322a77c11ec3c1686436a277f65caf65d27fac052139f1080dee157b7f0bfcaf

Sharing

Copy URL

Twitter E-mail

General

Target

322a77c11ec3c1686436a277f65caf65d27fac052139f1080dee157b7f0bfcaf
Size

102KB
MD5

e9c371118d7ef60b7ff5a57079f54e71
SHA1

4099709ecc65380ebce572a9178dab971f04e324
SHA256

322a77c11ec3c1686436a277f65caf65d27fac052139f1080dee157b7f0bfcaf
SHA512

da8b6430e2376bda95fc323c17650fcb1c229bec04802141e6c11acef554efad27d46a0cf04fd582c7f1f0f3788f1d65b011bb3cd527d3b07e5a61b59ada9d81
SSDEEP

3072:O+pLzFBQsyBTVzczqz7nzvz7zEWxT14EJhu7wwtMu7oc:PpPFOzczqzbzvz7zpu7Ku7o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
322a77c11ec3c1686436a277f65caf65d27fac052139f1080dee157b7f0bfcaf

Files

322a77c11ec3c1686436a277f65caf65d27fac052139f1080dee157b7f0bfcaf
.exe windows:4 windows x86 arch:x86

3453c4ab093027933b06890783c2b219

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

g:\stage\Vesper_V092_stage\devel\3dswin\src\exe\MaxFind.exe.pdb

Imports

opengl32

wglDeleteContext
glDepthFunc
wglCreateContext
wglMakeCurrent
glClearColor
glEnable
glClear
glLightModeli
glShadeModel
glCullFace
glDisable
glMatrixMode
glLoadIdentity
glTranslated
glMultMatrixf
glNormal3f
glVertex3f
glColor3f
glBegin
glVertex2f
glEnd
glMaterialfv
glMateriali
glLightfv

glu32

gluPerspective

kernel32

CreateThread
FindFirstFileA
GetModuleHandleA
WaitForSingleObject
ResetEvent
GetStartupInfoA
SetEvent
GetDateFormatA
FileTimeToSystemTime
MultiByteToWideChar
CreateEventA
InitializeCriticalSection
GetCurrentDirectoryA
SetCurrentDirectoryA
WideCharToMultiByte
FindClose
FindNextFileA

user32

SetCapture
ReleaseCapture
SetTimer
SetFocus
RegisterClassExA
EnableWindow
InvalidateRect
EndDialog
GetParent
DialogBoxParamA
PostMessageA
PostQuitMessage
SendMessageA
DefWindowProcA
EndPaint
GetSysColor
ReleaseDC
MoveWindow
CreateDialogParamA
SetActiveWindow
GetWindowLongA
GetWindowRect
SetWindowLongA
LoadCursorA
SetCursor
SetWindowPos
GetDlgItem
SetWindowTextA
GetMenu
GetDC
LoadIconA
DestroyWindow
CreateWindowExA
MessageBoxA
ShowWindow
UpdateWindow
PeekMessageA
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
LoadStringA
BeginPaint
GetClientRect
WaitMessage

gdi32

GetStockObject
GetDeviceCaps
CreateFontIndirectA
GetObjectA
DeleteObject
SetPixelFormat
ChoosePixelFormat
CreatePen
LineTo
MoveToEx
SelectObject
SwapBuffers

advapi32

RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA

shell32

SHGetPathFromIDListA
DragQueryFileA
DragFinish
DragAcceptFiles
SHBrowseForFolderA

ole32

FreePropVariantArray
CoTaskMemFree
CoTaskMemAlloc
StgOpenStorage

msvcr70

wcscpy
??3@YAXPAX@Z
wcstombs
sprintf
??2@YAPAXI@Z
wcslen
free
_except_handler3
_controlfp
_onexit
__dllonexit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
_CIasin
strtok
malloc
strstr
_strlwr

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3453c4ab093027933b06890783c2b219

Headers

File Characteristics

PDB Paths

Imports

opengl32

glu32

kernel32

user32

gdi32

advapi32

shell32

ole32

msvcr70

Sections

.text Size: 18KB - Virtual size: 17KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 72KB - Virtual size: 72KB

.rsrc Size: 6KB - Virtual size: 6KB

.text
Size: 18KB - Virtual size: 17KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 72KB - Virtual size: 72KB

.rsrc
Size: 6KB - Virtual size: 6KB