20254889703b909b81ee7553faf5ae4f8e8aa9c3de86505ff6ab3dcc619e325a

Sharing

Copy URL Twitter E-mail

General

Target

20254889703b909b81ee7553faf5ae4f8e8aa9c3de86505ff6ab3dcc619e325a
Size

624KB
MD5

832ebfd9f2f55884a27eb16de922746c
SHA1

bc02e0ba9673a00773215753b61a623c27f2aa10
SHA256

20254889703b909b81ee7553faf5ae4f8e8aa9c3de86505ff6ab3dcc619e325a
SHA512

1e4fd9b72cd1bcf64967a9774a85e6f60696c0ba8701355c0631ca407e8b7dfa0d892bdcb929fc1f9456d1d238de200d7af0467c86054774734076434248d343
SSDEEP

12288:XIWN4Y2CAdwp/zWIWN4Y2CAdwp/zWIWN4Y2CAdwp/z:X5GYswp/C5GYswp/C5GYswp/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20254889703b909b81ee7553faf5ae4f8e8aa9c3de86505ff6ab3dcc619e325a

Files

20254889703b909b81ee7553faf5ae4f8e8aa9c3de86505ff6ab3dcc619e325a
.exe windows:4 windows x86 arch:x86

00f0cb2eb2cf989efbc9c98f144014af

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetProcAddress
DosDateTimeToFileTime
GetLogicalDriveStringsA
CreateNamedPipeW
GetModuleHandleA
SetCalendarInfoA
MultiByteToWideChar
GetVersionExA
TlsAlloc

user32

GetClassNameA
GetMenuItemInfoW
GetTopWindow
GetDlgItem
SetDlgItemTextW
SetActiveWindow
CloseWindow
LoadMenuA
IsWindow
GetWindowRect
UnregisterClassW
DeleteMenu
RegisterClassW
CreateAcceleratorTableA
WinHelpW
CreateWindowExA
CreatePopupMenu
InsertMenuItemA
EnableWindow
CreateDialogIndirectParamW
GetForegroundWindow
SendDlgItemMessageA
CheckMenuItem
ClientToScreen
SendMessageA
wvsprintfA
GetSysColorBrush
InvalidateRgn
MessageBeep
GetScrollPos
InvalidateRect
DefDlgProcA
ActivateKeyboardLayout
TrackPopupMenuEx
GetDCEx
CallWindowProcA
SetWindowRgn

gdi32

CreateEnhMetaFileA
ResetDCA
GetCharWidthW
CreateEnhMetaFileW
GetLayout
PolylineTo
GetColorSpace
GetTextExtentExPointW

advapi32

RegDeleteKeyA
RegOpenKeyW
RegDeleteValueA
RegCreateKeyExW
RegOpenKeyW
RegReplaceKeyA

shlwapi

PathRemoveBackslashA
DllGetVersion
PathBuildRootA
SHDeleteValueW
StrStrNW
PathCommonPrefixW
SHRegSetUSValueW
PathRemoveBlanksA
StrRChrIA
SHCreateStreamOnFileEx
UrlGetLocationA

comdlg32

GetSaveFileNameA
LoadAlterBitmap
ChooseFontA
GetOpenFileNameW
GetSaveFileNameW
GetFileTitleW

oleaut32

VarI4FromUI1
VarBstrFromR8
VarUI1FromR8
VarUI1FromStr
VarDateFromDisp
VarIdiv
VectorFromBstr

Sections

.FrbNhz
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.oMkBIA
Size: 3KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.YsUsFU
Size: 2KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kJecJt
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bl
Size: 5KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

00f0cb2eb2cf989efbc9c98f144014af

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shlwapi

comdlg32

oleaut32

Sections

.FrbNhz Size: 11KB - Virtual size: 10KB

.oMkBIA Size: 3KB - Virtual size: 26KB

.YsUsFU Size: 2KB - Virtual size: 51KB

.kJecJt Size: 13KB - Virtual size: 12KB

.bl Size: 5KB - Virtual size: 296KB

.rsrc Size: 171KB - Virtual size: 170KB

.reloc Size: 1024B - Virtual size: 964B

.FrbNhz
Size: 11KB - Virtual size: 10KB

.oMkBIA
Size: 3KB - Virtual size: 26KB

.YsUsFU
Size: 2KB - Virtual size: 51KB

.kJecJt
Size: 13KB - Virtual size: 12KB

.bl
Size: 5KB - Virtual size: 296KB

.rsrc
Size: 171KB - Virtual size: 170KB

.reloc
Size: 1024B - Virtual size: 964B