561bdadd8a2784bdca76630ea0902991679794c3c0d67cf82a5c21366b2df417

Sharing

Copy URL Twitter E-mail

General

Target

561bdadd8a2784bdca76630ea0902991679794c3c0d67cf82a5c21366b2df417
Size

556KB
MD5

e5ada60757257e15f72681b64dc2b3ac
SHA1

cfddea1b38eaa1a032fadc20dcc79dd9c94d9945
SHA256

561bdadd8a2784bdca76630ea0902991679794c3c0d67cf82a5c21366b2df417
SHA512

de9f5f90ddb420ec0be957971dcdab034700eacf48ecf1b0cd67ae70065dd7e588b548a55262b30410751a8b46750aca364f2502d259cc8465523c7a563f7b19
SSDEEP

12288:KQ7CkhlpTmNNhFOUsyfDefsAAwYFuBL93HUU3mj:ZhijSffAkBL9I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
561bdadd8a2784bdca76630ea0902991679794c3c0d67cf82a5c21366b2df417

Files

561bdadd8a2784bdca76630ea0902991679794c3c0d67cf82a5c21366b2df417
.exe windows x86

9c305b4dbc214f04e11fdb62e0b23edf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wpcap

pcap_open_offline
pcap_dump_open
pcap_dump
pcap_dump_close
pcap_dispatch
pcap_lookupdev
pcap_open_live
pcap_lookupnet
pcap_datalink
pcap_close

kernel32

GetCurrentDirectoryA
RtlUnwind
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
ExitProcess
TerminateProcess
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetFileInformationByHandle
PeekNamedPipe
GetFileType
GetStartupInfoA
GetCommandLineA
HeapReAlloc
ExitThread
CreateThread
LocalFileTimeToFileTime
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
SetHandleCount
GetStdHandle
SetStdHandle
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
LCMapStringA
LCMapStringW
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
FileTimeToLocalFileTime
SetErrorMode
SystemTimeToFileTime
FileTimeToSystemTime
GetOEMCP
GetCPInfo
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GlobalFlags
GetDiskFreeSpaceA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
CreateEventA
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
GetTickCount
InterlockedDecrement
GetShortPathNameA
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
CloseHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
MoveFileA
lstrcmpA
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
GetModuleHandleA
GetProcAddress
SetLastError
CopyFileA
GlobalSize
FormatMessageA
lstrcpynA
LocalFree
GlobalFree
FreeResource
GetStringTypeExA
CompareStringW
CompareStringA
lstrlenW
lstrcmpiA
GetLastError
MultiByteToWideChar
MulDiv
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
lstrcatA
lstrlenA
WinExec
lstrcpyA
GlobalAlloc
GlobalLock
GlobalUnlock
Sleep
GetLocalTime
GetTimeFormatA
GetModuleFileNameA
GetVersion
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
HeapSize

