02bdf289f08112d36cf210660bfc8784fccf7fd16859a3c24cdf61b520af4910

Sharing

Copy URL Twitter E-mail

General

Target

02bdf289f08112d36cf210660bfc8784fccf7fd16859a3c24cdf61b520af4910
Size

210KB
MD5

2b708e8dadbb5f1bd862c0ebeec5bda0
SHA1

a965996d2573cdd87a9d255885e7a0f9ee974864
SHA256

02bdf289f08112d36cf210660bfc8784fccf7fd16859a3c24cdf61b520af4910
SHA512

8176993476ec43fead34ed7ebd0e03284c4b2dfef26da69f29cd00e88d37b7fdd1dd0b0966005794a004d2e8a30815de660f229aa95333ddabab0ad02fa51c6a
SSDEEP

6144:X7FNfPWWFicXxvoyGWwtBCflQeBFo9huVL9q4Sp/:vXichvoY0sK8o9UrS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02bdf289f08112d36cf210660bfc8784fccf7fd16859a3c24cdf61b520af4910

Files

02bdf289f08112d36cf210660bfc8784fccf7fd16859a3c24cdf61b520af4910
.exe windows:5 windows x86 arch:x86

ab1bd41617bb63d3270c0c4b29f65bf9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Awedye\NowsCris Magidodo x.pdb

Imports

shlwapi

PathGetArgsW
PathBuildRootW
PathIsRelativeW
ChrCmpIW
ord158
IsCharSpaceA
PathMakeSystemFolderA
PathAppendA
PathRemoveBlanksW
ord29

comctl32

PropertySheetW
ImageList_Read
ImageList_Destroy
ImageList_Remove

kernel32

GetSystemDirectoryW
TerminateThread
GetEnvironmentVariableA
GetConsoleOutputCP
SetCurrentDirectoryA
GetStdHandle
GetLastError
IsDBCSLeadByteEx
GetLongPathNameA
SetFileApisToOEM
GetOEMCP
GetUserDefaultUILanguage
FileTimeToLocalFileTime
GetPrivateProfileSectionW
lstrcpynA
IsBadWritePtr
FindFirstVolumeMountPointA
GetModuleHandleA
GetVolumeInformationW
GetThreadContext
GlobalAlloc
GetConsoleAliasExesLengthW
FindNextVolumeW
GetCurrentDirectoryW
lstrcmpiW
CreateIoCompletionPort
SetLocalTime
lstrcmpiA
CreateWaitableTimerW
GetComputerNameA
GlobalDeleteAtom
HeapAlloc
CreateProcessA
GetCompressedFileSizeA
CompareStringW
GetTempPathW
ResetEvent
EnumResourceTypesW
GetDriveTypeA
GetCommandLineA
GetProcessHeap
GetLogicalDrives
GetUserDefaultLCID
GetEnvironmentStringsW
GetSystemDefaultUILanguage
VirtualQuery
GlobalCompact
GetDriveTypeW
FreeResource
GetEnvironmentVariableW
GetCommandLineW
FindFirstVolumeMountPointW

