c983367702dd7bf3f62d80665a07632f

Sharing

Copy URL Twitter E-mail

General

Target

c983367702dd7bf3f62d80665a07632f
Size

185KB
MD5

c983367702dd7bf3f62d80665a07632f
SHA1

b06c3ac5c7b7a16797d571582542517e35de8030
SHA256

291047c27501980201dc672c7509869f334d9252a15917c662b053f466eefe4c
SHA512

c13419cef8d00e8a37178cf496690cb31f78e63ea679629cd777224a92146150fb1582976597f8980f1a8df337e025d97f782df4a28475c890d1f3a4b06cd276
SSDEEP

3072:I7VKQckTUd2YTgz2lwsQK7rMySgXWxeuF3MVMFo1L3rIZ:IRKQcQUEYx7rMyOsuF3mD1Tr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c983367702dd7bf3f62d80665a07632f

Files

c983367702dd7bf3f62d80665a07632f
.exe windows:5 windows x86 arch:x86

3ccac5d3a86318b9ca4d86c8b1c8645b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

T:\ymyB\mujki\ttHqfzwh.pdb

Imports

comdlg32

ChooseFontW
PrintDlgW
ReplaceTextW

gdi32

CreateCompatibleBitmap
GetTextMetricsW
SetDIBits
SetViewportOrgEx
GetTextCharsetInfo
SetBkMode
ExtFloodFill

kernel32

lstrlenW
SetThreadPriority
FindNextFileA
lstrcmpW
GetStartupInfoW
GetModuleHandleW
FreeResource
GetProcAddress
HeapUnlock
DeleteCriticalSection
OpenFileMappingA
GetSystemWindowsDirectoryA
FindClose
GetTickCount

user32

WindowFromDC
GetDlgCtrlID
GetSystemMetrics
IsWindowVisible
SwitchToThisWindow
DrawStateA
MapVirtualKeyExW
DeferWindowPos
SetScrollInfo
GetSystemMenu
LoadCursorW
ScrollWindow

comctl32

ImageList_LoadImageW
ImageList_ReplaceIcon

Exports

Exports

?ysxgwtgrdtwh@@YGJJ@Z
?vrBJqWpQqNniHpvhxtT@@YGEPAKH@Z
?VpmiIfsOwDaFxeupsfnhy@@YGDJ@Z
?TTksmfagfPF@@YGPAJPAN@Z
?LzrkQLyfnrZrlqflvom@@YGPAJPAF@Z
?bwjwFrFMLsGdRPSv@@YGXPADPAI@Z

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 291B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3ccac5d3a86318b9ca4d86c8b1c8645b

Headers

File Characteristics

PDB Paths

Imports

comdlg32

gdi32

kernel32

user32

comctl32

Exports

Exports

Sections

.text Size: 27KB - Virtual size: 26KB

.data Size: 145KB - Virtual size: 145KB

.crt Size: 4KB - Virtual size: 4KB

.edata Size: 512B - Virtual size: 291B

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 27KB - Virtual size: 26KB

.data
Size: 145KB - Virtual size: 145KB

.crt
Size: 4KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 291B

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 3KB - Virtual size: 3KB