d2573a3115d71e62b94f91e99156cac0N

Sharing

Copy URL Twitter E-mail

General

Target

d2573a3115d71e62b94f91e99156cac0N
Size

146KB
MD5

d2573a3115d71e62b94f91e99156cac0
SHA1

4896b7820886ef1e3c6fe0162fc4354db181e3fb
SHA256

08b21e699dafa4333d207457155f82c36a29a9dcb77dae99553f87b0a25da656
SHA512

e7e766bbbce7e89122d03139c0036a6b1345b87b765aa8fb4dff3fd6de39d321a764179db533269baa3adbbb792787c474c92215c5c943caffe879df402dea4c
SSDEEP

3072:k6n1V3FLii0YbvAXcSmUqxjRRFVcn6uXrucJRQLItqTTg7KZb:kOHiIbqcSrq1RRwVXrUkn2Zb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2573a3115d71e62b94f91e99156cac0N

Files

d2573a3115d71e62b94f91e99156cac0N
.exe windows:5 windows x86 arch:x86

e66eca66f75d15d94e62ad67bf328f3b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

H:\ftBstXz\ipcvsjztGpVr\jtyjBJOdaOC\flWDahaWavuc.pdb

Imports

shlwapi

StrToIntW

user32

DrawTextExW
CharUpperW
InflateRect
GetMenuState
CharToOemA
InSendMessageEx
LoadMenuA
GetDoubleClickTime
CascadeWindows
RegisterHotKey
OffsetRect
InternalGetWindowText
SetActiveWindow
SetScrollInfo
IsCharAlphaW
ClientToScreen
GetClassInfoExW
AdjustWindowRectEx
RegisterWindowMessageA
SetWindowRgn
GetCursorPos
CreateIconFromResource
SetUserObjectInformationW
GetClassInfoExA
FindWindowW
SetRect
DrawFocusRect
DispatchMessageA
GetSystemMetrics
GetDC
SetWindowPos
CallWindowProcA
GetNextDlgTabItem
GetTopWindow
EqualRect
ClipCursor
DialogBoxParamW
ChildWindowFromPointEx
CharUpperBuffA
ShowCaret
GetScrollRange
DragObject
SystemParametersInfoW
CreateDialogParamW
CharNextW
SetScrollRange
CheckDlgButton
UnionRect
OpenDesktopW
ExitWindowsEx
DrawStateA
GetClassLongA
SetWindowPlacement
TileWindows
IsRectEmpty
GetSubMenu
EnableWindow
SendMessageA
RemovePropW
GetMenuCheckMarkDimensions
ShowScrollBar
GetClassNameW
GetWindowTextA
ShowOwnedPopups
DrawStateW
LoadIconW
BeginPaint
FindWindowExA
IsWindowUnicode
LoadAcceleratorsW
wsprintfW
WaitForInputIdle
GetMenuItemCount
DefFrameProcA
GetWindowLongA
FrameRect
TranslateAcceleratorW
SendInput
LoadStringW
CreateDialogIndirectParamW
AllowSetForegroundWindow
DrawEdge
MessageBoxExW
RegisterClassExW
IsChild
DialogBoxIndirectParamA
GetDialogBaseUnits
ReleaseDC
GetWindowRect
DestroyWindow
GetDlgItemTextW
IsZoomed
SetMenu
MoveWindow
RegisterWindowMessageW
MonitorFromRect
DrawMenuBar
TranslateMessage
InSendMessage
GetWindowDC
ChangeMenuW
PostMessageW
GetMenuItemRect
wsprintfA
GetMessageExtraInfo
EnableScrollBar
DialogBoxIndirectParamW
GetMessagePos
MapVirtualKeyW
FindWindowA
GetMonitorInfoW
CreatePopupMenu
DrawIcon
ShowCursor
DestroyCaret
SetWindowLongW
PostThreadMessageW

comctl32

InitCommonControlsEx
PropertySheetW
ImageList_GetImageCount
ImageList_Create
ImageList_Remove
DestroyPropertySheetPage

kernel32

lstrlenA
GetCommandLineA
SetSystemTime
CreateWaitableTimerW
lstrcmpiA
IsDBCSLeadByteEx
GetModuleFileNameW
GetCurrentThreadId
CreateThread
GetFileSize
MoveFileA
VirtualFree
IsBadReadPtr
DisconnectNamedPipe
GetComputerNameExA
GetSystemWindowsDirectoryW
GlobalDeleteAtom
HeapCreate
HeapValidate
GetComputerNameExW
lstrcpynA
CreateDirectoryA
CreateNamedPipeW
GetOEMCP
IsBadStringPtrW
ReleaseMutex
CopyFileW
UnhandledExceptionFilter
LCMapStringW
FindFirstFileW
EnumResourceNamesW
FileTimeToLocalFileTime
MapViewOfFile
SetHandleInformation
CompareFileTime
GlobalCompact
LoadLibraryExW
LocalFree
lstrcatW
VirtualAlloc
ConnectNamedPipe
GetSystemDefaultUILanguage
VirtualProtect
DuplicateHandle
EnumResourceLanguagesA
GetSystemWindowsDirectoryA
LoadLibraryA
GetTempPathW
SizeofResource
GlobalLock
GetVersionExA
GlobalMemoryStatusEx
OpenFileMappingW
lstrcpyA
GetStdHandle
lstrcmpA

msvcrt

fclose
_controlfp
floor
wcschr
perror
swprintf
__set_app_type
__p__fmode
localtime
__p__commode
putchar
_amsg_exit
getenv
isdigit
_initterm
wcsrchr
setvbuf
wcstod
atol
_ismbblead
_XcptFilter
system
islower
_exit
strpbrk
wcslen
_cexit
strcpy
iswspace
remove
free
time
__setusermatherr
isspace
wcstombs
fgetc
__getmainargs
isalnum
printf
vsprintf
iswdigit
isalpha
wcscpy
wcscat
clearerr
fgets
strspn

Exports

Exports

?GetShiftAltInfo@@YGK_KHE:O

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bit
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.insec
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.inmin
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wall
Size: 512B - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e66eca66f75d15d94e62ad67bf328f3b

Headers

File Characteristics

PDB Paths

Imports

shlwapi

user32

comctl32

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 7KB

.bit Size: 1KB - Virtual size: 1KB

.insec Size: 6KB - Virtual size: 5KB

.inmin Size: 512B - Virtual size: 86B

.wall Size: 512B - Virtual size: 126KB

.zdata Size: 13KB - Virtual size: 12KB

.data Size: 1KB - Virtual size: 1KB

.rsrc Size: 112KB - Virtual size: 112KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 7KB

.bit
Size: 1KB - Virtual size: 1KB

.insec
Size: 6KB - Virtual size: 5KB

.inmin
Size: 512B - Virtual size: 86B

.wall
Size: 512B - Virtual size: 126KB

.zdata
Size: 13KB - Virtual size: 12KB

.data
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 112KB - Virtual size: 112KB

.reloc
Size: 1KB - Virtual size: 1KB