fbcc9002dae59a6b60e41c89271f21fe40395e4c43fd7975784525ed8d1d188e

Sharing

Copy URL Twitter E-mail

General

Target

fbcc9002dae59a6b60e41c89271f21fe40395e4c43fd7975784525ed8d1d188e
Size

1.8MB
MD5

d9187277bd668704e581f06f55c1913c
SHA1

571de80c399fc0798e37bd7cd64b9b779b2f864b
SHA256

fbcc9002dae59a6b60e41c89271f21fe40395e4c43fd7975784525ed8d1d188e
SHA512

ef060bf99ee8f67d1e39ed7e5b2d21ccad30445d08d77923ade34b83859a66a709b5808c49294f6f6473003c8f57266d17d225d31510b6c605db36598010e593
SSDEEP

49152:YwLxEtKz6rtDccsPDc/FxPJ+zxcW07E+Z6TSe33STSZ1iTF:jh6rtDj6Dc/FxPe307E+ZmSe3iH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbcc9002dae59a6b60e41c89271f21fe40395e4c43fd7975784525ed8d1d188e

Files

fbcc9002dae59a6b60e41c89271f21fe40395e4c43fd7975784525ed8d1d188e
.exe windows x86

6ea684edf1aa38ca31330bc8abbc2fb8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetProcessHeap
LoadLibraryExA
WriteConsoleA
CreateDirectoryA
RemoveDirectoryA
GetLocalTime
MoveFileExA
SetCurrentDirectoryA
FindNextFileA
GetDateFormatA
GetTimeFormatA
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
CompareStringW
GetStringTypeW
GetStringTypeA
QueryPerformanceCounter
VirtualFree
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
InitializeCriticalSectionAndSpinCount
GetStdHandle
LCMapStringW
LCMapStringA
IsValidCodePage
GetACP
GetFileType
SetStdHandle
GetSystemTimeAsFileTime
HeapSize
ExitThread
HeapReAlloc
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapFree
HeapAlloc
GetStartupInfoA
ExitProcess
RtlUnwind
RaiseException
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
FindResourceExA
VirtualProtect
GetFileTime
GetFileSizeEx
SetFileAttributesA
FileTimeToLocalFileTime
GetProfileIntA
GetTickCount
SearchPathA
GetTempPathA
GetTempFileNameA
SetErrorMode
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
DeleteFileA
CreateFileA
GetFileSize
GetFileAttributesA
lstrcpyA
FileTimeToSystemTime
GetThreadLocale
GetOEMCP
GetCPInfo
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
InterlockedIncrement
GetModuleHandleW
GlobalFlags
WritePrivateProfileStringA
GetPrivateProfileIntA
ResumeThread
SetThreadPriority
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
InterlockedExchange
lstrcmpA
InterlockedDecrement
GetModuleFileNameW
GetCurrentProcessId
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
lstrcmpW
GetVersionExA
CopyFileA
GlobalSize
GlobalAlloc
FormatMessageA
LocalFree
lstrlenW
MultiByteToWideChar
MulDiv
lstrlenA
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
CreatePipe
GetCurrentDirectoryA
CreateProcessA
ReadFile
WaitForSingleObject
CreateThread
Sleep
TerminateThread
FreeLibrary
GetCommandLineA
ReleaseMutex
CloseHandle
CreateMutexA
GetModuleFileNameA
OutputDebugStringA
GetLastError
SetLastError
GetProcAddress
GetModuleHandleA
LoadLibraryA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
InitializeCriticalSection
LeaveCriticalSection
GetDriveTypeA
EnterCriticalSection
GetExitCodeThread

