d4ca758de492909c0e06958659591ef6

Sharing

Copy URL Twitter E-mail

General

Target

d4ca758de492909c0e06958659591ef6
Size

94KB
MD5

d4ca758de492909c0e06958659591ef6
SHA1

3bed92b6689b06ea5f8d0a5fd016b4a3245e0445
SHA256

cb86efb60b1fddde87ade6f64c567dc55dba6b8ecc21e4cf6de7b457ecffe01c
SHA512

583f6dac28762ca2fe7fe9c050d7159f977bc07f4f2c7bd367fa71bf6c336059932317630cc89f52debd6ee3c381b4061510ba65fd0c1f1c9220481becd66640
SSDEEP

1536:ZDJk50/EDi5oOmEia6li7rHIDF4W4E0oPEoPxLmi5OS9KJL3em2gSCOkz3LVUxFi:ZOUEDr7ymoo54Wh0osmlKJLe9+z3BUa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4ca758de492909c0e06958659591ef6

Files

d4ca758de492909c0e06958659591ef6
.exe windows:4 windows x86 arch:x86

b3ffd07a6c5de3ea9bd05b8818659036

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteValueA
RegOpenKeyExA
RegEnumKeyA
RegQueryValueExA
RegOpenKeyExA
RegEnumValueA
RegCreateKeyExA
RegCreateKeyExA
RegEnumKeyExA
RegEnumValueA
GetLengthSid
RegQueryInfoKeyA
RegDeleteKeyA
RegDeleteValueA

ole32

CoCreateGuid
OleRegGetUserType
CoCreateFreeThreadedMarshaler
StringFromIID
CreateOleAdviseHolder
StringFromIID
StgCreateDocfileOnILockBytes
CoReleaseMarshalData
CoTaskMemFree
StgOpenStorage
CoUninitialize
CoUnmarshalInterface

oleaut32

SafeArrayUnaccessData
SysFreeString
SafeArrayPtrOfIndex
SafeArrayGetElement
GetErrorInfo
SysReAllocStringLen
SafeArrayCreate
VariantChangeType
RegisterTypeLib
SysStringLen
SafeArrayUnaccessData
SafeArrayGetElement
SysAllocStringLen
OleLoadPicture

comdlg32

GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA
GetSaveFileNameA
ChooseColorA
FindTextA
GetFileTitleA
FindTextA
GetFileTitleA
ChooseColorA
GetSaveFileNameA

user32

CreatePopupMenu
GetMenu
GetMenuItemID
EnableMenuItem
DrawIcon
DrawTextA
GetFocus
CallNextHookEx
EndDeferWindowPos
CreateIcon
GetCapture
GetMenuItemCount
GetMenuStringA
IsWindowEnabled
BeginDeferWindowPos
GetScrollInfo
EnumWindows
DefMDIChildProcA
GetKeyNameTextA
SetWindowPos
DrawFrameControl
EnumChildWindows
EndPaint
ShowScrollBar
GetCursor
ClientToScreen
GetClipboardData
GetSubMenu
DrawMenuBar
CreateWindowExA
SetTimer
GetMenuStringA
ShowWindow
DispatchMessageW
GetForegroundWindow
CallNextHookEx
GetCapture
GetActiveWindow
GetCursorPos
GetClipboardData
GetClassLongA
GetDesktopWindow
DefFrameProcA
EnumChildWindows
GetDlgItem
SetWindowPos
IsWindowEnabled
CreateIcon
DrawEdge
ClientToScreen
GetWindowTextA
CharLowerBuffA
GetWindow
DrawTextA
GetScrollInfo
GetDC
EnableMenuItem
GetDCEx
BeginPaint
CreateMenu
GetMenuItemInfoA
FindWindowA
CreatePopupMenu
DefMDIChildProcA
GetMenuItemCount
IsDialogMessageA
GetSubMenu
GetScrollPos
DrawIcon
GetKeyNameTextA
IsWindowVisible
GetScrollRange
GetKeyState
EnumThreadWindows
SystemParametersInfoA
ShowScrollBar
EnableScrollBar
DrawFrameControl
BeginDeferWindowPos
GetSysColorBrush
GetClassInfoA
GetSysColor
CharToOemA
EndDeferWindowPos
GetCursor
SetCursor
DispatchMessageA
GetFocus
CheckMenuItem
SetWindowLongA
GetPropA
GetLastActivePopup
IsChild
IsMenu
GetIconInfo
EndPaint
FrameRect
CharNextA
EnumWindows
GetParent
CallWindowProcA
GetMenu
DefWindowProcA
EqualRect
HideCaret
TrackPopupMenu
GetClientRect
RegisterClassA
DrawIconEx
SetWindowTextA
GetMessagePos
DeferWindowPos
CharLowerA
GetMenuItemID
EnableWindow
FillRect
GetMenuState
MessageBoxA
TrackPopupMenu
GetScrollPos
GetWindow
GetSysColor
GetForegroundWindow
DrawEdge
GetMenuItemCount
CreatePopupMenu
DispatchMessageW
GetCapture
GetMenuStringA
EnableScrollBar
EqualRect
FillRect
SetCursor
DrawTextA
ShowScrollBar
HideCaret
IsDialogMessageA
DrawIcon
GetDesktopWindow
FindWindowA
DefMDIChildProcA
GetDCEx
GetClipboardData
EndPaint
ClientToScreen
GetWindowTextA

