7e47332bb9b64a87f95f24271a4fac39

Sharing

Copy URL Twitter E-mail

General

Target

7e47332bb9b64a87f95f24271a4fac39
Size

829KB
MD5

7e47332bb9b64a87f95f24271a4fac39
SHA1

c2be1d355f125da6f6336b854cb8cd39dab866b1
SHA256

650c4b37ab995c3bc09399ccff3b246307053485bb0c79498edab6a9f6b84438
SHA512

da05b56f6b19db2344dfd25a1beed7a493e150282bcad51fdefb22bc63bb5f7ecc3214922d9403fe4e40a12f3cc4a2b34e7eb88209032465a52593ffcf22cd78
SSDEEP

24576:cLbXftlZxzmRsCJgTd3m/u95hYxY41XUen9p6yoT:uDnzmqCJPGlYx11V6yo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7e47332bb9b64a87f95f24271a4fac39

Files

7e47332bb9b64a87f95f24271a4fac39
.exe windows:5 windows x86 arch:x86

a942410c8f1552ac39e7c3a61cf74bd0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualAlloc
GetLastError
ExitProcess
Sleep
RtlUnwind

user32

SetRect
GetMessageW
GetCapture
GetForegroundWindow
GetMenuStringW
GetClassInfoW
GetDC
GetParent
ReleaseDC
GetWindowRect
SetMenu
GetSysColor
IsIconic
GetWindowDC
SetRectEmpty
DefMDIChildProcW
SetFocus
TranslateMessage
LoadBitmapW
GetScrollRange
FillRect
AdjustWindowRectEx
GetWindowThreadProcessId
GetMenuItemCount
SetMenuItemInfoW
IsWindow
GetKeyboardLayout
WaitForInputIdle
GetKeyboardLayoutNameW
IsWindowVisible
PeekMessageW
TranslateMDISysAccel
RegisterWindowMessageW
CharLowerW
DestroyIcon
SendMessageW
ScrollWindow
DrawTextW
LoadCursorW
PeekMessageA
IsChild
DrawFocusRect
GetSubMenu
DefFrameProcW
DrawFrameControl
MsgWaitForMultipleObjectsEx
CreateIcon
CharNextW
GetKeyState
GetKeyNameTextW
SetWindowsHookExW
ShowWindow
CallNextHookEx
PostQuitMessage
GetDCEx
ScrollWindowEx
RegisterClassW
UpdateWindow
SetWindowLongW
SetParent
SetWindowPlacement
SetCapture
IsRectEmpty
DefWindowProcW
EnableMenuItem
InflateRect
GetClassLongW
DispatchMessageA
GetWindowPlacement
EnableWindow
EndPaint
WindowFromPoint
FindWindowExW
LoadIconW
CreateWindowExW
SetTimer
EnableScrollBar
DrawIcon
RemovePropW
ShowOwnedPopups
OemToCharBuffA
EnumWindows
GetSystemMetrics
RegisterClipboardFormatW
DrawMenuBar
DispatchMessageW
CallWindowProcW
SetScrollInfo
SystemParametersInfoW
GetCursor
GetMenuState
MapWindowPoints
ClientToScreen
LoadStringW
IsDialogMessageA
GetFocus
GetWindowLongW
IntersectRect
PostMessageW
RemoveMenu
GetLastActivePopup
MapVirtualKeyW
GetWindow
ExitWindowsEx
SetScrollPos
EnumChildWindows
GetKeyboardLayoutList
IsWindowEnabled
GetCursorPos
SetWindowTextW
SetPropW
CharToOemBuffA
ReleaseCapture
DrawTextExW
RedrawWindow
SetActiveWindow
CharUpperBuffW
DestroyMenu
FindWindowW
ReplyMessage
MessageBoxW
InsertMenuItemW
ActivateKeyboardLayout
IsWindowUnicode
GetScrollPos
IsZoomed
GetMessagePos
AppendMenuW
SetCursor
SetWindowPos
GetPropW
GetWindowTextW
SendNotifyMessageW
GetActiveWindow
GetMenuItemID
SendMessageA
GetScrollInfo
LoadKeyboardLayoutW
DestroyWindow
GetKeyboardState
BeginPaint
GetMenu
IsDialogMessageW
GetTopWindow
UnhookWindowsHookEx
SetClassLongW
CheckMenuItem
CreatePopupMenu
SendMessageTimeoutW
DrawEdge
UnregisterClassW
WaitMessage
GetDesktopWindow
OffsetRect
GetMenuItemInfoW
InvalidateRect
PtInRect
ScreenToClient
SetScrollRange
FrameRect
MsgWaitForMultipleObjects
ShowScrollBar
DestroyCursor
KillTimer
EnumThreadWindows
GetClientRect
BringWindowToTop
GetIconInfo
DrawIconEx
CreateMenu
CharLowerBuffW
MessageBeep
SetForegroundWindow
InsertMenuW
TrackPopupMenu
DeleteMenu
GetSystemMenu
GetSysColorBrush

