a25de8493bc1bd6ae898dcdae7fd6b91

Sharing

Copy URL Twitter E-mail

General

Target

a25de8493bc1bd6ae898dcdae7fd6b91
Size

110KB
MD5

a25de8493bc1bd6ae898dcdae7fd6b91
SHA1

ccaea0c87a811e03c85525727f499032312700e2
SHA256

374012cccc886b2bfa97870187aa8c142b7b3769bf604fc0c09be20b1b9e3b1d
SHA512

3c13dda185d4827bcab514ab7265d3ebf5ab931b22ad67b768227ce39640429b6430ae3365641e7ac8dedeb5d7ef74a56461f74f21ea6c6ef5f81497e0fc3230
SSDEEP

3072:ye0K5dOEAbqopjbrda62E6s7LXU1CKM9BeiX3EKuD:yKtAbHbrs62K7I1l2IK0pD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a25de8493bc1bd6ae898dcdae7fd6b91

Files

a25de8493bc1bd6ae898dcdae7fd6b91
.exe windows:5 windows x86 arch:x86

d14a1bc3f7ff135f17144af84e8f0288

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

H:\NocLciiEVf\heLxulknkvay\GtsancssxWOK\dtLVzhc.pdb

Imports

msvcrt

mktime
wcsncpy
_controlfp
islower
__set_app_type
wcsstr
putchar
__p__fmode
fgets
wcstoul
iswspace
rand
iswprint
ungetc
__p__commode
wcscmp
fflush
iswalpha
isupper
tolower
wcscspn
strrchr
atol
_amsg_exit
strstr
realloc
fgetc
wcstombs
toupper
isprint
qsort
floor
strpbrk
putc
wcstod
isxdigit
fseek
wcspbrk
_initterm
getc
_ismbblead
towupper
strchr
mbstowcs
iswctype
_XcptFilter
_exit
_cexit
strtol
isdigit
__setusermatherr
setvbuf
mbtowc
swscanf
ftell
srand
iswxdigit
atoi
strcspn
__getmainargs
fclose
perror

kernel32

OpenFile
IsBadReadPtr
LoadResource
GetCommProperties
VirtualFree
GetSystemDefaultUILanguage
GlobalGetAtomNameW
TerminateThread
LCMapStringA
TransactNamedPipe
GetComputerNameW
GetSystemTimeAsFileTime
CreateFileW
ResumeThread
GetTempFileNameW
LocalUnlock
lstrcmpW
CallNamedPipeW
EnumResourceNamesA
GetCommandLineW
MoveFileA
SetHandleCount
WriteFile
CreateMailslotW
GlobalReAlloc
GetNumberFormatW
IsValidLocale
GetAtomNameA
EnumResourceLanguagesA
GetThreadContext
GetACP
GetLocalTime
ConnectNamedPipe
FileTimeToDosDateTime
ClearCommError
IsDBCSLeadByte
GetModuleHandleA
SetErrorMode
lstrcpynW
TlsSetValue
LoadLibraryA
InitializeCriticalSection
lstrcmpiA
lstrcpyA
DeleteFileA
LocalReAlloc
lstrcmpA
SearchPathW
GetFileSize
SetWaitableTimer
DefineDosDeviceW
GetCommState
QueryDosDeviceW
GetTimeFormatA
SetSystemTimeAdjustment
SizeofResource
LoadLibraryExW
SetThreadContext
HeapReAlloc
SetNamedPipeHandleState
GetFileAttributesExW
RaiseException
GetWindowsDirectoryA
CompareFileTime
LocalLock
GetBinaryTypeA
SetThreadPriority
SetThreadAffinityMask
CopyFileW
FindFirstChangeNotificationW
PulseEvent
SetUnhandledExceptionFilter
CreateNamedPipeA
GetFullPathNameW
EnumResourceNamesW
HeapValidate
GetStdHandle

shell32

ord3
ord6

comctl32

ImageList_Create
ImageList_Write
PropertySheetW
ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_LoadImageW
ImageList_AddMasked
ImageList_GetImageCount
DestroyPropertySheetPage

gdi32

SelectObject
CreateFontW
SetDIBColorTable
RemoveFontResourceW
RestoreDC
Rectangle
GetBkMode
SetDIBitsToDevice
CombineRgn
ExcludeClipRect
RectInRegion
OffsetViewportOrgEx
TextOutA
CreateBrushIndirect
GetDIBColorTable
CreateSolidBrush
CreateFontIndirectW
CreateHalftonePalette
SetViewportOrgEx
EnumFontFamiliesExW
EndDoc
SetTextColor
CreateCompatibleDC
CreatePalette
AddFontResourceW
GetTextExtentPoint32W
EndPath
GetTextColor
GetTextExtentPointA
CreateDIBSection
SetMapMode
CreatePenIndirect
GetLayout
ExtTextOutW
ExtFloodFill
CreateBitmap
GetTextMetricsW
StartPage
LineTo
SetStretchBltMode
GetFontData
TranslateCharsetInfo
CreatePatternBrush
GetTextFaceW
ScaleWindowExtEx
LPtoDP
EndPage
CreateICW
SetBrushOrgEx
DeleteObject
Escape
GetNearestColor
SelectPalette
GetCurrentObject
FillRgn
SetPaletteEntries
BitBlt
SetBkMode
CreateDIBitmap
StretchBlt
CreateDiscardableBitmap
DeleteDC
SaveDC
GetTextExtentPoint32A
BeginPath
WidenPath
ExtTextOutA
GetBitmapBits

