d5b053114d992969a30c0db35afb3b5d

Sharing

Copy URL Twitter E-mail

General

Target

d5b053114d992969a30c0db35afb3b5d
Size

389KB
MD5

d5b053114d992969a30c0db35afb3b5d
SHA1

470f2e15c0a2f000d5651b94e88ff01c835788bd
SHA256

c63960db6ae6813f24d492bc7c2c779683f98625bc7f7d1d76936573d4bc7eda
SHA512

0c643ac7342b1c6213a1d0fb756e52706d2738cf338fef5e9abacf176cc464a6a6977f7eabfd846857a98cbf29e9f41672c1d4458ad420472406fee28748d8c9
SSDEEP

6144:JgSXZ/Sr/59PRfdrnZZig11lgEvAJh91dQcBoWXraMoK/YE5mmPxsRTYQB0Z2s7T:JgKkhdRNnbdBAR8cocov8mmPxxYoL7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5b053114d992969a30c0db35afb3b5d

Files

d5b053114d992969a30c0db35afb3b5d
.exe windows:4 windows x86 arch:x86

cd40fe47fcc21b3e04ad4d77af37612e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetModuleHandleA
CreateFileW
LocalAlloc
DeviceIoControl
CloseHandle
LocalFree
GetLastError
VirtualProtect

user32

UnregisterDeviceNotification
PostQuitMessage
EndDialog
ReleaseCapture
SetActiveWindow
SetWindowTextW
InvalidateRect
ValidateRect
EndPaint
CallWindowProcW
SetCapture
SetCursor
GetSystemMetrics
LoadIconW
GetClientRect
LoadStringW
SendMessageW
SetWindowLongW
GetWindowLongW
GetWindowRect
DialogBoxParamW
wsprintfW
CheckDlgButton
MoveWindow
GetDlgItem
RegisterDeviceNotificationW

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExW

gdi32

SelectObject
CreatePen
DeleteObject
MoveToEx
LineTo

ole32

CoUninitialize

msvcrt

_onexit
_controlfp
__set_app_type
__p__fmode
time
_except_handler3
_initterm
free
_ftol
_itow
wcslen
wcscmp
__dllonexit
__CxxFrameHandler
_exit
_XcptFilter
exit
_acmdln
__getmainargs
__setusermatherr
_adjust_fdiv
__p__commode

msvcp60

??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??Ostd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 358KB - Virtual size: 358KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 355KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cd40fe47fcc21b3e04ad4d77af37612e

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

ole32

msvcrt

msvcp60

Sections

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 358KB - Virtual size: 358KB

.data Size: 512B - Virtual size: 355KB

.rsrc Size: 12KB - Virtual size: 12KB

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 358KB - Virtual size: 358KB

.data
Size: 512B - Virtual size: 355KB

.rsrc
Size: 12KB - Virtual size: 12KB