c251ad2e902baac916714fbd5ca4c6eabffa613a4c7a63de00aa1c4ed4430692

Sharing

Copy URL Twitter E-mail

General

Target

c251ad2e902baac916714fbd5ca4c6eabffa613a4c7a63de00aa1c4ed4430692
Size

525KB
MD5

64ff71f0c6634496ce0422bb8b384911
SHA1

f831ddf9107aaa66ae4611bcd6968ec2826ca4d7
SHA256

c251ad2e902baac916714fbd5ca4c6eabffa613a4c7a63de00aa1c4ed4430692
SHA512

7f06ce04594f823b8823c5266c957445080a1f2f78b4a9c6b09231cd698ee35e0011f7cd889d7529300895a8bdb70aa61b2ac3b14e42487a167c3b400fadaf5f
SSDEEP

6144:3eYWz0TFlKu4oNbliZdpTlJbCb5ec0S+:up0ZYoNJy6b5O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c251ad2e902baac916714fbd5ca4c6eabffa613a4c7a63de00aa1c4ed4430692

Files

c251ad2e902baac916714fbd5ca4c6eabffa613a4c7a63de00aa1c4ed4430692
.exe windows:5 windows x86 arch:x86

ace52d8d4450702239e799a8f19dc2b1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

T:\yigWfbZEn\tswAiTqMa\Ecxozoydzhtdzb.pdb

Imports

msvcrt

isdigit
wcscmp
_controlfp
getenv
wcsrchr
strncpy
strcpy
__set_app_type
printf
qsort
floor
isxdigit
__p__fmode
wcstol
towupper
strncmp
__p__commode
time
getc
wcstok
iswspace
iswxdigit
_amsg_exit
wcscpy
_initterm
isalnum
strpbrk
_ismbblead
vswprintf
fgetc
_XcptFilter
wcsncpy
_exit
fclose
_cexit
putc
setlocale
__setusermatherr
fwrite
perror
atol
__getmainargs
wcsncmp
remove

user32

LockWindowUpdate
TrackPopupMenu
SetCursor
IsWindowEnabled
InSendMessageEx
DestroyAcceleratorTable
GetDoubleClickTime
IsWindowVisible
LoadIconW
keybd_event
LoadBitmapA
SetRect
FindWindowExA
GetClassLongW
SendInput
DialogBoxIndirectParamA
wsprintfA
IsChild
GetClassLongA
IsIconic
GetNextDlgGroupItem
DrawIcon
OpenInputDesktop
GetClipCursor
IsZoomed
EnableWindow
CharLowerBuffW
ClientToScreen
AdjustWindowRectEx
PostMessageA
PeekMessageA
GetPropW
CloseDesktop
MapWindowPoints
RegisterClassA
IsCharAlphaNumericW
LoadImageA
IsRectEmpty
ToUnicodeEx
GetMessageExtraInfo
GetParent
CreateWindowExA
InvalidateRect
SetWindowLongA
ReleaseDC
ChangeMenuW
CheckMenuItem
OpenIcon
IsWindowUnicode
MessageBoxA
DrawMenuBar
SetForegroundWindow
wvsprintfW
IsWindow
GetScrollPos
GetAsyncKeyState
GetDialogBaseUnits
UpdateWindow
GetDCEx
LoadCursorA
SetScrollRange
CharUpperW
UnloadKeyboardLayout
GetScrollRange
GetWindowLongW
InflateRect
RemoveMenu
DrawAnimatedRects
SetActiveWindow
DialogBoxParamA
FrameRect
IsDialogMessageW
CharPrevW
GetForegroundWindow
WaitForInputIdle
SetPropW
SetMenu
LoadCursorW
SetSysColors
TranslateAcceleratorW
DefWindowProcW
CreatePopupMenu
SetParent
DialogBoxParamW
TileWindows
CharLowerW
PeekMessageW
GetWindowTextA
GetMessageW
CharNextW
LoadStringW
ShowWindowAsync
CharUpperA
PtInRect
CallWindowProcW
DispatchMessageA
TabbedTextOutW
SendMessageW
GetUpdateRgn
DrawStateW
GetMenuCheckMarkDimensions
LoadStringA
SetRectEmpty
CreateDialogIndirectParamW
CharUpperBuffW
GetWindowTextLengthW
CharToOemW
SetMenuDefaultItem

comctl32

ImageList_SetIconSize
ImageList_Write
ImageList_ReplaceIcon
ImageList_Draw
CreatePropertySheetPageW
PropertySheetW

gdi32

CreateCompatibleBitmap
CreatePalette
IntersectClipRect
SelectObject
GetSystemPaletteUse
CreateBrushIndirect
SetMapMode
GetLayout
SetPixel
SaveDC
GetMapMode
CreateICW
CreateEllipticRgnIndirect
CreateFontA
TranslateCharsetInfo
SetPaletteEntries
SetBitmapDimensionEx
StretchBlt
CreateDiscardableBitmap
GetDIBColorTable
LineTo
SetTextAlign
PatBlt
BeginPath
CreatePenIndirect
GetTextExtentPoint32A
SetBkColor
SetROP2
CreatePolygonRgn
GetTextExtentPointW
SetWindowOrgEx
CreatePen
GetViewportOrgEx
Escape
Polygon
CreateRectRgn
GetTextExtentPoint32W
AddFontResourceW
GetDeviceCaps
GetPixel
ExtTextOutW
CreatePatternBrush
ExcludeClipRect
EnumFontFamiliesW

kernel32

GetComputerNameA
SetHandleCount
OpenFile
CreateWaitableTimerA
MapViewOfFile
SetThreadPriority
GlobalGetAtomNameW
IsBadReadPtr
DeviceIoControl
FindClose
GetModuleHandleA
FindNextChangeNotification
SetThreadAffinityMask
GetPriorityClass
GetLastError
LockFile
GetCurrentDirectoryW
AreFileApisANSI
SetMailslotInfo
CreateEventA
FindResourceExW
ReadFile
GetTempPathA
GlobalAlloc
WinExec
GetTempPathW
CreateFileA
GetThreadLocale
EnumResourceNamesA
GetFullPathNameW
FileTimeToSystemTime
CreateRemoteThread
GetVersion
DeleteCriticalSection
GetModuleFileNameW
SuspendThread
lstrcpynW
GetHandleInformation
LocalAlloc
GetThreadContext
RtlUnwind
GetAtomNameW
GetFileAttributesExA
GetShortPathNameA
SearchPathA
SetTimerQueueTimer
RemoveDirectoryW
lstrcmpW
FileTimeToLocalFileTime
CancelWaitableTimer

shlwapi

PathFindExtensionA
PathFindExtensionW

Exports

Exports

?GenerateTextW@@YGPAJ_N<V

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.shell
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ace52d8d4450702239e799a8f19dc2b1

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

user32

comctl32

gdi32

kernel32

shlwapi

Exports

Exports

Sections

.text Size: 67KB - Virtual size: 66KB

.data Size: 135KB - Virtual size: 200KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 2KB - Virtual size: 1KB

.shell Size: 320KB - Virtual size: 320KB

.text
Size: 67KB - Virtual size: 66KB

.data
Size: 135KB - Virtual size: 200KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 2KB - Virtual size: 1KB

.shell
Size: 320KB - Virtual size: 320KB