87bf39637c892429dce5b0b9e7082c13

Sharing

Copy URL Twitter E-mail

General

Target

87bf39637c892429dce5b0b9e7082c13
Size

662KB
MD5

87bf39637c892429dce5b0b9e7082c13
SHA1

0db4d38946cf699a303c1e03ae7a4fe80ff02c00
SHA256

c2a9370a99772b2b4013b50692109f77356cd2295ba86dbe55c7c0460916abfc
SHA512

ef90308e709a91dc4e6bf43fd394e2cccf9ca1636fb032872799b5f7a0a40edd424361ca79aa90bb11df1e7ad97cfe2bcc22dc17584a3de6aa66efd57d464bc7
SSDEEP

12288:QpIIuC4et63SOw78J4DsgpE5A4WvcfeCS5dxx/oe+xBki2qZ4uAlO8a565fJd:QpIIuC4GOR6D45A445Bhx/oRk8dszawT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87bf39637c892429dce5b0b9e7082c13

Files

87bf39637c892429dce5b0b9e7082c13
.exe windows:4 windows x86 arch:x86

d1a1f7565f9f3504b1e8a9385b1de135

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\etuexdsp\lwextttre\dhugoxtf.pdb

Imports

user32

EnableScrollBar
RegisterClassA
CallWindowProcA
FindWindowW
IsIconic
DdeConnect
SetDebugErrorLevel
GetNextDlgGroupItem
SetClassWord
TabbedTextOutW
ChangeMenuW
WaitForInputIdle
GetWindowPlacement
IsRectEmpty
RealGetWindowClass
ShowWindow
DefWindowProcA
SetClassLongW
ModifyMenuW
CreateWindowExW
SetWindowLongW
PostQuitMessage
CallMsgFilterW
PtInRect
DdeSetQualityOfService
CascadeWindows
ToUnicode
ClientToScreen
DefWindowProcW
DrawTextW
IsCharLowerA
DestroyWindow
PostThreadMessageW
GetDlgItemTextW
SetWindowsHookW
ChangeDisplaySettingsExW
CharUpperW
RegisterClipboardFormatW
OemToCharA
LoadBitmapA
GetWindowRect
GetDC
IsCharAlphaNumericW
UnregisterClassA
InflateRect
CreateCursor
GetCaretBlinkTime
IsWindowEnabled
BroadcastSystemMessageA
CharToOemW
GetClassInfoW
GetMessageTime
GetMonitorInfoA
DdeFreeDataHandle
GetDlgCtrlID
SetSystemCursor
BeginPaint
DdeNameService
GetClipboardData
MenuItemFromPoint
LoadImageW
SendIMEMessageExA
EnableWindow
DialogBoxParamW
DdeCreateStringHandleW
SetMenuItemInfoW
MessageBoxA
MessageBoxIndirectA
LoadMenuIndirectA
DefDlgProcW
DdeClientTransaction
CloseClipboard
GetIconInfo
UnloadKeyboardLayout
TileChildWindows
wsprintfW
RealChildWindowFromPoint
GetListBoxInfo
EnumPropsW
GetMenuInfo
PeekMessageW
wvsprintfW
SetTimer
CreateDialogIndirectParamA
SetCapture
RegisterClassExA
EnumPropsExW
GetQueueStatus
GetThreadDesktop
WindowFromPoint
RegisterClassW
DrawCaption
DlgDirSelectExA
DdeCreateDataHandle
EnumClipboardFormats
MapWindowPoints
GetWindow
UnregisterDeviceNotification
InsertMenuA

kernel32

VirtualAlloc
IsValidCodePage
lstrlen
CompareStringA
ExitProcess
CloseHandle
MultiByteToWideChar
SetLastError
GetDateFormatA
EnumSystemLocalesA
SetFilePointer
GetStdHandle
LCMapStringW
lstrlenA
GetProcAddress
GetSystemTimeAsFileTime
HeapDestroy
SetStdHandle
TlsFree
CreateMutexA
GetVersionExA
GetOEMCP
TlsAlloc
TerminateProcess
RtlUnwind
OpenMutexA
HeapSize
GetLocaleInfoA
GetStartupInfoW
HeapFree
LockFileEx
GetModuleFileNameW
GetFileType
GetSystemInfo
FreeEnvironmentStringsW
InterlockedExchange
WriteFileEx
GetLocaleInfoW
DeleteCriticalSection
VirtualQuery
GetCommandLineW
VirtualFree
TlsGetValue
GetACP
GetModuleHandleW
IsBadWritePtr
GetCurrentThread
CompareStringW
TlsSetValue
GetCommandLineA
GetCurrentThreadId
GetCurrentProcessId
HeapAlloc
GetTimeZoneInformation
GetFullPathNameW
lstrcmpiW
GetCPInfo
FlushFileBuffers
FreeEnvironmentStringsA
GetComputerNameW
LeaveCriticalSection
HeapReAlloc
GetCurrentProcess
LCMapStringA
SetHandleCount
UnhandledExceptionFilter
HeapCreate
GetPrivateProfileStructW
LoadLibraryA
GetStringTypeW
WriteFile
InitializeCriticalSection
GetLastError
GetEnvironmentStringsW
GetStartupInfoA
IsValidLocale
GetModuleHandleA
SetEnvironmentVariableA
GetModuleFileNameA
GetTimeFormatA
ReadFile
GetUserDefaultLCID
VirtualProtect
GetEnvironmentStrings
GetTickCount
ReadConsoleOutputCharacterA
QueryPerformanceCounter
WideCharToMultiByte
EnterCriticalSection
GetStringTypeA

comctl32

DrawStatusTextW
ImageList_GetDragImage
CreateStatusWindow
ImageList_GetImageInfo
ImageList_Create
ImageList_DrawIndirect
MakeDragList
CreateToolbar
InitCommonControlsEx
ImageList_DragEnter
ImageList_DragMove
ImageList_AddMasked
ImageList_SetBkColor
CreatePropertySheetPageW
ImageList_LoadImageA

Sections

.text
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 252KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 110KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d1a1f7565f9f3504b1e8a9385b1de135

Headers

File Characteristics

PDB Paths

Imports

user32

kernel32

comctl32

Sections

.text Size: 232KB - Virtual size: 232KB

.rdata Size: 252KB - Virtual size: 252KB

.data Size: 110KB - Virtual size: 120KB

.rsrc Size: 66KB - Virtual size: 65KB

.text
Size: 232KB - Virtual size: 232KB

.rdata
Size: 252KB - Virtual size: 252KB

.data
Size: 110KB - Virtual size: 120KB

.rsrc
Size: 66KB - Virtual size: 65KB