86988bbe2983109d5bb17ccb9a8e4445

Sharing

Copy URL Twitter E-mail

General

Target

86988bbe2983109d5bb17ccb9a8e4445
Size

64KB
MD5

86988bbe2983109d5bb17ccb9a8e4445
SHA1

e199250b16d2c33456f1edcff8cc695c638c0305
SHA256

19c0fb81e2eb308fb831d60f65f446372992c6d5c965b4afa895b4c1e6497ac3
SHA512

19a5b3e563f6cb539101be2d09694b8ce7182244d172fada55c73ab207da2a4314c9032b1b059a0ab9cbdad56799afa4fdf6d1e106372b5865377eef612a0592
SSDEEP

768:Da7lwK3oEKnvP/yBV9uCMC0rWIAbpAtuUHAwP9RskhSegWlUuXTiAoOB2dh1tk4g:Da7R3a4eCMWLwP9R3wegWlJoOodh2R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86988bbe2983109d5bb17ccb9a8e4445

Files

86988bbe2983109d5bb17ccb9a8e4445
.exe windows:5 windows x86 arch:x86

8634578d11584547853a13bb55ba4149

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Q:\bJopoGtcfihg\yelaxhnzdVkhwX\jtZMHTknAS.pdb

Imports

user32

CheckMenuItem
WaitForInputIdle
InternalGetWindowText
FindWindowExA
SwitchToThisWindow
ActivateKeyboardLayout
IsCharAlphaW
MapWindowPoints
InsertMenuA
SetWindowTextW
HideCaret
GetDlgItemInt
DrawAnimatedRects
SetMenu
MonitorFromPoint
GetWindowLongW
SetWindowLongW
DefDlgProcA
SendMessageW
MessageBoxA
WaitMessage
GetPropW
wvsprintfW
MoveWindow
RegisterHotKey
DragObject
GetMenuItemCount
GetNextDlgTabItem
IsZoomed
IsDlgButtonChecked
GetAsyncKeyState
DefDlgProcW
GetScrollInfo
GetDC
GetLastActivePopup
InvertRect
EnumThreadWindows
SetDlgItemInt
PostMessageW
InflateRect
UnloadKeyboardLayout
GetWindow
ShowOwnedPopups
ClipCursor
GetWindowTextLengthW
GetCursorPos
FindWindowW
ScreenToClient
GetKeyboardType
CloseDesktop
GetSystemMetrics
RegisterWindowMessageA
SetCaretPos
CharLowerW
ValidateRect
PostQuitMessage
GetSystemMenu
WindowFromPoint
SetClassLongW
GetKeyState
IsDialogMessageA
InSendMessage
CharNextW
DialogBoxParamW
GetUserObjectInformationW
ChildWindowFromPointEx
LoadImageW
RegisterClassExA
GetMessageExtraInfo
GetDlgItemTextW
ToUnicodeEx
BeginPaint
SetTimer
ExitWindowsEx
SetSysColors
GetSysColor
CharUpperA
GetClassNameW
IsWindowEnabled
CopyImage
GetDoubleClickTime
ModifyMenuW
LockWindowUpdate
AllowSetForegroundWindow
RemoveMenu
BringWindowToTop
SendMessageTimeoutW
CallWindowProcW
GetScrollRange
CharUpperBuffW
SendDlgItemMessageA
SetFocus
ScrollWindowEx
RegisterClassA
IsChild
GetDialogBaseUnits
SystemParametersInfoA
MapVirtualKeyExW
GetDCEx
DestroyWindow
EnumChildWindows
CreateDialogParamA
IsMenu
GetUpdateRect
LookupIconIdFromDirectory
wvsprintfA
CopyRect
EnableScrollBar
GetMessageA
LoadAcceleratorsW
LoadIconA
IsCharAlphaNumericW
DestroyCaret
CheckDlgButton
CreateDialogParamW
LoadCursorW
LoadStringA
ChildWindowFromPoint

msvcrt

_controlfp
toupper
__set_app_type
__p__fmode
fgetc
qsort
__p__commode
_amsg_exit
clock
ftell
fwrite
fread
wcscat
_initterm
time
_ismbblead
vsprintf
_XcptFilter
strstr
getc
wcsrchr
strtoul
wcstombs
fprintf
iswspace
_exit
wcsncpy
fflush
_cexit
fgets
realloc
isxdigit
strerror
vswprintf
ungetc
__setusermatherr
fputc
setlocale
__getmainargs
strncpy
puts
wcscspn
gmtime
mbtowc
iswalpha
malloc
strcspn

comctl32

CreatePropertySheetPageW
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_Destroy
ImageList_Draw
ImageList_GetIcon

shlwapi

StrToIntW

kernel32

GetDateFormatW
SetCommBreak
LCMapStringA
LoadLibraryA
CreateDirectoryA
RemoveDirectoryW
GetSystemTimeAsFileTime
SetThreadExecutionState
FlushViewOfFile
GetFileAttributesExW
ClearCommBreak
UnlockFile
FindNextChangeNotification
SearchPathA
GetAtomNameA
AddAtomW
GetCommandLineW
LocalFree
MapViewOfFile
MoveFileExW
CloseHandle
GetLongPathNameW
DeleteFileW
EnumResourceNamesW
FindNextFileA
FindFirstFileA
lstrlenA
GlobalGetAtomNameW
IsValidLanguageGroup
CancelIo
EnumResourceTypesA
CreateSemaphoreA
OpenFile
SizeofResource
LeaveCriticalSection
ResetEvent
IsDBCSLeadByte
GetModuleHandleW
GetCommTimeouts
GetCommState
SetWaitableTimer
MoveFileA
GetVersion
GetStdHandle
GetCompressedFileSizeW
CreateFileW
FindFirstChangeNotificationW
GetThreadContext
SetCommTimeouts
GetFileTime
GetCommProperties
VirtualProtect
SetupComm
ReadFile
RaiseException
SetEndOfFile

Exports

Exports

?GetShiftAltInfo@@YGK_KHE:O

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bit
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.insec
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.inmin
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wall
Size: 512B - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8634578d11584547853a13bb55ba4149

Headers

File Characteristics

PDB Paths

Imports

user32

msvcrt

comctl32

shlwapi

kernel32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 7KB

.bit Size: 1KB - Virtual size: 1KB

.insec Size: 6KB - Virtual size: 5KB

.inmin Size: 512B - Virtual size: 86B

.wall Size: 512B - Virtual size: 42KB

.zdata Size: 12KB - Virtual size: 12KB

.data Size: 2KB - Virtual size: 1KB

.tls Size: 512B - Virtual size: 512B

.rsrc Size: 30KB - Virtual size: 29KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 7KB

.bit
Size: 1KB - Virtual size: 1KB

.insec
Size: 6KB - Virtual size: 5KB

.inmin
Size: 512B - Virtual size: 86B

.wall
Size: 512B - Virtual size: 42KB

.zdata
Size: 12KB - Virtual size: 12KB

.data
Size: 2KB - Virtual size: 1KB

.tls
Size: 512B - Virtual size: 512B

.rsrc
Size: 30KB - Virtual size: 29KB

.reloc
Size: 1KB - Virtual size: 1KB