c3f5ca996db3d52f17265d862d56b520

General

Target

c3f5ca996db3d52f17265d862d56b520
Size

165KB
MD5

c3f5ca996db3d52f17265d862d56b520
SHA1

cf9603d82cc15ea351176692fb54c9723c4cfdb7
SHA256

db28bdcb6a96670b7ebc3a68a4fc1971d606ac476d682c7b022991264a364ce6
SHA512

3075c61c699e557ef1132a7a4e38e432cc01a858e521b5c8b01b41ed3dd5998f07f6e752ceff4b2804a6b3a6aaf5d69f5abc6086fbe32a29f4447910e2dd0081
SSDEEP

3072:qAwn16ATYNq7P2dpE1RtaTAUB4l9CE1P/RPgoYd9jR:qb16ATYNQudpsSXB4l9fPp2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c3f5ca996db3d52f17265d862d56b520

Files

c3f5ca996db3d52f17265d862d56b520
.exe windows:5 windows x86 arch:x86

e159c67fd98a144eb2be11be4aef879c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

L:\wjEwqyc\kymriydp\ivjWUi\BVkUXLyj.pdb

Imports

kernel32

GetModuleHandleW
GetProcAddress
WriteFile
EnumResourceNamesW
GetTempFileNameW
GetFileInformationByHandle
GetPriorityClass
lstrcmpiW
GetSystemDirectoryA
SizeofResource
SuspendThread

user32

ShowOwnedPopups
FindWindowA
DragObject
CharNextW
IsWindowVisible
HiliteMenuItem
WindowFromPoint
IntersectRect
wvsprintfA
SetMenuDefaultItem
KillTimer
GetMenuItemInfoW

comdlg32

GetOpenFileNameW
ChooseFontW
FindTextW
CommDlgExtendedError

gdi32

ExtTextOutA
CreateDIBitmap
PathToRegion
RoundRect
GetStockObject
PtInRegion
CreateDIBSection

Exports

Exports

?nzoqysVNsdjqau@@YGKM@Z
?neHfzpjRzvnjyVjtXep@@YGDPAM@Z
?JDebmqeUiqwLw@@YGXF@Z
?modpjGwzr@@YGPAKEM@Z
?tmemizp@@YGX_NH@Z
?mxGzgZtywcHuq@@YGDPAGM@Z
?fevxxrMbikfEensajkswt@@YGPAI_NK@Z

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e159c67fd98a144eb2be11be4aef879c

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

comdlg32

gdi32

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 12KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 3KB - Virtual size: 91KB

.crt Size: 10KB - Virtual size: 10KB

.rsrc Size: 134KB - Virtual size: 134KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 3KB - Virtual size: 91KB

.crt
Size: 10KB - Virtual size: 10KB

.rsrc
Size: 134KB - Virtual size: 134KB

.reloc
Size: 2KB - Virtual size: 1KB