user32

BringWindowToTop
SetRectEmpty
CreatePopupMenu
InsertMenuItemA
LoadAcceleratorsA
ReuseDDElParam
UnpackDDElParam
WindowFromPoint
SetRect
ValidateRect
TranslateMessage
GetMessageA
IsZoomed
UnionRect
DeleteMenu
GetSystemMenu
PostQuitMessage
ShowOwnedPopups
MapDialogRect
SetWindowContextHelpId
FindWindowA
SetCursorPos
DestroyCursor
DefMDIChildProcA
DrawMenuBar
PostThreadMessageA
LockWindowUpdate
CharNextA
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
GetMenuCheckMarkDimensions
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
GetCapture
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
MessageBoxA
TrackPopupMenu
GetScrollPos
IsWindowVisible
GetMenu
AdjustWindowRectEx
EqualRect
DeferWindowPos
SetMenu
GetClassInfoA
RegisterClassA
UnregisterClassA
GetDlgCtrlID
DefWindowProcA
SetWindowPos
IntersectRect
IsIconic
GetWindowPlacement
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetDesktopWindow
GetActiveWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetAsyncKeyState
DrawIconEx
LoadImageA
DrawEdge
FrameRect
LoadBitmapA
UpdateWindow
PostMessageA
CharUpperA
GetSysColorBrush
BeginDeferWindowPos
EndDeferWindowPos
GetWindowLongA
GetClassLongA
wsprintfA
GetWindow
GetDCEx
ClientToScreen
IsRectEmpty
OffsetRect
CopyRect
SystemParametersInfoA
IsChild
GetFocus
ScreenToClient
DestroyIcon
GetCursorPos
LoadIconA
SetForegroundWindow
SetParent
SetActiveWindow
KillTimer
SetTimer
SetClipboardData
CloseClipboard
OpenClipboard
SetWindowLongA
LoadCursorA
CopyIcon
MessageBeep
GetParent
InvalidateRect
ReleaseDC
GetDC
GetWindowRect
TranslateAcceleratorA
DestroyMenu
GetMenuItemInfoA
EndPaint
BeginPaint
GetWindowDC
GrayStringA
InflateRect
SetCursor
IsWindow
GetKeyState
GetSysColor
SetScrollPos
EmptyClipboard
RegisterClipboardFormatA
ReleaseCapture
SetScrollInfo
EnableScrollBar
DestroyCaret
DrawTextExA
TabbedTextOutA
SetMenuItemBitmaps
ModifyMenuA
CheckMenuItem
SetCaretPos
CreateCaret
SetCapture
RedrawWindow
GetClientRect
DragDetect
LoadMenuA
GetSubMenu
EnableMenuItem
DrawTextA
FillRect
PtInRect
SendMessageA
EnableWindow
CallWindowProcA
WinHelpA

gdi32

Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
SetRectRgn
CombineRgn
DPtoLP
GetBkColor
GetTextMetricsA
StretchDIBits
GetRgnBox
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
RectVisible
PtVisible
GetPixel
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
DeleteObject
GetStockObject
SetBoundsRect
GetCharWidthA
GetTextExtentPoint32A
TextOutA
BitBlt
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontA
GetMapMode
CreateSolidBrush
SetTextColor
GetClipBox
CreateRectRgnIndirect
CopyMetaFileA
CreatePen
PatBlt
GetTextColor
EnumFontFamiliesA
ExtTextOutA
GetDeviceCaps
GetObjectA
CreateFontIndirectA

comdlg32

GetOpenFileNameA
PrintDlgA
GetSaveFileNameA
GetFileTitleA
CommDlgExtendedError

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

GetFileSecurityA
RegSetValueExA
RegOpenKeyExA
RegQueryValueA
RegSetValueA
RegOpenKeyA
RegCreateKeyExA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegCreateKeyA
RegCloseKey
SetFileSecurityA

shell32

ExtractIconA
Shell_NotifyIconA
SHGetFileInfoA
DragFinish
DragQueryFileA
ShellExecuteA

comctl32

ImageList_Destroy
ImageList_LoadImageA
ord17
ImageList_Draw
ImageList_GetImageInfo

shlwapi

PathIsUNCA
PathFindExtensionA
PathStripToRootA
PathFindFileNameA

oledlg

ord8

ole32

CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
ReleaseStgMedium
CoTaskMemAlloc
CoTaskMemFree
CoRevokeClassObject
CoRegisterMessageFilter
CreateStreamOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleDuplicateData

oleaut32

SysAllocString
VariantCopy
SafeArrayDestroy
SystemTimeToVariantTime
OleCreateFontIndirect
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysFreeString
SysStringLen
SysAllocStringByteLen

ws2_32

WSACleanup
WSAStartup

Sections

.text
Size: 380KB - Virtual size: 378KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9c305b4dbc214f04e11fdb62e0b23edf

Headers

File Characteristics

Imports

wpcap

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

Sections

.text Size: 380KB - Virtual size: 378KB

.rdata Size: 100KB - Virtual size: 96KB

.data Size: 12KB - Virtual size: 24KB

.rsrc Size: 60KB - Virtual size: 95KB

.text
Size: 380KB - Virtual size: 378KB

.rdata
Size: 100KB - Virtual size: 96KB

.data
Size: 12KB - Virtual size: 24KB

.rsrc
Size: 60KB - Virtual size: 95KB