b48563ca13c389f912a8ca3204a6bd1c

Sharing

Copy URL Twitter E-mail

General

Target

b48563ca13c389f912a8ca3204a6bd1c
Size

140KB
MD5

b48563ca13c389f912a8ca3204a6bd1c
SHA1

f9200c1a20fbc837e76fbc8e5ea58aaeab7c710a
SHA256

2cb0c9e9574ea33a0900834a08506a78e44ff0eee31e6e3f42e56017a6d59b40
SHA512

c6c36f6119630a6339d12e7254666868d6a456e63abd55b3dcfcff9110c257437960408d5cd2874db51113eb812bb640bcce47b143ea44e066a7bd3c6206f159
SSDEEP

3072:DdHvwQqm3hYqKqWl1a+dJuFJXSrm1YarWdXKFbscbJv:hPom3hYqKj1BJWXEm1YvcNsO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b48563ca13c389f912a8ca3204a6bd1c

Files

b48563ca13c389f912a8ca3204a6bd1c
.exe windows:5 windows x86 arch:x86

767a85c499654f3bed116d42cc8e5a35

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

I:\LfWUjeagVF\fxluwohojrt\phhzvhfuyyG.pdb

Imports

user32

SetWindowTextW
SetWindowPlacement
EnumWindows
SetRect
ScrollWindowEx
IntersectRect
OemToCharA
SwitchToThisWindow
WindowFromPoint
RegisterClassA
RegisterWindowMessageA
GetClassInfoExA
GetCursorPos
ActivateKeyboardLayout
GetKeyboardLayoutNameW
ToUnicodeEx
MapWindowPoints
SendMessageTimeoutA
OemToCharBuffA
LoadImageW
GetWindowLongW
IsWindowUnicode
CreateWindowExW
ScrollWindow
DefWindowProcW
DrawEdge
GetMenu
GetWindowDC
FrameRect
CopyImage
IsZoomed
FillRect
GetWindowTextW
SetScrollRange
PostMessageA
TileWindows
PostMessageW
CharToOemW
wsprintfA
ChildWindowFromPoint
GetDlgItemTextA
ValidateRect
GetMenuItemID
WaitForInputIdle
LoadMenuA
DestroyIcon
DispatchMessageW
DispatchMessageA
GetClassInfoW
ReplyMessage
SetWindowLongW
CreateIconFromResource
SetWindowLongA
GetScrollRange
CreateDialogParamW
CharPrevA
IsCharLowerA
ShowOwnedPopups
GetClassNameW
LockWindowUpdate
RegisterWindowMessageW
DefDlgProcW
SetMenu
GetMenuItemCount
DestroyAcceleratorTable
GetUserObjectInformationA
GetMenuCheckMarkDimensions
ShowCursor
GetSysColor
SetDlgItemInt
DrawIconEx
ScreenToClient
GetClassInfoA
CallWindowProcA
ExitWindowsEx
InvalidateRect
GetMessageW
GetMenuItemInfoW
CheckDlgButton
GetDlgItemInt
GetClassLongA
DefDlgProcA
DefWindowProcA
CharToOemBuffA
LoadCursorW
GetWindowRect
ShowWindow
GetDC
CharToOemA
SetDlgItemTextA
IsCharAlphaA
CreateIconIndirect
GetWindowPlacement
GetCaretPos
CreateWindowExA
SetClassLongW
BeginDeferWindowPos
ShowCaret
DrawTextExW
SendMessageA
GetNextDlgGroupItem
GetClientRect
IsCharUpperA
GetSystemMenu
keybd_event
SetForegroundWindow
ClipCursor
BringWindowToTop
EnableScrollBar
AppendMenuW
GetForegroundWindow
CreateAcceleratorTableW
RegisterClassExW
LookupIconIdFromDirectory
OpenInputDesktop
CheckRadioButton
GetMonitorInfoW
GetClassLongW
SetScrollInfo
DrawFrameControl
DrawTextA
mouse_event
GetUpdateRgn

kernel32

FindNextFileA
GetStartupInfoA
SetLocalTime
ConvertDefaultLocale
SystemTimeToFileTime
UnmapViewOfFile
SetEndOfFile
LCMapStringW
SearchPathW
SuspendThread
GlobalFlags
SizeofResource
CallNamedPipeW
GlobalAddAtomW
AreFileApisANSI
GetComputerNameW
HeapAlloc
LocalLock
lstrcatW
GetLocalTime
CreateSemaphoreA
SetThreadAffinityMask
CreatePipe
GetShortPathNameA
GetNumberFormatA
GetHandleInformation
GetComputerNameA
SetCommBreak
GetShortPathNameW
GetStdHandle
DeleteFileA
GetFileType
CloseHandle
GetSystemDirectoryA
EnumResourceTypesA
GetBinaryTypeA
EnumResourceNamesA
CreateFileA
VirtualQuery
GlobalGetAtomNameW
SetThreadExecutionState
HeapFree
GetProcessHeap
SetFileAttributesW
GetCurrentThreadId
lstrlenA
MapViewOfFile
GetCommState
GetOEMCP
SetFileApisToOEM
InitializeCriticalSection
LoadLibraryExA
GetOverlappedResult
SearchPathA
GetFileSize
GetModuleFileNameA
CopyFileA
GetTickCount

shlwapi

PathIsUNCW

msvcrt

_controlfp
fgetc
swprintf
iswdigit
__set_app_type
gmtime
clearerr
strrchr
strerror
__p__fmode
getc
__p__commode
strspn
iswctype
fputs
iswspace
atoi
strchr
clock
exit
wcsncpy
ftell
wcscat
_amsg_exit
ungetc
_initterm
_ismbblead
localtime
wcsstr
fwrite
_XcptFilter
fflush
wcscmp
fgets
memset
wcsncmp
malloc
_exit
wcschr
_cexit
fprintf
wcstod
time
isspace
isupper
islower
__setusermatherr
__getmainargs

Exports

Exports

?CalculateStringCapacity@@YGKDDPAX:O

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.align
Size: 1KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.date
Size: 512B - Virtual size: 99B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dati
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.char
Size: 1024B - Virtual size: 717B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.odata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

767a85c499654f3bed116d42cc8e5a35

Headers

File Characteristics

PDB Paths

Imports

user32

kernel32

shlwapi

msvcrt

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 8KB

.align Size: 1KB - Virtual size: 124KB

.date Size: 512B - Virtual size: 99B

.dati Size: 6KB - Virtual size: 5KB

.char Size: 1024B - Virtual size: 717B

.odata Size: 13KB - Virtual size: 13KB

.data Size: 2KB - Virtual size: 1KB

.rsrc Size: 104KB - Virtual size: 103KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 9KB - Virtual size: 8KB

.align
Size: 1KB - Virtual size: 124KB

.date
Size: 512B - Virtual size: 99B

.dati
Size: 6KB - Virtual size: 5KB

.char
Size: 1024B - Virtual size: 717B

.odata
Size: 13KB - Virtual size: 13KB

.data
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 104KB - Virtual size: 103KB

.reloc
Size: 2KB - Virtual size: 1KB