d5ada511b33df3f338ad018d42c362f0

Sharing

Copy URL Twitter E-mail

General

Target

d5ada511b33df3f338ad018d42c362f0
Size

327KB
MD5

d5ada511b33df3f338ad018d42c362f0
SHA1

ca4e956d1629b88891c9dd693e72fd01ffd81e8e
SHA256

a7daf13495c857f02e881722e0cd72d62bc3da32bc79b0df93a18b312777dec9
SHA512

a1a6aad92545cd4d3b34c9a4f37ec128ab6441c44f0d7f81126a56d283f6be1cb483c7bd953b899e53684435c222ee88e4f7261c682c86dc8f4b521a3a1efd2a
SSDEEP

6144:aWnEKeeuBtlEJhvT721By69I2C+kDq3U+I2oebOWRGr0ru:aWPqtlAr7GF9rC+kOtbbOUZr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5ada511b33df3f338ad018d42c362f0

Files

d5ada511b33df3f338ad018d42c362f0
.exe windows:5 windows x86 arch:x86

2641baaa4071df38bf3516114843186b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

iswctype
fopen
fprintf
fclose
wcstol
_ltow
memmove
wcschr
_splitpath
_snprintf
sprintf
_except_handler3
_wmakepath
_close
_snwprintf
wcsncat
_open
_wstat
_stat
_winmajor
memset
_access
_wfullpath
_fullpath
strcmp
_errno
swprintf
calloc
wcsncmp
_wcsnicmp
wcscpy
wcsrchr
wcscat
_wsplitpath
wcslen
free
malloc
_wopen
_waccess
wcscmp
_wcsicmp
wcsncpy

comctl32

PropertySheetW
ImageList_ReplaceIcon
ImageList_Create
PropertySheetA

shell32

SHGetSpecialFolderLocation
SHGetFileInfoA
SHGetMalloc
SHChangeNotify
SHGetDesktopFolder

user32

IsDlgButtonChecked
CheckDlgButton
LoadBitmapA
DispatchMessageA
GetMessageA
GetWindow
FindWindowExA
ReleaseDC
CharUpperBuffW
FindWindowA
GetActiveWindow
wsprintfA
DialogBoxParamA
PostQuitMessage
CountClipboardFormats
DialogBoxParamW
EndDialog
SetFocus
OffsetRect
ShowWindow
PostMessageA
GetInputState
LoadMenuA
IsWindow
LoadStringW
LoadStringA
SetWindowTextW
SetWindowTextA
GetWindowTextW
GetWindowTextA
MessageBoxW
LoadIconA
EnableWindow
CreateWindowExA
SendMessageA
RegisterClassExA
DefWindowProcA
LoadCursorA
GetClipboardOwner
GetForegroundWindow
GetDoubleClickTime
GetFocus
SetCursor
GetClipboardSequenceNumber
GetDlgItem
EnumWindows
TranslateMessage
SetWindowLongA
SendMessageW
GetWindowLongA
MessageBoxA
GetDesktopWindow
GetClipboardViewer
GetDlgCtrlID
GetCapture
GetParent
GetWindowRect
GetCaretBlinkTime
GetSystemMetrics
MoveWindow

ole32

CoCreateInstance
CoInitialize
CoUninitialize

kernel32

GetCurrentProcessId
TlsSetValue
GetLogicalDrives
GetCurrentThreadId
QueryPerformanceCounter
GetStartupInfoA
GetTickCount
TerminateProcess
OpenMutexA
InterlockedExchange
GetSystemTimeAsFileTime
OpenEventW
CloseHandle
FindFirstFileA
InterlockedCompareExchange
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentDirectoryA
GetThreadLocale
FindNextFileA
GetProcessHeap
GetDateFormatA
GetTempFileNameA
LocalFree
CreateEventA
DisableThreadLibraryCalls
GetModuleFileNameA
FindResourceA
DeleteCriticalSection
GetVersionExA
InterlockedDecrement
HeapCreate
TlsFree
GetOEMCP
InitializeCriticalSection
HeapFree
SetFileAttributesA
GetStdHandle
lstrcpynW
VerLanguageNameW
VerLanguageNameA
WaitForSingleObjectEx
CreateSemaphoreW
SetErrorMode
EnterCriticalSection
FindResourceW
GlobalFree
GetVersion
SetLastError
SetFilePointer
LeaveCriticalSection
GetPrivateProfileStringW
GetPrivateProfileStringA
GetCommandLineA
DeleteFileW
DeleteFileA
CreateDirectoryW
CreateDirectoryA
GetUserDefaultUILanguage
IsDebuggerPresent
WritePrivateProfileStringW
FormatMessageW
WritePrivateProfileStringA
ReadFile
GetTempPathW
TlsAlloc
ResetEvent
GetTempPathA
GetSystemDirectoryW
PulseEvent
GetSystemDirectoryA
GetCurrentProcess
GetProfileStringW
GlobalMemoryStatusEx
GetProfileStringA
AreFileApisANSI
LoadLibraryExW
LoadLibraryExA
GetLastError
WriteFile
HeapAlloc
OutputDebugStringW
CreateThread
GetLogicalDriveStringsW
FindFirstFileW
FindNextFileW
GetAtomNameA
GetUserDefaultLangID
FindClose
LoadLibraryA
GetACP
GetProcAddress
FreeLibrary
AddAtomA
lstrlenW
GetModuleHandleA
WideCharToMultiByte
CreateFileW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
MultiByteToWideChar
CreateFileA

advapi32

RegOpenKeyExA
RegOpenKeyExW
RegCreateKeyExA
RegCreateKeyExW
RegDeleteValueA
RegDeleteValueW
RegSetValueExA
RegSetValueExW
RegQueryInfoKeyA
RegQueryInfoKeyW
RegDeleteKeyA
RegDeleteKeyW
RegQueryValueExA
RegQueryValueExW
RegEnumValueA
RegEnumValueW
RegEnumKeyExA
RegEnumKeyExW
RegCloseKey

comdlg32

GetSaveFileNameA
GetOpenFileNameW
GetOpenFileNameA
GetSaveFileNameW

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueA

Sections

.text
Size: 93KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 200KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2641baaa4071df38bf3516114843186b

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

comctl32

shell32

user32

ole32

kernel32

advapi32

comdlg32

version

Sections

.text Size: 93KB - Virtual size: 95KB

.data Size: 200KB - Virtual size: 223KB

.bss Size: - Virtual size: 52KB

.rsrc Size: 29KB - Virtual size: 28KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 93KB - Virtual size: 95KB

.data
Size: 200KB - Virtual size: 223KB

.bss
Size: - Virtual size: 52KB

.rsrc
Size: 29KB - Virtual size: 28KB

.reloc
Size: 4KB - Virtual size: 4KB