80fbbb55e8dbf0834db348bf8866ef40d2896b30fa525da339d57cc99c1d15da

Sharing

Copy URL Twitter E-mail

General

Target

80fbbb55e8dbf0834db348bf8866ef40d2896b30fa525da339d57cc99c1d15da
Size

3.8MB
MD5

47ce3573f04fb39f6de37a5f8650bafc
SHA1

8806020808295afb7fa3a3c51db23a0e95dd8d26
SHA256

80fbbb55e8dbf0834db348bf8866ef40d2896b30fa525da339d57cc99c1d15da
SHA512

398f5726a09fb790eeb75f2f9bb9cbbd013731bc59365433c853f21cdcb63d54bfcb50359a2a3bac0597c72becff40b78694f3c0a61f2dcbb4f103d81940b964
SSDEEP

24576:tjVE6KK5qN/BSNzfwLJHN2p/Uok7GCr+HHHHF1jufC7VJjI21+:thKrCwJHNaGY1jufCw21+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
80fbbb55e8dbf0834db348bf8866ef40d2896b30fa525da339d57cc99c1d15da

Files

80fbbb55e8dbf0834db348bf8866ef40d2896b30fa525da339d57cc99c1d15da
.exe windows:4 windows x86 arch:x86

9997886e120d590a103a25c8248e956b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\My Projects\GS Typing Tutor\Output\Eng\GSTypingLT.pdb

Imports

kernel32

VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RtlUnwind
RaiseException
SetStdHandle
GetFileType
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
HeapReAlloc
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
SetHandleCount
GetConsoleCP
GetConsoleMode
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
ExitProcess
FindNextFileA
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
SetErrorMode
GetOEMCP
GetCPInfo
InterlockedIncrement
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
GetCurrentProcessId
GetFileAttributesA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetThreadLocale
SetEndOfFile
FlushFileBuffers
lstrcmpA
InterlockedDecrement
GetModuleFileNameW
GlobalAlloc
LocalFree
MulDiv
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
GetACP
CompareStringA
InterlockedExchange
CompareStringW
GetModuleFileNameA
FormatMessageA
GetLocalTime
UnlockFile
LockFile
GetVersionExA
GetCurrentThreadId
FreeLibrary
GetTimeFormatA
GetDateFormatA
GetProcAddress
GetModuleHandleA
LoadLibraryA
lstrcpynA
GlobalFree
GlobalUnlock
GlobalLock
FreeResource
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
DeleteFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileTime
CopyFileA
GetFileSize
MultiByteToWideChar
GetWindowsDirectoryA
WriteFile
ReadFile
SetFilePointer
SetLastError
DeviceIoControl
GetLastError
CreateFileA
GetVersion
Sleep
GetShortPathNameA
TerminateThread
GetExitCodeThread
CreateEventA
WaitForSingleObject
SetEvent
CreateThread
CloseHandle
lstrlenA
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
LCMapStringA
GetTickCount

