7f4be4f75aede1fb81ac108cb0005363

Sharing

Copy URL

Twitter E-mail

General

Target

7f4be4f75aede1fb81ac108cb0005363
Size

448KB
MD5

7f4be4f75aede1fb81ac108cb0005363
SHA1

2d4f432029fe5f76accb76ffc9a165be72ee7b6a
SHA256

77f4e37b9290f0876dce02bac087759427b928e1ac1e22e3b96ee78aced85948
SHA512

e49e90525cd801370ac97c85d03c8de117393484af37d9f45ebd983a517cabe512d578b7cd5baa6d1e0fdb6d35f576ba7ea368081d6598913cac316719f7328d
SSDEEP

6144:izcjBr742fBFB2PAXDMS26wEamobCL8KbICdei08ysI/+5VIogEWbdvoKgaj6V:zBrk2fB2PB6w7moeLHNj34kVIohWbdQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f4be4f75aede1fb81ac108cb0005363

Files

7f4be4f75aede1fb81ac108cb0005363
.exe windows:4 windows x86 arch:x86

b0d98899df0ecbcb50139978bf5899a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

h:\ytee\qytxis\umytee

Imports

comctl32

InitCommonControlsEx
ImageList_SetBkColor
ImageList_GetBkColor
ImageList_SetIconSize
CreateStatusWindowA

user32

GetClipboardData
CharPrevExA
RegisterClassA
DrawIcon
CheckDlgButton
MessageBoxA
ShowWindow
InvertRect
MsgWaitForMultipleObjectsEx
wvsprintfW
CreateWindowExW
TileChildWindows
GetMenuItemCount
ToUnicodeEx
DispatchMessageW
LoadAcceleratorsW
GetMenuItemInfoW
EnableScrollBar
DdeQueryStringA
DestroyWindow
ScreenToClient
SystemParametersInfoW
DialogBoxIndirectParamW
RedrawWindow
ChangeMenuA
WINNLSGetIMEHotkey
UnregisterClassW
BlockInput
DefWindowProcA
UnhookWindowsHookEx
EnumDisplaySettingsW
DrawFocusRect
GetMenuItemInfoA
EnumDisplayDevicesW
UnpackDDElParam
GetTabbedTextExtentW
GetPriorityClipboardFormat
DdeUnaccessData
RegisterClipboardFormatW
DdeCmpStringHandles
NotifyWinEvent
ScrollDC
ShowCaret
RegisterClassExA
GetWindowDC
CreateDialogIndirectParamW
InsertMenuItemW
GetMessagePos
GetWindowLongW
CharNextA
CharToOemBuffW
DdeInitializeA
GetMenuItemID
LoadStringW
wsprintfW

advapi32

CryptSetProviderExA
CryptVerifySignatureW
LookupPrivilegeDisplayNameA
CryptGetHashParam
CryptEnumProviderTypesW

comdlg32

ReplaceTextW
PageSetupDlgW
GetOpenFileNameA
ReplaceTextA

kernel32

lstrcatW
SetFileAttributesA
GetLocaleInfoW
SetStdHandle
TlsSetValue
GetDateFormatA
GetLastError
OpenMutexA
CompareStringA
HeapSize
VirtualFree
HeapAlloc
UnhandledExceptionFilter
EnumSystemLocalesA
GetTimeFormatA
IsValidLocale
MultiByteToWideChar
GetCurrentProcess
WriteProfileStringA
WideCharToMultiByte
GetTickCount
GetStringTypeW
SetEnvironmentVariableA
InterlockedExchange
IsBadWritePtr
GetCurrentProcessId
TlsAlloc
CreateMutexA
GetConsoleTitleW
WriteFile
HeapCreate
GetOEMCP
GetCommandLineA
GetCompressedFileSizeW
EnterCriticalSection
QueryPerformanceCounter
LCMapStringW
GetCPInfo
LoadLibraryA
GetACP
GetStdHandle
SetHandleCount
HeapDestroy
GetEnvironmentStringsW
CreateDirectoryA
VirtualProtect
GetModuleHandleA
SetLastError
WaitCommEvent
MoveFileA
GetUserDefaultLCID
CompareStringW
SetFilePointer
FreeEnvironmentStringsA
GetFileType
LocalAlloc
GetCurrentThread
HeapReAlloc
VirtualAlloc
ExitProcess
VirtualQuery
TerminateProcess
RtlUnwind
WriteConsoleOutputA
TlsFree
ReadFile
FlushFileBuffers
FreeEnvironmentStringsW
OpenFileMappingW
InterlockedIncrement
lstrcpynW
CloseHandle
InitializeCriticalSection
LeaveCriticalSection
GetStartupInfoA
LCMapStringA
TlsGetValue
GetLocaleInfoA
GetProcAddress
GetEnvironmentStrings
GetSystemTimeAsFileTime
GetCurrentThreadId
GetSystemInfo
IsValidCodePage
GetModuleFileNameA
DeleteCriticalSection
HeapFree
GetStringTypeA
GetVersionExA
SetLocaleInfoA
WriteFileEx
GetTimeZoneInformation

Sections

.text
Size: 176KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b0d98899df0ecbcb50139978bf5899a5

Headers

File Characteristics

PDB Paths

Imports

comctl32

user32

advapi32

comdlg32

kernel32

Sections

.text Size: 176KB - Virtual size: 173KB

.rdata Size: 136KB - Virtual size: 135KB

.data Size: 100KB - Virtual size: 103KB

.rsrc Size: 32KB - Virtual size: 31KB

.text
Size: 176KB - Virtual size: 173KB

.rdata
Size: 136KB - Virtual size: 135KB

.data
Size: 100KB - Virtual size: 103KB

.rsrc
Size: 32KB - Virtual size: 31KB