetMenuItemCount
IsWindowUnicode
GetMenuItemID
DestroyIcon
FrameRect
ReleaseDC
ShowScrollBar
SetParent
IsDialogMessageW
GetDC
PostQuitMessage
SetCapture
DestroyCursor
KillTimer
PeekMessageA
GetPropA
GetKeyNameTextA
DispatchMessageW
CharNextW
GetCursor
EnableMenuItem
GetWindowPlacement
GetParent
InflateRect
InsertMenuItemA
LoadIconA
MapWindowPoints
CharLowerA
GetClientRect
SetTimer
DefMDIChildProcA
UnregisterClassA
CharLowerBuffA
GetKeyboardLayoutList
GetScrollInfo
IsIconic
GetKeyState
GetWindowDC
MoveWindow
GetSysColorBrush
GetClassLongA
wsprintfA
DrawFrameControl
IsZoomed
GetIconInfo
WaitMessage
EmptyClipboard
SetFocus
RedrawWindow
GetClassNameA
RemoveMenu
SetWindowPlacement
GetMenuStringA
SetWindowsHookExA
TranslateMessage
SendMessageW
EnumChildWindows
DestroyWindow
GetCapture
RemovePropA
InsertMenuA
GetKeyboardState
GetSubMenu
IsWindow
PeekMessageW
CloseClipboard
PtInRect
MapVirtualKeyA

shlwapi

PathIsDirectoryA
SHGetValueA
SHEnumValueA
SHDeleteKeyA
PathIsContentTypeA
PathGetCharTypeA

comdlg32

GetOpenFileNameA
GetFileTitleA
GetSaveFileNameA

version

GetFileVersionInfoSizeA
VerFindFileA
VerQueryValueA

Sections

CODE
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 399B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a4aa1fd55734578f7897c3e0a5cfb17a

Headers

File Characteristics

Imports

comctl32

gdi32

msvcrt

kernel32

shell32

advapi32

user32

shlwapi

comdlg32

version

Sections

CODE Size: 32KB - Virtual size: 31KB

.rdata Size: 512B - Virtual size: 399B

.data Size: 80KB - Virtual size: 80KB

CODE
Size: 32KB - Virtual size: 31KB

.rdata
Size: 512B - Virtual size: 399B

.data
Size: 80KB - Virtual size: 80KB