c4bf1b39bcacb85eaff582c62ce9b251

Sharing

Copy URL Twitter E-mail

General

Target

c4bf1b39bcacb85eaff582c62ce9b251
Size

201KB
MD5

c4bf1b39bcacb85eaff582c62ce9b251
SHA1

0fd18202871c00bf5267889de6aff486f8f3f905
SHA256

d48821d3f17a2a3f394fc2ae86c23e4614947f8fd22251cbb87f7d7b23cffac0
SHA512

b40a16edc6be2979305ea434580f091c5cd29d11f57e8d157b5522ae249cd996180219cd6acbfecee63399e9871d65a42b701554c4a4026b02591694ceec13f8
SSDEEP

3072:EP3QSLIqMOJbAZy76tO23thRzNyZplk47TZRJwBRe/eycmjNEctl6p1z/Vb7M7BW:EP6KJb254XJEOPHjuAl6TJ7MByM5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4bf1b39bcacb85eaff582c62ce9b251

Files

c4bf1b39bcacb85eaff582c62ce9b251
.dll windows:4 windows x86 arch:x86

e78e5ed19def1c537a470157d2680330

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comdlg32

ChooseColorA
FindTextA
GetFileTitleA

user32

ShowScrollBar
MessageBoxA
GetMenu
GetFocus
CreateWindowExA
CheckMenuItem
CharNextA
CallWindowProcA
FindWindowA
EnableScrollBar
SetWindowTextA
GetWindow
CreatePopupMenu
IsWindowEnabled
GetClassLongA
GetCursor
GetMenuItemID
GetClassInfoA
SetWindowPos
DrawIconEx
IsWindowVisible
GetParent
DispatchMessageA
DeferWindowPos
ClientToScreen
GetSysColor
DrawFrameControl

kernel32

GetEnvironmentStrings
GetVersion
VirtualAlloc
GetDateFormatA
FindResourceA
LoadLibraryA
GetStringTypeW
GetModuleHandleA
WriteFile
GetOEMCP
FreeResource
ExitProcess
GetCurrentProcess
FormatMessageA
CreateThread
VirtualAllocEx
WaitForSingleObject
DeleteFileA
SetThreadLocale
GlobalFindAtomA
SetLastError
LoadLibraryExA
GlobalAlloc
lstrlenA
GetStdHandle
CloseHandle
GetACP
GetCPInfo
SetErrorMode

msvcrt

_acmdln
memcmp
memmove
mbstowcs
log10
pow
memset
calloc
exp
wcstol
srand
wcsncmp

version

VerQueryValueA

ole32

OleCreateStaticFromData
MkParseDisplayName
CLSIDFromProgID
CoDisconnectObject
CoCreateInstanceEx
CreateBindCtx
CreateStreamOnHGlobal
CoRegisterClassObject

shlwapi

SHSetValueA
SHDeleteValueA
SHQueryValueExA
SHQueryInfoKeyA
PathFileExistsA

comctl32

ImageList_Destroy
ImageList_Read

gdi32

CreatePalette
CreateDIBitmap
GetBitmapBits
CreateCompatibleDC

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 160KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 22B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 596B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e78e5ed19def1c537a470157d2680330

Headers

File Characteristics

Imports

comdlg32

user32

kernel32

msvcrt

version

ole32

shlwapi

comctl32

gdi32

Sections

.text Size: 36KB - Virtual size: 36KB

.init Size: 160KB - Virtual size: 267KB

.idata Size: 512B - Virtual size: 22B

.rdata Size: 2KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 596B

.text
Size: 36KB - Virtual size: 36KB

.init
Size: 160KB - Virtual size: 267KB

.idata
Size: 512B - Virtual size: 22B

.rdata
Size: 2KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 596B