comdlg32

ChooseFontW
ChooseColorW
GetOpenFileNameW
GetFileTitleW
FindTextW

user32

GetClientRect
GetShellWindow
DeferWindowPos
SendMessageW
wvsprintfW
GetDesktopWindow
EnumChildWindows
GetMessageExtraInfo
RedrawWindow
ClipCursor
CharToOemA
UnionRect
CopyImage
SetWindowTextA
CharToOemBuffA
TranslateMessage
SetWindowTextW
RegisterClassExA
SendDlgItemMessageW
SetRect
CheckDlgButton
GetClassLongA
PtInRect
MapVirtualKeyExW
SetWindowLongA
GetMenuState
GetDialogBaseUnits
GetIconInfo
InSendMessageEx
GetMenuItemID
GetClassInfoExA
GrayStringW
CreateCaret
IntersectRect
SetWindowLongW
PostMessageW
SetParent
ShowCursor
LoadImageA
CreateDialogParamA
MessageBoxExA
EnableMenuItem
GetMenuStringA
CharNextExA
GetMenu
InvalidateRect
LoadCursorA
GetWindowTextLengthW
DispatchMessageW
DestroyAcceleratorTable
WaitForInputIdle
GetUserObjectInformationW
IsWindowUnicode
DestroyIcon
IsDlgButtonChecked
EqualRect
LoadAcceleratorsA
SetPropW
DrawEdge
ChildWindowFromPointEx
GetWindowPlacement
GetCaretPos
LoadImageW
UnloadKeyboardLayout
GetMessageTime
GetMessageA
CharPrevA
EndPaint
FillRect
SendMessageA
MapVirtualKeyA
wsprintfA
SetCursor
IsCharAlphaNumericW
GetDlgItemInt
SendNotifyMessageW
SetDlgItemInt
DefWindowProcA
GetDlgCtrlID
GetDCEx
GetFocus
IsIconic
LoadStringA
CreateMenu
EndTask
GetKeyboardLayout
DrawFrameControl
CharNextA
DestroyCursor
MapWindowPoints
SetCaretPos
DrawIconEx
GetDoubleClickTime
CreatePopupMenu
GetLastActivePopup
DialogBoxParamA
GetKeyNameTextW
OemToCharA
GetForegroundWindow
CharUpperA
GetActiveWindow
GetDlgItemTextW
GetMonitorInfoW
MessageBoxExW
SystemParametersInfoA
GetScrollRange
keybd_event
GetDlgItemTextA
ShowOwnedPopups
GetWindowLongW
GetPropW
DefWindowProcW
SetClassLongW
LoadBitmapW
SwitchToThisWindow
PostThreadMessageA
DrawTextA
GetUpdateRgn
GetMenuStringW
SwapMouseButton
mouse_event
SetMenuDefaultItem
KillTimer
InvalidateRgn
GetKeyboardLayoutList
GetKeyboardType
CheckRadioButton
CheckMenuRadioItem
GetSubMenu
ShowWindow
DeleteMenu
SetWindowPlacement
MessageBoxA
InvertRect
EnableScrollBar
AttachThreadInput
DrawFocusRect
FindWindowA
TranslateAcceleratorW
BringWindowToTop
OpenInputDesktop
ValidateRect
GetClassInfoA
GetWindowDC
GetMessagePos
AllowSetForegroundWindow
CharLowerA
LockWindowUpdate
SetDlgItemTextA
AdjustWindowRectEx
RegisterWindowMessageW
InsertMenuA
CallWindowProcW
GetNextDlgTabItem
CharPrevW
TrackPopupMenuEx
PostQuitMessage
DefDlgProcW
GetSysColorBrush
OpenDesktopW
CreateIconFromResource
RegisterWindowMessageA
ShowWindowAsync
SetMenuItemInfoW
SetWindowPos
DialogBoxIndirectParamW
InternalGetWindowText
wvsprintfA

Exports

Exports

?CallNextHookExDKkujdkasdf@@YGKPA_WK@Z

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code_d
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code_v
Size: - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gcode_1
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gcode_2
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gcode_3
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gcode_4
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d14a1bc3f7ff135f17144af84e8f0288

Headers

File Characteristics

PDB Paths

Imports

msvcrt

kernel32

shell32

comctl32

gdi32

comdlg32

user32

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 24KB

.itext Size: 10KB - Virtual size: 9KB

.rdata Size: 11KB - Virtual size: 10KB

.code_d Size: 13KB - Virtual size: 12KB

.data Size: 1KB - Virtual size: 1KB

.code_v Size: - Virtual size: 86KB

.gcode_1 Size: 6KB - Virtual size: 5KB

.gcode_2 Size: 6KB - Virtual size: 5KB

.gcode_3 Size: 6KB - Virtual size: 5KB

.gcode_4 Size: 29KB - Virtual size: 29KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 24KB - Virtual size: 24KB

.itext
Size: 10KB - Virtual size: 9KB

.rdata
Size: 11KB - Virtual size: 10KB

.code_d
Size: 13KB - Virtual size: 12KB

.data
Size: 1KB - Virtual size: 1KB

.code_v
Size: - Virtual size: 86KB

.gcode_1
Size: 6KB - Virtual size: 5KB

.gcode_2
Size: 6KB - Virtual size: 5KB

.gcode_3
Size: 6KB - Virtual size: 5KB

.gcode_4
Size: 29KB - Virtual size: 29KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 1KB - Virtual size: 1KB