df789f39749680baea369a6d973b6bc1

Sharing

Copy URL Twitter E-mail

General

Target

df789f39749680baea369a6d973b6bc1
Size

114KB
MD5

df789f39749680baea369a6d973b6bc1
SHA1

8e891cb135f049d108841774ad1a21cf4dd82d12
SHA256

d47245aca031d39d1b6f82c97a4fff580e6a8f8e50044c2b1d3b2658b2bd7d99
SHA512

be134450649cd93dcf58bc17804623b244685963078a05d55f25877e83825bf2294364bb5617e08093119b297a83bb8290155384ada9f1024675712c42ed6a8a
SSDEEP

3072:3eD0Yty/QyfoiEgCcYERJjEzdGVKNg0NTI:O+QINrNE4c6C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df789f39749680baea369a6d973b6bc1

Files

df789f39749680baea369a6d973b6bc1
.exe windows:4 windows x86 arch:x86

9aedf718d9149ce736d08e3171e40ec5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UnhookWindowsHookEx
OffsetRect
GetClassInfoA
GetMenuStringA
OpenClipboard
DefFrameProcA
EmptyClipboard
GetKeyboardLayout
DispatchMessageW
GetKeyNameTextA
TrackPopupMenu
IsZoomed
DrawMenuBar
DrawIcon
RemoveMenu
ReleaseCapture
CreatePopupMenu
DefWindowProcA
ShowOwnedPopups
DispatchMessageA
GetMenu
GetClientRect
GetIconInfo
SetClipboardData
FrameRect
EqualRect
SetClassLongA
MoveWindow
GetSysColor
PeekMessageW
DrawAnimatedRects
GetWindowRect
ScreenToClient
GetWindowPlacement
SetWindowTextA
GetMenuState
GetKeyboardLayoutList
InsertMenuItemA
GetWindowDC
GetKeyboardType
GetWindowLongW
DestroyCursor
wsprintfA
GetWindowTextA
SetCapture
CreateWindowExA
GetClipboardData
SendMessageA
GetSystemMenu
UpdateWindow
IsWindow
SetScrollRange
GetKeyboardLayoutNameA
MsgWaitForMultipleObjects
GetScrollRange
FindWindowA
IsIconic
InflateRect
CharLowerBuffA
GetDC
InsertMenuA
IsWindowEnabled
GetMessagePos
SystemParametersInfoA
GetCursorPos
GetForegroundWindow
GetSystemMetrics
EnumThreadWindows
RegisterClassA
ScrollWindow
SetActiveWindow
GetClassNameA
WindowFromPoint
EnableWindow
EnableMenuItem
RemovePropA
FillRect
GetDlgItem
CreateMenu
CreateIcon
TranslateMDISysAccel
ReleaseDC
DrawTextA
PostMessageA
SetPropA
GetLastActivePopup
SetWindowPos
ChildWindowFromPoint
CharToOemA
InvalidateRect
GetSysColorBrush
GetClassLongA
DrawFrameControl
GetScrollPos
CharNextA
GetKeyboardState
EnumChildWindows
GetKeyState
PostQuitMessage
SetForegroundWindow
CharNextW
DestroyWindow
EndPaint
ShowScrollBar
GetDCEx
GetDesktopWindow
BeginPaint
GetWindowThreadProcessId
MapVirtualKeyA
RegisterClipboardFormatA
GetWindow
GetScrollInfo
UnregisterClassA
GetPropA
GetSysColorBrush
GetWindowThreadProcessId
RegisterWindowMessageA
SystemParametersInfoA
EnumThreadWindows
SetMenu
ActivateKeyboardLayout
SetCursor
EqualRect
RedrawWindow
EnableWindow
TrackPopupMenu
GetClassNameA
GetFocus
LoadKeyboardLayoutA
GetTopWindow
TranslateMDISysAccel
SetMenuItemInfoA
DrawMenuBar
SetTimer
LoadStringA
ShowWindow
GetDlgItem
MoveWindow
IsChild
GetSubMenu
GetIconInfo
GetMenuState
SetForegroundWindow
IsWindow
DrawFrameControl
WindowFromPoint
PostQuitMessage
OpenClipboard
SetParent
IsWindowUnicode
RegisterClassA
BeginPaint
GetClipboardData
LoadBitmapA
GetKeyboardState
SetWindowTextA
EnableMenuItem
GetCursor
WaitMessage
FindWindowA
GetWindowRect
FillRect
GetMenu
CallWindowProcA
GetParent
IsRectEmpty
GetMenuStringA
EndPaint
DrawTextA
SetWindowLongW
GetKeyboardLayout
SetActiveWindow
IsIconic
SendMessageW
RegisterClipboardFormatA
wsprintfA
IsDialogMessageA
GetForegroundWindow
MapWindowPoints
EnumWindows
DefFrameProcA
CreateMenu
CharLowerA
CreatePopupMenu
IsDialogMessageW
DrawEdge
SetClassLongA
IsZoomed
GetWindow
UnregisterClassA
ScrollWindow
OemToCharA
ShowOwnedPopups
GetPropA
UnhookWindowsHookEx
ShowScrollBar
IsWindowEnabled
LoadIconA
DestroyMenu
PeekMessageA
DeleteMenu
GetKeyboardLayoutNameA
IntersectRect
SetRect
DrawIconEx
GetDesktopWindow
GetClientRect
InvalidateRect
SetScrollRange
GetMenuItemInfoA
SetCapture
EmptyClipboard
GetClassInfoA
ReleaseDC
CallNextHookEx
ClientToScreen
SetFocus
RemovePropA
GetActiveWindow
GetLastActivePopup
IsWindowVisible
PtInRect
FrameRect
SetWindowPos
InsertMenuA
CharLowerBuffA

