bfd59494cef1ec520f38e8753bb84ac7

Sharing

Copy URL Twitter E-mail

General

Target

bfd59494cef1ec520f38e8753bb84ac7
Size

112KB
MD5

bfd59494cef1ec520f38e8753bb84ac7
SHA1

03cdd7b2d94c0f5cc17a0a3383cacfc58c011b32
SHA256

8034cefaacffa952c5dcc901acbfcf6ecf558e73a8b5081d5b5e122a4d47a5c3
SHA512

b7de541f97b9df8d3fdc8b8adeaf8ae87430fca2be9ab738b5e8b91a99181be33ef368ef0ea7fece9e01121e21e2987a67d56dd61a6d5117c14156ce1ab6915e
SSDEEP

3072:AgkPKZAzwhAgZvg0drfnkA8nY2qrhrXV:AgByzwh60NkAOY2Ql

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfd59494cef1ec520f38e8753bb84ac7

Files

bfd59494cef1ec520f38e8753bb84ac7
.exe windows:4 windows x86 arch:x86

290c741ae42a1fa949b15ef355f8e291

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DragQueryFileA
SHGetFileInfoA
SHGetFolderPathA
SHGetSpecialFolderLocation
SHFileOperationA

gdi32

CopyEnhMetaFileA
GetObjectA
SetBkMode
GetBitmapBits
SelectPalette

kernel32

FreeResource
GetACP
GetVersion
GetStringTypeW
FormatMessageA
lstrcmpA
ExitThread
HeapDestroy
EnterCriticalSection
GetModuleHandleA
VirtualFree
FindResourceA
GetOEMCP
CreateFileA
SetHandleCount
HeapAlloc
GetFileSize
GetCurrentProcess
SetEvent
InitializeCriticalSection
CreateEventA
MoveFileExA
GetLocaleInfoA
LoadResource
CompareStringA
GetCPInfo
GlobalFindAtomA
FindFirstFileA
GetFileAttributesA
ResetEvent
GetTickCount
GetDateFormatA
FreeLibrary
ExitProcess
MulDiv
LoadLibraryExA
GetEnvironmentStrings
lstrcpyA
DeleteCriticalSection
SetErrorMode
HeapFree
Sleep
VirtualAlloc
WideCharToMultiByte
lstrcatA
GlobalAlloc
GetCurrentThreadId
MoveFileA
LocalReAlloc
LockResource
SizeofResource
FindClose
lstrcpynA
GetSystemDefaultLangID
GetStringTypeA
SetEndOfFile
GetCurrentThread
LoadLibraryA
CloseHandle
GetVersionExA
GetLastError
GetFullPathNameA
lstrlenA
GetFileType
GetStartupInfoA
GlobalAddAtomA
GetDiskFreeSpaceA
DeleteFileA
VirtualQuery
GetLocalTime
GetModuleFileNameA
GetStdHandle
GetProcessHeap
GetCommandLineA
SetThreadLocale
EnumCalendarInfoA
GetProcAddress
GetThreadLocale
GetCurrentProcessId
lstrcmpiA
SetFilePointer
VirtualAllocEx
GetUserDefaultLCID
LocalFree
LocalAlloc
WriteFile
RaiseException
WaitForSingleObject
CreateThread
SetLastError

