23787f5276f708aa40f260a25aa4b4eeca8f1cbd30d0d69095a9bd74b76fcd88

Sharing

Copy URL

Twitter E-mail

General

Target

23787f5276f708aa40f260a25aa4b4eeca8f1cbd30d0d69095a9bd74b76fcd88
Size

5.4MB
MD5

243838be68c83e2af19189de1703361c
SHA1

f933bf0509322d517cdc8c52211f45a9bde9732b
SHA256

23787f5276f708aa40f260a25aa4b4eeca8f1cbd30d0d69095a9bd74b76fcd88
SHA512

46f5b894bcd3567623ca12ab7998ab40eaa2323e91a8e11dfe17d1cc635aff154fce186f3d4e1f656d4a85c94df46f846802934d0c62843d066dfb0435f0e37a
SSDEEP

98304:pN+W7ZL3OW79nRavAD7ed/EiKK8nwm/VRzxGPQSFLOAkGkzdnEVomFHKnPA3i1F:pNnbOW7S4dRzxGP3FLOyomFHKnPaK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23787f5276f708aa40f260a25aa4b4eeca8f1cbd30d0d69095a9bd74b76fcd88

Files

23787f5276f708aa40f260a25aa4b4eeca8f1cbd30d0d69095a9bd74b76fcd88
.exe windows x86

f5eca2988562cc0f029b2f19256f79b9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

libcurl

curl_easy_perform
curl_easy_cleanup
curl_slist_append
curl_easy_init
curl_easy_setopt

libcrypto-1_1

DES_ncbc_encrypt
MD5_Update
BIO_new_mem_buf
MD5_Final
DES_set_key_unchecked
BIO_write
BIO_free_all
BIO_s_mem
BIO_set_flags
BIO_read
MD5_Init
BIO_f_base64
BIO_push
BIO_ctrl
BIO_new

