bf830c99ea3e49a2e2ec3a88751b2f01

Sharing

Copy URL Twitter E-mail

General

Target

bf830c99ea3e49a2e2ec3a88751b2f01
Size

185KB
MD5

bf830c99ea3e49a2e2ec3a88751b2f01
SHA1

5c203b16c6766238336019fd06f14a58aa31e431
SHA256

0d87b5697c1c36a9b9698d8b8fd929b0f77ffe131ce3ec8e35ae58bcdaec737a
SHA512

66887c5e8d8c44e2dc92ad6a50846bdbf7e4ea4613a7074ddf2c316731c1a0a5cb7ac47601f3bcd27197d7ee4b28d91a9e29166d1415bf10b8eb5e68de2ce663
SSDEEP

3072:sTj69mY07S/lMJ92At+5O9kfIa28gi2wPSD10pKRsdBxuePkociLCErsA7DbXN9q:sTimV7QlML2Ag5YkfIa7Tm0pssXxueP/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf830c99ea3e49a2e2ec3a88751b2f01

Files

bf830c99ea3e49a2e2ec3a88751b2f01
.exe windows:5 windows x86 arch:x86

4ed06caad0d82586a7695a9f265ba7f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

U:\jssT\rifcf\lypa\wrduafiU.pdb

Imports

ntdll

_aullrem

comdlg32

ReplaceTextW
ChooseColorW
GetSaveFileNameW
FindTextW

user32

mouse_event
SetWindowPos
ShowWindowAsync
CharLowerBuffW
GetWindowRect
GetWindow
LoadBitmapA
EndPaint
LoadCursorW
GetScrollPos
LoadIconW
CharToOemW
MapVirtualKeyA

gdi32

CreateFontIndirectA
GetTextColor
SelectClipRgn
GetObjectW
SelectPalette
OffsetRgn
IntersectClipRect
CreateDiscardableBitmap
Escape

comctl32

ImageList_Read
CreatePropertySheetPageA
PropertySheetA

kernel32

lstrcmpiA
GetPriorityClass
lstrlenW
LoadLibraryExW
lstrcmpiW
SetNamedPipeHandleState
GetVersionExA
SetUnhandledExceptionFilter
GetModuleHandleW
GetProcAddress
WaitCommEvent
GetFullPathNameA
GetComputerNameExA
GetUserDefaultLangID

Exports

Exports

?irnkxMvqjnpPUtdFAV@@YGFN@Z
?vjijamuP@@YGKPAHH@Z
?ywYrbkvornDGngTbWnaYj@@YGKG@Z
?UjXfaAQka@@YGPAMIPAN@Z
?ekwLfZklkteoblSn@@YGXPAEF@Z

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 143KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.crt
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4ed06caad0d82586a7695a9f265ba7f2

Headers

File Characteristics

PDB Paths

Imports

ntdll

comdlg32

user32

gdi32

comctl32

kernel32

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 27KB

.data Size: 143KB - Virtual size: 211KB

.edata Size: 2KB - Virtual size: 1KB

.crt Size: 3KB - Virtual size: 3KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 28KB - Virtual size: 27KB

.data
Size: 143KB - Virtual size: 211KB

.edata
Size: 2KB - Virtual size: 1KB

.crt
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 3KB