gdi32

CreateDIBSection
IntersectClipRect
Arc
GetClipBox
CreateCompatibleDC
CreateHalftonePalette
CreateBitmap
GetWindowOrgEx
SetBrushOrgEx
GetDeviceCaps
GetObjectW
CreateCompatibleBitmap
GetSystemPaletteEntries
GetStockObject
CreateSolidBrush
DeleteObject
SetViewportOrgEx
SetTextColor
CreateDIBitmap
GetTextExtentPointW
MaskBlt
SetPixel
ChoosePixelFormat
SelectPalette
GetRgnBox
RectVisible
RoundRect
LineDDA
GetBrushOrgEx
GetDCOrgEx
Polyline
ExcludeClipRect
SaveDC
FrameRgn
SetWindowOrgEx
CreatePenIndirect
Rectangle
LineTo
Chord
CreateFontIndirectW
ExtFloodFill
GetCurrentPositionEx
CreatePalette
AddFontResourceW
GetPaletteEntries
Pie
BitBlt
GetDIBits
StretchBlt
SetDIBColorTable
MoveToEx
CreateRectRgn
SetBkMode
PatBlt
ExtTextOutW
RemoveFontResourceW
SetROP2
GetTextExtentPoint32W
EnumFontsW
GetTextMetricsW
GetPixel
SelectObject
GetDIBColorTable
DeleteDC
CreateBrushIndirect
Ellipse
RealizePalette
RestoreDC
SetBkColor
GetBitmapBits
SetStretchBltMode
UnrealizeObject

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

AdjustTokenPrivileges

shell32

SHChangeNotify
SHGetMalloc
SHBrowseForFolderW
SHGetPathFromIDListW

ole32

CoDisconnectObject

oleaut32

SysFreeString

comctl32

ImageList_SetIconSize
ImageList_GetDragImage
ImageList_Destroy
FlatSB_GetScrollInfo
FlatSB_GetScrollPos
_TrackMouseEvent
ImageList_Draw
FlatSB_SetScrollProp
ImageList_SetImageCount
ImageList_Write
ImageList_GetBkColor
ImageList_GetImageCount
ImageList_DragMove
ImageList_BeginDrag
ImageList_DragShowNolock
ImageList_SetBkColor
ImageList_DragEnter
ImageList_Read
ImageList_DrawEx
ImageList_Add
FlatSB_SetScrollPos
ImageList_DragLeave
InitializeFlatSB
ord17
ImageList_Create
ImageList_Remove
ImageList_EndDrag
FlatSB_SetScrollInfo
ImageList_GetIconSize

msimg32

AlphaBlend

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

mpr

WNetOpenEnumW
WNetCloseEnum
WNetGetConnectionW
WNetGetUniversalNameW
WNetEnumResourceW

netapi32

NetApiBufferFree

wtsapi32

WTSVirtualChannelClose

wldap32

ord41
ord319

Sections

.text
Size: 492KB - Virtual size: 491KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.stroke
Size: 212KB - Virtual size: 211KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.char
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.joke
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.poke
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.key
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a942410c8f1552ac39e7c3a61cf74bd0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

msimg32

version

mpr

netapi32

wtsapi32

wldap32

Sections

.text Size: 492KB - Virtual size: 491KB

.stroke Size: 212KB - Virtual size: 211KB

.char Size: 52KB - Virtual size: 52KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 59KB

.joke Size: 512B - Virtual size: 3B

.poke Size: 512B - Virtual size: 307B

.key Size: 52KB - Virtual size: 52KB

.rsrc Size: 5KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 492KB - Virtual size: 491KB

.stroke
Size: 212KB - Virtual size: 211KB

.char
Size: 52KB - Virtual size: 52KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 59KB

.joke
Size: 512B - Virtual size: 3B

.poke
Size: 512B - Virtual size: 307B

.key
Size: 52KB - Virtual size: 52KB

.rsrc
Size: 5KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 3KB