ad270337b64c47ab43b6af0dbf1532280d0897e9dbdbf285b830565a2b9a2e87

Sharing

Copy URL

Twitter E-mail

General

Target

ad270337b64c47ab43b6af0dbf1532280d0897e9dbdbf285b830565a2b9a2e87
Size

4.7MB
MD5

67e462f67b3b79c83169f0ac37d09d8b
SHA1

8179374ad895d4fe539a922f170b65861c13d8f7
SHA256

ad270337b64c47ab43b6af0dbf1532280d0897e9dbdbf285b830565a2b9a2e87
SHA512

15b9a68818f6d166c32c81736958a3878bb2bdbbe6bb6fecc433939808a1c547cfc9a7dfe1861c96dd3c0c0853e0a6fe88b82080b1ba204c03617b36edc48b50
SSDEEP

98304:3Q/7x9nPi7fijP5gRWNFUjrqu5kHYOhF/QR04kdJQ4uYpeCxIR:g/7xE2F65JOhF/QrS/piR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad270337b64c47ab43b6af0dbf1532280d0897e9dbdbf285b830565a2b9a2e87

Files

ad270337b64c47ab43b6af0dbf1532280d0897e9dbdbf285b830565a2b9a2e87
.exe windows x86

653ffd8b3d3a6e846b1b422699f77eb9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileTime
GetTempFileNameA
GetFullPathNameA
GetTickCount
GlobalFlags
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GetThreadLocale
FileTimeToSystemTime
GetCPInfo
GetOEMCP
GetACP
GetCurrentDirectoryA
DeleteFileA
GetStringTypeExA
lstrcmpiA
MoveFileA
ReadFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileA
GetVolumeInformationA
GetShortPathNameA
FileTimeToLocalFileTime
GetFileAttributesExA
LocalFileTimeToFileTime
GetFileSizeEx
GetTempPathA
GetWindowsDirectoryA
GetNumberFormatA
SetErrorMode
InitializeCriticalSectionAndSpinCount
GetProfileIntA
SearchPathA
VirtualProtect
FindResourceExW
EncodePointer
DecodePointer
ExitProcess
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapAlloc
HeapFree
RtlUnwind
RaiseException
HeapReAlloc
VirtualAlloc
GetSystemInfo
VirtualQuery
ExitThread
CreateThread
HeapSize
HeapQueryInformation
SetFileTime
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
IsValidCodePage
IsProcessorFeaturePresent
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
QueryPerformanceCounter
GetStringTypeW
CompareStringW
LCMapStringW
GetTimeZoneInformation
WriteConsoleW
GetProcessHeap
CreateFileW
SetEnvironmentVariableA
ResumeThread
SetThreadPriority
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
InterlockedExchange
lstrcmpA
GetModuleHandleW
GetCurrentThreadId
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
CompareStringA
LoadLibraryW
lstrcmpW
GlobalGetAtomNameA
GlobalAddAtomA
FreeResource
GlobalFree
CopyFileA
GlobalSize
GlobalAlloc
FormatMessageA
LocalFree
lstrlenW
GlobalLock
GlobalUnlock
MulDiv
GetCurrentProcessId
GetModuleFileNameA
MultiByteToWideChar
FreeLibrary
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
lstrlenA
WideCharToMultiByte
FindResourceW
ReplaceFileA
SystemTimeToFileTime
GetSystemTimeAsFileTime
InterlockedIncrement
lstrcpyA
CloseHandle
CreateToolhelp32Snapshot
CreateMutexA
LockResource
Process32Next
CreateDirectoryA
lstrcatA
GetFileAttributesA
SizeofResource
Sleep
OpenProcess
WriteFile
WaitForSingleObject
Process32First
InterlockedDecrement
LoadResource
FindResourceA
CreateFileA
GetModuleHandleA
LoadLibraryA
GetProcAddress
SetLastError
GetLastError
DeactivateActCtx
GetDiskFreeSpaceA
ActivateActCtx

user32

InflateRect
RealChildWindowFromPoint
UnregisterClassA
GetSysColorBrush
WindowFromPoint
GetDCEx
LockWindowUpdate
SetCapture
GetMenuItemInfoA
SystemParametersInfoA
EnumDisplayMonitors
SetLayeredWindowAttributes
UnionRect
LoadAcceleratorsW
LoadMenuW
CharUpperA
CharNextA
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
PostThreadMessageA
DrawIcon
SetWindowRgn
CreateMenu
GetTabbedTextExtentW
RedrawWindow
DestroyAcceleratorTable
NotifyWinEvent
GetAsyncKeyState
SetClassLongA
DrawStateA
DrawIconEx
DrawEdge
DrawFrameControl
DrawFocusRect
ToAsciiEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableA
SetCursorPos
GetMenuDefaultItem
InvertRect
HideCaret
EnableScrollBar
GetIconInfo
CopyImage
IsClipboardFormatAvailable
WaitMessage
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
MonitorFromPoint
UpdateLayeredWindow
IsMenu
SetMenuDefaultItem
FrameRect
GetUpdateRect
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
LoadImageW
CopyIcon
CharUpperBuffA
GetDoubleClickTime
IsCharLowerA
MapVirtualKeyExA
SubtractRect
GetWindowRgn
SetDlgItemTextA
CheckDlgButton
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
IsChild
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetWindowTextLengthA
GetForegroundWindow
DispatchMessageA
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
EndDialog
LoadCursorW
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
DefWindowProcA
CallWindowProcA
GetClassNameA
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
WinHelpA
SetWindowPos
LoadImageA
DestroyIcon
SetFocus
GetActiveWindow
GetDlgItem
LoadIconW
SetCursor
PeekMessageA
GetCapture
ReleaseCapture
LoadAcceleratorsA
SetActiveWindow
IsIconic
InsertMenuItemA
CreatePopupMenu
GetClassInfoA
GetMenu
BringWindowToTop
PostMessageA
SetMenu
GetDesktopWindow
GetWindow
ShowWindow
TranslateAcceleratorA
SetWindowLongA
InvalidateRect
PtInRect
IsZoomed
GetSystemMetrics
BeginDeferWindowPos
EndDeferWindowPos
GetDlgCtrlID
SetParent
IsWindowVisible
GetWindowRect
GetSystemMenu
DeleteMenu
EqualRect
OffsetRect
SetRectEmpty
IsRectEmpty
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
GetSysColor
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
ScreenToClient
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
GetWindowThreadProcessId
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
UnhookWindowsHookEx
MapVirtualKeyA
GetKeyNameTextA
CopyRect
IsWindow
SendMessageA
LoadBitmapW
EnableWindow
UpdateWindow
wsprintfA
ReleaseDC
IntersectRect
GetDC
GetClientRect
GetKeyState
KillTimer
SetTimer
GetMessageA
TranslateMessage
LoadCursorA
DestroyCursor
SetRect
RegisterClipboardFormatA
CreateDialogIndirectParamA
ShowScrollBar
GetNextDlgTabItem
GetCursorPos
ValidateRect
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
PostQuitMessage
MoveWindow
SetWindowTextA
IsDialogMessageA
SetForegroundWindow
GetWindowTextA