user32

EmptyClipboard
SetClassLongW
GetWindowTextW
GetWindowLongA
AppendMenuW
BringWindowToTop
GetWindowTextA
ChildWindowFromPoint
LockWindowUpdate
GetWindowTextLengthA
SetParent
CopyAcceleratorTableA
GetProcessWindowStation
IsHungAppWindow
ChildWindowFromPointEx
DeleteMenu
SetMenuItemBitmaps
DrawIconEx
MsgWaitForMultipleObjects
EndDialog
TrackPopupMenu
CharNextW
DdeCreateStringHandleA
CreateDialogParamA
PostThreadMessageA
OpenIcon
MapVirtualKeyW
VkKeyScanW
TranslateAcceleratorW
InvertRect
SetCursor
SetWindowPlacement
EnumThreadWindows
VkKeyScanA
UpdateWindow
UnhookWindowsHookEx
CheckRadioButton
RemoveMenu
SendMessageTimeoutW
LoadIconW
InflateRect
GetMenuCheckMarkDimensions
SetFocus
GetClipCursor
SetForegroundWindow
DestroyWindow
ArrangeIconicWindows
ToUnicodeEx
AllowSetForegroundWindow
IsWindowVisible
EnableScrollBar
GetDesktopWindow
GetDlgItem
MapVirtualKeyExW
TranslateAcceleratorA
UnregisterClassA
MapVirtualKeyExA
LoadMenuW
CheckMenuRadioItem
MapVirtualKeyA
SetLastErrorEx
GetDoubleClickTime
GetClassLongW
EnumClipboardFormats
ShowCaret
CloseDesktop
CallNextHookEx
GetParent
SetActiveWindow
CheckMenuItem
SetClipboardViewer
SetCaretPos
SetThreadDesktop
GetSysColor
DestroyCaret
GetClipboardData
GetWindowLongW
IsCharAlphaNumericW
GetMonitorInfoA
IsCharAlphaW
IsWindowEnabled
LoadIconA
GetKeyState
IsChild
IsCharUpperA
DdeQueryStringA
wvsprintfA
GetMenuItemCount
CreateDialogParamW
SetWindowsHookExA
SetWindowLongW
IsWindowUnicode
GetKeyboardLayout
DdeInitializeA
CreateDesktopA
GetSubMenu
DdeGetLastError
GetClassInfoExA
IsCharAlphaA
HideCaret
CopyAcceleratorTableW
DdeCmpStringHandles
DestroyCursor
GetMenuStringA
DefMDIChildProcW
IsDlgButtonChecked
SwitchDesktop
AppendMenuA
CreateWindowExW
SetWindowsHookExW
OpenClipboard
HiliteMenuItem
DdeNameService
SetWindowTextA
LoadImageA
DestroyMenu
SetWindowTextW
ModifyMenuA
DefWindowProcW
GetMessagePos
ActivateKeyboardLayout
GetWindow
IsCharAlphaNumericA
GetShellWindow
IsIconic

gdi32

CombineRgn
PtInRegion
SetEnhMetaFileBits
SelectClipRgn
CreateDCA
OffsetRgn
TextOutW
GetStockObject
GetTextColor
GetTextFaceA
CreateFontA
StartPage
SetBkMode
CreateHalftonePalette
LineTo
GetObjectA
GetNearestPaletteIndex
Escape
BeginPath
SetROP2
CreatePen
CreatePatternBrush
PlayEnhMetaFile
CreateFontIndirectW
SetMetaFileBitsEx
SetBitmapBits
RestoreDC

Exports

Exports

?BapsskatfabsPinsDuithin@@YGEACUMesaAlarrepoHeapye@@MPCJ@Z
?BoloWiltLicecionbrr@@YGXE@Z
?ClipbareJoysOvenTugsClotGeumpan@@YGKACU_SYSTEMTIME@@K@Z
?DebtsodsArseguidchapIsba@@YGEACI@Z
?GorpGitelierBarbyechYagsboo@@YGGACUtagLOGFONTW@@U_SECURITY_ATTRIBUTES@@PCUDostBreeughsi@@ACUClefIckyfirow@@ACI@Z
?MissAghaFohntrek@@YGEACD@Z
?ReedRandPateUrbs@@YGXPCUtagLOGBRUSH@@PCUtagSIZE@@HPCG@Z
?SmitHoweliedsizeUser@@YGXUIwiscobsh@@PCUtagRECT@@UtagLOGPALETTE@@ACU_SYSTEMTIME@@K@Z

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ab1bd41617bb63d3270c0c4b29f65bf9

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

shlwapi

comctl32

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 88KB - Virtual size: 88KB

.data Size: 114KB - Virtual size: 113KB

.reloc Size: 6KB - Virtual size: 6KB

.rsrc Size: 512B - Virtual size: 448B

.text
Size: 88KB - Virtual size: 88KB

.data
Size: 114KB - Virtual size: 113KB

.reloc
Size: 6KB - Virtual size: 6KB

.rsrc
Size: 512B - Virtual size: 448B