85af0035d2e6981b44d097329ac3dc4c

Sharing

Copy URL Twitter E-mail

General

Target

85af0035d2e6981b44d097329ac3dc4c
Size

111KB
MD5

85af0035d2e6981b44d097329ac3dc4c
SHA1

3c2739a686e4d7e834fcd621dd3c8ac0568873f3
SHA256

9473277d85e549a21f8ba3054196c9774afac3e723684eca43fc33a69e382db7
SHA512

9e5dc667741b337c4afc26e57f989f95cba40b2f0587502875017a9def45fd008e5ef438036332fcff688b989422019f6d801fd134c55165a4490500b6720c8a
SSDEEP

1536:OVejHMLv3OeRp/UvZupD6dqBQ5Xf50c1gST6ypX2BGZqW+kp4M2:OVejHMT31RCaDOLhiWX2BSqW+jM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85af0035d2e6981b44d097329ac3dc4c

Files

85af0035d2e6981b44d097329ac3dc4c
.exe windows:4 windows x86 arch:x86

bdd268077206dfc747de7f67a81bb943

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetDIBits
GetClipBox
SaveDC
CopyEnhMetaFileA

user32

SetClassLongA
DrawAnimatedRects
GetClassLongA
GetLastActivePopup
UnregisterClassA
CharNextW
UpdateWindow
MsgWaitForMultipleObjects
GetKeyboardLayout
GetDesktopWindow
GetMessagePos
FindWindowA
GetDC
SetWindowsHookExA
SetRect
GetFocus
ShowWindow
IntersectRect
RemovePropA
IsDialogMessageW
GetWindowDC
DispatchMessageW
MoveWindow
GetKeyboardLayoutNameA
RegisterWindowMessageA
IsWindowVisible
SetWindowTextA
ShowScrollBar
LoadKeyboardLayoutA
DestroyIcon
CloseClipboard
ClientToScreen
OpenClipboard
EnumChildWindows
IsDialogMessageA
SetActiveWindow
GetMenuItemID
ChildWindowFromPoint
GetWindowRect
SetTimer
DefMDIChildProcA
DrawMenuBar
SetParent
IsWindowEnabled
GetWindowThreadProcessId
InvalidateRect
IsZoomed
MapVirtualKeyA
SetWindowPos
GetKeyboardType
GetKeyState
wsprintfA
SetScrollInfo
GetCursor
GetClipboardData
GetMenuStringA
MessageBeep
RegisterClassA
GetCursorPos
GetIconInfo
MapWindowPoints
GetClassInfoA
DestroyMenu
PeekMessageA
SetMenu
CharLowerBuffA
DestroyWindow
SetWindowLongW
ActivateKeyboardLayout
CallNextHookEx
SetScrollPos
GetSystemMetrics
EqualRect
EmptyClipboard
RedrawWindow
DrawTextA
GetClassNameA
GetActiveWindow
UnhookWindowsHookEx
OffsetRect
ReleaseCapture
EnableWindow
RegisterClipboardFormatA
GetForegroundWindow
KillTimer
GetWindow
AdjustWindowRectEx
GetWindowLongA
SetMenuItemInfoA
LoadStringA
ReleaseDC
LoadCursorA
GetMenu
GetWindowLongW
GetKeyboardState
CreatePopupMenu

shell32

DragQueryFileA
Shell_NotifyIconA
SHGetDesktopFolder

oleaut32

VariantChangeType
SysAllocStringLen
SysStringLen

kernel32

lstrlenA
ExitThread
GetLastError
lstrcatA
SetEvent
GetModuleHandleA
VirtualAlloc
SetLastError
GetVersionExA
VirtualAllocEx
Sleep
GlobalFindAtomA
CreateEventA
ExitProcess
LocalAlloc
GetProcAddress
GetSystemDefaultLangID

version

VerInstallFileA
VerFindFileA
VerQueryValueA

shlwapi

SHEnumValueA
PathFileExistsA
SHSetValueA
SHDeleteKeyA
SHQueryInfoKeyA
PathGetCharTypeA
PathIsContentTypeA

comctl32

ImageList_Create

Sections

CODE
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bdd268077206dfc747de7f67a81bb943

Headers

File Characteristics

Imports

gdi32

user32

shell32

oleaut32

kernel32

version

shlwapi

comctl32

Sections

CODE Size: 28KB - Virtual size: 27KB

.data Size: 75KB - Virtual size: 75KB

.idata Size: 3KB - Virtual size: 3KB

.tls Size: 1024B - Virtual size: 520B

DATA Size: 2KB - Virtual size: 1KB

CODE
Size: 28KB - Virtual size: 27KB

.data
Size: 75KB - Virtual size: 75KB

.idata
Size: 3KB - Virtual size: 3KB

.tls
Size: 1024B - Virtual size: 520B

DATA
Size: 2KB - Virtual size: 1KB