d0e939ced3280d6aa6986c33d641873ffe47f3776b60b3451b5dc63171ab1525

Sharing

Copy URL Twitter E-mail

General

Target

d0e939ced3280d6aa6986c33d641873ffe47f3776b60b3451b5dc63171ab1525
Size

2.6MB
MD5

b6fe66108df580ad954b88045b166b5c
SHA1

8633565e4a7300308d9aa05565a6c3f121fb261b
SHA256

d0e939ced3280d6aa6986c33d641873ffe47f3776b60b3451b5dc63171ab1525
SHA512

267fc53fa19b9694a33b8857fa02d3cabc89d107bd308ae1c8b1dc5c5ae6fd920ac0a78f43229d1e4b9f77cbe8dd48883dc6bc4296e83f0f8a495a5258fcd931
SSDEEP

49152:Vle8MkfaPYPsTFeDvx+cZ28AVgF3IgZBLUqjnNDpH+WkKwflA0zP58TIuPGfh3Ea:NMkfaPYoFYvx+cZoVgF4gZBLUqrNdk95

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0e939ced3280d6aa6986c33d641873ffe47f3776b60b3451b5dc63171ab1525

Files

d0e939ced3280d6aa6986c33d641873ffe47f3776b60b3451b5dc63171ab1525
.exe windows x86

393278942628b8aafb75588a9419a7f6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryA
MoveFileA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileA
GetVolumeInformationA
GetShortPathNameA
FileTimeToLocalFileTime
GetFileAttributesExA
LocalFileTimeToFileTime
GetFileSizeEx
GetWindowsDirectoryA
GetNumberFormatA
SetErrorMode
GetTempPathA
InitializeCriticalSectionAndSpinCount
GetProfileIntA
Sleep
SearchPathA
VirtualProtect
FindResourceExW
EncodePointer
DecodePointer
HeapFree
HeapAlloc
VirtualAlloc
GetSystemInfo
VirtualQuery
ExitProcess
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RtlUnwind
HeapReAlloc
RaiseException
ExitThread
CreateThread
HeapQueryInformation
HeapSize
GetSystemTimeAsFileTime
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
HeapCreate
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
IsValidCodePage
IsProcessorFeaturePresent
GetStringTypeW
LCMapStringW
CompareStringW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
WriteConsoleW
CreateFileW
SetEnvironmentVariableA
lstrcmpiA
GetCPInfo
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
FileTimeToSystemTime
GetThreadLocale
GetACP
GlobalFlags
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
ReplaceFileA
SystemTimeToFileTime
GetFileAttributesA
WaitForSingleObject
ResumeThread
SetThreadPriority
CloseHandle
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetCurrentProcessId
GetTickCount
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetModuleFileNameA
GetLocaleInfoA
lstrcmpA
GetModuleHandleW
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
GetModuleHandleA
FreeLibrary
GetProcAddress
CompareStringA
LoadLibraryW
LoadLibraryA
ActivateActCtx
DeactivateActCtx
lstrcmpW
SetLastError
CopyFileA
GlobalSize
GlobalAlloc
FormatMessageA
LocalFree
FindResourceW
SizeofResource
lstrlenW
MulDiv
WideCharToMultiByte
GlobalLock
GlobalUnlock
GlobalFree
FindResourceA
LoadResource
LockResource
FreeResource
GetStringTypeExA
lstrcpyA
GetOEMCP
DeleteFileA
MultiByteToWideChar
lstrlenA
InterlockedExchange
GetLastError
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
CreateFileA
EnterCriticalSection

