d672e9763187eb50c0303d75837ec396

Sharing

Copy URL Twitter E-mail

General

Target

d672e9763187eb50c0303d75837ec396
Size

200KB
MD5

d672e9763187eb50c0303d75837ec396
SHA1

2fce7928821d89ef9e742b7a1494eda729ab9d2d
SHA256

9e5f1a512c374f2238bd8c770ee845062cf83a1bfe91724feda121d109b1e5bb
SHA512

b7a9d5b4670899e92c655c07de953034fb6cebdfa9c17a7c68a0756b35e7c962ff027baabfe530c746e7f824a718df3b5ad8946582dc61e5f2a87eb709f541aa
SSDEEP

3072:u9ZQD3xUqmKM5Syi0sbSldN52EwubveWsLO9fBWkOKb+/OJVnBNiYopjLxQ+uihH:GQ1U8MYyri8tNoDKb+GJJBNYV8ihN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d672e9763187eb50c0303d75837ec396

Files

d672e9763187eb50c0303d75837ec396
.exe windows:5 windows x86 arch:x86

c3b9d8e06303159515d44f1e39d3f37a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\pecposywoengfaopeUlanHandaneaecry\PowsnagetusBunklatxunHandaneaecry\tokakadeowlarkeysowfaseeMeanweaxBaldawl.pdb

Imports

user32

CreatePopupMenu
CharNextA
LoadBitmapA
DefWindowProcW
IsRectEmpty
DefDlgProcA
GetMenuItemRect
HideCaret
CopyRect
GetClassLongA
MonitorFromPoint
CreateIconFromResource
MessageBoxExW
ReleaseDC
DeferWindowPos
SetForegroundWindow
GetUserObjectInformationA
TranslateMessage
DispatchMessageA
IsDialogMessageW
SystemParametersInfoA
DrawIcon
SetLastErrorEx
DragObject
ReplyMessage
SwitchToThisWindow
IsWindowVisible
DrawAnimatedRects
GetMenuStringA
AllowSetForegroundWindow
GetClassInfoA
SendMessageTimeoutA
GetUpdateRgn
SetScrollInfo
GetForegroundWindow
ExitWindowsEx
SetRectEmpty
InvalidateRect
SetPropW
EnableWindow
GetClipCursor
IsMenu
OpenInputDesktop
GetMessagePos
wsprintfA
EndPaint
ClipCursor
BringWindowToTop
LoadCursorW
DispatchMessageW
CascadeWindows
SendDlgItemMessageA
GetKeyboardLayoutNameW
GetSystemMenu
keybd_event
CharToOemW
InternalGetWindowText
GetClassInfoExA
SetMenu
RegisterWindowMessageA
CharPrevA
GetLastActivePopup
GetPropW
LoadImageA
LoadIconA
LoadAcceleratorsA
DeleteMenu
LoadAcceleratorsW
InsertMenuW
GetClassInfoExW
DrawIconEx
GrayStringW
GetWindowLongA
GetSystemMetrics
DestroyWindow
GetMessageTime
RegisterHotKey
ModifyMenuW
GetAsyncKeyState
GetWindow
DialogBoxParamA
SetRect
DialogBoxParamW
UpdateWindow
SetMenuDefaultItem
DrawMenuBar
RegisterWindowMessageW
CloseDesktop
IsIconic
CharToOemBuffA
LoadMenuA
BeginDeferWindowPos
GetDlgItemTextW
GetWindowLongW
DrawFocusRect
DefDlgProcW

comctl32

ImageList_GetIcon

gdi32

CreateFontA
Ellipse
LPtoDP
SelectObject
GetNearestColor
CreateHalftonePalette
ExtTextOutW
CreateFontIndirectW
GetTextAlign
CreateCompatibleBitmap
Rectangle
WidenPath
GetTextExtentPoint32A
CombineRgn
ExcludeClipRect
CreateRoundRectRgn
SetPixel
GetFontData
CreateRectRgn
CreateBrushIndirect
MoveToEx
DeleteDC
CreateEllipticRgnIndirect
SetTextColor
ScaleViewportExtEx
PathToRegion
GetROP2
BeginPath
AddFontResourceW
GetClipBox
EndPath
GetObjectW
GetTextExtentPointW
RectVisible
CreateHatchBrush
OffsetViewportOrgEx
SetDIBits
PtInRegion
GetSystemPaletteEntries
SetBkColor
StretchDIBits
Escape
GetStockObject
GetWindowOrgEx

shlwapi

PathIsURLA

kernel32

SetThreadPriority
FlushFileBuffers
FileTimeToDosDateTime
IsValidLanguageGroup
MultiByteToWideChar
HeapWalk
GetFileType
WaitForMultipleObjectsEx
ConnectNamedPipe
GetOverlappedResult
GetTempFileNameW
QueryPerformanceCounter
GetWindowsDirectoryW
HeapReAlloc
LocalAlloc
SetHandleInformation
SetLocalTime
GlobalAddAtomW
LoadLibraryW
FreeResource
TlsGetValue
GetComputerNameA
ExitThread
CancelIo
lstrcmpiA
HeapCreate
CreateNamedPipeA
GetFileAttributesExA
EscapeCommFunction
LocalReAlloc
IsValidLocale
GlobalFindAtomW
GetCommState
EnumResourceTypesA
SetFilePointer
FindResourceA
GetFullPathNameA
WaitForSingleObjectEx
ClearCommError
GetLocaleInfoW
GetLocaleInfoA
CallNamedPipeW
CreateFileMappingW
VirtualProtect
LocalUnlock
ReleaseMutex

Sections

.text
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c3b9d8e06303159515d44f1e39d3f37a

Headers

File Characteristics

PDB Paths

Imports

user32

comctl32

gdi32

shlwapi

kernel32

Sections

.text Size: 164KB - Virtual size: 163KB

.data Size: 30KB - Virtual size: 30KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 164KB - Virtual size: 163KB

.data
Size: 30KB - Virtual size: 30KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 2KB