7a90c046a69060a3c44134439ea06019

Sharing

Copy URL Twitter E-mail

General

Target

7a90c046a69060a3c44134439ea06019
Size

172KB
MD5

7a90c046a69060a3c44134439ea06019
SHA1

495d7e6ba6dda09dc273aaec1592f12208b80972
SHA256

e06992245dac4d32d7b3cb78067cb8233a84bb33c844fca0caf50a1f7df097db
SHA512

c85d80cb8471d6e9f78a1ceaad8206aecbb8c7992636230cacb73fa3ddce6a5af211ec2dc205e571f5bb19fc767c53c5987af7e09aa0bc00e85372b5d7ff0259
SSDEEP

3072:VWXsF3kq6bJ2daQLN4hJ5THgtmAetVZpwiNbriktCUgGXyLfH7bafNWfZiY8f0Ju:vFU9hWqngdezwAMGXUP6fNWhE0qz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7a90c046a69060a3c44134439ea06019

Files

7a90c046a69060a3c44134439ea06019
.exe windows:5 windows x86 arch:x86

669d3f46ef5e04aec5a5534fa533a78d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

W:\OJtixxoPkg\oIlaayovgmTkV\cBggBmc\vciDDQTAAdzlkf\tgyTjvha.pdb

Imports

comctl32

CreatePropertySheetPageA
ImageList_Write
ImageList_Destroy
PropertySheetA
ImageList_Draw
CreateToolbarEx

user32

PostMessageA
GetDC
DragObject
GetKeyboardLayoutNameW
BeginPaint
SetUserObjectInformationW
SetWindowLongA
ShowScrollBar
SetScrollInfo
GetWindowRect
wvsprintfW
OpenInputDesktop
LoadMenuA
InflateRect
PostQuitMessage
ShowWindow
FindWindowA
TranslateAcceleratorW
GetUpdateRgn
LoadIconW
DrawFocusRect
SetMenu
PostMessageW
IsCharAlphaW
GetDoubleClickTime
GetMessageA
GetDlgItemTextW
LoadMenuW
DrawFrameControl
GetScrollInfo
DestroyWindow
wsprintfW
GetWindow
SystemParametersInfoA
GetDlgCtrlID
OpenIcon
CharLowerBuffW
PostThreadMessageA
LoadAcceleratorsA
SetLastErrorEx
GetClipCursor
LoadCursorW
RegisterWindowMessageA
GetNextDlgGroupItem
GetMenuStringW
MonitorFromRect
SetMenuItemBitmaps
GetUserObjectInformationW
ShowCursor
SendInput
DrawMenuBar
SystemParametersInfoW
DefFrameProcW
GetWindowTextW
SetActiveWindow
DrawTextA
SetDlgItemInt
BringWindowToTop
GetMenuItemInfoW
ShowCaret
RegisterClassExW
CheckDlgButton
CharLowerA
SetWindowLongW
ShowWindowAsync
SetRectEmpty
CharNextExA
CreateIconFromResource
ModifyMenuW
CharUpperBuffW
ToUnicodeEx
PeekMessageA
GetSysColorBrush
ArrangeIconicWindows
InSendMessageEx
GetClassInfoW
DestroyCaret
DefDlgProcW
CharNextW
TabbedTextOutW
DrawAnimatedRects
GetMenuItemID
GetSysColor
ClientToScreen
LoadAcceleratorsW
CallWindowProcW
DestroyCursor
LoadBitmapW
PostThreadMessageW
EnableScrollBar
TranslateMessage
EnableMenuItem
CopyRect
SendMessageW
mouse_event
ExitWindowsEx
ChangeMenuW
CreateAcceleratorTableW
SendMessageTimeoutW
DialogBoxIndirectParamA
LockWindowUpdate
GetClassInfoA
GetClassLongW
MoveWindow
IsWindow
GrayStringW
GetLastActivePopup
VkKeyScanW
FindWindowW
MapVirtualKeyExW
LoadBitmapA
MapWindowPoints
CreateWindowExW
LoadImageW
GetClassInfoExA
wsprintfA
GetMenuStringA
keybd_event

kernel32

CreateNamedPipeA
GetComputerNameExA
LocalUnlock
DisconnectNamedPipe
GlobalSize
GetFileAttributesExA
CreateWaitableTimerW
LoadLibraryA
VirtualAlloc
GetVersionExA
GetSystemDirectoryA
CopyFileW
lstrlenW
GetStdHandle
SystemTimeToFileTime
LockResource
FindCloseChangeNotification
LoadLibraryExW
MapViewOfFile
lstrcmpiW
CreateWaitableTimerA
FindClose
lstrcpynW
CreateSemaphoreW
ReleaseSemaphore
WinExec
SetCommState
LocalAlloc
GlobalFree
FileTimeToLocalFileTime
SetUnhandledExceptionFilter
SetFilePointer
FormatMessageW
AddAtomW
GetTempFileNameW
SetWaitableTimer
GetModuleFileNameA
SizeofResource
CompareStringA
GetComputerNameW
LocalFree
VirtualProtect
FlushFileBuffers
EscapeCommFunction
lstrcmpA
lstrcpyA
IsValidLanguageGroup
GetAtomNameA
CreateFileW
GetShortPathNameA
WaitForSingleObject
WaitForMultipleObjects

msvcrt

wcscoll
getenv
strpbrk
system
setvbuf
wcstoul
vsprintf
printf
swscanf
fgets
exit
_controlfp
mbstowcs
__set_app_type
swprintf
floor
tolower
__p__fmode
__p__commode
_amsg_exit
_initterm
_ismbblead
gmtime
wcstombs
isdigit
fwrite
wcstol
mktime
atoi
ungetc
isspace
clearerr
islower
_XcptFilter
getc
_exit
_cexit
__setusermatherr
__getmainargs
fread
fgetc
strspn
toupper
gets
strchr
fflush
strcpy

comdlg32

ChooseFontW
FindTextW
ChooseColorW
GetFileTitleW
PageSetupDlgW
PrintDlgW

Exports

Exports

?GetShiftAltInfo@@YGK_KHE:O

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.erts
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wall
Size: 1024B - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.info
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.udata
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

669d3f46ef5e04aec5a5534fa533a78d

Headers

File Characteristics

PDB Paths

Imports

comctl32

user32

kernel32

msvcrt

comdlg32

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 19KB

.init Size: 6KB - Virtual size: 5KB

.erts Size: 512B - Virtual size: 86B

.wall Size: 1024B - Virtual size: 258KB

.info Size: 512B - Virtual size: 192B

.data Size: 3KB - Virtual size: 2KB

.udata Size: 139KB - Virtual size: 138KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 20KB - Virtual size: 19KB

.init
Size: 6KB - Virtual size: 5KB

.erts
Size: 512B - Virtual size: 86B

.wall
Size: 1024B - Virtual size: 258KB

.info
Size: 512B - Virtual size: 192B

.data
Size: 3KB - Virtual size: 2KB

.udata
Size: 139KB - Virtual size: 138KB

.reloc
Size: 1KB - Virtual size: 1KB