aa7e85c8dbdcbde410342ddb1657e3bd

Sharing

Copy URL Twitter E-mail

General

Target

aa7e85c8dbdcbde410342ddb1657e3bd
Size

344KB
MD5

aa7e85c8dbdcbde410342ddb1657e3bd
SHA1

a4961d7fa598e2f080ae5b17f4b3d73399d5dfb3
SHA256

558d1a590f4cf5072a112086b7fef709014ad0a74da5467e6e3d661e34b1d14e
SHA512

7dd4c7e6b7908690c86f8ea12210ba1bc82a83a8df365744baa4dd4fd75ce73c5474fa907183214764578a088917c44e2f3470eb024b31b2f3ad1e00917d6f86
SSDEEP

6144:OXWtS5kAzmjUD5k1+3lBWcXMmpawmi51nGNpB1/8JO0DQaGzcPemS:Jakqmwe1+3lBWwz1GNpBKrENl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa7e85c8dbdcbde410342ddb1657e3bd

Files

aa7e85c8dbdcbde410342ddb1657e3bd
.exe windows:0 windows x86 arch:x86

a599c664d54f6e9872a10b29ad23f8ce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

CreateWindowExA
DefWindowProcA
TranslateMessage
UpdateWindow
RegisterClassExA
SendMessageA
ShowWindow
GetMessageA
DestroyWindow
DispatchMessageA

msvcrt

__set_app_type
wcscmp
__dllonexit
__argc
_wsplitpath
_controlfp
__wgetmainargs
_cexit
_except_handler3
exit
_XcptFilter
_getdcwd
_itow
wcscat
__p__fmode
wcschr
_beginthreadex
_CxxThrowException
_adjust_fdiv
rand
_initterm
__CxxFrameHandler
free
_c_exit
_wtol
__p__commode
_wcsdup
_wtoi
_wcsicmp
__wargv
_exit
_onexit
__setusermatherr

kernel32

GetModuleHandleW
lstrcpyW
RaiseException
GetCurrentProcess
GlobalLock
GetThreadLocale
LoadLibraryW
HeapAlloc
CreateDirectoryW
GetTimeFormatW
GetTickCount
HeapSize
CloseHandle
GetNumberFormatW
UnhandledExceptionFilter
IsDBCSLeadByte
lstrcmpiW
GetLocaleInfoW
InterlockedExchange
FindClose
GetFileAttributesW
GetTempPathW
GetSystemTimeAsFileTime
GetModuleHandleA
CreateFileW
QueryPerformanceCounter
LoadLibraryA
GetDateFormatW
GetProcessHeap
lstrlenA
MultiByteToWideChar
GetProcessHeaps
GetExitCodeThread
LocalAlloc
TerminateProcess
FileTimeToSystemTime
InterlockedDecrement
lstrcpynW
SetErrorMode
lstrlenW
VirtualFree
GlobalAlloc
GetCurrentThreadId
FileTimeToLocalFileTime
GetCurrentProcessId
GlobalUnlock
GetFileSize
LocalFree
GetProcAddress
lstrcatW
GetFileTime
FreeLibrary
InterlockedIncrement
GetACP
VirtualAlloc
GetTempFileNameW
lstrcmpW
GetLastError
FindFirstFileW
GlobalReAlloc

gdi32

Rectangle
GetDIBits
Ellipse
GetDeviceCaps
LineTo
CreateFontIndirectW
FillRgn
SetDIBitsToDevice
CreateRectRgnIndirect
CreatePalette
RestoreDC
EnumFontFamiliesW
CreateDIBitmap
CreateICW
GetDIBColorTable
SelectPalette
GetStockObject
ExtFloodFill
PatBlt
OffsetRgn
LPtoDP
TextOutW
EnumFontFamiliesExW
ResizePalette
SetBkMode
PlayMetaFile
GetBkMode
BitBlt
Polygon
RoundRect
CreateSolidBrush
DeleteObject
SetDIBColorTable
PolyBezier
SetMapMode
SetTextAlign
GetTextColor
CreateDIBSection
SetViewportExtEx
PtVisible
CreatePen
SetPaletteEntries
MoveToEx
CreateDCW
TranslateCharsetInfo
SelectObject
RealizePalette
SetPixel
CreatePolygonRgn
SetTextColor
GetNearestPaletteIndex
ExtTextOutW
DeleteDC
SetBrushOrgEx
SetStretchBltMode
SetROP2
CreateCompatibleDC
GetNearestColor
Escape
CreateCompatibleBitmap
GetObjectW
StretchBlt
CreatePatternBrush
GetPaletteEntries
GetTextMetricsW
CreateBitmap
SetBkColor
CreateHalftonePalette

Sections

.text
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 191KB - Virtual size: 812KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a599c664d54f6e9872a10b29ad23f8ce

Headers

DLL Characteristics

File Characteristics

Imports

user32

msvcrt

kernel32

gdi32

Sections

.text Size: 183KB - Virtual size: 183KB

.data Size: 6KB - Virtual size: 5KB

.rsrc Size: 191KB - Virtual size: 812KB

.text
Size: 183KB - Virtual size: 183KB

.data
Size: 6KB - Virtual size: 5KB

.rsrc
Size: 191KB - Virtual size: 812KB