8e03adc3c1ca58b5ebdfbe7cd1b47742

Sharing

Copy URL Twitter E-mail

General

Target

8e03adc3c1ca58b5ebdfbe7cd1b47742
Size

105KB
MD5

8e03adc3c1ca58b5ebdfbe7cd1b47742
SHA1

0c270579802ac6209bcc5e8181aa597d1e76975d
SHA256

77fd6be28fa851cb472a830e2d07d4a5e0b62cae34f83b21708cd4c13064b613
SHA512

79fe48b9dc9b6018ff4f40ee610e66e88359ca90e6c828d20e10b5846e3ea2dcc8f2229f738da757bae70d295ea00a42175885d7f64bfd09c047487c79d5469e
SSDEEP

1536:yr7EGb0CEIG/lEcmfPxJTOKA9yF4h8UClPSOnqUpq1xAGC/9koY:yr7EGb0CC/lEcmfrjGyF4hdhOnPCxBH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e03adc3c1ca58b5ebdfbe7cd1b47742

Files

8e03adc3c1ca58b5ebdfbe7cd1b47742
.exe windows:4 windows x86 arch:x86

e4e3f670e02de472fb8d631eeb6881d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memmove
memcmp
log10

kernel32

GetProcAddress
GlobalAddAtomA
GetStringTypeW
GetACP
VirtualAlloc
HeapAlloc
GetModuleHandleA
FreeLibrary
lstrcmpiA
ExitProcess
LoadLibraryExA

shell32

DragQueryFileA

oleaut32

VariantCopyInd
SafeArrayPtrOfIndex
SysStringLen

gdi32

GetCurrentPositionEx

user32

PeekMessageW
ShowOwnedPopups
TranslateMessage
RemoveMenu
EqualRect
CheckMenuItem
InsertMenuItemA
SetWindowLongA
GetClassNameA
RegisterClipboardFormatA
GetKeyboardLayoutList
IsDialogMessageA
SetClipboardData
UpdateWindow
FrameRect
SetCursor
EmptyClipboard
SetScrollInfo
IsIconic
EnumChildWindows
GetCapture
GetKeyboardType
GetSysColor
MoveWindow
ReleaseCapture
LoadStringA
GetMenuItemCount
FindWindowA
MsgWaitForMultipleObjects
EnumThreadWindows
DefMDIChildProcA
TranslateMDISysAccel
GetWindowPlacement
PeekMessageA
CharNextA
CharUpperBuffA
TrackPopupMenu
GetTopWindow
DefWindowProcA
GetDC
ShowScrollBar
DrawIcon
RegisterWindowMessageA
GetClassInfoA
GetIconInfo
DispatchMessageA
SendMessageW
GetWindowLongW
CharToOemA
GetClipboardData
GetFocus
InsertMenuA
IsZoomed
OffsetRect
GetMenuItemID
EnableScrollBar
CreatePopupMenu
wsprintfA
IsRectEmpty
RemovePropA
ScrollWindow
GetMenu
SetForegroundWindow
IsWindowVisible
WindowFromPoint
SendMessageA
GetPropA
DrawTextA
IsDialogMessageW
SetScrollRange
GetSystemMetrics
LoadKeyboardLayoutA
RedrawWindow
SetWindowsHookExA
LoadIconA
EnableMenuItem
UnhookWindowsHookEx
GetSubMenu
EndPaint
UnregisterClassA
GetCursor
MapWindowPoints
MapVirtualKeyA
SetClassLongA
GetParent
SetWindowPos
ChildWindowFromPoint
CallNextHookEx
GetMenuState
GetLastActivePopup
GetMessagePos
GetActiveWindow
DeleteMenu
GetDCEx
DestroyWindow
IsWindow
ClientToScreen
SetMenu
DrawAnimatedRects
SetCapture
SetWindowPlacement
GetScrollInfo
GetWindowTextA
GetSystemMenu
GetScrollPos
GetClassLongA
EnableWindow
SetRect
SetPropA
SetActiveWindow
GetForegroundWindow

comdlg32

ChooseColorA
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
FindTextA

shlwapi

PathGetCharTypeA
SHQueryValueExA
SHDeleteKeyA
SHStrDupA

advapi32

GetUserNameA
RegQueryValueA
RegOpenKeyA

version

VerQueryValueA
GetFileVersionInfoSizeA

comctl32

ImageList_Remove
ImageList_DrawEx
ImageList_Draw

ole32

CoDisconnectObject
OleRegGetUserType
CoGetContextToken
MkParseDisplayName
CoTaskMemFree
CoReleaseMarshalData
CoGetObjectContext
CoUninitialize
ReleaseStgMedium
CoCreateGuid

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 512B - Virtual size: 402B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e4e3f670e02de472fb8d631eeb6881d5

Headers

File Characteristics

Imports

msvcrt

kernel32

shell32

oleaut32

gdi32

user32

comdlg32

shlwapi

advapi32

version

comctl32

ole32

Sections

.text Size: 30KB - Virtual size: 30KB

.bss Size: 512B - Virtual size: 402B

.idata Size: 73KB - Virtual size: 73KB

.text
Size: 30KB - Virtual size: 30KB

.bss
Size: 512B - Virtual size: 402B

.idata
Size: 73KB - Virtual size: 73KB