7cecdd2d9ecd11b105ae7a07c00c3bba

Sharing

Copy URL

Twitter E-mail

General

Target

7cecdd2d9ecd11b105ae7a07c00c3bba
Size

1.3MB
MD5

7cecdd2d9ecd11b105ae7a07c00c3bba
SHA1

3e91fac046ef04b751757e5f6beb04b78383a3eb
SHA256

bd5cee840375c669e230992ce792010a8e643a388329ba8f2c744cd7864a52df
SHA512

fe80c5616702f383a30e9416d650966ea90dad81683ec899b3d33fe962a1b72fcd0fd70d0c26995dc9c19edb9013423176bcb5d44c338ea54dc471bb10f117ea
SSDEEP

12288:+KmPKcel4LK12wVypaD5tgFn9Z02N3myJH0UWxS1ORGR+fk9JxgZR5b5:+ucelR4wVypajmFBdJHPWxiORGr9qT5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7cecdd2d9ecd11b105ae7a07c00c3bba

Files

7cecdd2d9ecd11b105ae7a07c00c3bba
.exe windows:4 windows x86 arch:x86

298c217bc48dbe7cd5c7d3439601a0a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\Don\source\notepad++\trunk\PowerEditor\bin\npp.pdb

Imports

comctl32

InitCommonControlsEx
ImageList_AddMasked
ImageList_SetIconSize
ord17
ImageList_Destroy
ImageList_Create
ImageList_ReplaceIcon
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_Draw

shlwapi

PathStripPathW
PathIsRelativeW
PathAddExtensionW
PathFindExtensionW
PathRemoveExtensionW
PathMatchSpecW
PathIsDirectoryW
PathCompactPathExW
PathFindFileNameW
PathAppendW
PathFileExistsW
PathRemoveFileSpecW

shell32

SHGetMalloc
Shell_NotifyIconW
SHGetSpecialFolderLocation
DragQueryPoint
DragQueryFileW
SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteW
DragFinish

kernel32

GlobalSize
CopyFileW
FindClose
FindNextFileW
FindFirstFileW
TerminateThread
CreateThread
lstrcpynW
GetSystemInfo
GetModuleHandleW
GetVersionExW
ExpandEnvironmentStringsW
GetTimeFormatW
GetDateFormatW
GetLocalTime
MulDiv
WaitForMultipleObjects
WaitForSingleObject
OpenEventW
SetEvent
GetExitCodeProcess
ReadFile
PeekNamedPipe
Sleep
ResumeThread
CreateEventW
CreateProcessW
CreatePipe
GetOEMCP
GetACP
SizeofResource
LockResource
LoadResource
FindResourceW
LocalLock
LocalAlloc
GetTempPathW
CreateMutexW
SetLastError
GetCommandLineW
SetFilePointer
HeapReAlloc
VirtualAlloc
CreateDirectoryW
HeapCreate
HeapDestroy
GetDateFormatA
GetTimeFormatA
GetTimeZoneInformation
ExitProcess
HeapSize
GetFileType
SetHandleCount
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetModuleFileNameA
GetStdHandle
WriteFile
GetCurrentDirectoryA
IsValidCodePage
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
GetStringTypeW
GetStringTypeA
GetCPInfo
LCMapStringW
LCMapStringA
GetStartupInfoA
GetProcessHeap
HeapAlloc
GetVersionExA
GetCommandLineA
HeapFree
GetSystemTimeAsFileTime
GetDriveTypeW
FileTimeToLocalFileTime
FileTimeToSystemTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RaiseException
RtlUnwind
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedExchange
InterlockedCompareExchange
InterlockedDecrement
InterlockedIncrement
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
LocalUnlock
LoadLibraryW
GetProcAddress
CreateFileW
GetCurrentProcessId
GetCurrentProcess
CloseHandle
FreeLibrary
SetCurrentDirectoryW
GetCurrentThreadId
GetCurrentDirectoryW
WideCharToMultiByte
MultiByteToWideChar
GetLastError
FormatMessageW
LocalFree
GetFileAttributesW
SetFileAttributesW
MoveFileW
GetFullPathNameW
GetLongPathNameW
lstrcmpiW
DeleteFileW
lstrcpyW
lstrlenW
GetModuleFileNameW
lstrcatW
lstrcmpW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetLocaleInfoA
GetUserDefaultLCID
SetEnvironmentVariableA
EnumSystemLocalesA
IsValidLocale
SetStdHandle
LoadLibraryA
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEndOfFile
GetDriveTypeA
CompareStringA
CompareStringW
VirtualFree