dbghelp

MiniDumpWriteDump

kernel32

GetModuleHandleA
QueryPerformanceFrequency
SwitchToThread
TlsGetValue
TlsSetValue
TlsFree
lstrcpynW
lstrlenW
lstrcpyW
LoadLibraryExA
CreateWaitableTimerW
CreatePipe
GetCommandLineA
lstrcmpW
FindNextFileW
GetStringTypeW
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitOnceBeginInitialize
InitOnceComplete
EncodePointer
LCMapStringEx
GetCPInfo
VerSetConditionMask
ResetEvent
ReleaseSemaphore
WaitForMultipleObjectsEx
OpenEventA
ResumeThread
CreateWaitableTimerA
UnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
GetStartupInfoW
SuspendThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualAlloc
VirtualFree
VirtualQuery
LoadLibraryExW
SetLastError
GetQueuedCompletionStatus
SetWaitableTimer
CreateIoCompletionPort
PostQueuedCompletionStatus
SleepEx
QueueUserAPC
TerminateThread
WaitForMultipleObjects
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
GetComputerNameA
GetCurrentDirectoryW
LocalFileTimeToFileTime
CreateDirectoryW
GetExitCodeProcess
GetFileTime
CreateDirectoryA
CreateProcessA
GetModuleHandleW
FindResourceExW
Process32FirstW
FileTimeToSystemTime
GlobalSize
MoveFileExA
Process32NextW
CreateToolhelp32Snapshot
OpenProcess
FindNextFileA
TerminateProcess
FindFirstFileA
OpenMutexA
ReleaseMutex
CreateMutexA
GetPrivateProfileStringA
GetPrivateProfileIntA
WritePrivateProfileStringA
GlobalUnlock
GlobalLock
DecodePointer
FindResourceW
LoadResource
GlobalFree
GlobalAlloc
LockResource
FreeResource
InitializeCriticalSectionEx
SizeofResource
SetUnhandledExceptionFilter
IsDebuggerPresent
CancelIoEx
GetCurrentThread
VirtualProtect
GetLocalTime
GetCommandLineW
GetModuleFileNameA
FlushFileBuffers
GetTickCount
QueryPerformanceCounter
MapViewOfFile
CreateFileMappingW
GetSystemTimeAsFileTime
GetProcessHeap
DeleteCriticalSection
GetFileSize
LockFileEx
UnlockFile
HeapDestroy
HeapCompact
HeapAlloc
GetSystemInfo
HeapReAlloc
DeleteFileW
DeleteFileA
WaitForSingleObjectEx
LoadLibraryA
CreateFileA
FlushViewOfFile
OutputDebugStringW
GetFileAttributesExW
GetFileAttributesA
GetLastError
GetDiskFreeSpaceA
GetTempPathA
Sleep
MultiByteToWideChar
HeapSize
HeapValidate
UnmapViewOfFile
GetCurrentThreadId
GetFileAttributesW
WaitForSingleObject
CreateMutexW
GetTempPathW
UnlockFileEx
SetEndOfFile
GetFullPathNameA
SetFilePointer
InitializeCriticalSection
LeaveCriticalSection
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
WriteFile
GetFullPathNameW
EnterCriticalSection
HeapFree
HeapCreate
TryEnterCriticalSection
ReadFile
AreFileApisANSI
GetSystemTime
FreeLibrary
SystemTimeToFileTime
GetCurrentProcessId
GetProcAddress
LoadLibraryW
CreateFileW
FindClose
SetFileTime
GetStdHandle
GetCurrentProcess
FindFirstFileW
WriteConsoleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
CreateEventA
FormatMessageA
GetTimeZoneInformation
EnumSystemLocalesW
IsValidLocale
LCMapStringW
GetTimeFormatW
GetDateFormatW
SetFilePointerEx
SetStdHandle
HeapQueryInformation
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
SetEnvironmentVariableW
WideCharToMultiByte
LocalFree
FreeLibraryAndExitThread
ExitThread
CreateThread
PeekNamedPipe
GetFileType
GetFileInformationByHandle
GetDriveTypeW
FindFirstFileExW
GetModuleHandleExW
ExitProcess
InterlockedPushEntrySList
RtlUnwind
GetUserDefaultLCID
GetTempFileNameW
SystemTimeToTzSpecificLocalTime
GetFileSizeEx
FileTimeToLocalFileTime
SetErrorMode
GetProfileIntW
SearchPathW
GetWindowsDirectoryW
lstrcmpiW
DuplicateHandle
GetVolumeInformationW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
RaiseException
VerifyVersionInfoW
GetLocaleInfoW
GetThreadLocale
GlobalGetAtomNameW
LocalReAlloc
LocalAlloc
GlobalHandle
CloseHandle
SetEvent
FormatMessageW
GlobalReAlloc
GlobalFlags
GetModuleFileNameW
MulDiv
CopyFileW
GetSystemDirectoryW
GlobalDeleteAtom
GlobalAddAtomW
GlobalFindAtomW
CompareStringW
SetThreadPriority
GetVersionExW
lstrcmpA
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW

