a3143e0566a0c6fdd3547b9cb2611113

Sharing

Copy URL Twitter E-mail

General

Target

a3143e0566a0c6fdd3547b9cb2611113
Size

190KB
MD5

a3143e0566a0c6fdd3547b9cb2611113
SHA1

bf6255ecd4f126ceaccc6bf16c9d37cc7c303bd7
SHA256

c2bcbc1d256527b1e23c7d0d73d098aa1754892ab583a7837f231720923d440a
SHA512

5277944706ba5ca2365c87f693c4baa9fadfaeb142010c0a589197ff1a753fd4ad774786362411d8a32e78885126ac7a280462df43d550bcac352bf394fd0a7a
SSDEEP

3072:r+8sNOu10hV8p1HF+i4h3+8zgYr6TXeefHR3795kziNciGrpe6CoiNUDzvivOE3c:r+8s0H8HHF+Jhu8zgDt5aziNcvrEbczX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3143e0566a0c6fdd3547b9cb2611113

Files

a3143e0566a0c6fdd3547b9cb2611113
.exe windows:5 windows x86 arch:x86

d60a4a193586f57e4bd5295d4c8cbdaf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetBitmapDimensionEx
WidenPath
CreatePen
SetAbortProc
SelectClipRgn
StartPage
SetViewportOrgEx
GetDIBits
CreateDCW
TextOutW
SetStretchBltMode
RemoveFontResourceA
GetWindowOrgEx
GetObjectW
SetWindowExtEx
CreateHatchBrush
Escape
LineTo
SetDIBits
GetSystemPaletteUse
TextOutA
CreatePatternBrush
ExtTextOutW
PatBlt
SetWindowOrgEx
GetTextExtentPointW
CreateBitmapIndirect
CreateICW
CreatePalette
GetTextAlign
GetNearestPaletteIndex
RectVisible
GetViewportOrgEx
BeginPath
GetTextExtentPointA
SetTextAlign
PathToRegion
RectInRegion
GetRgnBox
GetSystemPaletteEntries
UnrealizeObject
ExtTextOutA
MoveToEx
CreateFontW
SetPixel
OffsetViewportOrgEx
GetStockObject
GetObjectA
AddFontResourceW

msvcrt

strtol
strstr
swprintf
isprint
_controlfp
floor
strtoul
wcsstr
ftell
rand
__set_app_type
gmtime
clearerr
putchar
__p__fmode
strrchr
wcspbrk
system
__p__commode
free
_amsg_exit
localtime
gets
wcstoul
fread
_initterm
fwrite
strncmp
_ismbblead
_XcptFilter
wcsncmp
isspace
strcoll
getc
_exit
_cexit
srand
sscanf
__setusermatherr
fclose
__getmainargs
strpbrk
wcsrchr
iswctype

kernel32

WideCharToMultiByte
FileTimeToDosDateTime
GetFileAttributesA
GetEnvironmentStringsW
GetModuleFileNameA
GetSystemDefaultUILanguage
GlobalHandle
HeapReAlloc
GetLastError
LocalUnlock
GetBinaryTypeW
GetWindowsDirectoryA
ReleaseMutex
GetFileAttributesW
GetFileAttributesExW
IsBadReadPtr
GetOEMCP
GetCommProperties
CreateFileA
AddAtomW
HeapCreate
ReadDirectoryChangesW
GetShortPathNameW
GetFileInformationByHandle
GetSystemInfo
lstrcmpA
HeapValidate
RemoveDirectoryA
DefineDosDeviceW
CreateFileMappingA
Sleep
lstrcpyA
CompareStringW
EnterCriticalSection
FindFirstFileW
RtlUnwind
SetLocalTime
GetSystemTimeAdjustment
OpenSemaphoreW
CreateFileMappingW
FreeLibrary
GlobalMemoryStatusEx
GetStdHandle
CreatePipe
CreateSemaphoreW
FoldStringW
RegisterWaitForSingleObject
GetThreadTimes
GetSystemWindowsDirectoryA
AddAtomA
GetBinaryTypeA
GetNumberFormatA
WaitForSingleObjectEx
FindNextFileW

user32

IsChild
SetCaretPos
wvsprintfA
InsertMenuW
SendDlgItemMessageA
DrawAnimatedRects
GetDlgItemInt
GetClassInfoA
CharPrevW
CharUpperBuffW
LoadImageA
IsDlgButtonChecked
LookupIconIdFromDirectory
GetFocus
EnableWindow
GetIconInfo
wsprintfW
MapWindowPoints
CreatePopupMenu
SendMessageTimeoutA
UpdateWindow
GetMessageW
DialogBoxParamA
UnloadKeyboardLayout
GetKeyboardLayoutNameW
CharToOemA
InvertRect
GetCaretPos
GetMenuItemRect
CreateDialogIndirectParamW
CreateIconFromResource
SetScrollPos
CharNextExA
GetScrollPos
ToUnicodeEx
GetMessageTime
CharLowerA
GetMessagePos
LoadStringA
SendMessageA
wvsprintfW
SetDlgItemInt
SetUserObjectInformationW
GetClipCursor
DrawEdge
ShowWindow
IsCharLowerA
GetMenuStringA
HideCaret
EndPaint
SetPropW
MapVirtualKeyA
LoadCursorA
AllowSetForegroundWindow
CopyRect
CharLowerW
GetMenuItemID
GetClassLongA
DrawStateW
GetDC
GetDesktopWindow
MessageBoxExW
GetMessageA
InSendMessage
DefDlgProcW
ModifyMenuW
VkKeyScanW
SystemParametersInfoW
OpenDesktopW
OpenInputDesktop
CreateWindowExA
GrayStringW
CreateCursor
EndDialog
GetSubMenu
SetParent
IsCharAlphaW
LoadBitmapA
InSendMessageEx
EnableScrollBar
DrawTextA
SendDlgItemMessageW
IsDialogMessageW
RegisterWindowMessageA
ShowScrollBar
DestroyWindow
CloseDesktop
GetClassNameW
InvalidateRgn
ScrollWindow
CallWindowProcA
SendMessageTimeoutW
CharUpperW
CheckMenuItem
RegisterClassExW
MapDialogRect
ActivateKeyboardLayout
SendMessageW
CharToOemBuffA
LoadAcceleratorsW
GetAsyncKeyState
OemToCharBuffA
RegisterWindowMessageW
GetWindowTextA
InvalidateRect
SetWindowTextA
SetWindowPlacement
InsertMenuItemW
GetKeyboardLayoutList
CallWindowProcW
GetPropW
TileWindows

Exports

Exports

?RtlSemaphoreA@@YGFDDNI<V

Sections

.text
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 83KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d60a4a193586f57e4bd5295d4c8cbdaf

Headers

File Characteristics

Imports

gdi32

msvcrt

kernel32

user32

Exports

Exports

Sections

.text Size: 103KB - Virtual size: 103KB

.data Size: 83KB - Virtual size: 129KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 103KB - Virtual size: 103KB

.data
Size: 83KB - Virtual size: 129KB

.reloc
Size: 2KB - Virtual size: 1KB