cab8409ea117297bd059e764aad98a25

Sharing

Copy URL Twitter E-mail

General

Target

cab8409ea117297bd059e764aad98a25
Size

94KB
MD5

cab8409ea117297bd059e764aad98a25
SHA1

74b3ffb2979243eb18cb643831b6fb108a439375
SHA256

73f38bfe1707bede129cfa9371e73ce7b81f804b51e811fafc37d038bd82ba73
SHA512

6407c08c4d04a0fdb6374df4390778e6ee9a21ac4905ef45e7054fd616ef22bdf26130ffc7f106da92ec7d4bc8c671ca1bb2a2e20659b8f96ad2b79447374cbf
SSDEEP

1536:QTtWGQldQ5Inm/hUvdz1cR6tYJGLleg65RDg0dV/Bwa9zfExyUx/60fj:ktWflXcRYYUMnDjdV/XOywi0L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cab8409ea117297bd059e764aad98a25

Files

cab8409ea117297bd059e764aad98a25
.exe windows:4 windows x86 arch:x86

67b3871a5f8cda6e584b232860754d37

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx

gdi32

CreateCompatibleDC
GetTextExtentPoint32W
DeleteDC

shell32

SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW

ddraw

DirectDrawCreate
DirectDrawEnumerateA
DirectDrawCreateEx

comdlg32

GetOpenFileNameW
CommDlgExtendedError

ole32

CoCreateInstance
OleInitialize
OleUninitialize

kernel32

HeapSize
GetModuleHandleA
UnhandledExceptionFilter
GetLastError
GetTickCount
InterlockedIncrement
CreateEventW
FlushFileBuffers
SetEvent
GetConsoleOutputCP
GetProcessHeap
GetVersionExA
FindFirstFileW
WriteConsoleW
AddAtomW
CreateFileA
HeapReAlloc
GetLocaleInfoA
GetFullPathNameW
GetProcessVersion
WideCharToMultiByte
VirtualProtect
lstrlenW
GetConsoleMode
GetProcAddress
LCMapStringW
InterlockedDecrement
GetEnvironmentStringsW
InterlockedExchange
SetHandleCount
HeapAlloc
GetEnvironmentStrings
GetCurrentDirectoryA
FreeLibrary
InitializeCriticalSection
GetConsoleCP
FlushInstructionCache
SetStdHandle
GetDriveTypeA
FindClose
ExitProcess
FreeEnvironmentStringsW
Sleep
LeaveCriticalSection
TlsSetValue
WriteFile
VirtualAlloc
WriteConsoleA
TlsGetValue
SetFilePointer
CloseHandle
GetStringTypeA
InterlockedCompareExchange
GetCPInfo
GetStringTypeW
GetOEMCP
GetCommandLineA
GetCurrentThreadId
GetCurrentProcess
GetSystemTimeAsFileTime
RaiseException
GetStartupInfoA
GetFileType
LCMapStringA
TlsFree
TlsAlloc
IsDebuggerPresent
VirtualFree
GetACP
TerminateProcess
RtlUnwind
FreeEnvironmentStringsA
LocalAlloc
GetModuleHandleW
QueryPerformanceCounter
FindNextFileW
DeleteCriticalSection
HeapFree
GetCurrentProcessId
GetStdHandle
MultiByteToWideChar
IsProcessorFeaturePresent
HeapCreate
SetUnhandledExceptionFilter
SetLastError
LoadLibraryA
GetModuleFileNameA
HeapDestroy
EnterCriticalSection

user32

TranslateMessage
PostQuitMessage
RegisterWindowMessageW
GetMessageW
SetWindowPlacement
GetDC
LoadBitmapW
PostMessageW
DispatchMessageW
CreateDialogParamW
EnableWindow
MessageBoxW
LoadCursorW
GetWindowTextW
ShowWindow
IsDialogMessageW
SetWindowTextW
GetWindowPlacement
SetWindowLongW
ReleaseDC
SetCursor
SendMessageW
UpdateWindow
UnregisterClassA
GetWindow
GetDlgItem
IsWindow
GetWindowTextLengthW
SetFocus
SetDlgItemTextW
GetClassNameW
PostThreadMessageW
DestroyWindow
LoadImageW

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

67b3871a5f8cda6e584b232860754d37

Headers

File Characteristics

Imports

comctl32

gdi32

shell32

ddraw

comdlg32

ole32

kernel32

user32

Sections

.text Size: 52KB - Virtual size: 52KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 36KB - Virtual size: 35KB

.rsrc Size: 1024B - Virtual size: 56KB

.text
Size: 52KB - Virtual size: 52KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 36KB - Virtual size: 35KB

.rsrc
Size: 1024B - Virtual size: 56KB