bed2493a79f1e46e5f731cd772bf867c

Sharing

Copy URL

Twitter E-mail

General

Target

bed2493a79f1e46e5f731cd772bf867c
Size

139KB
MD5

bed2493a79f1e46e5f731cd772bf867c
SHA1

1fb58ff6891307e8e5aad74c39eb45bc901717fe
SHA256

06e6c04c85e71e75778451ab5a665b6c55e40a0bb5a7cbff000beddd3e362810
SHA512

9c1ce0a48770d82ff9e316c4fd44443f94d453b44b598520d9b52824980c34f9e3ad89e7a08cf28baea84a62491e7083829df9fbaca2cea391a0ede90cd58753
SSDEEP

3072:CLtryv9mgi8pd7EVftRmpZqPcNm0fZBx2qhb:CLovMu7qftRiQUNXfZ3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bed2493a79f1e46e5f731cd772bf867c

Files

bed2493a79f1e46e5f731cd772bf867c
.exe windows:5 windows x86 arch:x86

10d4db931ebee571102b0fd244ff25d9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

T:\YOEwapzWh\opreizbaumoWs\qXnMKus.pdb

Imports

gdi32

GetSystemPaletteUse
CombineRgn
RectVisible
Ellipse
ExtFloodFill
Polygon
TranslateCharsetInfo
CreateCompatibleBitmap
GetTextExtentPointA
SetStretchBltMode
GetStockObject
PatBlt
GetTextExtentPoint32W
RemoveFontResourceW
GetDIBits
OffsetViewportOrgEx
GetClipBox
GetTextExtentPointW
GetObjectA

msvcrt

_controlfp
system
isspace
strcspn
iswdigit
__set_app_type
__p__fmode
__p__commode
_amsg_exit
floor
_initterm
_acmdln
exit
_ismbblead
strrchr
sprintf
mktime
_XcptFilter
wcscpy
_exit
fseek
setlocale
_cexit
__setusermatherr
strpbrk
isxdigit
__getmainargs

user32

GetWindowLongA
GetDoubleClickTime
LoadIconA
GetUserObjectInformationA
SetForegroundWindow
ReleaseDC
CopyAcceleratorTableW
GetMenuItemID
ChildWindowFromPointEx
GetDlgItemInt
ShowWindow
UpdateWindow
ToUnicodeEx
AppendMenuA
PostThreadMessageA
InsertMenuW
GetMonitorInfoW
AdjustWindowRectEx
DrawAnimatedRects
FillRect
SwitchToThisWindow
HiliteMenuItem
DialogBoxParamW
SetWindowTextA
LoadStringW
PostThreadMessageW
TabbedTextOutW
GetKeyNameTextW
wvsprintfA
UnloadKeyboardLayout
LoadMenuA
InvertRect
GetFocus
DrawMenuBar
CallWindowProcW
MapWindowPoints
SetSysColors
GetClassNameW
SetDlgItemInt
EnumChildWindows
IsCharLowerA
SetMenuItemBitmaps
GetMenuItemInfoW
FindWindowExA
FrameRect

shlwapi

ord157
StrStrIA
ord29

kernel32

LeaveCriticalSection
GetSystemDirectoryA
WaitForMultipleObjects
lstrlenW
VirtualQuery
GlobalFindAtomW
GetModuleHandleW
LocalFree
FlushFileBuffers
GetWindowsDirectoryW
SizeofResource
HeapLock
SetWaitableTimer
IsDBCSLeadByteEx
GlobalCompact
GlobalHandle
GlobalLock
ReleaseSemaphore
GetUserDefaultLangID
LoadResource
CreateDirectoryA
EnumResourceLanguagesA
GetProcAddress

advapi32

OpenBackupEventLogW

Exports

Exports

?IsValidObjectNew@@YGPAGIPADH*Z
?GenerateProjectNew@@YGPAIPAIHPAJ*Z
?FindSizeOld@@YGXJPAKPAMJ*Z
?DeletePathOld@@YGNE*Z
?FreeDateExA@@YGXFFF*Z
?InvalidateWindowExA@@YGPAHPAJ_N*Z
?RemoveDeviceOriginal@@YGXPAJPAIPAKG*Z
?SendTimerNew@@YGPAXPAH_N*Z

Sections

.text
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.etdir
Size: 512B - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.itdir
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vtdir
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ptdir
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.stdir
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

10d4db931ebee571102b0fd244ff25d9

Headers

File Characteristics

PDB Paths

Imports

gdi32

msvcrt

user32

shlwapi

kernel32

advapi32

Exports

Exports

Sections

.text Size: 109KB - Virtual size: 108KB

.itext Size: 512B - Virtual size: 496B

.etdir Size: 512B - Virtual size: 392B

.itdir Size: 3KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 16KB

.vtdir Size: 512B - Virtual size: 140B

.ptdir Size: 512B - Virtual size: 140B

.stdir Size: 14KB - Virtual size: 13KB

.rsrc Size: 6KB - Virtual size: 6KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 109KB - Virtual size: 108KB

.itext
Size: 512B - Virtual size: 496B

.etdir
Size: 512B - Virtual size: 392B

.itdir
Size: 3KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 16KB

.vtdir
Size: 512B - Virtual size: 140B

.ptdir
Size: 512B - Virtual size: 140B

.stdir
Size: 14KB - Virtual size: 13KB

.rsrc
Size: 6KB - Virtual size: 6KB

.reloc
Size: 1KB - Virtual size: 1KB