bbe2f7caf04366d25050755923af19f4

General

Target

bbe2f7caf04366d25050755923af19f4
Size

49KB
MD5

bbe2f7caf04366d25050755923af19f4
SHA1

da8afb9927d19159cf8d5c3b97a90c8e555ba13c
SHA256

4162d573b0f0ec5718a961bb0866ef00a5bd34ffe3c7c785f6b95b8db042ece9
SHA512

9487d5db8eab5706210e3a108927b9d310fb3e58f876304ab0595bf18eb92e3298583af51a39b87f746b6b22a472476ecf1a613af42b120f4e61e31884206d74
SSDEEP

768:ddqaDF2pgsjrvNfCtYqXLd4WXiHgvPJjzbchIGqBn7OMtwUx8fgtlkPVmLJ:BDF2pgQrvNs/XLaTqRjX5tcgzk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbe2f7caf04366d25050755923af19f4

Files

bbe2f7caf04366d25050755923af19f4
.exe windows:5 windows x86 arch:x86

d62487e1cdedca458f40f51f86cf61d6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PeekMessageW
GetWindowThreadProcessId
CloseDesktop
DrawIcon
GetKeyboardState
GetDlgItemTextW
GetWindowLongW
SetProcessWindowStation
EndDialog
OpenWindowStationA
GetMessageW
GetForegroundWindow
GetIconInfo
GetDlgItem
FindWindowExW
GetKeyState
GetMessageA
SendMessageW
PeekMessageA
CloseWindowStation
ExitWindowsEx
ToUnicode
GetDlgItemTextA
LoadCursorW
DispatchMessageW
GetWindowTextW
CharLowerBuffA
SetThreadDesktop
MsgWaitForMultipleObjects
GetClassNameW
OpenDesktopA
GetCursorPos
GetClipboardData

kernel32

SetEvent
ResetEvent
SetEndOfFile
GetCommandLineA
GetTickCount
MultiByteToWideChar
GetCurrentProcessId
GetVersionExW
FindNextFileW
FindClose
CopyFileW
HeapAlloc
GetCurrentThreadId
SetFileAttributesW
GetTimeZoneInformation
lstrcpyW
SetThreadPriority
GetLocalTime
UnmapViewOfFile
GetTempFileNameW
GetComputerNameW
GetTempPathW
FindResourceW
FlushFileBuffers
lstrcmpiA
SystemTimeToFileTime
WriteFile
CreateFileW
CreateEventW
SetLastError
ReleaseMutex
CreateFileMappingW
GetUserDefaultUILanguage
GlobalLock
lstrcpynW
GetFileSize
MapViewOfFile
CreateProcessW
GetSystemTime
ReadFile
FindFirstFileW
GetFileTime
IsBadReadPtr
GetLogicalDrives
lstrcpyA
ExpandEnvironmentStringsW
GetModuleHandleA
GetThreadPriority
GetExitCodeProcess
InitializeCriticalSection
HeapFree
CreateMutexW
GlobalUnlock
CreateDirectoryW
GetFileSizeEx
lstrlenA
GetLastError

Sections

.ylqz
Size: 39KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.der
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fun
Size: 7KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d62487e1cdedca458f40f51f86cf61d6

Headers

File Characteristics

Imports

user32

kernel32

Sections

.ylqz Size: 39KB - Virtual size: 61KB

.der Size: 2KB - Virtual size: 5KB

.fun Size: 7KB - Virtual size: 80KB

.ylqz
Size: 39KB - Virtual size: 61KB

.der
Size: 2KB - Virtual size: 5KB

.fun
Size: 7KB - Virtual size: 80KB