user32

CharUpperA
GetKeyNameTextA
MapVirtualKeyA
GetSystemMenu
SetParent
UnionRect
UnregisterClassA
RedrawWindow
GetMenuDefaultItem
GetAsyncKeyState
InvertRect
DrawFocusRect
HideCaret
EnableScrollBar
NotifyWinEvent
GetIconInfo
CopyImage
DrawIconEx
IsZoomed
SetWindowRgn
DestroyAcceleratorTable
WindowFromPoint
SetClassLongA
DrawStateA
DrawEdge
DrawFrameControl
ToAsciiEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableA
SetCursorPos
LockWindowUpdate
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
LoadImageW
IsCharLowerA
MapVirtualKeyExA
UpdateLayeredWindow
MonitorFromPoint
IsMenu
WaitMessage
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
CreateMenu
SetMenuDefaultItem
IsClipboardFormatAvailable
FrameRect
GetUpdateRect
CopyIcon
CharUpperBuffA
GetDoubleClickTime
SubtractRect
DrawIcon
DestroyCursor
GetWindowRgn
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
LoadImageA
DestroyIcon
ReleaseCapture
LoadAcceleratorsA
IsIconic
InsertMenuItemA
CreatePopupMenu
IntersectRect
OffsetRect
BringWindowToTop
TranslateAcceleratorA
GetDC
ReleaseDC
SetRectEmpty
ShowOwnedPopups
SetCursor
GetMessageA
TranslateMessage
GetCursorPos
ValidateRect
SetWindowContextHelpId
MapDialogRect
GetWindowThreadProcessId
RegisterClipboardFormatA
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuA
EnableMenuItem
LoadMenuW
RegisterWindowMessageA
LoadIconW
LoadIconA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
GetClientRect
PostMessageA
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
GetWindowRect
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
SetWindowPlacement
GetWindowPlacement
DefWindowProcA
CallWindowProcA
GetMenu
GetWindowTextLengthA
GetWindowTextA
GetFocus
SetFocus
SetWindowPos
ShowWindow
MoveWindow
SetWindowLongA
GetDlgCtrlID
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
CheckDlgButton
GetWindow
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
SetRect
PtInRect
EnableWindow
UpdateWindow
SetTimer
RemoveMenu
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
SendMessageA
EndDialog
InvalidateRect
KillTimer
GetSystemMetrics
LoadAcceleratorsW
MessageBeep
GetNextDlgGroupItem
SetCapture
InvalidateRgn
IsRectEmpty
CopyAcceleratorTableA
CharNextA
PostThreadMessageA
LoadCursorW
SetLayeredWindowAttributes
EnumDisplayMonitors
DeleteMenu
SystemParametersInfoA
GetMenuItemInfoA
InflateRect
LoadCursorA
GetSysColorBrush
CheckMenuItem
RealChildWindowFromPoint

gdi32

SetPolyFillMode
SetROP2
SetStretchBltMode
GetTextExtentPoint32A
CreateCompatibleBitmap
SetDIBColorTable
SelectObject
StretchBlt
CreateDIBSection
BitBlt
CreateCompatibleDC
DeleteDC
GetObjectA
DeleteObject
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SaveDC
CreateFontIndirectA
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
CreatePatternBrush
GetStockObject
CreateBitmap
SetBkMode
SetTextColor
GetObjectType
CreatePen
CreateSolidBrush
CreateHatchBrush
GetTextMetricsA
CreateDIBitmap
CreateRectRgnIndirect
EnumFontFamiliesA
GetTextCharsetInfo
GetBkColor
GetTextColor
GetRgnBox
PatBlt
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreateRoundRectRgn
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
SetPixel
Rectangle
OffsetRgn
EnumFontFamiliesExA
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
GetTextFaceA
SetBkColor
RestoreDC
CreateDCA
CopyMetaFileA
ExtSelectClipRgn
ScaleWindowExtEx
SelectPalette
GetDeviceCaps
SetWindowExtEx

msimg32

TransparentBlt
AlphaBlend

comctl32

ImageList_GetIconSize
InitCommonControlsEx

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathRemoveFileSpecW

oledlg

ord8

gdiplus

GdiplusShutdown
GdipFree
GdipAlloc
GdipDisposeImage
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCreateBitmapFromStream

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

comdlg32

GetFileTitleA

advapi32

GetFileSecurityA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueA
RegCloseKey
RegEnumValueA
RegOpenKeyExW
SetFileSecurityA
RegEnumKeyExA

shell32

DragQueryFileA
SHAddToRecentDocs
ExtractIconA
SHGetFileInfoA
SHGetDesktopFolder
SHAppBarMessage
SHBrowseForFolderA
DragFinish
ShellExecuteA
SHGetSpecialFolderLocation
SHGetPathFromIDListA

ole32

OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
DoDragDrop
OleUninitialize
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CoInitializeEx
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoGetClassObject
CoInitialize
CoUninitialize
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
OleInitialize
CoCreateGuid
OleDuplicateData
CoTaskMemFree
CoFreeUnusedLibraries
CoTaskMemAlloc
ReleaseStgMedium
StringFromCLSID

oleaut32

VariantChangeType
VariantInit
SysAllocStringLen
VariantCopy
VariantClear
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocStringByteLen
SysFreeString
VarBstrFromDate
OleCreateFontIndirect
SysAllocString

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 277KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 988KB - Virtual size: 988KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

393278942628b8aafb75588a9419a7f6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comctl32

shlwapi

oledlg

gdiplus

oleacc

imm32

winmm

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 277KB - Virtual size: 276KB

.data Size: 25KB - Virtual size: 54KB

.rsrc Size: 988KB - Virtual size: 988KB

.reloc Size: 167KB - Virtual size: 167KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 277KB - Virtual size: 276KB

.data
Size: 25KB - Virtual size: 54KB

.rsrc
Size: 988KB - Virtual size: 988KB

.reloc
Size: 167KB - Virtual size: 167KB