1bacf61d7a1b45ebeb0410b64f86cdfed1bd4fb45fcfba424ecbaba7da883e14

Sharing

Copy URL Twitter E-mail

General

Target

1bacf61d7a1b45ebeb0410b64f86cdfed1bd4fb45fcfba424ecbaba7da883e14
Size

525KB
MD5

a58ee293f4dc822905c701fee2060404
SHA1

f06293175915d658f560498205bb6b7db1778ee5
SHA256

1bacf61d7a1b45ebeb0410b64f86cdfed1bd4fb45fcfba424ecbaba7da883e14
SHA512

47b86b2a916441a5a759f73ae0a959f504348ccbc71f760097464df28d5f9e10f7d80b52bedf54559e5ce519f4c9e01ff06c1e334d448eb1fcb3a8b8e64f930a
SSDEEP

3072:7eH4QjBz0tFlKQVRtR4og2YlZzy47iumdjlhNlKoC2nHiVt5ec6o6Zogd:7eYWz0tFlKu4o8liZdpTlJbCb5ec0S+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bacf61d7a1b45ebeb0410b64f86cdfed1bd4fb45fcfba424ecbaba7da883e14

Files

1bacf61d7a1b45ebeb0410b64f86cdfed1bd4fb45fcfba424ecbaba7da883e14
.exe windows:5 windows x86 arch:x86

ace52d8d4450702239e799a8f19dc2b1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

T:\yigWfbZEn\tswAiTqMa\Ecxozoydzhtdzb.pdb

Imports

msvcrt

isdigit
wcscmp
_controlfp
getenv
wcsrchr
strncpy
strcpy
__set_app_type
printf
qsort
floor
isxdigit
__p__fmode
wcstol
towupper
strncmp
__p__commode
time
getc
wcstok
iswspace
iswxdigit
_amsg_exit
wcscpy
_initterm
isalnum
strpbrk
_ismbblead
vswprintf
fgetc
_XcptFilter
wcsncpy
_exit
fclose
_cexit
putc
setlocale
__setusermatherr
fwrite
perror
atol
__getmainargs
wcsncmp
remove

user32

LockWindowUpdate
TrackPopupMenu
SetCursor
IsWindowEnabled
InSendMessageEx
DestroyAcceleratorTable
GetDoubleClickTime
IsWindowVisible
LoadIconW
keybd_event
LoadBitmapA
SetRect
FindWindowExA
GetClassLongW
SendInput
DialogBoxIndirectParamA
wsprintfA
IsChild
GetClassLongA
IsIconic
GetNextDlgGroupItem
DrawIcon
OpenInputDesktop
GetClipCursor
IsZoomed
EnableWindow
CharLowerBuffW
ClientToScreen
AdjustWindowRectEx
PostMessageA
PeekMessageA
GetPropW
CloseDesktop
MapWindowPoints
RegisterClassA
IsCharAlphaNumericW
LoadImageA
IsRectEmpty
ToUnicodeEx
GetMessageExtraInfo
GetParent
CreateWindowExA
InvalidateRect
SetWindowLongA
ReleaseDC
ChangeMenuW
CheckMenuItem
OpenIcon
IsWindowUnicode
MessageBoxA
DrawMenuBar
SetForegroundWindow
wvsprintfW
IsWindow
GetScrollPos
GetAsyncKeyState
GetDialogBaseUnits
UpdateWindow
GetDCEx
LoadCursorA
SetScrollRange
CharUpperW
UnloadKeyboardLayout
GetScrollRange
GetWindowLongW
InflateRect
RemoveMenu
DrawAnimatedRects
SetActiveWindow
DialogBoxParamA
FrameRect
IsDialogMessageW
CharPrevW
GetForegroundWindow
WaitForInputIdle
SetPropW
SetMenu
LoadCursorW
SetSysColors
TranslateAcceleratorW
DefWindowProcW
CreatePopupMenu
SetParent
DialogBoxParamW
TileWindows
CharLowerW
PeekMessageW
GetWindowTextA
GetMessageW
CharNextW
LoadStringW
ShowWindowAsync
CharUpperA
PtInRect
CallWindowProcW
DispatchMessageA
TabbedTextOutW
SendMessageW
GetUpdateRgn
DrawStateW
GetMenuCheckMarkDimensions
LoadStringA
SetRectEmpty
CreateDialogIndirectParamW
CharUpperBuffW
GetWindowTextLengthW
CharToOemW
SetMenuDefaultItem

comctl32

ImageList_SetIconSize
ImageList_Write
ImageList_ReplaceIcon
ImageList_Draw
CreatePropertySheetPageW
PropertySheetW

gdi32

CreateCompatibleBitmap
CreatePalette
IntersectClipRect
SelectObject
GetSystemPaletteUse
CreateBrushIndirect
SetMapMode
GetLayout
SetPixel
SaveDC
GetMapMode
CreateICW
CreateEllipticRgnIndirect
CreateFontA
TranslateCharsetInfo
SetPaletteEntries
SetBitmapDimensionEx
StretchBlt
CreateDiscardableBitmap
GetDIBColorTable
LineTo
SetTextAlign
PatBlt
BeginPath
CreatePenIndirect
GetTextExtentPoint32A
SetBkColor
SetROP2
CreatePolygonRgn
GetTextExtentPointW
SetWindowOrgEx
CreatePen
GetViewportOrgEx
Escape
Polygon
CreateRectRgn
GetTextExtentPoint32W
AddFontResourceW
GetDeviceCaps
GetPixel
ExtTextOutW
CreatePatternBrush
ExcludeClipRect
EnumFontFamiliesW

kernel32

GetComputerNameA
SetHandleCount
OpenFile
CreateWaitableTimerA
MapViewOfFile
SetThreadPriority
GlobalGetAtomNameW
IsBadReadPtr
DeviceIoControl
FindClose
GetModuleHandleA
FindNextChangeNotification
SetThreadAffinityMask
GetPriorityClass
GetLastError
LockFile
GetCurrentDirectoryW
AreFileApisANSI
SetMailslotInfo
CreateEventA
FindResourceExW
ReadFile
GetTempPathA
GlobalAlloc
WinExec
GetTempPathW
CreateFileA
GetThreadLocale
EnumResourceNamesA
GetFullPathNameW
FileTimeToSystemTime
CreateRemoteThread
GetVersion
DeleteCriticalSection
GetModuleFileNameW
SuspendThread
lstrcpynW
GetHandleInformation
LocalAlloc
GetThreadContext
RtlUnwind
GetAtomNameW
GetFileAttributesExA
GetShortPathNameA
SearchPathA
SetTimerQueueTimer
RemoveDirectoryW
lstrcmpW
FileTimeToLocalFileTime
CancelWaitableTimer

shlwapi

PathFindExtensionA
PathFindExtensionW

Exports

Exports

?GenerateTextW@@YGPAJ_N<V

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.shell
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ace52d8d4450702239e799a8f19dc2b1

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

user32

comctl32

gdi32

kernel32

shlwapi

Exports

Exports

Sections

.text Size: 67KB - Virtual size: 66KB

.data Size: 135KB - Virtual size: 200KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 2KB - Virtual size: 1KB

.shell Size: 320KB - Virtual size: 320KB

.text
Size: 67KB - Virtual size: 66KB

.data
Size: 135KB - Virtual size: 200KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 2KB - Virtual size: 1KB

.shell
Size: 320KB - Virtual size: 320KB