01e84203d20b0d9c0ce3d679afb48203d1865eee04c0da150b28203726f17e6f

Sharing

Copy URL Twitter E-mail

General

Target

01e84203d20b0d9c0ce3d679afb48203d1865eee04c0da150b28203726f17e6f
Size

244KB
MD5

bc83a492e1a1e8fee64bf041059f5e85
SHA1

424950b7a1c568ea2edf4d4220670de802bcd658
SHA256

01e84203d20b0d9c0ce3d679afb48203d1865eee04c0da150b28203726f17e6f
SHA512

9c5bd5457792372272af0fe66c2301f3e4dd7cef3f5fcde47a504c7bfca30f9881bf5b7050ab8456b92473527413a2fc801a0313f142035f89c0527184677e33
SSDEEP

3072:KOg6T89hI+TaF/w9ldgwbqsyvlpsEPS5ah7Bqlu+hx6SqYWKlTzgzjyQ2m8L+GOS:7TKWGaNpscaMkxYcgKQ2m8L+GOr30k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01e84203d20b0d9c0ce3d679afb48203d1865eee04c0da150b28203726f17e6f

Files

01e84203d20b0d9c0ce3d679afb48203d1865eee04c0da150b28203726f17e6f
.exe windows x86

3ad05625c4f7224541be81f40275d0e2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
GetOEMCP
SetErrorMode
VirtualProtect
GetSystemInfo
VirtualQuery
RtlUnwind
HeapReAlloc
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
HeapSize
HeapDestroy
VirtualFree
IsBadWritePtr
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GlobalFlags
WritePrivateProfileStringA
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
FreeResource
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetTickCount
GlobalAddAtomA
GetCurrentThread
GlobalDeleteAtom
ConvertDefaultLocale
EnumResourceLanguagesA
SetLastError
GlobalFree
FormatMessageA
LocalFree
LockResource
SetFileAttributesA
LoadLibraryA
VirtualAlloc
GetCurrentThreadId
GetModuleHandleA
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
FreeLibrary
lstrcmpA
GlobalAlloc
GlobalLock
GlobalUnlock
FlushInstructionCache
HeapAlloc
MulDiv
IsDBCSLeadByte
lstrcatA
GetModuleFileNameA
lstrcpyA
lstrcpynA
InterlockedIncrement
CreateEventA
CreateThread
WaitForSingleObject
CloseHandle
SetEvent
GetProcAddress
GetCurrentProcess
GetProcessHeap
HeapFree
InterlockedDecrement
lstrlenA
lstrcmpiA
GetVersion
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetLastError
RaiseException
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
HeapCreate
InterlockedExchange

user32

CreateDialogIndirectParamA
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ShowWindow
IsDialogMessageA
WinHelpA
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
GetForegroundWindow
SetActiveWindow
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
LoadIconA
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetMenu
AdjustWindowRectEx
GetClassInfoA
RegisterClassA
GetNextDlgTabItem
GetDlgCtrlID
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
CopyRect
PtInRect
RegisterClipboardFormatA
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
MessageBoxA
GetLastActivePopup
PostThreadMessageA
CharNextA
SetWindowLongA
GetWindowLongA
IsWindowEnabled
SetCursor
PostMessageA
PostQuitMessage
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
EnableWindow
RegisterWindowMessageA
EndDialog
DestroyMenu
GetWindowTextLengthA
GetWindowTextA
GetSysColorBrush
UnregisterClassA
DefWindowProcA
GetSysColor
ReleaseCapture
SetCapture
FillRect
GetClientRect
GetDC
ReleaseDC
InvalidateRect
InvalidateRgn
GetDesktopWindow
CallWindowProcA
EndPaint
BeginPaint
SetFocus
GetWindow
IsChild
GetFocus
DestroyAcceleratorTable
SendMessageA
IsWindow
GetDlgItem
RedrawWindow
DestroyWindow
SetWindowPos
GetClassNameA
GetParent
CreateAcceleratorTableA
CreateWindowExA
wsprintfA
LoadCursorA
GetClassInfoExA
RegisterClassExA
SetWindowTextA

gdi32

ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
PtVisible
SetViewportOrgEx
Escape
ExtTextOutA
DeleteObject
SetMapMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
TextOutA
CreateSolidBrush
GetStockObject
GetObjectA
GetDeviceCaps
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
SelectObject
RectVisible

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegEnumKeyExA
RegQueryValueA
RegEnumKeyA
RegQueryValueExA
RegOpenKeyA
RegDeleteKeyA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA

comctl32

ord17

shlwapi

PathFindExtensionA
PathFindFileNameA

oledlg

ord8

ole32

OleUninitialize
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
CreateStreamOnHGlobal
OleLockRunning
StringFromGUID2
CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoRegisterClassObject
CoRevokeClassObject
CoFreeUnusedLibraries
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
OleInitialize

oleaut32

SysAllocStringLen
SysAllocString
SysFreeString
SysStringLen
LoadTypeLi
RegisterTypeLi
VarUI4FromStr
LoadRegTypeLi
SysStringByteLen
OleCreateFontIndirect
VariantClear
VariantInit
VariantChangeType

Sections

.text
Size: 128KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3ad05625c4f7224541be81f40275d0e2

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 128KB - Virtual size: 124KB

.rdata Size: 36KB - Virtual size: 33KB

.data Size: 8KB - Virtual size: 21KB

.rsrc Size: 68KB - Virtual size: 64KB

.text
Size: 128KB - Virtual size: 124KB

.rdata
Size: 36KB - Virtual size: 33KB

.data
Size: 8KB - Virtual size: 21KB

.rsrc
Size: 68KB - Virtual size: 64KB