gdi32

SetBkColor
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextColor
GetObjectA
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
StretchBlt
CreateFontA
BitBlt
RestoreDC
SaveDC
PatBlt
StartPage
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
Rectangle
GetLayout
SetLayout
DPtoLP
GetViewportOrgEx
CreateFontIndirectA
StretchDIBits
GetCharWidthA
GetTextExtentPoint32A
GetTextMetricsA
CreateDCA
CopyMetaFileA
CreateHatchBrush
CreateSolidBrush
DeleteObject
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
StartDocA
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
CreatePen
GetDeviceCaps
GetObjectType
SelectPalette
GetStockObject
CreateBitmap
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
SetTextAlign
CreateRectRgnIndirect
SetPixelV
EndPage
SetAbortProc
AbortDoc
EndDoc
SetPaletteEntries
ExtFloodFill
SetRectRgn
CombineRgn
GetMapMode
GetBkColor
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetTextColor
GetRgnBox
CreateEllipticRgn
LPtoDP
Ellipse
CreateDIBSection
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceA
GetTextExtentPointA
GetTextExtentPoint32W
GetWindowOrgEx
CreateRoundRectRgn
CreatePolygonRgn
Polyline
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
SetDIBColorTable
SetPixel
EnumFontFamiliesExA
PtInRegion
FillRgn
FrameRgn
GetBoundsRect

advapi32

OpenProcessToken
RegCloseKey
RegSetValueA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
SetFileSecurityA
GetFileSecurityA
RegEnumValueA
RegOpenKeyExW
RegEnumKeyExA
LookupPrivilegeValueA
AdjustTokenPrivileges

shell32

SHGetSpecialFolderLocation
SHGetDesktopFolder
SHGetFileInfoA
ExtractIconA
SHAddToRecentDocs
DragQueryFileA
DragFinish
SHAppBarMessage
SHBrowseForFolderA
ShellExecuteA
SHGetPathFromIDListA

ole32

OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleLockRunning
CreateStreamOnHGlobal
CoLockObjectExternal
OleGetClipboard
DoDragDrop
RegisterDragDrop
RevokeDragDrop
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoInitialize
CoUninitialize
CoTaskMemFree
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
CLSIDFromProgID
CoInitializeEx
CoInitializeSecurity
CoCreateInstance
CoCreateGuid
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
StringFromCLSID

oleaut32

VariantCopy
SafeArrayDestroy
VariantChangeType
SysAllocStringLen
SysFreeString
VariantInit
VariantClear
SysAllocString
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
VarBstrFromDate
OleCreateFontIndirect
SysAllocStringByteLen

msimg32

AlphaBlend
TransparentBlt

comctl32

ImageList_GetIconSize
InitCommonControlsEx

shlwapi

PathIsUNCA
PathStripToRootA
PathFindFileNameA
PathFindExtensionA
PathRemoveFileSpecW

oledlg

ord8

wininet

InternetCloseHandle
InternetOpenA
InternetReadFile
InternetOpenUrlA

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

gdiplus

GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdipDrawImageI
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipBitmapLockBits
GdiplusShutdown
GdipFree
GdipAlloc
GdipDeleteGraphics
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdipCreateFromHDC
GdipSetInterpolationMode

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

winspool.drv

OpenPrinterA
GetJobA
ClosePrinter
DocumentPropertiesA

comdlg32

GetFileTitleA

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 286KB - Virtual size: 285KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

653ffd8b3d3a6e846b1b422699f77eb9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

msimg32

comctl32

shlwapi

oledlg

wininet

oleacc

gdiplus

imm32

winmm

winspool.drv

comdlg32

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 286KB - Virtual size: 285KB

.data Size: 25KB - Virtual size: 55KB

.rsrc Size: 3.0MB - Virtual size: 3.0MB

.reloc Size: 173KB - Virtual size: 173KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 286KB - Virtual size: 285KB

.data
Size: 25KB - Virtual size: 55KB

.rsrc
Size: 3.0MB - Virtual size: 3.0MB

.reloc
Size: 173KB - Virtual size: 173KB