c440e28ee2731ce6161dd9c2b4df1c8a

Sharing

Copy URL Twitter E-mail

General

Target

c440e28ee2731ce6161dd9c2b4df1c8a
Size

271KB
MD5

c440e28ee2731ce6161dd9c2b4df1c8a
SHA1

da067c6bea5796b61ebbd15fb94d22861c831f9a
SHA256

733d0a0b7fc8b7cfaf6ff8f888b22db330f5d887db8fbd65c5c08df147de5d48
SHA512

9449671e1f142c7a7acd22e0c9965a17c6db2cfcf924b45fc9060f2e9c0b33f4b3d1bb32188a1408f19b0363e773167e1833831722c504e406d522188e0d1513
SSDEEP

6144:4OXobkPro2Fxtcxd5nelFYSfuhCBAqciPNeLEpIOQfzO/:pVcReliMugB3ciPNFabS/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Dolcett Merideths Last Interview Rar.exe

Files

c440e28ee2731ce6161dd9c2b4df1c8a
.zip
Dolcett Merideths Last Interview Rar.exe
.exe windows:5 windows x86 arch:x86

6621b835561a627389e22b3a321633d8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Q:\xXmcfvgzt\EFJbjgah\jwlbdhpabwe.pdb

Imports

user32

RegisterClassW
GetScrollPos
LoadBitmapA
ClipCursor
SetMenuDefaultItem
SetSysColors
IsWindowVisible
GetWindow
IsWindowEnabled
OpenIcon
LoadCursorA
TranslateAcceleratorW
CreatePopupMenu
CharUpperA
IsWindowUnicode
GetMessageExtraInfo
CloseDesktop
OpenInputDesktop
SystemParametersInfoA
SetMenuItemInfoW
ReleaseDC
InvalidateRect
SwitchToThisWindow
KillTimer
keybd_event
CheckRadioButton
IsRectEmpty
IsCharAlphaNumericW
DrawMenuBar
TabbedTextOutW
GetDCEx
SetWindowRgn
DestroyAcceleratorTable
SetPropW
PtInRect
SetUserObjectInformationW
PeekMessageA
CharToOemW
InflateRect
DrawIcon
DrawFrameControl
GetNextDlgGroupItem
SendInput
DefFrameProcA
DefWindowProcA
DialogBoxParamA
RegisterClassA
CopyAcceleratorTableW
GetSystemMenu
DrawStateW
FindWindowA
CreateWindowExA
EnableWindow
CharUpperW
RegisterHotKey
AdjustWindowRectEx
MessageBoxW
MessageBoxExA
GetTopWindow
SetMenu
FindWindowExA
LoadMenuA
MessageBoxA
EqualRect
ToUnicodeEx
GetWindowTextLengthW
TileWindows
GetClipCursor
MapDialogRect
LoadStringA
HiliteMenuItem
GetMenuItemCount
LookupIconIdFromDirectory
IntersectRect
GetDoubleClickTime
GetKeyboardType
GetAsyncKeyState
CharLowerBuffW
DialogBoxParamW
CharLowerW
ChangeMenuW
LockWindowUpdate
IsWindow
MapVirtualKeyExW
SetRectEmpty
GetClassLongA
MapWindowPoints
TranslateAcceleratorA
CheckMenuRadioItem
SetScrollInfo
AllowSetForegroundWindow
DispatchMessageA
CharNextW
FrameRect
OffsetRect
InvalidateRgn
SetForegroundWindow
SetActiveWindow
IsChild
UnloadKeyboardLayout
IsIconic
GetMenuStringA
LoadMenuW
RegisterWindowMessageW
SetCursor
GetMessageW
GetForegroundWindow
CreateDialogParamW
GetClassLongW

kernel32

RemoveDirectoryW
LeaveCriticalSection
SetFileAttributesW
VirtualQuery
HeapCreate
SetCurrentDirectoryA
OpenEventA
lstrlenA
GetThreadLocale
UnhandledExceptionFilter
VirtualFree
GetComputerNameA
CreateEventW
CancelIo
UnmapViewOfFile
Sleep
GetLastError
GetProcAddress
FreeLibrary
GetDateFormatA
GetTimeFormatA
VerifyVersionInfoW
GlobalReAlloc
CreateMailslotW
SetCommTimeouts
GetSystemTime
GetSystemDirectoryW
IsBadReadPtr
HeapAlloc
EnumResourceTypesA
LoadLibraryExA
CompareStringA
SetErrorMode
CreateRemoteThread
GlobalFlags
WaitForSingleObject
GetNumberFormatW
WideCharToMultiByte
GetSystemDefaultUILanguage
GetWindowsDirectoryW
AddAtomA
ClearCommError
lstrcmpiA
SetThreadContext
CreateWaitableTimerA
lstrcmpiW
CreateFileW
SizeofResource
LoadLibraryW
GetACP
LockFile

comdlg32

ChooseFontW
PrintDlgW
GetOpenFileNameW
FindTextW

msvcrt

_controlfp
__set_app_type
__p__fmode
fgetc
__p__commode
mbstowcs
_amsg_exit
fseek
_initterm
wcstok
isalnum
time
wcscat
strcpy
strcoll
wcstombs
clearerr
strcspn
strchr
swscanf
_ismbblead
qsort
towlower
malloc
system
wcspbrk
vswprintf
_XcptFilter
vsprintf
fputc
localtime
fflush
wcschr
_exit
calloc
setvbuf
isprint
ungetc
wcstoul
_cexit
bsearch
__setusermatherr
__getmainargs
putchar

comctl32

InitCommonControlsEx
ImageList_LoadImageW
CreatePropertySheetPageW
ImageList_ReplaceIcon
ImageList_GetIconSize
ImageList_GetIcon

gdi32

EnumFontFamiliesExW
SetDIBColorTable
ExtTextOutW
CreateICW
CombineRgn
DeleteDC
GetDeviceCaps
GetBitmapBits
SaveDC
BeginPath
GetTextExtentPoint32A
CreatePolygonRgn
CreateDIBitmap
DeleteObject
GetPixel
CreateBrushIndirect
GetTextMetricsA
CreateBitmap
SetBitmapDimensionEx
CreateFontIndirectA
SelectPalette
RoundRect
CreateSolidBrush
GetCurrentObject
CreateRectRgn
SetAbortProc
SelectClipRgn
CreateFontW
EnumFontsW
GetFontData
MoveToEx
GetPaletteEntries
TextOutW
SetBitmapBits
PatBlt
OffsetViewportOrgEx
FillRgn
CreateEllipticRgnIndirect
GetTextExtentPointW
ResizePalette
SetBrushOrgEx
OffsetRgn
TextOutA
RealizePalette

shlwapi

PathFindExtensionA

Exports

Exports

?GenerateState@@YGPAJPAFHMPAF<V

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 134KB - Virtual size: 199KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
a5fd40ad3

Sharing

General

Malware Config

Signatures

Files

6621b835561a627389e22b3a321633d8

Headers

File Characteristics

PDB Paths

Imports

user32

kernel32

comdlg32

msvcrt

comctl32

gdi32

shlwapi

Exports

Exports

Sections

.text Size: 68KB - Virtual size: 67KB

.data Size: 134KB - Virtual size: 199KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 68KB - Virtual size: 67KB

.data
Size: 134KB - Virtual size: 199KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 2KB - Virtual size: 1KB