a155862e4fcf592d1d06e7d7cc8ca5f2

Sharing

Copy URL Twitter E-mail

General

Target

a155862e4fcf592d1d06e7d7cc8ca5f2
Size

201KB
MD5

a155862e4fcf592d1d06e7d7cc8ca5f2
SHA1

5dbf5bf70b2a7e551a7985dec391d1651af480ad
SHA256

cffb3df680f86a84393094d9413a06a3d16c60cec0cf7821fdb16ce239b4c653
SHA512

7c2e7b918c8dfc1895e2c2e51bc68ecd391594715658ac4ba13381b64308e7c74b4b649c434fb4f52d082348ffb3a4802bc8983ca939118db62b5492f893096b
SSDEEP

3072:EP3QSLIqMOJbAZy76tO23thRzNyZplk47TZRJwBRe/eycmjNEctl6p1z/Vb7M7BW:EP6KJb254XJEOPHjuAl6TJ7MByM5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a155862e4fcf592d1d06e7d7cc8ca5f2

Files

a155862e4fcf592d1d06e7d7cc8ca5f2
.dll windows:4 windows x86 arch:x86

e78e5ed19def1c537a470157d2680330

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comdlg32

ChooseColorA
FindTextA
GetFileTitleA

user32

ShowScrollBar
MessageBoxA
GetMenu
GetFocus
CreateWindowExA
CheckMenuItem
CharNextA
CallWindowProcA
FindWindowA
EnableScrollBar
SetWindowTextA
GetWindow
CreatePopupMenu
IsWindowEnabled
GetClassLongA
GetCursor
GetMenuItemID
GetClassInfoA
SetWindowPos
DrawIconEx
IsWindowVisible
GetParent
DispatchMessageA
DeferWindowPos
ClientToScreen
GetSysColor
DrawFrameControl

kernel32

GetEnvironmentStrings
GetVersion
VirtualAlloc
GetDateFormatA
FindResourceA
LoadLibraryA
GetStringTypeW
GetModuleHandleA
WriteFile
GetOEMCP
FreeResource
ExitProcess
GetCurrentProcess
FormatMessageA
CreateThread
VirtualAllocEx
WaitForSingleObject
DeleteFileA
SetThreadLocale
GlobalFindAtomA
SetLastError
LoadLibraryExA
GlobalAlloc
lstrlenA
GetStdHandle
CloseHandle
GetACP
GetCPInfo
SetErrorMode

msvcrt

_acmdln
memcmp
memmove
mbstowcs
log10
pow
memset
calloc
exp
wcstol
srand
wcsncmp

version

VerQueryValueA

ole32

OleCreateStaticFromData
MkParseDisplayName
CLSIDFromProgID
CoDisconnectObject
CoCreateInstanceEx
CreateBindCtx
CreateStreamOnHGlobal
CoRegisterClassObject

shlwapi

SHSetValueA
SHDeleteValueA
SHQueryValueExA
SHQueryInfoKeyA
PathFileExistsA

comctl32

ImageList_Destroy
ImageList_Read

gdi32

CreatePalette
CreateDIBitmap
GetBitmapBits
CreateCompatibleDC

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 160KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 22B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 596B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e78e5ed19def1c537a470157d2680330

Headers

File Characteristics

Imports

comdlg32

user32

kernel32

msvcrt

version

ole32

shlwapi

comctl32

gdi32

Sections

.text Size: 36KB - Virtual size: 36KB

.init Size: 160KB - Virtual size: 267KB

.idata Size: 512B - Virtual size: 22B

.rdata Size: 2KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 596B

.text
Size: 36KB - Virtual size: 36KB

.init
Size: 160KB - Virtual size: 267KB

.idata
Size: 512B - Virtual size: 22B

.rdata
Size: 2KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 596B