6145b990cdefcf1f08c9b8081eab2cb5c59916218b7bf1e3281f1934c0308f17

Sharing

Copy URL

Twitter E-mail

General

Target

6145b990cdefcf1f08c9b8081eab2cb5c59916218b7bf1e3281f1934c0308f17
Size

3.0MB
MD5

23469f1571b2dfeeff712b69c5323ba3
SHA1

77c1557e7f06cdd21359aaf1f999035b3555d623
SHA256

6145b990cdefcf1f08c9b8081eab2cb5c59916218b7bf1e3281f1934c0308f17
SHA512

9644e629765f1a810967b0f7ba12dd25db7a759b0b813fda98e9f4ef572cd616fa91715c4cae7faa5b5eef3702e1ae174ac0487cbcaab57db97ac163ee4308ea
SSDEEP

49152:8FUq8we8m0LmYoTZtRYDr5SIznIJQCwZ8zSgORyCWbFgmGxoh/oj9ghi1RebpyTG:6e8m0LmVZtRYDMIznIaCwryCWhgmGxop

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6145b990cdefcf1f08c9b8081eab2cb5c59916218b7bf1e3281f1934c0308f17

Files

6145b990cdefcf1f08c9b8081eab2cb5c59916218b7bf1e3281f1934c0308f17
.exe windows x86

80c30bc01d0fdf9aae8f359d7d9454b1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleW
GetConsoleCP
GetTimeZoneInformation
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
QueryPerformanceCounter
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
SetUnhandledExceptionFilter
GetFileType
SetStdHandle
FormatMessageW
VirtualQuery
GetSystemInfo
VirtualAlloc
GetSystemTimeAsFileTime
HeapSize
HeapQueryInformation
CreateThread
ExitThread
ExitProcess
RaiseException
HeapReAlloc
DecodePointer
EncodePointer
HeapAlloc
HeapFree
GetStartupInfoW
HeapSetInformation
GetCommandLineW
FindResourceExW
VirtualProtect
GetFileTime
GetFileSizeEx
FileTimeToLocalFileTime
GetFileAttributesExW
SetErrorMode
SearchPathW
Sleep
GetProfileIntW
GetTickCount
GetNumberFormatW
GetWindowsDirectoryW
GetFullPathNameW
GetVolumeInformationW
FindClose
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
RtlUnwind
GetConsoleMode
LockFile
FlushFileBuffers
WriteFile
ReadFile
lstrcmpiW
GetTempPathW
GetTempFileNameW
SetFilePointer
CreateFileW
GetFileSize
GetFileAttributesW
InitializeCriticalSectionAndSpinCount
DeleteFileW
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
FileTimeToSystemTime
GetThreadLocale
lstrlenA
GlobalGetAtomNameW
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
WaitForSingleObject
ResumeThread
SetThreadPriority
CloseHandle
WritePrivateProfileStringW
GetPrivateProfileIntW
lstrcpyW
lstrcmpA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
InterlockedExchange
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
FreeLibrary
CompareStringW
LoadLibraryW
lstrcmpW
GetCurrentThreadId
GetCurrentProcessId
GetModuleFileNameW
ActivateActCtx
DeactivateActCtx
FreeResource
SetLastError
GlobalFree
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
lstrlenW
MulDiv
WideCharToMultiByte
MultiByteToWideChar
GetPrivateProfileStringW
GetUserDefaultLangID
FindNextFileW
FindFirstFileW
GetNativeSystemInfo
GetSystemDirectoryW
GetProcAddress
GetModuleHandleW
CopyFileW
GetCurrentDirectoryW
FindResourceW
LoadResource
LockResource
SizeofResource
LocalFree
GetLastError
SetEnvironmentVariableA

