ca99f58d4c87a1c7f44318ca93ccd794

Sharing

Copy URL Twitter E-mail

General

Target

ca99f58d4c87a1c7f44318ca93ccd794
Size

355KB
MD5

ca99f58d4c87a1c7f44318ca93ccd794
SHA1

3bc94f9cc1bc345aa055f0df5b180bfb013207ae
SHA256

7de4b1b850acbcbeae5f9aa863e4031a7b4d1d92ebe844e35c66e1aca66c5b2c
SHA512

fa9709ffa2121aafa7331b263e40b24389ce138814277fd963cd837f4598521120d4c166cb4dc48793d5788b5dcf92cda0394c10886232cd45d3831705ced843
SSDEEP

6144:GKeVYY3Z4fLdLHrvRTLFFPn8qXmvhz0B4ABqrZLGZHs3qw1GCEyn5:GKeVR3Z4fLdbrjRnXXiaHANLiHs3qw1T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca99f58d4c87a1c7f44318ca93ccd794

Files

ca99f58d4c87a1c7f44318ca93ccd794
.exe windows:4 windows x86 arch:x86

e7486454129252b32a59ea90cb57db41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

CheckMenuItem
DrawTextA
SetWindowPlacement
DrawMenuBar
PostQuitMessage
EqualRect
GetWindowDC
CallWindowProcA
SetMenu
SetTimer
SetScrollInfo
InvalidateRect
GetScrollRange
GetKeyboardLayoutList
EnumWindows
FrameRect
MessageBeep
GetWindowRect
LoadCursorA
GetWindowLongW
ShowOwnedPopups
CreateIcon
RegisterClipboardFormatA
GetPropA
GetKeyNameTextA
DefMDIChildProcA
IsRectEmpty
GetDlgItem
PeekMessageA
WaitMessage
UnregisterClassA
SetRect
SetScrollPos
ShowScrollBar
EnableWindow
FindWindowA
GetMenuItemCount
MapWindowPoints
GetKeyboardType
SetWindowLongA
GetSystemMenu
SendMessageA
GetCursorPos
IsWindowVisible
RemoveMenu
GetKeyboardLayout
IsZoomed
SetWindowPos
DestroyCursor
GetWindowTextA
InsertMenuItemA
SetCursor
CallNextHookEx
RemovePropA
GetMenuState
RedrawWindow
GetKeyboardState
SendMessageW
GetDesktopWindow
SetCapture
GetClassInfoA
IsDialogMessageW
InsertMenuA
ChildWindowFromPoint
GetLastActivePopup
SetWindowTextA
CharToOemA
PostMessageA
SystemParametersInfoA
EnumThreadWindows
GetSysColor

oleaut32

SafeArrayGetElement
RegisterTypeLib
GetErrorInfo
SysStringLen

shell32

DragQueryFileA

msvcrt

log10
memmove
wcsncmp

comctl32

ImageList_Create
ImageList_Read
ImageList_Add
ImageList_DragShowNolock

version

GetFileVersionInfoA
VerInstallFileA

gdi32

GetDIBColorTable
GetObjectA
GetDIBits

shlwapi

PathIsDirectoryA
SHStrDupA
SHQueryValueExA
PathIsContentTypeA
SHQueryInfoKeyA
SHDeleteKeyA

kernel32

GlobalAlloc
VirtualAlloc
GetModuleHandleA
ExitThread
GetCommandLineA
GetCommandLineW
GetVersionExA
GetProcAddress
ExitProcess
IsBadReadPtr
GetLastError
LoadLibraryA
VirtualAllocEx
lstrlenA

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 289KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RSRC9
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC6
Size: 1024B - Virtual size: 691B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC2
Size: 1024B - Virtual size: 959B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RSRC8
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC5
Size: 512B - Virtual size: 291B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RSRC3
Size: 1024B - Virtual size: 751B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e7486454129252b32a59ea90cb57db41

Headers

File Characteristics

Imports

user32

oleaut32

shell32

msvcrt

comctl32

version

gdi32

shlwapi

kernel32

Sections

.text Size: 57KB - Virtual size: 57KB

DATA Size: 289KB - Virtual size: 288KB

.RSRC9 Size: 1KB - Virtual size: 1KB

.RSRC6 Size: 1024B - Virtual size: 691B

.RSRC2 Size: 1024B - Virtual size: 959B

.RSRC8 Size: 1KB - Virtual size: 1KB

.RSRC5 Size: 512B - Virtual size: 291B

.RSRC3 Size: 1024B - Virtual size: 751B

.rsrc Size: 1024B - Virtual size: 992B

.text
Size: 57KB - Virtual size: 57KB

DATA
Size: 289KB - Virtual size: 288KB

.RSRC9
Size: 1KB - Virtual size: 1KB

.RSRC6
Size: 1024B - Virtual size: 691B

.RSRC2
Size: 1024B - Virtual size: 959B

.RSRC8
Size: 1KB - Virtual size: 1KB

.RSRC5
Size: 512B - Virtual size: 291B

.RSRC3
Size: 1024B - Virtual size: 751B

.rsrc
Size: 1024B - Virtual size: 992B