a129ae6c02f1196b41d518b8f478338d

Sharing

Copy URL Twitter E-mail

General

Target

a129ae6c02f1196b41d518b8f478338d
Size

102KB
MD5

a129ae6c02f1196b41d518b8f478338d
SHA1

db61a9b0fe974be603d4f08ff65b75efac124903
SHA256

58ea3850454828585fa4ed283f7a8b52a2e9f15b718735c424de9d64c07895f0
SHA512

aa5204ea96462400564eb6f9f538e69d667445856eec48a952ff1b0319d80890d188a82e90069b248e621be2e8a19de0f281ed9d265e2f7f3ac316dcbdf0c8d2
SSDEEP

1536:YNS8dJau+12Po9C3xWEn+LhfaSj4/PoaPao1xqbzyWe:4S2+1zCBJ+lfZU5P7KXyW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a129ae6c02f1196b41d518b8f478338d

Files

a129ae6c02f1196b41d518b8f478338d
.exe windows:4 windows x86 arch:x86

8413da8e3de694f79828b4b5121589e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EnumWindows
GetClientRect
GetCursorPos
SetWindowPos
EnableScrollBar
PostQuitMessage
DestroyWindow
GetDC
SendMessageW
RemoveMenu
MsgWaitForMultipleObjects
PeekMessageA
ActivateKeyboardLayout
GetWindowDC
LoadStringA
RedrawWindow
CreateIcon
SetPropA
GetKeyNameTextA
GetLastActivePopup
SetScrollPos
GetSystemMetrics
GetFocus
OpenClipboard
LoadKeyboardLayoutA
SetScrollRange
EnableMenuItem
GetMenuItemCount
EnumChildWindows
IsRectEmpty
SendMessageA
DeleteMenu
IsChild
DestroyCursor
SetForegroundWindow
RegisterWindowMessageA
IsDialogMessageW
LoadIconA
MoveWindow
GetCapture
SetParent
SetActiveWindow
CharToOemA
DrawEdge
MapVirtualKeyA
InsertMenuItemA
GetActiveWindow
GetDesktopWindow
PeekMessageW
GetWindowRect
WindowFromPoint
ScreenToClient
GetMenuState
GetScrollInfo
EqualRect
CallNextHookEx
SetClipboardData
LoadBitmapA
CharNextA
CharLowerA
SetWindowPlacement
AdjustWindowRectEx
SetCursor
DefWindowProcA
IsDialogMessageA
DefFrameProcA
CallWindowProcA
GetKeyboardState
SetMenu
IsWindow
GetIconInfo
PostMessageA
GetDCEx
GetScrollRange
InflateRect
CharLowerBuffA
CheckMenuItem
ClientToScreen
ChildWindowFromPoint
TrackPopupMenu
CharUpperBuffA
IsWindowEnabled
DrawTextA
ScrollWindow
DispatchMessageW
EnumThreadWindows
IsZoomed
GetSysColorBrush
GetForegroundWindow
DispatchMessageA
DestroyMenu
ShowOwnedPopups
PtInRect
MapWindowPoints
GetClassInfoA
GetMenuItemInfoA

kernel32

VirtualAllocEx
GetModuleHandleA
EnumCalendarInfoA
GetStartupInfoA
ExitProcess
GlobalAlloc
WaitForSingleObject
SetEndOfFile
FreeResource
SetLastError
lstrcmpA
FormatMessageA
LoadResource
GetCommandLineA
GetProcAddress
lstrcpyA
SetEvent

shell32

SHGetDesktopFolder
SHGetFolderPathA
Shell_NotifyIconA

version

VerFindFileA
GetFileVersionInfoSizeA

gdi32

GetDIBColorTable
SelectObject
GetPaletteEntries
GetRgnBox
CreateFontIndirectA
BitBlt
CreateBrushIndirect
GetDIBits

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

BSS
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8413da8e3de694f79828b4b5121589e9

Headers

File Characteristics

Imports

user32

kernel32

shell32

version

gdi32

Sections

.text Size: 27KB - Virtual size: 27KB

.tls Size: 67KB - Virtual size: 67KB

.idata Size: 3KB - Virtual size: 2KB

DATA Size: 2KB - Virtual size: 1KB

BSS Size: 1KB - Virtual size: 1KB

.text
Size: 27KB - Virtual size: 27KB

.tls
Size: 67KB - Virtual size: 67KB

.idata
Size: 3KB - Virtual size: 2KB

DATA
Size: 2KB - Virtual size: 1KB

BSS
Size: 1KB - Virtual size: 1KB