user32

GetMenuState
GetMenuItemID
GetMenuItemCount
InsertMenuW
AppendMenuW
RemoveMenu
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW
GetWindowDC
BeginPaint
EndPaint
ClientToScreen
GetFocus
PtInRect
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
MoveWindow
SetWindowPos
CheckDlgButton
GetDlgCtrlID
SetFocus
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
SetWindowLongW
GetWindow
IsDialogMessageW
RegisterWindowMessageW
DispatchMessageW
PeekMessageW
GetMessagePos
GetMessageTime
DefWindowProcW
CallWindowProcW
RegisterClassW
GetClassInfoExW
CreateWindowExW
IsMenu
IsChild
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsWindowVisible
GetCapture
GetMenu
SetMenu
TrackPopupMenu
GetForegroundWindow
SetForegroundWindow
ValidateRect
RedrawWindow
ScrollWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
SetPropW
GetPropW
RemovePropW
AdjustWindowRectEx
EndDialog
EqualRect
GetClassLongW
GetTopWindow
SetScrollInfo
GetScrollInfo
WinHelpW
MonitorFromWindow
GetMonitorInfoW
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
GetMessageW
TranslateMessage
DestroyMenu
GetMenuItemInfoW
InflateRect
SystemParametersInfoW
SetWindowContextHelpId
MapDialogRect
DrawEdge
DrawFrameControl
SetWindowRgn
GetSysColorBrush
DrawFocusRect
OffsetRect
IsRectEmpty
DrawIconEx
SetLayeredWindowAttributes
SetRectEmpty
EnumDisplayMonitors
GetLastActivePopup
SendDlgItemMessageA
RealChildWindowFromPoint
IntersectRect
TrackMouseEvent
IsZoomed
CharUpperW
GetAsyncKeyState
SetCapture
ReleaseCapture
GetSystemMenu
DeleteMenu
MessageBeep
WindowFromPoint
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
SetMenuDefaultItem
EnableScrollBar
UnionRect
MonitorFromPoint
CopyImage
GetParent
CharNextW
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
DestroyIcon
LoadImageW
SetParent
SetCursorPos
BringWindowToTop
LockWindowUpdate
GetDoubleClickTime
GetIconInfo
CopyIcon
ModifyMenuW
DestroyAcceleratorTable
SetClassLongW
GetUpdateRect
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
MapVirtualKeyW
LoadAcceleratorsW
CreateAcceleratorTableW
RegisterClipboardFormatW
CharUpperBuffW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
FrameRect
PostThreadMessageW
GetKeyNameTextW
SubtractRect
IsClipboardFormatAvailable
IsCharLowerW
MapVirtualKeyExW
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
GetComboBoxInfo
CreateMenu
HideCaret
InvertRect
DestroyCursor
GetWindowRgn
GetClientRect
CreateDialogIndirectParamW
DestroyWindow
IsWindow
LoadBitmapW
GetClassNameW
FillRect
UpdateWindow
DrawStateW
InvalidateRect
EnableWindow
IsIconic
ScreenToClient
wsprintfW
GetKeyState
PostMessageW
GetWindowRect
SendMessageW
ShowWindow
OpenClipboard
FindWindowExA
CloseClipboard
GetWindowThreadProcessId
MessageBoxW
GetWindowLongW
SetActiveWindow
IsWindowEnabled
GetActiveWindow
PostQuitMessage
GetDesktopWindow
FindWindowA
ReleaseDC
GetDC
SetClipboardData
GetMenuStringW
GetNextDlgTabItem
ShowOwnedPopups
UnregisterClassW
UpdateLayeredWindow
GetSystemMetrics
EmptyClipboard
GetDlgItem
MapWindowPoints
WaitMessage
SetCursor
GetSysColor
SetRect
CopyRect
DrawIcon
GetClassInfoW
SetTimer
KillTimer
PostMessageA
GetCursorPos
GetSubMenu
LoadMenuW
LoadIconW
LoadCursorW

advapi32

RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegCreateKeyA
RegOpenKeyExW
RegDeleteValueA
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW

ole32

OleCreateMenuDescriptor
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
OleTranslateAccelerator
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
IsAccelerator
CoInitializeEx
CoCreateInstance
CoUninitialize
CoInitialize
CreateStreamOnHGlobal
CoRevokeClassObject
CoRegisterMessageFilter
OleDestroyMenuDescriptor
CoDisconnectObject

shell32

DragFinish
DragQueryFileW
ShellExecuteW
SHGetFileInfoW
SHAppBarMessage
SHGetDesktopFolder
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
CommandLineToArgvW
Shell_NotifyIconW

oleaut32

VariantClear
SysFreeString
SysAllocString
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayDestroy
OleCreateFontIndirect
VarBstrFromDate
VariantCopy
VariantInit
VariantChangeType
SysAllocStringLen
SysStringLen
LoadTypeLi

shlwapi

PathRemoveFileSpecW
StrFormatKBSizeW
PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathFindExtensionW

