ba5bb573beec568e71969df686463ca5

Sharing

Copy URL Twitter E-mail

General

Target

ba5bb573beec568e71969df686463ca5
Size

112KB
MD5

ba5bb573beec568e71969df686463ca5
SHA1

83a600def7691166f57362d8c3b500f9c7a285dd
SHA256

f8a3fa733d4cce6d5261b4486904eefca8c6e6c9ab753f0d86e3203a68ebe828
SHA512

e3e2c93e596d95156f81bd7662a007892c105818912ffecd64b8b4f3b1d87a711782e91f86919f42f1e5cd8949aae86a32cfbd5fd7aba11d7bf493f8de5a650f
SSDEEP

3072:jXSXAdLIA6NifpbCui2FJUdQ1eAexvtaQ3/V8n6:jXo0LLlBmutU0eGQ/V8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba5bb573beec568e71969df686463ca5

Files

ba5bb573beec568e71969df686463ca5
.exe windows:5 windows x86 arch:x86

46372ed69fbd9b951283d88a8ccc3e40

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

I:\joWhl\jCfmtmnd\pckVrzS\mwrkf.pdb

Imports

kernel32

LoadLibraryW
QueryPerformanceCounter
MoveFileW
CreateEventW
lstrcmpiW
WaitForSingleObject
GetAtomNameW
IsValidLanguageGroup
EscapeCommFunction
GetProcAddress
GetDateFormatW
SetCommState
GetSystemTimeAsFileTime

user32

DialogBoxParamW
ShowScrollBar
FindWindowA
TabbedTextOutW
GetDlgItemInt
SetWindowRgn
CharUpperBuffA
GetMenuItemID
GetKeyState
DialogBoxIndirectParamW
DestroyMenu
GetWindowLongW
GetPropW
TranslateMessage

comctl32

CreateToolbarEx
ImageList_Write
ImageList_AddMasked
ImageList_Create

comdlg32

ReplaceTextW
GetFileTitleW
PrintDlgExW
GetOpenFileNameA

gdi32

EndDoc
CreateBitmap
GetCharWidth32W
ScaleWindowExtEx
GetDeviceCaps
EnumFontsW
GetTextExtentPoint32A
SetPixel
GetDIBits

Exports

Exports

?mqqcvaehTljdTy@@YGXII@Z
?rvvZlqscxkzso@@YGDPAI@Z

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.temp
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 127B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

46372ed69fbd9b951283d88a8ccc3e40

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

comctl32

comdlg32

gdi32

Exports

Exports

Sections

.text Size: 17KB - Virtual size: 16KB

.temp Size: 75KB - Virtual size: 75KB

.edata Size: 512B - Virtual size: 127B

.data Size: 5KB - Virtual size: 17KB

.crt Size: 6KB - Virtual size: 5KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 17KB - Virtual size: 16KB

.temp
Size: 75KB - Virtual size: 75KB

.edata
Size: 512B - Virtual size: 127B

.data
Size: 5KB - Virtual size: 17KB

.crt
Size: 6KB - Virtual size: 5KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 3KB - Virtual size: 2KB