msvcrt

memmove
log
time
sprintf
memcpy
cos
calloc

advapi32

GetUserNameA

user32

CallNextHookEx
CallWindowProcA
LoadBitmapA
WaitMessage
DrawTextA
WindowFromPoint
SetParent
GetForegroundWindow
GetDC
GetKeyboardLayout
DrawAnimatedRects
GetWindowThreadProcessId
GetSystemMetrics
EnumChildWindows
CharUpperBuffA
GetClassNameA
OffsetRect
GetKeyState
GetDCEx
FindWindowA
PostQuitMessage
GetMenuItemInfoA
MapVirtualKeyA
InflateRect
DrawIcon
CloseClipboard
DefWindowProcA
IntersectRect
DrawIconEx
IsZoomed
MessageBeep
FillRect
GetKeyboardLayoutNameA
GetKeyboardType
DefFrameProcA
SetScrollRange
ActivateKeyboardLayout
EnableWindow
InvalidateRect
DestroyIcon
SendMessageW
SetActiveWindow
SetWindowPos
SetFocus
RedrawWindow
UnhookWindowsHookEx
IsDialogMessageA
LoadCursorA
LoadStringA
ShowOwnedPopups
UpdateWindow
GetPropA
FrameRect
SetPropA
GetMenuStringA
SetRect
EnableMenuItem
SetWindowTextA
GetActiveWindow
SetWindowPlacement
SetMenu
SetClassLongA
GetCursor
GetClassLongA
ChildWindowFromPoint
SetClipboardData
GetWindowLongA
CharNextA
IsChild
DispatchMessageW
DrawEdge
MapWindowPoints
InsertMenuA
GetWindowLongW
CheckMenuItem
SetTimer
AdjustWindowRectEx
GetClassInfoA
ReleaseCapture
CreateIcon
PostMessageA
GetMessagePos
DestroyMenu
wsprintfA
GetTopWindow
GetClientRect
RemovePropA
GetParent
GetMenu
GetScrollInfo
IsDialogMessageW
ShowWindow
GetSubMenu
GetKeyboardState
IsWindowEnabled
TrackPopupMenu
GetMenuItemID
SetCursor
GetDlgItem
SetWindowLongW
CharNextW
GetDesktopWindow
GetWindowPlacement
IsWindow
GetWindow
DeleteMenu
EmptyClipboard
EnumThreadWindows
GetFocus
CharLowerA
KillTimer
GetLastActivePopup
TranslateMDISysAccel
SetScrollInfo
SetScrollPos
CharToOemA
ShowScrollBar
EqualRect
CreateWindowExA
SetCapture
GetClipboardData
DefMDIChildProcA
ReleaseDC
EnableScrollBar
GetWindowDC
GetKeyNameTextA
RegisterWindowMessageA
PeekMessageA
UnregisterClassA
MsgWaitForMultipleObjects
GetWindowRect
RegisterClassA
ScreenToClient
GetMenuState
DispatchMessageA
OpenClipboard
EndPaint
TranslateMessage
GetSysColorBrush
GetSystemMenu
ClientToScreen
SendMessageA
GetScrollPos
GetScrollRange
IsWindowVisible
SetForegroundWindow
IsRectEmpty
IsIconic
SetMenuItemInfoA
SystemParametersInfoA
GetKeyboardLayoutList
GetSysColor
CreateMenu
LoadKeyboardLayoutA
BeginPaint
DestroyWindow
CreatePopupMenu
GetCapture
GetWindowTextA
SetWindowLongA
GetIconInfo
DestroyCursor
ScrollWindow
OemToCharA
SetWindowsHookExA
DrawFrameControl
EnumWindows
PtInRect
RemoveMenu
DrawMenuBar
MessageBoxA
GetMenuItemCount
MoveWindow

shlwapi

SHDeleteValueA
PathIsDirectoryA
PathGetCharTypeA
SHGetValueA
SHEnumValueA

oleaut32

SafeArrayCreate
SysStringLen
VariantCopyInd
SysReAllocStringLen
VariantChangeType
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayGetUBound

comctl32

ImageList_Write
ImageList_DrawEx

Sections

CODE
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

BSS
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

290c741ae42a1fa949b15ef355f8e291

Headers

File Characteristics

Imports

shell32

gdi32

kernel32

msvcrt

advapi32

user32

shlwapi

oleaut32

comctl32

Sections

CODE Size: 95KB - Virtual size: 95KB

.data Size: 8KB - Virtual size: 7KB

DATA Size: 4KB - Virtual size: 3KB

BSS Size: 2KB - Virtual size: 1KB

.tls Size: 1KB - Virtual size: 1KB

CODE
Size: 95KB - Virtual size: 95KB

.data
Size: 8KB - Virtual size: 7KB

DATA
Size: 4KB - Virtual size: 3KB

BSS
Size: 2KB - Virtual size: 1KB

.tls
Size: 1KB - Virtual size: 1KB