gdi32

RealizePalette
CreatePatternBrush
CreateRectRgn
Escape
GetSystemPaletteEntries
LPtoDP
ExtFloodFill
SetPixel
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
SetPixelV
GetRgnBox
CreateRoundRectRgn
DPtoLP
SetRectRgn
GetMapMode
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
GetTextMetricsW
Polyline
Polygon
CreatePolygonRgn
PatBlt
GetTextColor
GetBkColor
Ellipse
CreateEllipticRgn
CombineRgn
GetTextExtentPoint32W
CreateFontIndirectW
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
CreateHatchBrush
Rectangle
CreateSolidBrush
CreateFontW
GetStockObject
GetDeviceCaps
GetDIBColorTable
SetDIBColorTable
StretchBlt
GetObjectW
BitBlt
CreateCompatibleBitmap
SelectObject
CreateDIBSection
CreateCompatibleDC
DeleteDC
CreatePen
DeleteObject
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutW
TextOutW
MoveToEx
OffsetRgn
RoundRect
CreatePalette
GetPaletteEntries
EnumFontFamiliesExW
GetNearestPaletteIndex
GetClipBox
GetTextFaceW
GetObjectType
CreateRectRgnIndirect
GetPixel
SetTextAlign
SetTextColor
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SetBkColor
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
CopyMetaFileW
CreateDCW
CreateBitmap
ExcludeClipRect

gdiplus

GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdiplusShutdown
GdipGetImageHeight
GdipGetImagePaletteSize
GdipCloneImage
GdipBitmapUnlockBits
GdipCreateBitmapFromStream
GdipAlloc
GdipDrawImageRectI
GdipSetInterpolationMode
GdipDisposeImage
GdipGetImagePixelFormat
GdipFree
GdipBitmapLockBits
GdipCreateFromHDC
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipGetImagePalette
GdipGetImageWidth
GdipCreateBitmapFromScan0
GdipDrawImageI

msimg32

TransparentBlt
AlphaBlend

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

comctl32

InitCommonControlsEx

uxtheme

DrawThemeParentBackground
GetThemeSysColor
IsAppThemed
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
IsThemeBackgroundPartiallyTransparent
GetCurrentThemeName
DrawThemeText
GetWindowTheme
GetThemePartSize

oledlg

OleUIBusyW

ws2_32

getpeername
connect
bind
accept
htons
ntohs
htonl
ntohl
WSAAddressToStringW
WSASocketW
inet_addr
WSARecv
listen
select
shutdown
ioctlsocket
closesocket
WSAGetLastError
__WSAFDIsSet
setsockopt
getsockopt
WSAIoctl
WSASetLastError
WSACleanup
freeaddrinfo
WSAStartup
WSASend
getsockname
getaddrinfo

iphlpapi

GetAdaptersInfo

mswsock

GetAcceptExSockaddrs
AcceptEx

oleacc

CreateStdAccessibleObject
LresultFromObject
AccessibleObjectFromWindow

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundW

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 576KB - Virtual size: 575KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.detourc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.detourd
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 204KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f5eca2988562cc0f029b2f19256f79b9

Headers

DLL Characteristics

File Characteristics

Imports

libcurl

libcrypto-1_1

dbghelp

kernel32

user32

advapi32

ole32

shell32

oleaut32

shlwapi

gdi32

gdiplus

msimg32

winspool.drv

comctl32

uxtheme

oledlg

ws2_32

iphlpapi

mswsock

oleacc

imm32

winmm

Sections

.text Size: 3.2MB - Virtual size: 3.2MB

.rdata Size: 576KB - Virtual size: 575KB

.data Size: 50KB - Virtual size: 102KB

.detourc Size: 4KB - Virtual size: 4KB

.detourd Size: 512B - Virtual size: 12B

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.reloc Size: 204KB - Virtual size: 203KB

.text
Size: 3.2MB - Virtual size: 3.2MB

.rdata
Size: 576KB - Virtual size: 575KB

.data
Size: 50KB - Virtual size: 102KB

.detourc
Size: 4KB - Virtual size: 4KB

.detourd
Size: 512B - Virtual size: 12B

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

.reloc
Size: 204KB - Virtual size: 203KB