user32

ReuseDDElParam
UnpackDDElParam
PostQuitMessage
MapDialogRect
SetWindowContextHelpId
ValidateRect
TranslateMessage
GetMessageA
ShowOwnedPopups
GetMenuItemInfoA
GetSysColorBrush
UnregisterClassA
IsRectEmpty
CharNextA
CopyAcceleratorTableA
SetRect
InvalidateRgn
MessageBeep
RegisterClipboardFormatA
PostThreadMessageA
EndPaint
BeginPaint
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetWindowTextLengthA
GetWindowTextA
GetLastActivePopup
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
TrackPopupMenu
GetMenu
LoadMenuA
GetMenuItemID
GetMenuItemCount
MessageBoxA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetDlgCtrlID
CallWindowProcA
IntersectRect
GetWindowPlacement
DrawTextW
ToUnicode
LockWindowUpdate
ShowCursor
SetFocus
FindWindowExA
CharUpperA
CreateCaret
DestroyCaret
ShowCaret
SetCaretPos
HideCaret
GetTabbedTextExtentA
DestroyCursor
DefWindowProcA
DrawIconEx
IsZoomed
SetWindowRgn
CallNextHookEx
GetForegroundWindow
ToAscii
AdjustWindowRect
SetWindowLongA
GetWindowLongA
LoadIconA
UnhookWindowsHookEx
SetWindowsHookExA
GetNextDlgGroupItem
PostMessageA
DrawFocusRect
MapVirtualKeyExA
GetKeyboardLayout
GetKeyboardState
DrawAnimatedRects
GetKeyState
GetFocus
SetCursor
SetActiveWindow
GetActiveWindow
IsWindowEnabled
DestroyWindow
CreateDialogIndirectParamA
GrayStringA
DrawTextExA
TabbedTextOutA
GetDoubleClickTime
GetSystemMetrics
GetWindowDC
SetWindowPos
UpdateWindow
SystemParametersInfoA
FillRect
GetWindow
SetForegroundWindow
BringWindowToTop
DestroyMenu
GetWindowThreadProcessId
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
SetRectEmpty
SetMenu
TranslateAcceleratorA
GetNextDlgTabItem
EndDialog
GetSubMenu
InflateRect
LoadCursorA
LoadImageA
IsIconic
ScreenToClient
GetCursorPos
IsWindowVisible
GetWindowRect
GetSysColor
OffsetRect
CopyRect
InvalidateRect
IsWindow
SendMessageA
GetParent
KillTimer
ReleaseCapture
SetCapture
GetCapture
SetTimer
PtInRect
WindowFromPoint
GetClientRect
ClientToScreen
SetClassLongA
GetClassLongA
DrawTextA
GetDesktopWindow
LoadBitmapA
ReleaseDC
GetDC
EnableWindow
CreateWindowExA

gdi32

CreateRectRgn
GetDIBits
MoveToEx
CombineRgn
GetTextExtentPoint32W
GetCharWidth32A
GetBitmapBits
OffsetRgn
GetClipBox
IntersectClipRect
GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
ScaleViewportExtEx
GetCharWidthA
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
CreateRectRgnIndirect
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
SetStretchBltMode
RestoreDC
ExcludeClipRect
SaveDC
GetTextExtentPoint32A
CreateFontIndirectA
DPtoLP
Escape
GetCharABCWidthsA
LPtoDP
EndDoc
EndPage
SetViewportExtEx
SetWindowExtEx
SetMapMode
StartPage
StartDocA
CreateDCA
Ellipse
CreateBitmap
ExtTextOutA
TextOutA
RectVisible
PtVisible
RoundRect
EnumFontFamiliesExA
TextOutW
RealizePalette
SetDIBColorTable
GetDIBColorTable
CreatePen
CreatePalette
GetDeviceCaps
GetStockObject
GetTextMetricsA
SetTextCharacterExtra
Rectangle
CreateSolidBrush
StretchBlt
DeleteObject
CreateCompatibleBitmap
SetBkMode
SetTextColor
SelectPalette
GetObjectA
DeleteDC
BitBlt
SetBkColor
GetPixel
SelectObject
CreateCompatibleDC
LineTo

comdlg32

GetFileTitleA
PageSetupDlgA
ChooseColorA
PrintDlgA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegCloseKey

shell32

ShellExecuteA
DragFinish
DragQueryFileA

shlwapi

StrStrIA
PathStripToRootA
PathIsUNCA
PathFileExistsA
PathFindExtensionA
PathFindFileNameA

oledlg

ord8

ole32

CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoGetClassObject
CoTaskMemFree
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard

oleaut32

SysAllocString
OleCreateFontIndirect
SafeArrayDestroy
VariantCopy
SysAllocStringByteLen
SysStringLen
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
SysFreeString
SystemTimeToVariantTime
VariantTimeToSystemTime

winmm

PlaySoundA
mciSendCommandA

Sections

.text
Size: 796KB - Virtual size: 792KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9997886e120d590a103a25c8248e956b

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

winmm

Sections

.text Size: 796KB - Virtual size: 792KB

.rdata Size: 164KB - Virtual size: 163KB

.data Size: 16KB - Virtual size: 62KB

.rsrc Size: 2.8MB - Virtual size: 2.8MB

.text
Size: 796KB - Virtual size: 792KB

.rdata
Size: 164KB - Virtual size: 163KB

.data
Size: 16KB - Virtual size: 62KB

.rsrc
Size: 2.8MB - Virtual size: 2.8MB