bf3ff280379f045b5f45f2c37e7dba46

Sharing

Copy URL Twitter E-mail

General

Target

bf3ff280379f045b5f45f2c37e7dba46
Size

54KB
MD5

bf3ff280379f045b5f45f2c37e7dba46
SHA1

118bdf9eda215b6e2c5ac6f4246fff3e2727e43b
SHA256

86ef679a4c36af616e6b88a4129a0f2b293271e9067943a6b9874bea13b70603
SHA512

0fed0184527762016436cd2e68febbb2e69fe1f113b738efa08db1ed2443f23445e52664ce4f8ec2cbc2b2334c0c4447527ed36c335f3d0decd9d6e272506e97
SSDEEP

768:GUrmTwxMYWFQGNo+ww9Fe2vtWtUEmMS5YZ6fHnnRO2S0UcFC3/YiTaNyj:GUNsGwXn4CbHnRCPwNy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf3ff280379f045b5f45f2c37e7dba46

Files

bf3ff280379f045b5f45f2c37e7dba46
.exe windows:5 windows x86 arch:x86

bb42ae22e9f6eedde209ec13d69b3384

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

J:\iUjnswElgjeJok\tanarOZfowykio\ngPburEwop.pdb

Imports

kernel32

LocalUnlock
HeapSize
ResetEvent
HeapLock
SetThreadAffinityMask
lstrcatA
SizeofResource
WriteFile
GlobalAddAtomW
GetCurrentThreadId
CreateEventA
HeapWalk
GetStringTypeExW
CreateRemoteThread
GlobalGetAtomNameA
GetWindowsDirectoryA
GetBinaryTypeW
GetACP
GetModuleHandleA
FindResourceA
MoveFileW
OutputDebugStringA
SetThreadLocale
lstrcpyW
GetCommState
GetCommConfig
VirtualQuery
SetHandleCount
FreeLibrary
TransactNamedPipe
GetTickCount
GetShortPathNameW
CreateNamedPipeA
TlsSetValue
GetThreadLocale
GlobalHandle
GetLocalTime
GetTimeZoneInformation
VirtualProtect
MoveFileExW
GetFileTime
LCMapStringA
GetComputerNameW
DisconnectNamedPipe
lstrcmpA
WaitForSingleObject
LoadLibraryA
GetHandleInformation
SetCommState
ReleaseMutex
GetCurrentThread
GetThreadContext
TryEnterCriticalSection
GetTimeFormatA
IsBadStringPtrW
GetSystemDirectoryW

msvcrt

_controlfp
gmtime
perror
fgets
__set_app_type
vswprintf
remove
wcscat
ungetc
__p__fmode
printf
__p__commode
exit
wcstoul
wcscoll
time
isdigit
free
vsprintf
strpbrk
tolower
fseek
wcschr
_amsg_exit
ftell
_initterm
strtol
towupper
_ismbblead
qsort
_XcptFilter
wcsncmp
fwrite
_exit
fread
malloc
_cexit
bsearch
strncmp
sprintf
isalpha
__setusermatherr
fprintf
getenv
__getmainargs
wcsstr
strrchr

shlwapi

StrToIntW

user32

VkKeyScanW
DeleteMenu
SetScrollRange
GrayStringW
OpenIcon
CopyRect
TabbedTextOutW
LookupIconIdFromDirectory
GetSubMenu
TranslateMessage
IsCharAlphaNumericW
CharToOemW
EqualRect
SetTimer
GetScrollRange
wsprintfA
DestroyCaret
GetPropW
CreateDialogParamA
GetShellWindow
GetClassNameW
CreateMenu
IsCharUpperA
IsZoomed
GetUserObjectInformationW
CreateCursor
TranslateAcceleratorA
GetIconInfo
FindWindowExW
RegisterWindowMessageA
SetMenuItemBitmaps
IsWindowVisible
InflateRect
GetDlgItem
DestroyCursor
CreateDialogIndirectParamW
GetWindowTextW
DrawStateA
IsMenu
SetFocus
LoadStringA
GetDoubleClickTime
CheckDlgButton
SetWindowLongW
MoveWindow
AllowSetForegroundWindow
UnloadKeyboardLayout
GetSysColorBrush
FillRect
SetMenu
SendMessageTimeoutA
DefWindowProcA
ShowWindowAsync
SetPropW
CreateIconFromResource
GetDC
SetUserObjectInformationW
GetDCEx
DialogBoxIndirectParamW
RedrawWindow
CharNextA
LockWindowUpdate
SetCaretPos
EnumWindows
CharUpperA
DrawStateW
DispatchMessageW
GetDlgItemInt
BeginPaint
TileWindows
FindWindowA
SetWindowRgn
GetSystemMenu
GetClassInfoW
AdjustWindowRect
DeferWindowPos
DestroyIcon
KillTimer
AdjustWindowRectEx
InsertMenuA
HiliteMenuItem
SetWindowLongA
CreateCaret
InvalidateRgn
GetMenuState
InvalidateRect
LoadCursorW
SetDlgItemTextA
GetWindowPlacement
FindWindowExA
SetParent
ChildWindowFromPointEx
LoadImageA
PostQuitMessage
DefDlgProcW
LoadImageW
MessageBoxA
OemToCharA
GetKeyboardLayout
CheckRadioButton
DestroyWindow
GetLastActivePopup
CharUpperBuffA
CreateAcceleratorTableW
SendDlgItemMessageW
LoadBitmapA
InSendMessageEx
GetUserObjectInformationA
CopyImage
ClientToScreen
RemoveMenu
SetMenuDefaultItem
CharPrevW
LoadMenuW
GetClassLongA
CreateIconIndirect
MapWindowPoints

comctl32

ImageList_LoadImageW
ImageList_Create
ImageList_Destroy
ImageList_GetIconSize
PropertySheetA
CreateStatusWindowW

Exports

Exports

?RedirectOutput@@YGK_KHE:O

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itab
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.etab
Size: 512B - Virtual size: 85B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.input
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bb42ae22e9f6eedde209ec13d69b3384

Headers

File Characteristics

PDB Paths

Imports

kernel32

msvcrt

shlwapi

user32

comctl32

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 19KB

.itab Size: 6KB - Virtual size: 5KB

.etab Size: 512B - Virtual size: 85B

.input Size: 512B - Virtual size: 128B

.data Size: 2KB - Virtual size: 3KB

.rsrc Size: 23KB - Virtual size: 22KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 20KB - Virtual size: 19KB

.itab
Size: 6KB - Virtual size: 5KB

.etab
Size: 512B - Virtual size: 85B

.input
Size: 512B - Virtual size: 128B

.data
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 23KB - Virtual size: 22KB

.reloc
Size: 1KB - Virtual size: 1KB