a1b9ce8e4d652e11f39f8fe4094285db

Sharing

Copy URL Twitter E-mail

General

Target

a1b9ce8e4d652e11f39f8fe4094285db
Size

140KB
MD5

a1b9ce8e4d652e11f39f8fe4094285db
SHA1

dc062c36775f79636084323ee4103e53eac828c7
SHA256

6bfbdb77ddc55cf007e5e9075ec5603b23e2d2736f0d134b04c53ae0391be878
SHA512

f03ab090c4ad4349a9aaca4a16f8b24f47c156086263a533730d3e5f4203c37668859ba4bc0dddf82dee845f30604060d1206cff2d481467dcece54b9d0d204b
SSDEEP

3072:II6VxDIKa+KyRP7zpllqV0aqxIkq+2TPCE/avhrxxA6z8vt9C4Rd3gDVn:rehafyd7znli0a8Vq+2rTmrxxA6ovPCx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1b9ce8e4d652e11f39f8fe4094285db

Files

a1b9ce8e4d652e11f39f8fe4094285db
.exe windows:5 windows x86 arch:x86

7d108e0b7838008d7660fa3475479e4e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

L:\lnGxtqbQa\EyfejjemZnkQnk\mbzvhyc\wmqXenpLwugq\itmAPhtinJPk.pdb

Imports

user32

InvalidateRgn
GetUserObjectInformationA
GetWindowLongW
GetWindowTextW
GetMenuCheckMarkDimensions
HiliteMenuItem
GrayStringW
GetSubMenu
FindWindowW
CallWindowProcW
AppendMenuW
SetWindowLongA
ArrangeIconicWindows
SendNotifyMessageW
MapVirtualKeyA
wvsprintfA
GetDlgItemTextW
DialogBoxIndirectParamA
MessageBoxW
OemToCharA
GetMenuItemRect
CharUpperA
SetMenuItemBitmaps
CloseDesktop
SetParent
GetDCEx
BringWindowToTop
GetMenuItemID
RegisterHotKey
CharNextW
ActivateKeyboardLayout
WaitMessage
AllowSetForegroundWindow
GetCursorPos
AdjustWindowRectEx
IsZoomed
SetDlgItemInt
DialogBoxParamW
GetMessageTime
DispatchMessageW
GetKeyboardType
SetRect
CreatePopupMenu
RegisterClassExW
DefWindowProcA
DrawTextW
SetWindowRgn
CopyAcceleratorTableW
GetWindowTextLengthW
SetScrollInfo
wsprintfW
GetDlgCtrlID
GetScrollPos
HideCaret
LoadBitmapW
DrawIcon
RemoveMenu
DrawStateW
GetClassNameW
GetClassInfoExW
InternalGetWindowText
AttachThreadInput
ChildWindowFromPointEx
ClipCursor
GetMenuItemInfoW
DrawStateA
IsMenu
LoadCursorW
CreateWindowExA
GetMenu
InsertMenuA
MoveWindow
ExitWindowsEx
TabbedTextOutW
SystemParametersInfoA
PostThreadMessageA
SetWindowTextW
AdjustWindowRect
ShowCursor
IsCharAlphaA
ModifyMenuW
InvalidateRect
CreateDialogParamW

comctl32

InitCommonControlsEx
ImageList_GetIcon
DestroyPropertySheetPage
ImageList_Remove
ImageList_Create

shlwapi

UrlGetLocationA

msvcrt

gmtime
_controlfp
__set_app_type
putchar
__p__fmode
strtol
__p__commode
isupper
sscanf
_amsg_exit
iswspace
_initterm
vswprintf
system
strncpy
fclose
_ismbblead
tolower
towupper
wcstol
wcsrchr
_XcptFilter
putc
calloc
fprintf
atoi
time
sprintf
toupper
_exit
memset
wcsstr
_cexit
mbtowc
__setusermatherr
__getmainargs
malloc

kernel32

GetAtomNameA
CreateMutexA
GetCommTimeouts
GetModuleFileNameA
GetCommState
HeapAlloc
LocalUnlock
GetFullPathNameA
VirtualProtect
GlobalSize
GetNumberFormatA
GetOEMCP
GlobalDeleteAtom
GetSystemWindowsDirectoryA
GetFileInformationByHandle
GetSystemDirectoryA
SetFilePointer
FindNextFileA
GetComputerNameExW
GlobalMemoryStatus
ResetEvent
FindFirstFileW
FileTimeToSystemTime
SetSystemTime
GetFileType
ClearCommBreak
SetupComm
IsValidLocale
SetLastError
GetTickCount
MoveFileExW
OpenFileMappingA
ConvertDefaultLocale
CompareStringW
GetWindowsDirectoryA
GetDateFormatW
CompareStringA
IsDBCSLeadByteEx

Exports

Exports

?HistoryLoggingOn@@YGKDKPAX:O

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.eplan
Size: 512B - Virtual size: 91B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ainit
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdbg
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.iplan
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.run
Size: 1024B - Virtual size: 546B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.0dat
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d108e0b7838008d7660fa3475479e4e

Headers

File Characteristics

PDB Paths

Imports

user32

comctl32

shlwapi

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 23KB

.eplan Size: 512B - Virtual size: 91B

.ainit Size: 1024B - Virtual size: 852B

.rdbg Size: 512B - Virtual size: 118B

.data Size: 2KB - Virtual size: 128KB

.iplan Size: 4KB - Virtual size: 4KB

.run Size: 1024B - Virtual size: 546B

.0dat Size: 104KB - Virtual size: 103KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 24KB - Virtual size: 23KB

.eplan
Size: 512B - Virtual size: 91B

.ainit
Size: 1024B - Virtual size: 852B

.rdbg
Size: 512B - Virtual size: 118B

.data
Size: 2KB - Virtual size: 128KB

.iplan
Size: 4KB - Virtual size: 4KB

.run
Size: 1024B - Virtual size: 546B

.0dat
Size: 104KB - Virtual size: 103KB

.rsrc
Size: 2KB - Virtual size: 1KB