df197ce67633f832647d5d63352115f7

Sharing

Copy URL Twitter E-mail

General

Target

df197ce67633f832647d5d63352115f7
Size

73KB
MD5

df197ce67633f832647d5d63352115f7
SHA1

7f41f96395e9c50b2f4a9893d15e01a8a6036cc0
SHA256

12b36ad32dcb0ad5b9552d2d1f4aa89b88074ae31dc8de6e0d68256ef45c791e
SHA512

5096c31fd60115ec779809d5cc2e67d81641c22e65bf74f48f337631dc9728eb94b0ef15d37dfca24065191128ce2deb7933e0e8b0277e5cd635dd3cbc0192d0
SSDEEP

1536:MPVXAhp6q/j+h8SkU14sfMdMk4EQwh40A5za5t+vjZ2kFsEe6xI77i:MPVXAhp6ej+h8E14wEXS0AdYtiVN+7i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df197ce67633f832647d5d63352115f7

Files

df197ce67633f832647d5d63352115f7
.exe windows:4 windows x86 arch:x86

f7509758b512f99fe9b4e047d2ad3975

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_Remove
ImageList_GetBkColor
ImageList_Read
ImageList_Add
ImageList_DragShowNolock
ImageList_Destroy
ImageList_Create
ImageList_DrawEx
ImageList_Write
ImageList_Draw

kernel32

GetCurrentThreadId
LocalAlloc
GetCurrentThread
VirtualAlloc
ExitProcess
LocalReAlloc
GetCurrentProcess

advapi32

GetUserNameA
RegOpenKeyExA
RegQueryValueA

shell32

SHGetDiskFreeSpaceA
SHGetFileInfoA
SHFileOperationA
Shell_NotifyIconW

version

GetFileVersionInfoSizeA

user32

IsZoomed
LoadBitmapA
CheckMenuItem
IsCharLowerA
SetTimer
GetKeyboardLayoutList
ShowOwnedPopups
EnumChildWindows
DefFrameProcA
IsIconic
EndPaint
ShowWindow
GetWindowTextA
CreatePopupMenu
SetClipboardData
GetKeyboardType
GetDesktopWindow
GetLastActivePopup
DefMDIChildProcA
DrawFrameControl
GetIconInfo
GetDlgItem
EnableWindow
GetWindowTextLengthA
SetFocus
DrawMenuBar
ShowScrollBar
GetPropA
RegisterClassA
SetMenu
IsWindowEnabled
GetClassInfoA
IsDlgButtonChecked
GetActiveWindow
SetScrollRange
GetTopWindow
ChildWindowFromPoint
GetWindowLongA
DestroyIcon
PostMessageA
GetMenu
FillRect
SetScrollInfo
SetClassLongA
WaitMessage
InflateRect
GetCapture
CloseClipboard
EndDialog
OffsetRect
EnumWindows
MapWindowPoints
GetSysColor
CallWindowProcA
UnhookWindowsHookEx
PtInRect
CharLowerA
MoveWindow
SetMenuItemInfoA
SetWindowPlacement
SetCapture
EnableScrollBar
GetScrollRange
GetWindowLongW
SetWindowPos
EnumThreadWindows
IsWindowVisible
GetKeyboardLayoutNameA
CharUpperA
wsprintfA
DrawTextA
IsMenu

gdi32

LineTo
RestoreDC
GetRgnBox
GetTextAlign

Exports

Exports

BIFkoEPAiceW@16
1q5jTA_SWe@24
_eKYhntckm_@16
s5vWGd1
_joEywQm0LPim8
MP5oASPk7Tym
5s6UM3f8A_A12@20
_AqTdcrPv_e
_NEyw7eY2AMYSQ@16
_inRehIP@24
_4PBIktja0kPoQ
qzajEkE@8
_BO_JZVtkNOttk
IxkLxs0NeAvVqu
8aeIbDF_c2
wrTNSKjp@8
_EWpPOtYK@16
863F2fZ1EGIP
_qZVAE
_RAVZXfXMWSNwn

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f7509758b512f99fe9b4e047d2ad3975

Headers

File Characteristics

Imports

comctl32

kernel32

advapi32

shell32

version

user32

gdi32

Exports

Exports

Sections

.text Size: 15KB - Virtual size: 14KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 52KB - Virtual size: 91KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 15KB - Virtual size: 14KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 52KB - Virtual size: 91KB

.rsrc
Size: 1KB - Virtual size: 1KB