a290e286c17de5eed32aaca4154fb76b

Sharing

Copy URL Twitter E-mail

General

Target

a290e286c17de5eed32aaca4154fb76b
Size

320KB
MD5

a290e286c17de5eed32aaca4154fb76b
SHA1

eba5bf3e02939a5433c6aa2b8697ffc01542ef47
SHA256

1518db478de3fc1f549dd2a40976033c60e1d72be9384c795067b4b3d6cd4d0d
SHA512

d8659341834036b93049171e56f80aead1b08df1c6dc4a2f1d822f41f22ee086f7eb8c9d04a0c5715f9ba489a4e41ffb63f4859398950d748ce31abe4b11c107
SSDEEP

6144:iU9gPMWClS1HvYYFxOM1Sgn1gYgNlWlrHqRTGOa6FO1f:iUHStY4B1S2zg2lrqZGV64

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a290e286c17de5eed32aaca4154fb76b

Files

a290e286c17de5eed32aaca4154fb76b
.exe windows:4 windows x86 arch:x86

fd55ac9764e8e3adf8f4cff08448933d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

h:\aey

Imports

user32

PostMessageW
CreateCursor
CreateDialogParamA
RegisterClassExA
GetCursorPos
GetWindowLongA
BroadcastSystemMessage
LoadCursorW
DefWindowProcW
LoadIconW
SetWindowsHookExW
MessageBoxW
DeferWindowPos
GetMonitorInfoA
UnregisterHotKey
ToAscii
ShowWindow
LoadMenuIndirectW
SetUserObjectSecurity
GetClassInfoA
SetCaretBlinkTime
IsRectEmpty
GetCursorInfo
EnumDesktopsA
OpenClipboard
DestroyWindow
WindowFromDC
DestroyIcon
MessageBeep
DdeQueryConvInfo
OemToCharW
CharPrevW
ShowWindowAsync
TranslateMDISysAccel
IsWindowEnabled
CreateWindowExW
DdeGetData
GetKeyState
ChangeMenuA
GetCapture
DefMDIChildProcA
GetScrollRange
AppendMenuW
OemToCharBuffA
RegisterClassA
EnumDisplaySettingsExA
AdjustWindowRectEx
GetWindowTextLengthW
GetMenuItemInfoA
DdeUninitialize
InsertMenuA
GetDCEx
MapVirtualKeyExA
InvalidateRgn
GetMenu
GetComboBoxInfo
GetSysColorBrush
ActivateKeyboardLayout

kernel32

MultiByteToWideChar
TlsSetValue
WideCharToMultiByte
SetLastError
IsDebuggerPresent
GetCurrentThread
GetSystemTime
HeapReAlloc
GetVersionExW
GetCPInfo
TlsGetValue
FlushViewOfFile
GetStdHandle
OpenMutexA
GetWindowsDirectoryA
VirtualQueryEx
GetCommandLineA
SetStdHandle
LCMapStringA
VirtualQuery
InterlockedIncrement
CreateNamedPipeW
GetModuleFileNameA
SetCurrentDirectoryA
SetConsoleActiveScreenBuffer
InterlockedDecrement
GetStringTypeA
CompareStringA
FindNextFileW
GetTimeZoneInformation
SetLocaleInfoA
HeapDestroy
GetTimeFormatA
ReadFile
DeleteCriticalSection
GetStringTypeW
FlushFileBuffers
GetStartupInfoA
LoadLibraryA
GlobalGetAtomNameW
GetNumberFormatA
HeapCreate
InterlockedExchangeAdd
SetHandleCount
ResumeThread
CreateMutexA
GetLocalTime
InterlockedExchange
VirtualAlloc
CompareStringW
CloseHandle
GetOEMCP
HeapFree
IsBadWritePtr
FreeEnvironmentStringsA
GetVolumeInformationW
GetCurrentProcess
WriteFile
UnhandledExceptionFilter
HeapValidate
GetVersion
EnterCriticalSection
GetACP
TerminateProcess
LocalFlags
WritePrivateProfileStructW
lstrcpy
GetFileType
ReadConsoleInputA
QueryPerformanceCounter
GetEnvironmentStrings
GetTimeFormatW
AddAtomW
ExitProcess
GlobalUnfix
GetPriorityClass
LeaveCriticalSection
OpenWaitableTimerA
GetProcAddress
RtlUnwind
SetFilePointer
InitializeCriticalSection
EnumCalendarInfoExA
GetCurrentDirectoryA
FreeEnvironmentStringsW
HeapAlloc
VirtualFree
GetEnvironmentStringsW
GetCurrentProcessId
TlsFree
GetTickCount
TlsAlloc
LCMapStringW
SetEnvironmentVariableA
GetModuleHandleA
GetLastError
GetSystemTimeAsFileTime
GetCurrentThreadId
GetVersionExA
EnumSystemLocalesA
LocalShrink

comctl32

ImageList_LoadImage
ImageList_SetBkColor
ImageList_Remove
ImageList_SetIconSize
CreatePropertySheetPageA
InitCommonControlsEx
CreateStatusWindowA
ImageList_GetImageRect
DrawStatusTextW

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fd55ac9764e8e3adf8f4cff08448933d

Headers

File Characteristics

PDB Paths

Imports

user32

kernel32

comctl32

Sections

.text Size: 108KB - Virtual size: 107KB

.rdata Size: 68KB - Virtual size: 64KB

.data Size: 92KB - Virtual size: 100KB

.rsrc Size: 48KB - Virtual size: 45KB

.text
Size: 108KB - Virtual size: 107KB

.rdata
Size: 68KB - Virtual size: 64KB

.data
Size: 92KB - Virtual size: 100KB

.rsrc
Size: 48KB - Virtual size: 45KB