user32

DragDetect
AppendMenuW
RegisterWindowMessageW
IsWindow
CreateCursor
ScrollWindow
SetScrollInfo
SetMenuItemInfoW
InsertMenuItemW
LoadStringW
LoadMenuW
IsDialogMessageA
IsDialogMessageW
TranslateAcceleratorW
GetMessageA
GetMessageW
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
IsZoomed
GetMenuItemCount
GetSubMenu
DrawMenuBar
IsClipboardFormatAvailable
GetClipboardData
EndDialog
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
MonitorFromWindow
GetMonitorInfoW
SetForegroundWindow
SetWindowPlacement
GetMenuItemID
DialogBoxIndirectParamW
GetMenuStringW
CheckMenuRadioItem
GetMenuState
DestroyCursor
CheckMenuItem
EnableMenuItem
DestroyAcceleratorTable
DialogBoxParamW
RemoveMenu
DestroyIcon
mouse_event
WindowFromPoint
PtInRect
SetDlgItemInt
MapWindowPoints
LoadImageW
CreatePopupMenu
InsertMenuW
DestroyMenu
TrackPopupMenu
GetWindowTextW
SetCapture
GetActiveWindow
IsChild
GetDlgCtrlID
SetParent
RedrawWindow
GetCursorPos
GetCapture
CreateDialogIndirectParamW
RegisterClassExW
ReleaseCapture
FindWindowW
SetWindowsHookExW
UnhookWindowsHookEx
SetWindowTextW
LoadBitmapW
CallNextHookEx
ScreenToClient
GetDlgItemTextW
SetDlgItemTextW
MessageBoxW
GetDlgItemInt
CreateDialogParamW
CreateAcceleratorTableW
IsWindowUnicode
SetWindowLongA
DrawFocusRect
FillRect
FrameRect
SendDlgItemMessageW
SetWindowLongW
GetWindowLongW
GetSysColor
InflateRect
ClientToScreen
CallWindowProcW
SetWindowPos
IsWindowVisible
GetWindowRect
ShowWindow
RegisterClassW
BeginPaint
EndPaint
GetFocus
PostMessageW
LoadCursorW
SetCursor
DestroyWindow
CreateCaret
DestroyCaret
GetSystemMetrics
GetWindowPlacement
MoveWindow
CreateWindowExW
SetFocus
GetScrollPos
GetScrollRange
UpdateWindow
DefWindowProcW
DrawFrameControl
GetMenu
ShowCaret
MessageBeep
DrawTextW
SetCaretPos
HideCaret
GetParent
ShowScrollBar
SetScrollRange
InvalidateRect
SetScrollPos
GetKeyboardState
ToAscii
wsprintfW
GetDC
DrawEdge
DrawTextExW
ReleaseDC
GetClientRect
LoadIconW
DrawIcon
GetDlgItem
SendMessageW
EnableWindow
CallWindowProcA
CharUpperW
CharLowerW
TranslateMessage
DispatchMessageW
CreateMenu
SystemParametersInfoW
DeleteMenu
PostQuitMessage
SetMenu
IsIconic
GetKeyState
GetClassNameW
RealChildWindowFromPoint
PeekMessageW
ModifyMenuW

gdi32

GetTextMetricsW
CreateHatchBrush
LineTo
MoveToEx
RestoreDC
DeleteDC
BitBlt
CreateCompatibleBitmap
GetObjectW
CreateCompatibleDC
SaveDC
CreateFontW
OffsetWindowOrgEx
PatBlt
SetBrushOrgEx
CreatePatternBrush
CreateBitmap
GetTextExtentPointW
RemoveFontResourceW
EnumFontFamiliesExW
AddFontResourceW
EndDoc
EndPage
ExtTextOutW
SetTextAlign
SetBkColor
StartPage
StartDocW
DPtoLP
GetDeviceCaps
CreateFontIndirectW
GetPixel
SetTextColor
CreateSolidBrush
GetTextExtentPoint32W
GetROP2
SetROP2
GetStockObject
CreatePen
Rectangle
DeleteObject
SetBkMode
SetWindowOrgEx
SelectObject

comdlg32

ChooseColorW
GetOpenFileNameW
PrintDlgW
GetSaveFileNameW

advapi32

RegCloseKey
RegEnumKeyExW
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW
IsTextUnicode
RegQueryInfoKeyW

ole32

CoInitialize
CoUninitialize

Sections

.text
Size: 732KB - Virtual size: 731KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 40KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 392KB - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

298c217bc48dbe7cd5c7d3439601a0a4

Headers

File Characteristics

PDB Paths

Imports

comctl32

shlwapi

shell32

kernel32

user32

gdi32

comdlg32

advapi32

ole32

Sections

.text Size: 732KB - Virtual size: 731KB

.rdata Size: 120KB - Virtual size: 119KB

.data Size: 40KB - Virtual size: 112KB

.rsrc Size: 392KB - Virtual size: 392KB

.text
Size: 732KB - Virtual size: 731KB

.rdata
Size: 120KB - Virtual size: 119KB

.data
Size: 40KB - Virtual size: 112KB

.rsrc
Size: 392KB - Virtual size: 392KB