978347e3b5e1c0a5708b1cb98cc328f2

Sharing

Copy URL Twitter E-mail

General

Target

978347e3b5e1c0a5708b1cb98cc328f2
Size

200KB
MD5

978347e3b5e1c0a5708b1cb98cc328f2
SHA1

488b2024189d8c76cfcea4c29be8edb04066f839
SHA256

c5a532e923365cd1ac85290bd89617ea52730312ceb211ce77ab3d2ccba2a373
SHA512

6dd38cc69d1851485c7011b4e864d9e0dc75690961a1b179ecb2936a1c0dc56ce957fe23a6aa4de58f6b274568ea3a08f1f2c9cd3297032a733f588708bcd875
SSDEEP

3072:KR6JVPx++LLL7SufZ/MPEBMoFM0OukhSr0J5SgT0DbqV:dx+qL7rB/MPGMoFxE5t0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
978347e3b5e1c0a5708b1cb98cc328f2

Files

978347e3b5e1c0a5708b1cb98cc328f2
.exe windows:4 windows x86 arch:x86

c4fee5642487c53b009569f428b431a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DrawEdge
DrawFrameControl
DispatchMessageW
ClientToScreen
DestroyCursor
CharToOemA
DispatchMessageA
DestroyIcon
DestroyWindow
ChildWindowFromPoint
BeginPaint
CharNextA
CreateIcon
CheckMenuItem
CharLowerA
CharLowerBuffA
CharUpperBuffA
DefFrameProcA
DrawIcon
CharNextW
DestroyMenu
CallWindowProcA
CloseClipboard
CreatePopupMenu
CreateMenu
DefMDIChildProcA
CallNextHookEx
DeleteMenu
DefWindowProcA
AdjustWindowRectEx

comdlg32

GetFileTitleA
GetOpenFileNameA
ChooseColorA
GetSaveFileNameA
FindTextA

msvcrt

abs

comctl32

ImageList_Remove
ImageList_Write
ImageList_DragShowNolock
ImageList_Draw
ImageList_Destroy
ImageList_Read
ImageList_GetBkColor
ImageList_Add

oleaut32

SysAllocStringLen

version

GetFileVersionInfoSizeA
VerInstallFileA

ole32

CreateBindCtx
StgCreateDocfileOnILockBytes

kernel32

CreateEventA
CompareStringA
CreateThread
DeleteCriticalSection
GetDiskFreeSpaceA
GetFileType
lstrlenA
GetFileSize
GlobalAlloc
DeleteFileA
FindClose
GetProcAddress
EnumCalendarInfoA
GetFullPathNameA
GetCurrentThreadId
GetCommandLineA
EnterCriticalSection
GetACP
LoadLibraryA
FindResourceA
GetEnvironmentStrings
CreateFileA
GetCurrentProcessId
FreeResource
GetVersionExA
FindFirstFileA
FormatMessageA
GetModuleHandleA
ExitProcess
VirtualAlloc
GetCPInfo
ExitThread
CloseHandle
GetLastError
GetFileAttributesA
Sleep
LocalAlloc
FreeLibrary
IsBadReadPtr
GetDateFormatA

shell32

Shell_NotifyIconA
SHGetFileInfoA
SHGetDiskFreeSpaceA

gdi32

GetDIBits
GetObjectA
GetPaletteEntries
GetDIBColorTable
SelectObject
GetRgnBox
LineTo
GetPixel
CreatePenIndirect

shlwapi

SHGetValueA
SHDeleteKeyA
SHEnumValueA
PathIsDirectoryA
PathGetCharTypeA
SHSetValueA
PathFileExistsA
SHDeleteValueA

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 942B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc2
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc7
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc3
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc9
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc6
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c4fee5642487c53b009569f428b431a5

Headers

File Characteristics

Imports

user32

comdlg32

msvcrt

comctl32

oleaut32

version

ole32

kernel32

shell32

gdi32

shlwapi

Sections

.text Size: 68KB - Virtual size: 67KB

.data Size: 1024B - Virtual size: 942B

.rsrc2 Size: 1KB - Virtual size: 1KB

.rsrc7 Size: 1KB - Virtual size: 1KB

.rsrc3 Size: 118KB - Virtual size: 118KB

.rsrc9 Size: 2KB - Virtual size: 1KB

.rsrc6 Size: 5KB - Virtual size: 5KB

.rsrc Size: 1024B - Virtual size: 976B

.text
Size: 68KB - Virtual size: 67KB

.data
Size: 1024B - Virtual size: 942B

.rsrc2
Size: 1KB - Virtual size: 1KB

.rsrc7
Size: 1KB - Virtual size: 1KB

.rsrc3
Size: 118KB - Virtual size: 118KB

.rsrc9
Size: 2KB - Virtual size: 1KB

.rsrc6
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 1024B - Virtual size: 976B