advapi32

RegEnumKeyExA
RegQueryInfoKeyA
GetUserNameA

comctl32

ImageList_DragShowNolock
ImageList_Draw
ImageList_GetBkColor
ImageList_Remove
ImageList_Add
ImageList_Write
ImageList_Destroy
ImageList_DrawEx

shell32

SHGetFolderPathA
SHGetSpecialFolderLocation
Shell_NotifyIconA
SHGetDiskFreeSpaceA
SHGetFileInfoA
Shell_NotifyIconA
DragQueryFileA
SHGetSpecialFolderLocation

gdi32

SetBkMode
GetPaletteEntries
SetBkColor
GetPixel
GetCurrentPositionEx
LineTo
CopyEnhMetaFileA
SetBkMode

version

GetFileVersionInfoSizeA
VerInstallFileA
VerQueryValueA
VerInstallFileA
VerFindFileA
VerFindFileA

oleaut32

SysAllocStringLen
RegisterTypeLib
SafeArrayGetUBound
SysFreeString
SafeArrayUnaccessData
SafeArrayGetElement
SafeArrayCreate
SafeArrayPtrOfIndex

shlwapi

PathIsContentTypeA
PathFileExistsA
SHEnumValueA
SHQueryInfoKeyA
SHSetValueA
SHQueryValueExA
PathGetCharTypeA
SHGetValueA
SHStrDupA
PathIsDirectoryA

ole32

OleCreateStaticFromData
CoRegisterClassObject
CreateBindCtx
StringFromIID
StgCreateDocfileOnILockBytes
ReleaseStgMedium
OleRegGetUserType
OleRun

comdlg32

FindTextA
GetOpenFileNameA
GetSaveFileNameA

kernel32

ExitThread
GetCurrentThread
GetModuleHandleA
lstrcpynA
HeapAlloc
SetLastError
GetProcAddress
DeleteFileA
lstrcmpA
ExitProcess
EnumCalendarInfoA
LoadLibraryA
VirtualAllocEx

msvcrt

strncmp
log10
calloc
memmove

Sections

CODE
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9aedf718d9149ce736d08e3171e40ec5

Headers

File Characteristics

Imports

user32

advapi32

comctl32

shell32

gdi32

version

oleaut32

shlwapi

ole32

comdlg32

kernel32

msvcrt

Sections

CODE Size: 34KB - Virtual size: 33KB

.tls Size: 1024B - Virtual size: 536B

.data Size: 78KB - Virtual size: 77KB

CODE
Size: 34KB - Virtual size: 33KB

.tls
Size: 1024B - Virtual size: 536B

.data
Size: 78KB - Virtual size: 77KB