user32

RegisterClipboardFormatW
HideCaret
InvertRect
UnregisterClassW
CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
MapVirtualKeyW
ToUnicodeEx
GetUpdateRect
GetDoubleClickTime
DestroyAcceleratorTable
SetClassLongW
CopyIcon
GetIconInfo
SetCursorPos
DestroyIcon
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
CopyImage
OpenClipboard
SetParent
LockWindowUpdate
BringWindowToTop
GetNextDlgGroupItem
InvalidateRgn
SetRect
CopyAcceleratorTableW
CharNextW
WaitMessage
GetMenuDefaultItem
SetMenuDefaultItem
CreatePopupMenu
IsMenu
MonitorFromPoint
UpdateLayeredWindow
EnableScrollBar
UnionRect
CharUpperW
IsZoomed
GetAsyncKeyState
NotifyWinEvent
MessageBeep
ReleaseCapture
WindowFromPoint
SetCapture
KillTimer
SetTimer
LoadMenuW
DeleteMenu
IntersectRect
RealChildWindowFromPoint
DestroyMenu
GetMenuItemInfoW
ShowOwnedPopups
SetCursor
GetMessageW
TranslateMessage
ValidateRect
LoadCursorW
SetLayeredWindowAttributes
EnumDisplayMonitors
SystemParametersInfoW
SetRectEmpty
DrawIconEx
GetSysColorBrush
RedrawWindow
SetWindowRgn
DrawFocusRect
DrawFrameControl
DrawEdge
OffsetRect
InflateRect
IsRectEmpty
SetWindowContextHelpId
MapDialogRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
EnableMenuItem
FrameRect
RegisterWindowMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
PeekMessageW
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
PostMessageW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
SetWindowPlacement
GetWindowPlacement
DefWindowProcW
CallWindowProcW
GetMenu
GetWindowTextLengthW
GetWindowTextW
SetFocus
SetWindowPos
ShowWindow
MoveWindow
SetWindowLongW
GetDlgCtrlID
TranslateAcceleratorW
InsertMenuItemW
ReuseDDElParam
UnpackDDElParam
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
SendDlgItemMessageW
CheckDlgButton
GetWindow
SetWindowsHookExW
UnhookWindowsHookEx
GetCursorPos
CallNextHookEx
GetFocus
CharUpperBuffW
PostThreadMessageW
SubtractRect
IsClipboardFormatAvailable
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
GetWindowRgn
DestroyCursor
GetWindowRect
PtInRect
GetSysColor
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
ScreenToClient
GrayStringW
CreateMenu
MapVirtualKeyExW
IsCharLowerW
GetKeyNameTextW
CheckMenuItem
TranslateMDISysAccel
DrawTextExW
DrawTextW
TabbedTextOutW
GetWindowThreadProcessId
GetLastActivePopup
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
GetClassNameW
LoadBitmapW
InvalidateRect
UpdateWindow
FillRect
DrawStateW
GetMenuState
GetMenuStringW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
PostQuitMessage
AppendMenuW
GetSystemMenu
LoadIconW
EnableWindow
MessageBoxW
SendMessageW

gdi32

CreatePolygonRgn
CombineRgn
GetBkColor
GetTextColor
Polyline
Ellipse
Polygon
PatBlt
GetTextExtentPoint32W
GetTextMetricsW
CreateDIBitmap
CreateFontIndirectW
CreateCompatibleBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetRectRgn
GetMapMode
DPtoLP
CreateRoundRectRgn
CreateDIBSection
GetRgnBox
OffsetRgn
Rectangle
SetPixel
SetDIBColorTable
RealizePalette
StretchBlt
RoundRect
CreatePalette
GetPaletteEntries
CreateEllipticRgn
CreateHatchBrush
GetSystemPaletteEntries
EnumFontFamiliesExW
ExtFloodFill
SetPaletteEntries
GetViewportOrgEx
LPtoDP
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetWindowOrgEx
SetPixelV
GetTextFaceW
SetViewportOrgEx
SelectObject
Escape
CreateRectRgnIndirect
ExtTextOutW
TextOutW
RectVisible
PtVisible
CreatePen
GetObjectType
SelectPalette
OffsetViewportOrgEx
CreateCompatibleDC
CreateBitmap
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
GetNearestPaletteIndex
GetDeviceCaps
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
GetStockObject
GetObjectW
CreateSolidBrush
DeleteObject
CreateDCW
CopyMetaFileW
SetViewportExtEx

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

DeletePrinter
ClosePrinter
DeletePrinterDriverW
GetPrinterDriverDirectoryW
AddPrinterDriverW
OpenPrinterW
AddMonitorW
ord204
DocumentPropertiesW
AddPrinterW
EnumPrintersW

advapi32

RegEnumKeyExW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyW
RegOpenKeyExW
RegEnumValueW
RegQueryValueW

shell32

SHGetDesktopFolder
SHGetSpecialFolderLocation
DragQueryFileW
DragFinish
ShellExecuteW
SHGetFileInfoW
SHAppBarMessage
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc

comctl32

InitCommonControlsEx
ImageList_GetIconSize

shlwapi

PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW
StrStrIW
PathRemoveFileSpecW

ole32

CoLockObjectExternal
RegisterDragDrop
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoCreateInstance
RevokeDragDrop
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
OleGetClipboard
OleLockRunning
CoUninitialize
CoRegisterMessageFilter
CoRevokeClassObject
CoInitializeEx
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoInitialize

oleaut32

SysFreeString
OleCreateFontIndirect
VarBstrFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SysStringLen
SysAllocString
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen

oledlg

OleUIBusyW

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageRectI

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundW

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 282KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

80c30bc01d0fdf9aae8f359d7d9454b1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

setupapi

oleacc

imm32

winmm

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 282KB - Virtual size: 282KB

.data Size: 25KB - Virtual size: 55KB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.reloc Size: 168KB - Virtual size: 168KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 282KB - Virtual size: 282KB

.data
Size: 25KB - Virtual size: 55KB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

.reloc
Size: 168KB - Virtual size: 168KB