624102039980e3c24e74a7cb6f35165082efc3933f340ef09399318fa562a056N

Sharing

Copy URL

Twitter E-mail

General

Target

624102039980e3c24e74a7cb6f35165082efc3933f340ef09399318fa562a056N
Size

144KB
MD5

ff2d1616c893135776bac71b88f2c0a0
SHA1

a1c8fe7ed84881a35c2c78693cf0f3b702d567ee
SHA256

624102039980e3c24e74a7cb6f35165082efc3933f340ef09399318fa562a056
SHA512

edbff35b815c68cfa600ee283f43a20812455a3c1a807257359f29f42c4a9bd9ca459282c2874fcdbf0a8fe2bb3bfa582ed63241ceef79d86de027e9a0f7325c
SSDEEP

3072:foYxFQd12RMTr95/zVL/j4IOnwXyt4lcUJfs93xIThaz:f7g12m39jInEy26I4xH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
624102039980e3c24e74a7cb6f35165082efc3933f340ef09399318fa562a056N

Files

624102039980e3c24e74a7cb6f35165082efc3933f340ef09399318fa562a056N
.exe windows:5 windows x86 arch:x86

7871d36be1d9b9712fc6eb92f06dc228

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

U:\duepjuq\ffwCaffbosv\iljzzYal\VrtafxtLjO\tuuyeFvkvdc.pdb

Imports

msvcrt

_controlfp
realloc
free
strstr
__set_app_type
putc
__p__fmode
strpbrk
remove
strspn
localtime
__p__commode
time
_amsg_exit
islower
_initterm
isspace
wcstombs
isprint
mbtowc
_ismbblead
perror
_XcptFilter
qsort
fflush
_exit
vsprintf
isalpha
wcstod
wcscpy
_cexit
memset
vswprintf
atoi
clock
getc
towlower
wcsstr
toupper
isalnum
strtoul
__setusermatherr
ftell
wcscmp
floor
printf
__getmainargs
strtok

kernel32

FindResourceExA
TlsGetValue
lstrcatW
GetCommandLineA
CreateFileMappingW
LoadLibraryExW
AddAtomA
GetHandleInformation
SetLastError
CancelIo
CompareStringA
SizeofResource
HeapReAlloc
FreeResource
DefineDosDeviceW
WaitForMultipleObjects
SetCommMask
GetModuleFileNameA
lstrcpynW
SetCommBreak
GlobalCompact
SetFileAttributesW
FindFirstFileA
LocalReAlloc
CreateDirectoryA
EnumResourceLanguagesA
LocalAlloc
SearchPathA
GetProcessHeap
SetSystemTimeAdjustment
HeapFree
RaiseException
RemoveDirectoryW
SetCommState
CreateEventW
GlobalFree
HeapAlloc
ReadFile
EnumResourceTypesA
SleepEx
GetThreadTimes
OpenFileMappingA
GetLocaleInfoW
FoldStringW
SetThreadExecutionState
GetVersionExW
GetUserDefaultLCID
EnumResourceNamesA
GetCurrentThreadId
LocalFree
GlobalFlags
ReleaseSemaphore
CreateNamedPipeW
OpenEventW
FileTimeToLocalFileTime
lstrcatA
GetTempPathW
IsBadCodePtr

user32

OpenInputDesktop
DrawStateW
GetWindowModuleFileNameW
OemToCharA
ActivateKeyboardLayout
GetKeyNameTextW
GetGUIThreadInfo
SetMenu
RemovePropW
DispatchMessageA
DrawIconEx
CreateIconIndirect
SetWindowRgn
CreateWindowExA
IsZoomed
AdjustWindowRectEx
UnloadKeyboardLayout
HideCaret
DestroyCaret
ShowWindowAsync
LoadAcceleratorsW
LoadCursorA
SetClassLongW
GetSystemMetrics
GetFocus
ShowWindow
SendDlgItemMessageW
GetKeyState
SetScrollPos
GetNextDlgGroupItem
GetWindowTextLengthW
CharToOemW
LoadImageW
GetMessageW
PostQuitMessage
ShowCaret
FillRect
FindWindowExA
CharPrevA
DefWindowProcW
GetWindowPlacement
CharUpperBuffA
ModifyMenuW
IsCharAlphaNumericW
GetMenuStringW
SetParent
ChildWindowFromPoint
DispatchMessageW
SetActiveWindow
GetWindow
IsDlgButtonChecked
SetSysColors
SetMenuDefaultItem
CheckDlgButton
CopyRect
PostMessageA
UnionRect
wsprintfW
TranslateAcceleratorA
InvertRect
IsRectEmpty
TranslateAcceleratorW
DrawTextA
SystemParametersInfoW
LoadImageA
ExitWindowsEx
DefFrameProcW
SendMessageTimeoutA
OffsetRect
GetMessageTime
EnumChildWindows
MapWindowPoints
GetUpdateRgn
GetSystemMenu
FindWindowExW
GetClassNameW
HiliteMenuItem
DefFrameProcA
GetClassInfoW
GetClassLongA
ChildWindowFromPointEx
LoadStringA
DestroyAcceleratorTable
TileWindows
CopyAcceleratorTableW
GetActiveWindow
SetForegroundWindow
LoadBitmapW
UpdateWindow
GetPropW
SendMessageA
GetDoubleClickTime
GetShellWindow
CharPrevW
SetWindowPos
ArrangeIconicWindows
SetWindowTextW
TrackPopupMenuEx
GetKeyboardLayout
IntersectRect
IsWindowVisible
FindWindowA
SetMenuItemBitmaps
CheckRadioButton
SetLastErrorEx
InsertMenuA
DialogBoxIndirectParamW
AppendMenuW
LookupIconIdFromDirectory
ToUnicodeEx
ClientToScreen
CreateWindowExW
OpenIcon
GetSysColor
GetCaretBlinkTime
MessageBoxA
LoadIconA
AllowSetForegroundWindow
IsCharAlphaW
GetDlgItem
LoadCursorW
InternalGetWindowText
AppendMenuA
ShowScrollBar

comdlg32

PageSetupDlgW
FindTextW
GetSaveFileNameA
ReplaceTextW

shlwapi

StrToIntW

Exports

Exports

?GenericOutputInfoYSUh@@YGK_KHE[D

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7871d36be1d9b9712fc6eb92f06dc228

Headers

File Characteristics

PDB Paths

Imports

msvcrt

kernel32

user32

comdlg32

shlwapi

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 8KB

.data Size: 21KB - Virtual size: 145KB

.rsrc Size: 112KB - Virtual size: 111KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 21KB - Virtual size: 145KB

.rsrc
Size: 112KB - Virtual size: 111KB

.reloc
Size: 2KB - Virtual size: 1KB