7f3684f0f329286424d26b559d2d12ab

Sharing

Copy URL Twitter E-mail

General

Target

7f3684f0f329286424d26b559d2d12ab
Size

179KB
MD5

7f3684f0f329286424d26b559d2d12ab
SHA1

ae01996160294b58f2032620ef3f374678479b6a
SHA256

6549564799cb41fa350e296d5f85c3fadcfca7a630dc372ae2c190b241e63ee5
SHA512

d4e8d75220a58966240441ce9820db55e6b9d9dc62b0823f0518299137687c4bdfbcea926f5d255f9c9383d83a92c5ca3add1757448790560b85050194f56fb9
SSDEEP

3072:+m5AabBcRwQLobvbrpmUJIC6SWiwZavttaxzum5mFCPWhujtDl3m9H8J:+MAdyH/r9ICoi8Ij4r56CPzdkc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f3684f0f329286424d26b559d2d12ab

Files

7f3684f0f329286424d26b559d2d12ab
.exe windows:5 windows x86 arch:x86

a794c8e003ef3434271fdc90c17e8e22

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
LocalAlloc
LoadLibraryA
GetProcAddress
ExitProcess
MulDiv

user32

TrackPopupMenu
RemovePropA
GetDoubleClickTime
MapWindowPoints
GetTabbedTextExtentA
BeginPaint
CreateCaret
GetDlgItem
CharNextA
SetClipboardData
RemoveMenu
SetParent
DestroyIcon
EnableMenuItem
GetMenuState
SetWindowRgn
SendNotifyMessageA
GetKeyState
CreateDialogParamA
LoadKeyboardLayoutA
IsChild
GetActiveWindow
ToAscii
OpenClipboard
CallWindowProcW
GetMessageTime
IsWindowVisible
GetScrollPos
OffsetRect
WindowFromPoint
RegisterClipboardFormatA
DrawTextW
PostMessageA
CloseClipboard
ToUnicode
GetAsyncKeyState
IsWindow
FillRect
GetMenuCheckMarkDimensions
LoadCursorA
BeginDeferWindowPos
DefFrameProcA
GetMessageA
DrawIcon
ShowCursor
MsgWaitForMultipleObjects
CopyRect
SubtractRect
InvertRect
PostQuitMessage
SetWindowLongA
mouse_event
InsertMenuA
InsertMenuItemA
IsIconic
GetCursorPos
PostThreadMessageA
GetCapture
GetSysColor
GetMenuItemID
WinHelpA
GetKeyboardLayoutList
GetMenuItemCount
OemToCharA
DrawCaption
ShowCaret
UnregisterClassA
RedrawWindow
EmptyClipboard
CharUpperBuffW
GetKeyNameTextA
MapVirtualKeyA
DestroyWindow
ModifyMenuA
SetClassLongA
CreateWindowExW
GetLastActivePopup
DrawTextA
GetClassInfoW
CharUpperBuffA
GetForegroundWindow
EnableScrollBar
DefWindowProcA
IsWindowEnabled
GetCaretPos
WaitForInputIdle
FindWindowA
GetClassInfoA
SetTimer
FlashWindow
DeferWindowPos
RegisterClassA
CheckMenuItem
GetMessagePos
HideCaret
SetForegroundWindow
CreateIcon
SetRect
WindowFromDC
PtInRect
DrawTextExA
ClientToScreen
SetFocus
IntersectRect
GetSubMenu
GetClipboardFormatNameA
EnumWindows
InvalidateRect
SetMenuItemInfoA
LoadBitmapA
CharNextW
ScreenToClient
SetActiveWindow
PeekMessageA
GetWindowDC
DestroyCursor
DrawEdge
CreateMenu
GetIconInfo
TabbedTextOutA
GetClipboardData
DefMDIChildProcA
CreateWindowExA
DialogBoxParamA
DrawMenuBar
TranslateMessage
CallWindowProcA
EnableWindow
ShowWindow
SystemParametersInfoA
ReleaseDC
ValidateRect
SetKeyboardState
RegisterWindowMessageA
CallNextHookEx
EqualRect
UpdateWindow
GetScrollInfo
ShowScrollBar
EndPaint
IsZoomed
EndDeferWindowPos
DispatchMessageA
DefWindowProcW
GetTopWindow
GetWindowTextLengthW
DestroyCaret
FrameRect
GetKeyboardLayout
GetPropA
DeleteMenu
BringWindowToTop
IsCharAlphaA
InvalidateRgn
GetScrollRange
SetWindowTextW
MoveWindow
SetMenu
UnhookWindowsHookEx
MessageBeep
IsDialogMessageA
SetScrollRange
GetFocus
GetWindowRect
GetWindowTextW
GetWindowRgn
KillTimer
GetClientRect
GetKeyboardState
SetPropA
ScrollDC
ScrollWindowEx
SetCaretPos
GetWindowPlacement
CharPrevW
SetRectEmpty
DrawFocusRect
GetMenuItemRect
GetDC
GetMenuStringA
SendMessageA
GetDCEx
MessageBoxA
SetWindowPos
ActivateKeyboardLayout
CharLowerBuffA
GetWindow
LoadIconA
GetWindowTextA
ScrollWindow
ChildWindowFromPoint
EndDialog
EnumThreadWindows
SetWindowsHookExA
GetParent
wsprintfA
UnionRect
IsRectEmpty
CharLowerA
GetSysColorBrush
CopyImage
DrawIconEx
IsCharAlphaNumericA
GetClassNameA
ReleaseCapture
SendMessageTimeoutA
SetWindowPlacement
SetWindowTextA
GetSystemMenu
CreatePopupMenu
SetCursor
IsWindowUnicode
ShowOwnedPopups
DrawTextExW
LoadCursorFromFileA
FindWindowExA
InflateRect
GetMenuItemInfoA
SetWindowLongW
GetWindowLongA
SendDlgItemMessageA
SetCapture
CharUpperA
SetScrollInfo
DestroyMenu
GetCursor
DrawFrameControl
SendMessageW
TranslateMDISysAccel
GetSystemMetrics
GetUpdateRect
GetDesktopWindow
GetWindowThreadProcessId
GetMenu
EnumClipboardFormats
WaitMessage
AdjustWindowRectEx
SetScrollPos
IsClipboardFormatAvailable
LockWindowUpdate
RegisterClassW

