9b052ae81a3a7098a3b66ab5205f7ae2

Sharing

Copy URL Twitter E-mail

General

Target

9b052ae81a3a7098a3b66ab5205f7ae2
Size

600KB
MD5

9b052ae81a3a7098a3b66ab5205f7ae2
SHA1

80dd45414ec0ab48c17f71430b6c10e79270f89b
SHA256

8f26fa861a66c73cfffbe29badf04a24c56718ee791ce7e9758a4651c1302c28
SHA512

6bb0157c38a527accf29529dd58aeec2d692011dc27be4cb7ecca0f7f4f6cfc72e4caa365d15c68294d605360551c75159448593082f7375270947782cdf5651
SSDEEP

12288:R6CP1anqIdVqWC5jAmRjqLG5YDM9m6dch8MeO3MBZCmdEIeHk+u/X:Q00huWbSqLG5hA6dIeQMCm+IIkb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b052ae81a3a7098a3b66ab5205f7ae2

Files

9b052ae81a3a7098a3b66ab5205f7ae2
.exe windows:4 windows x86 arch:x86

44edb4864a7fb47abb23d9ab6006563c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

CreateToolbarEx
ImageList_Create
MakeDragList
InitCommonControlsEx
ImageList_DragEnter
CreatePropertySheetPage
ImageList_DragMove

user32

CreateMDIWindowW
TranslateMessage
DdeKeepStringHandle
CharLowerA
EditWndProc
SendDlgItemMessageW
ToUnicode
CharNextExA
SetScrollPos
LoadMenuA
GetDlgItem
AdjustWindowRect
ScrollDC
KillTimer
ModifyMenuA
IsCharAlphaNumericW
PackDDElParam
PtInRect
ChildWindowFromPointEx
DestroyWindow
SetMenuItemInfoW
ScrollWindowEx
DestroyIcon
GetKBCodePage
SetWindowsHookA
DlgDirSelectComboBoxExA
IsDialogMessageA
ReleaseCapture
SetPropW
RegisterDeviceNotificationA
SetMenuDefaultItem
MessageBoxW
ClipCursor
MoveWindow
TileChildWindows
DefWindowProcA
RegisterClassExA
ChangeDisplaySettingsExA
RedrawWindow
RegisterClipboardFormatW
CopyIcon
SetMenu
DdeQueryStringA
SetMenuItemInfoA
CopyAcceleratorTableA
UnregisterHotKey
DlgDirListComboBoxW
RegisterClassA
ToUnicodeEx
PostThreadMessageA
SetUserObjectSecurity
SetShellWindow
UnpackDDElParam
CreateIcon
AdjustWindowRectEx
CreateWindowExA
EnumPropsA
CloseWindowStation
ExcludeUpdateRgn
SetScrollInfo
DdeCmpStringHandles
EnumPropsExA
SetUserObjectInformationA
LoadKeyboardLayoutA
TranslateAcceleratorA
GetDC
GetTitleBarInfo
CreateWindowStationA
ValidateRect
DdeDisconnectList
SetWindowTextW
WinHelpA
ChangeDisplaySettingsW
ShowWindow
GetWindowTextLengthA
GetMonitorInfoA
EnumWindowStationsW
GetMenuStringA
WaitForInputIdle
FindWindowA
GrayStringA
MapVirtualKeyExA
GetPropW
DragDetect
ArrangeIconicWindows
GetComboBoxInfo
FindWindowW
RegisterClassW
DdeConnectList
DefDlgProcW
FillRect
GetMessageExtraInfo
EnumPropsW
GetMessagePos
AnimateWindow
DlgDirListW
GetClassNameA
FindWindowExW

kernel32

CloseHandle
GetEnvironmentStrings
TlsAlloc
GetCommandLineW
HeapReAlloc
RemoveDirectoryW
VirtualAlloc
GetModuleFileNameA
LCMapStringA
OpenWaitableTimerW
LoadLibraryW
lstrcatA
SetFilePointer
GetModuleHandleA
InterlockedDecrement
GetCommandLineA
TlsSetValue
lstrcmpiA
TlsFree
SetStdHandle
GetCurrentProcessId
InitializeCriticalSection
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
SetEnvironmentVariableW
GetConsoleMode
IsBadWritePtr
GetVersion
GetModuleFileNameW
FreeEnvironmentStringsA
OpenMutexA
GetCurrentThreadId
GetSystemTime
GetTickCount
ReadFile
GetProcAddress
ExitProcess
FreeEnvironmentStringsW
GetCurrentThread
GetSystemTimeAsFileTime
LCMapStringW
GetCurrentProcess
GetStringTypeW
HeapFree
DeleteFileW
TlsGetValue
HeapCreate
SetHandleCount
GetLocalTime
GetFileType
LeaveCriticalSection
GetStartupInfoA
GetStartupInfoW
VirtualFree
LoadLibraryA
GetTimeZoneInformation
RtlUnwind
GetStdHandle
MultiByteToWideChar
WaitForMultipleObjectsEx
GetLastError
FlushFileBuffers
SetLastError
HeapDestroy
UnhandledExceptionFilter
GetPrivateProfileSectionA
HeapAlloc
DeleteCriticalSection
InterlockedExchange
WriteFile
DuplicateHandle
VirtualQuery
GetStringTypeA
QueryPerformanceCounter
EnterCriticalSection
CompareStringW
CreateMutexA
CompareStringA
TerminateProcess
GetTimeFormatA
SetEnvironmentVariableA
SetThreadLocale
InterlockedIncrement

Sections

.text
Size: 192KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 116KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

44edb4864a7fb47abb23d9ab6006563c

Headers

File Characteristics

Imports

comctl32

user32

kernel32

Sections

.text Size: 192KB - Virtual size: 188KB

.rdata Size: 256KB - Virtual size: 252KB

.data Size: 116KB - Virtual size: 126KB

.rsrc Size: 32KB - Virtual size: 29KB

.text
Size: 192KB - Virtual size: 188KB

.rdata
Size: 256KB - Virtual size: 252KB

.data
Size: 116KB - Virtual size: 126KB

.rsrc
Size: 32KB - Virtual size: 29KB