d5f549f869dcd656ef4ae2af6b8ac0e5

Sharing

Copy URL Twitter E-mail

General

Target

d5f549f869dcd656ef4ae2af6b8ac0e5
Size

142KB
MD5

d5f549f869dcd656ef4ae2af6b8ac0e5
SHA1

1a7afb394c58f2e5f42ff9f66326e890aa926b0c
SHA256

49b67d47dbeeabbfb237e79f59a92ef6fe51b1dc132b3a81edfe590963a812d3
SHA512

27e7d47ae5998c31fd942064c749aab46e550f818bdea44ad0f595c5a4b76f497a6055bfb814ba1824bf2e972d9e59a9318ebf47d2df7f04c3a6089957593667
SSDEEP

3072:9G+F1ClmCciYIshdTibPkXTLnWsMwpbjEx5XzoIx8W3z7:+ciYIshdTOkXTLWOpbmJr3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5f549f869dcd656ef4ae2af6b8ac0e5

Files

d5f549f869dcd656ef4ae2af6b8ac0e5
.exe windows:5 windows x86 arch:x86

8c571cc27a610baa4bca062b7cf0f5d2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Y:\VDDgCxbdeviRge\HEhzjgs\fsrkQLTgrb\zdtksEWUfF\jQhHqhmrdrse.pdb

Imports

shlwapi

UrlGetPartW

comctl32

ImageList_Write
ImageList_GetIconSize
PropertySheetA
ImageList_AddMasked
CreatePropertySheetPageW
PropertySheetW

msvcrt

fwrite
_controlfp
__set_app_type
strpbrk
wcstod
__p__fmode
mktime
strtoul
fputc
gmtime
wcscspn
putc
iswxdigit
fgets
remove
perror
fclose
__p__commode
_amsg_exit
_initterm
towlower
qsort
iswprint
_ismbblead
strerror
_XcptFilter
_exit
getc
system
_vsnwprintf
_cexit
isspace
isupper
srand
puts
__setusermatherr
ungetc
vsprintf
atoi
isalnum
__getmainargs
wcsstr
isxdigit
clock
towupper
realloc
fread
strstr

kernel32

CreatePipe
CompareStringW
GetSystemDirectoryA
GetLongPathNameW
GetOverlappedResult
RaiseException
EnumResourceNamesA
AreFileApisANSI
CompareStringA
GetFullPathNameW
FreeLibrary
GetCompressedFileSizeW
LockResource
FileTimeToLocalFileTime
SetEndOfFile
GetTickCount
TransactNamedPipe
CreateFileMappingW
FindFirstFileA
GlobalFlags
lstrcatA
SearchPathW
SetFileApisToOEM
VirtualQuery
GlobalSize
LCMapStringA
MapViewOfFile
VerSetConditionMask
IsDBCSLeadByteEx
CreateDirectoryA
MoveFileA
EscapeCommFunction
lstrcatW
ExitThread
GetStdHandle
IsValidLanguageGroup
GetComputerNameExW
DeleteAtom
lstrcpyW
GetModuleHandleW
FileTimeToDosDateTime
SetTimerQueueTimer
FindNextFileA
GetModuleFileNameA
DuplicateHandle
CompareFileTime
LockFile
GlobalGetAtomNameA
EnumResourceTypesA
AddAtomW
GetModuleHandleA
GetSystemTimeAdjustment
SetCurrentDirectoryA
SetThreadLocale
GetWindowsDirectoryW
ReleaseMutex

user32

GrayStringW
LookupIconIdFromDirectory
SetActiveWindow
SendDlgItemMessageW
SendDlgItemMessageA
GetClassLongW
SetWindowPos
SetWindowPlacement
SetWindowRgn
DrawStateW
SetWindowTextW
SwitchToThisWindow
SystemParametersInfoA
DrawEdge
CharLowerW
MessageBoxA
IsDialogMessageA
ShowWindowAsync
EndPaint
ClipCursor
IsWindow
IsZoomed
SetMenuItemInfoW
GetMessageA
RemoveMenu
IsCharAlphaA
InsertMenuW
ShowWindow
GetClientRect
IsChild
UpdateWindow
wsprintfW
BringWindowToTop
IsWindowVisible
GetClassInfoExW
GetScrollPos
IsCharUpperA
DefFrameProcW
SetDlgItemTextA
LoadImageW
CheckDlgButton
SetMenuDefaultItem
CheckMenuItem
LoadAcceleratorsA
CreateAcceleratorTableW
GetDlgCtrlID
GetMenuItemID
RemovePropW
GetMessageTime
SetDlgItemTextW
GetUserObjectInformationA
IsDlgButtonChecked
RegisterHotKey
GetMessagePos
GetMessageW
PostMessageA
MessageBoxExA
BeginDeferWindowPos
IntersectRect
DrawTextW
ShowCaret
keybd_event
GetKeyboardType
GetWindowTextW
GetParent
GetCursorPos
SetCaretPos
GetDlgItemTextW
SendMessageTimeoutA
OemToCharA
DragObject
SetWindowLongA
SetCursorPos
SendInput
DefDlgProcW
GetClassLongA
GetWindowLongA
IsWindowEnabled
GetClassInfoA
SendMessageW
FindWindowExA
IsCharLowerA
InvertRect
MoveWindow
GetMenuItemInfoW
DrawFocusRect
FindWindowW
SetScrollInfo
PostQuitMessage
GetWindowRect
DrawTextExW
GetWindowPlacement
CharLowerA
AppendMenuW
CheckMenuRadioItem
CreateDialogParamW
SetPropW
LoadIconW
AdjustWindowRectEx
wvsprintfA
TranslateAcceleratorW
SetFocus
SendNotifyMessageW
CharUpperW
GetCaretPos
GetMenuCheckMarkDimensions
DestroyMenu
SetMenu
DestroyCursor
CharNextA
DrawStateA
SetWindowTextA
GetDlgItem
DrawFrameControl
CheckRadioButton
ReleaseDC
RegisterClassExA
LoadIconA

Exports

Exports

?CreatDlgItemList@@YGKPBDDPAX:O

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.cexp
Size: 512B - Virtual size: 93B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.regs
Size: 1KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.citab
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.$dbug
Size: 512B - Virtual size: 117B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lime
Size: 1024B - Virtual size: 767B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tdat
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8c571cc27a610baa4bca062b7cf0f5d2

Headers

File Characteristics

PDB Paths

Imports

shlwapi

comctl32

msvcrt

kernel32

user32

Exports

Exports

Sections

.text Size: 23KB - Virtual size: 22KB

.cexp Size: 512B - Virtual size: 93B

.regs Size: 1KB - Virtual size: 122KB

.data Size: 2KB - Virtual size: 1KB

.citab Size: 6KB - Virtual size: 5KB

.$dbug Size: 512B - Virtual size: 117B

.lime Size: 1024B - Virtual size: 767B

.tdat Size: 1024B - Virtual size: 704B

.rsrc Size: 105KB - Virtual size: 105KB

.text
Size: 23KB - Virtual size: 22KB

.cexp
Size: 512B - Virtual size: 93B

.regs
Size: 1KB - Virtual size: 122KB

.data
Size: 2KB - Virtual size: 1KB

.citab
Size: 6KB - Virtual size: 5KB

.$dbug
Size: 512B - Virtual size: 117B

.lime
Size: 1024B - Virtual size: 767B

.tdat
Size: 1024B - Virtual size: 704B

.rsrc
Size: 105KB - Virtual size: 105KB