4b46bcd23f3b41ca2a737c368220fa2d1c61283bc5e9a04b156a7b36504b94eeN

Sharing

Copy URL Twitter E-mail

General

Target

4b46bcd23f3b41ca2a737c368220fa2d1c61283bc5e9a04b156a7b36504b94eeN
Size

245KB
MD5

e3507ec46fb2c7bfeeeed7dddf8c2120
SHA1

aeb85302fa36492e519f85e73ebe2726186082d6
SHA256

4b46bcd23f3b41ca2a737c368220fa2d1c61283bc5e9a04b156a7b36504b94ee
SHA512

18d4f091be232c44b32b2e3de2b9cd99c27bfb910f41bdf32058cc99181289a9dfcd950f9bb4463d5fb489d7c79a7f2d10d6ea253549cacc07f44a6c82313bc1
SSDEEP

3072:zRzOqYFGR4eVjtb0mu1cN9Z69zARrnJDfZpeI1Qo6v9cD:zR6qY+Rj/u6bo+rJDfneI13Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b46bcd23f3b41ca2a737c368220fa2d1c61283bc5e9a04b156a7b36504b94eeN

Files

4b46bcd23f3b41ca2a737c368220fa2d1c61283bc5e9a04b156a7b36504b94eeN
.exe windows:5 windows x86 arch:x86

3fa594815aa4d49082ade8987f9994fa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

V:\uBkTmUCxkyNvh\xXzhlpdumuYEeo\gHezmeagsfsDd.pdb

Imports

comdlg32

PrintDlgExW
GetOpenFileNameA
ReplaceTextW
ChooseColorW
PrintDlgW
GetSaveFileNameA
GetFileTitleW

gdi32

CreateFontW
CreateEllipticRgnIndirect
CreatePolygonRgn
GetClipBox
GetSystemPaletteUse
CreatePalette
SetBkMode
StretchDIBits
GetCharWidth32W
IntersectClipRect
GetROP2
GetFontData
GetDeviceCaps
FillRgn
LineDDA
EnumFontFamiliesW
GetStockObject
GetSystemPaletteEntries
GetDIBits
RemoveFontResourceW
SetBitmapBits
CreateDCW
SetMapMode
CreateHalftonePalette
SetROP2
CreateBitmapIndirect
GetTextCharsetInfo
TranslateCharsetInfo
DeleteObject
CreatePen
CreateFontIndirectW
CreateCompatibleBitmap
ExcludeClipRect
GetLayout
SetRectRgn
RectVisible
ScaleWindowExtEx
TextOutW
TextOutA
EndPage
CreateBitmap
SelectPalette
GetPixel
DeleteDC
DPtoLP
SetWindowExtEx
CreateBrushIndirect
GetMapMode
SelectObject
LineTo
ExtTextOutA
RectInRegion
Escape

kernel32

QueryPerformanceCounter
CompareFileTime
GlobalCompact
SetCurrentDirectoryW
GetStartupInfoW
SetCommState
GetBinaryTypeA
GetVersionExW
VerifyVersionInfoW
VirtualQuery
HeapFree
FindNextFileA
GetComputerNameA
lstrlenW
SetWaitableTimer
GetFullPathNameA
GetNumberFormatW
SetLocalTime
CreateNamedPipeA
SuspendThread
HeapReAlloc
RtlUnwind
GetSystemWindowsDirectoryA
GetStdHandle
CreateSemaphoreW
IsBadStringPtrW
GetUserDefaultLCID
VirtualAlloc
SetThreadContext
LoadLibraryExW
lstrcpyA
FindResourceA
EnumResourceLanguagesA
HeapUnlock
SetCommTimeouts
WaitForMultipleObjectsEx
GetCPInfo
FoldStringW
UnmapViewOfFile
CreateMutexA
GetThreadLocale
CreateFileA
HeapWalk
FindNextFileW
FindResourceExA
CreateNamedPipeW
SearchPathA
IsValidLocale
GlobalReAlloc
GlobalAlloc
GetNumberFormatA
GetFileAttributesExW
SetupComm
AddAtomA
lstrcatW
SetSystemTime
CreateMutexW
GetProcAddress
GetSystemDirectoryW
GlobalLock
EnumSystemLocalesA
MapViewOfFile
MoveFileExW

