9bd16af3f33da893528fc36dc7cdd771

Sharing

Copy URL Twitter E-mail

General

Target

9bd16af3f33da893528fc36dc7cdd771
Size

65KB
MD5

9bd16af3f33da893528fc36dc7cdd771
SHA1

043ad3e98125141711c34ce1a2e223b83bb68c73
SHA256

88562ffdfb298a693fef46938f37b50802339d894f33c92f1e257588f11c748d
SHA512

688a790beda90cda5b82eb7083202a55b8bf221ec8b9f5542fcaed19a78c93ade1f8564518d5c0b022c8a3a133d135ce2fd736f3dcb74dd1e5bedb17fce4cd07
SSDEEP

1536:C5jikooJVZhwQg2w4Vag/GuJIEiEFUu2YU2MMDvJdCtzJK:AikooJVP7wEYuJ1iEGubbdds

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9bd16af3f33da893528fc36dc7cdd771

Files

9bd16af3f33da893528fc36dc7cdd771
.exe windows:5 windows x86 arch:x86

28fd06d624cf11bad148eb79ac3b9fd0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

V:\qzJxxvddlmP\lZhrEQjrJuprUD\vCxuzfeBmtzg.pdb

Imports

gdi32

CreatePatternBrush
CreateFontIndirectW
EndDoc
Escape
FillRgn
Rectangle
SelectObject
PtInRegion
GetNearestColor
TextOutW
SetBkMode
GetNearestPaletteIndex
GetFontData
GetPixel
ExtFloodFill
GetBkMode
StretchDIBits
SetTextColor

user32

wsprintfA
CharNextExA
EnableScrollBar
DrawTextW
InsertMenuW
SetDlgItemTextA
AdjustWindowRectEx
LockWindowUpdate
ChildWindowFromPoint
DestroyWindow
GetPropW
SetMenu
LoadStringW
GetClassInfoExA
TileWindows
GetDlgItemTextW
DrawEdge
VkKeyScanW
EnableWindow
InSendMessage
CreateDialogParamA
CharLowerA
AdjustWindowRect
GetWindowTextW
IsCharAlphaNumericW
ShowOwnedPopups
GetKeyboardType
InSendMessageEx
GetLastActivePopup
IsDialogMessageW
GetClassInfoExW
IsWindowUnicode
TranslateAcceleratorW
SetParent
RegisterClassA
CreateMenu
SetSysColors
CallWindowProcW
ShowCaret
IsCharAlphaNumericA
PostQuitMessage
DefWindowProcW
HideCaret
GetSysColorBrush

msvcrt

_controlfp
fgetc
__set_app_type
__p__fmode
__p__commode
_amsg_exit
perror
isprint
strtol
_initterm
_acmdln
sprintf
wcsstr
exit
ungetc
fwrite
iswctype
swscanf
_ismbblead
_XcptFilter
_exit
setlocale
wcstok
_cexit
__setusermatherr
__getmainargs

kernel32

LocalFree
LoadResource
GetPriorityClass
SetFileAttributesW
GlobalGetAtomNameA
GetUserDefaultLangID
SleepEx
CancelWaitableTimer
TryEnterCriticalSection
IsDBCSLeadByteEx
FlushFileBuffers
IsBadWritePtr
GetCurrentDirectoryW
lstrcatW
GlobalMemoryStatus
CancelIo
EnumResourceLanguagesA
SearchPathW
SetHandleInformation
UnhandledExceptionFilter
GlobalFindAtomW

shlwapi

StrNCatW

comdlg32

FindTextW
GetSaveFileNameW
PageSetupDlgW
GetOpenFileNameA

Exports

Exports

?IsDevice@@YGPAGJE*Z
?CopyPointExA@@YGXPAM*Z
?CallThreadNew@@YGNPAIK*Z
?InvalidateClassExA@@YGKPAD*Z
?LoadComponentOld@@YGNJPAMG*Z
?GenerateMediaTypeExW@@YGGJ*Z
?EnumMemoryNew@@YGGK*Z
?IsNotPenExW@@YGHPAJPAGD*Z

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idir
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edir
Size: 512B - Virtual size: 343B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vdir
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdir
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdir
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

28fd06d624cf11bad148eb79ac3b9fd0

Headers

File Characteristics

PDB Paths

Imports

gdi32

user32

msvcrt

kernel32

shlwapi

comdlg32

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 35KB

.itext Size: 512B - Virtual size: 480B

.idir Size: 2KB - Virtual size: 2KB

.edir Size: 512B - Virtual size: 343B

.vdir Size: 512B - Virtual size: 140B

.pdir Size: 512B - Virtual size: 140B

.data Size: 2KB - Virtual size: 24KB

.sdir Size: 13KB - Virtual size: 13KB

.tls Size: 512B - Virtual size: 512B

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 36KB - Virtual size: 35KB

.itext
Size: 512B - Virtual size: 480B

.idir
Size: 2KB - Virtual size: 2KB

.edir
Size: 512B - Virtual size: 343B

.vdir
Size: 512B - Virtual size: 140B

.pdir
Size: 512B - Virtual size: 140B

.data
Size: 2KB - Virtual size: 24KB

.sdir
Size: 13KB - Virtual size: 13KB

.tls
Size: 512B - Virtual size: 512B

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 1KB - Virtual size: 1KB