gdi32

GetRandomRgn

comdlg32

GetSaveFileNameA
ChooseFontA
PrintDlgA
GetOpenFileNameA
ChooseColorA

advapi32

GetUserNameA
RegCreateKeyExA
RegQueryValueExA
RegQueryValueA
RegOpenKeyExA
RegFlushKey
RegEnumValueA
RegEnumKeyExA
RegOpenKeyA
RegCloseKey
RegQueryInfoKeyA
RegSetValueExA
RegDeleteKeyA
RegDeleteValueA

shell32

SHGetDesktopFolder
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc

ole32

OleUninitialize
OleInitialize

oleaut32

OleLoadPicture
VarCmp

comctl32

ImageList_GetIcon
ImageList_GetDragImage
ImageList_SetIconSize
ImageList_DragEnter
ImageList_DrawEx
ImageList_Write
ImageList_DragShowNolock
ImageList_Read
ImageList_Add
ImageList_LoadImageA
ImageList_GetImageInfo
ImageList_BeginDrag
ImageList_Create
ImageList_Remove
ImageList_ReplaceIcon
ImageList_Replace
ImageList_GetImageCount
ImageList_DragMove
ImageList_GetBkColor
ImageList_Destroy
ImageList_Draw
ImageList_DragLeave
ImageList_SetBkColor
ord17
ImageList_GetIconSize
ImageList_SetDragCursorImage
ImageList_EndDrag

winmm

timeBeginPeriod
timeGetTime
timeEndPeriod
mciSendCommandA
mciGetErrorStringA

msimg32

AlphaBlend

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

wsock32

accept
ioctlsocket
closesocket
connect
gethostname
getsockname
socket
WSAAsyncSelect
setsockopt
sendto
bind
inet_ntoa
htons
WSACleanup
WSAStartup
gethostbyname
recvfrom
listen
select
getsockopt

mpr

WNetCloseEnum
WNetOpenEnumA
WNetEnumResourceA
WNetGetConnectionA
WNetGetUniversalNameA

netapi32

NetApiBufferSize

imm32

ImmReleaseContext
ImmSetCompositionFontA
ImmSetCompositionWindow
ImmGetContext
ImmGetCompositionStringA
ImmGetCompositionStringW

ws2_32

WSAGetOverlappedResult
WSASend
WSAAddressToStringA
WSAStringToAddressA
WSAEventSelect
WSARecv
WSASocketA

Sections

.text
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.suka
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asdf
Size: - Virtual size: 266KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asf
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a794c8e003ef3434271fdc90c17e8e22

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

winmm

msimg32

version

wsock32

mpr

netapi32

imm32

ws2_32

Sections

.text Size: 98KB - Virtual size: 97KB

.suka Size: 6KB - Virtual size: 6KB

.asdf Size: - Virtual size: 266KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 47KB - Virtual size: 47KB

.asf Size: 8KB - Virtual size: 8KB

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 98KB - Virtual size: 97KB

.suka
Size: 6KB - Virtual size: 6KB

.asdf
Size: - Virtual size: 266KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 47KB - Virtual size: 47KB

.asf
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 3KB - Virtual size: 2KB