shlwapi

SHGetValueA
SHEnumValueA
SHDeleteKeyA
SHEnumValueA
SHStrDupA
SHStrDupA
SHQueryValueExA
PathIsDirectoryA
SHDeleteValueA
PathGetCharTypeA
PathIsContentTypeA
SHEnumValueA
PathFileExistsA
SHSetValueA
SHDeleteKeyA

comctl32

ImageList_Remove
ImageList_Create
ImageList_DragShowNolock

msvcrt

wcsncmp
clock
log
_acmdln
memcmp
memcpy
fabs
memmove
mbstowcs
pow
ceil
strcmp
memcpy
calloc
srand
sqrt
tolower
exp
sin
strlen
malloc
clock

kernel32

GetModuleHandleA
GetDiskFreeSpaceA
GetTickCount
LocalAlloc
LoadLibraryExA
CompareStringA
CloseHandle
SetLastError
GetSystemDefaultLangID
VirtualAlloc
Sleep
ExitThread
FreeResource
GetCurrentThread
LoadLibraryA
lstrcmpiA
GetACP
InitializeCriticalSection
CreateThread
SetThreadLocale
GetStringTypeW
GlobalDeleteAtom
GlobalAlloc
FindClose
GetVersionExA
SetHandleCount
ExitProcess
CreateEventA

gdi32

CreatePalette
CreateCompatibleDC
CreatePenIndirect
SetBkColor
GetObjectA
SetBkMode
BitBlt
GetPaletteEntries
GetDCOrgEx

shell32

DragQueryFileA
SHFileOperationA
SHGetDiskFreeSpaceA
SHGetDesktopFolder
SHFileOperationA
SHGetFolderPathA
SHGetFileInfoA
SHGetSpecialFolderLocation
DragQueryFileA
SHGetDesktopFolder
Shell_NotifyIconA

version

GetFileVersionInfoA
GetFileVersionInfoA
VerInstallFileA

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b3ffd07a6c5de3ea9bd05b8818659036

Headers

File Characteristics

Imports

advapi32

ole32

oleaut32

comdlg32

user32

shlwapi

comctl32

msvcrt

kernel32

gdi32

shell32

version

Sections

.text Size: 47KB - Virtual size: 47KB

.init Size: 44KB - Virtual size: 43KB

.idata Size: 2KB - Virtual size: 1KB

.text
Size: 47KB - Virtual size: 47KB

.init
Size: 44KB - Virtual size: 43KB

.idata
Size: 2KB - Virtual size: 1KB