c2a82aa0e0088b9ae5761fbf4d2918e2

Sharing

Copy URL Twitter E-mail

General

Target

c2a82aa0e0088b9ae5761fbf4d2918e2
Size

64KB
MD5

c2a82aa0e0088b9ae5761fbf4d2918e2
SHA1

18cb19b3dc5c4b34bc63bc3c688b77d633c3ebbe
SHA256

5e5f9cc053556bd4a5fa35ed3de59ddc03b7017b2500cc403b76bceb5325f134
SHA512

994f2e76074b3dfcc2274e59aa3c44982134922ef742f31fff9e51f032ca91f44bafbd69e26d665d25911d08b45401429b4c55a0ca3be1a309cf028effcff4a3
SSDEEP

1536:eZ3KLbNyA74z9D/dx7GhT7/RPDXjiHc9xRMbkOTTxYqyqXc:DLbNy+4z9D/dx74TzNDD9xRMICs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2a82aa0e0088b9ae5761fbf4d2918e2

Files

c2a82aa0e0088b9ae5761fbf4d2918e2
.exe windows:5 windows x86 arch:x86

2dd190112d8b40aa4c3fda3765cb94ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

PostQuitMessage
GetSysColor
SetWindowTextA
UnhookWindowsHookEx
SetWindowPos
GetMessageA
GetSysColorBrush
GetSubMenu
GetScrollPos
EqualRect
FrameRect
EnumWindows
EnableMenuItem

kernel32

VirtualAllocEx
GetTickCount
GetOEMCP
GetFileAttributesA
GetStartupInfoA
InterlockedExchange
GetTempPathA
RtlUnwind
QueryPerformanceCounter
GetThreadLocale
GetSystemTime
GetCurrentProcessId
GetTimeZoneInformation
ExitProcess
SetUnhandledExceptionFilter
FileTimeToSystemTime

gdi32

GetMapMode
DPtoLP
CopyEnhMetaFileA
ExcludeClipRect
FillRgn
CreateICW
SetViewportExtEx
CreateCompatibleBitmap
SelectClipPath

ole32

DoDragDrop
OleRun
CoCreateInstance
StringFromGUID2
CoRevokeClassObject
StgOpenStorage
CoTaskMemRealloc
CoInitialize
CoInitializeSecurity

advapi32

RegCreateKeyA
GetUserNameA
CheckTokenMembership
AdjustTokenPrivileges
RegQueryValueExW
RegCreateKeyExW
FreeSid
GetSecurityDescriptorDacl
QueryServiceStatus
CryptHashData

msvcrt

_mbscmp
puts
_lock
iswspace
_flsbuf
strlen
__getmainargs
_strdup
strcspn
_CIpow
strncpy
__initenv
fprintf
__setusermatherr
signal
fflush
raise
_fdopen

comctl32

InitCommonControls
ImageList_Write
ImageList_LoadImageA
CreatePropertySheetPageA
ImageList_GetIcon
ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_LoadImageW
ImageList_GetBkColor
ImageList_SetIconSize
ImageList_DragEnter
ImageList_DrawEx
ImageList_Destroy

shell32

SHGetPathFromIDList
DragQueryFileA
SHBrowseForFolderA
DragAcceptFiles
CommandLineToArgvW
ShellExecuteEx
ShellExecuteW
ExtractIconExW
DragQueryFileW
DoEnvironmentSubstW
ExtractIconW

oleaut32

SafeArrayCreate
SafeArrayPtrOfIndex
SafeArrayUnaccessData
SafeArrayGetUBound
VariantCopy
SafeArrayPutElement
SafeArrayRedim
SysReAllocStringLen

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2dd190112d8b40aa4c3fda3765cb94ed

Headers

File Characteristics

Imports

user32

kernel32

gdi32

ole32

advapi32

msvcrt

comctl32

shell32

oleaut32

Sections

.text Size: 33KB - Virtual size: 32KB

.data Size: 40KB - Virtual size: 39KB

.rsrc Size: 6KB - Virtual size: 5KB

.text
Size: 33KB - Virtual size: 32KB

.data
Size: 40KB - Virtual size: 39KB

.rsrc
Size: 6KB - Virtual size: 5KB