comctl32

ImageList_AddMasked
CreatePropertySheetPageA
CreatePropertySheetPageW
ImageList_Draw
CreateStatusWindowW
ImageList_ReplaceIcon
ImageList_Create

msvcrt

remove
strncmp
vsprintf
_controlfp
strchr
__set_app_type
strcoll
__p__fmode
iswxdigit
__p__commode
_amsg_exit
_initterm
towlower
wcstod
strtok
fputc
fread
_ismbblead
strcpy
fflush
isspace
_XcptFilter
islower
iswspace
_exit
free
getenv
mbstowcs
_cexit
strerror
putc
fgetc
qsort
atol
strtol
exit
ungetc
strspn
bsearch
iswctype
tolower
toupper
sscanf
iswprint
isdigit
__setusermatherr
__getmainargs
strrchr
puts
setlocale
localtime

advapi32

AccessCheckByTypeResultList
GetCurrentHwProfileW

user32

MessageBoxExW
RegisterClassW
DestroyMenu
FindWindowExW
GetParent
CopyImage
OpenIcon
GetKeyboardLayoutList
LoadIconW
GetKeyState
GetDlgCtrlID
MonitorFromPoint
KillTimer
SetScrollPos
DialogBoxParamW
InternalGetWindowText
SetMenuItemInfoW
DestroyIcon
RegisterClassExW
CharNextExA
SetCursor
DialogBoxIndirectParamA
ReplyMessage
TrackPopupMenu
CharLowerBuffW
OemToCharBuffA
SetUserObjectInformationW
WaitForInputIdle
DrawMenuBar
TranslateAcceleratorW
LoadMenuA
InvertRect
GetClassInfoExW
GetWindowTextLengthW
DrawFrameControl
RegisterWindowMessageW
AdjustWindowRectEx
CreateWindowExA
InflateRect
InSendMessage
DestroyCursor
RegisterClassA
GetKeyboardLayout
SetRect
GetWindowTextW
SetCursorPos
GetCaretPos
GetSysColorBrush
SystemParametersInfoW
ShowWindow
FillRect
keybd_event
GetFocus
CharPrevA
OpenDesktopW
MessageBoxW
LoadImageA
SendMessageA
MapVirtualKeyA
SetMenu
GetUserObjectInformationA
WaitMessage
IsRectEmpty
IntersectRect
CallWindowProcA
GetClassInfoA
AttachThreadInput
DispatchMessageW
GetMenuItemCount
DestroyWindow
SetTimer
CreateAcceleratorTableW
OpenInputDesktop
CopyAcceleratorTableW
FrameRect
MessageBoxA
IsIconic
LoadBitmapW
LoadStringA
LoadBitmapA
ToUnicodeEx
IsCharLowerA
EnumWindows
DrawIcon
CharUpperW
GetKeyNameTextW
GetMenuItemRect
CheckMenuRadioItem
GetClassNameW
GetMenuState
VkKeyScanA
SetFocus
OemKeyScan
PostQuitMessage
PostThreadMessageW
GetWindowLongW
GetIconInfo
GetDCEx
GetLastActivePopup
SetWindowLongW
DefDlgProcA
MapVirtualKeyW
CloseDesktop
GetWindowRect
SetPropW
GetKeyboardType
GetAsyncKeyState
GetMenuItemID
SwitchToThisWindow
DialogBoxIndirectParamW
IsMenu
SendDlgItemMessageA
IsWindowUnicode
InvalidateRect
ReleaseDC
DeleteMenu
DrawIconEx
CharNextA
CharLowerA
EnableScrollBar
DrawTextW
SetWindowPos
IsWindow
VkKeyScanW
GetScrollPos
ValidateRect
GetClipCursor
AppendMenuA
SendMessageW
GetMessageTime
GetDC
DispatchMessageA
PeekMessageW

Exports

Exports

?EqualRectKLJDjlklfjkdIULFD@@YGKPA_WK@Z

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3fa594815aa4d49082ade8987f9994fa

Headers

File Characteristics

PDB Paths

Imports

comdlg32

gdi32

kernel32

comctl32

msvcrt

advapi32

user32

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 23KB

.data Size: 22KB - Virtual size: 130KB

.rsrc Size: 196KB - Virtual size: 195KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 24KB - Virtual size: 23KB

.data
Size: 22KB - Virtual size: 130KB

.rsrc
Size: 196KB - Virtual size: 195KB

.reloc
Size: 1KB - Virtual size: 1KB