user32

InsertMenuItemA
CreatePopupMenu
BringWindowToTop
TranslateAcceleratorA
LoadCursorA
GetSysColorBrush
DestroyMenu
GetMenuItemInfoA
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
SetCursor
GetMessageA
TranslateMessage
ValidateRect
MessageBeep
RedrawWindow
IsZoomed
PostQuitMessage
InflateRect
GetWindowThreadProcessId
GetCursorPos
WindowFromPoint
KillTimer
SetTimer
SetRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
CheckMenuItem
MapVirtualKeyA
GetKeyNameTextA
RegisterWindowMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
DefWindowProcA
LoadAcceleratorsA
PtInRect
GetMenu
OffsetRect
IntersectRect
PostThreadMessageA
GetWindowPlacement
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
ScreenToClient
FillRect
GetWindowTextLengthA
GetFocus
SetWindowPos
SetFocus
ShowWindow
MoveWindow
GetDlgCtrlID
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
GetDlgItemTextA
CopyAcceleratorTableA
ToAsciiEx
GetKeyboardLayout
CheckDlgButton
GetMenuState
ReleaseCapture
LoadMenuA
GetMenuStringA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
PeekMessageA
LoadBitmapA
GetKeyboardState
CharUpperA
GetAsyncKeyState
DestroyAcceleratorTable
CreateAcceleratorTableA
CharNextA
SetWindowRgn
NotifyWinEvent
SetClassLongA
IsMenu
LockWindowUpdate
EnumChildWindows
GetParent
GetWindowTextA
SetWindowTextA
GetSystemMetrics
LoadIconA
UpdateWindow
IsIconic
GetSystemMenu
PostMessageA
AppendMenuA
DrawIcon
ReuseDDElParam
UnpackDDElParam
DeleteMenu
UnregisterClassA
SetCapture
CallWindowProcA
WaitMessage
LoadStringA
CopyRect
GetWindowRect
InvalidateRect
SetParent
SendMessageA
EnableWindow
SetWindowLongA
GetWindowLongA
IsWindow
MessageBoxA
GetActiveWindow
GetSysColor
GetWindow
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
GetClientRect
GetUpdateRect
IsWindowVisible
GetTopWindow
SetRectEmpty
IsRectEmpty
RegisterDeviceNotificationA
RegisterClipboardFormatA
DrawStateA
OpenClipboard
CopyImage
DestroyIcon
LoadImageA
SetClipboardData
CloseClipboard
DestroyCursor
GetWindowRgn
CreateMenu
GetDoubleClickTime
GetIconInfo
SubtractRect
CopyIcon
CharUpperBuffA
FrameRect
TranslateMDISysAccel
EmptyClipboard
DefMDIChildProcA
DefFrameProcA
IsClipboardFormatAvailable
MapVirtualKeyExA
IsCharLowerA
GetMenuDefaultItem
SetMenuDefaultItem
UpdateLayeredWindow
EnableScrollBar
SetCursorPos
DrawIconEx
DrawFocusRect
DrawFrameControl
DrawEdge
UnionRect
GetNextDlgGroupItem
InvalidateRgn
SystemParametersInfoA
DrawMenuBar

gdi32

IntersectClipRect
LineTo
MoveToEx
SetTextAlign
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
CreateBitmap
SelectPalette
GetObjectType
CreatePen
CreateSolidBrush
CreateHatchBrush
GetDCOrgEx
GetCharWidthA
CreateFontA
StretchDIBits
CreateRectRgnIndirect
PatBlt
GetBkColor
SetRectRgn
CombineRgn
ExcludeClipRect
DPtoLP
GetTextExtentPoint32A
GetTextMetricsA
OffsetRgn
GetRgnBox
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
CreateRoundRectRgn
GetTextColor
SetDIBColorTable
GetDIBits
RealizePalette
StretchBlt
SetPixel
CreateDIBSection
CreateEllipticRgn
CreatePolygonRgn
Polyline
Ellipse
Polygon
Rectangle
RoundRect
CreatePalette
GetPaletteEntries
GetWindowOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetViewportOrgEx
LPtoDP
ExtFloodFill
SetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
EnumFontFamiliesExA
GetTextFaceA
SetPixelV
SetMapMode
GetClipBox
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
CopyMetaFileA
GetDeviceCaps
CreateCompatibleBitmap
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateCompatibleDC
BitBlt
SelectObject
DeleteObject
GetStockObject
GetMapMode
CreateFontIndirectA
GetObjectA

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegDeleteValueA

shell32

SHBrowseForFolderA
SHGetPathFromIDListA
SHAppBarMessage
DragQueryFileA
DragFinish
ShellExecuteA
SHGetFileInfoA

comctl32

InitCommonControlsEx
ImageList_GetIconSize

shlwapi

PathStripToRootA
PathFindFileNameA
PathFindExtensionA
PathRemoveFileSpecW
PathFileExistsA
PathIsUNCA

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
OleGetClipboard
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleLockRunning
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleInitialize
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CoRevokeClassObject
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
CoGetClassObject
CreateStreamOnHGlobal
StringFromGUID2
CLSIDFromString
CLSIDFromProgID
CoInitializeEx
CoCreateInstance
CoUninitialize
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
OleCreateMenuDescriptor
CoCreateGuid

oleaut32

SysAllocStringLen
SysStringLen
SysFreeString
SysAllocStringByteLen
VariantCopy
VariantInit
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysAllocString
VariantChangeType
VariantClear

gdiplus

GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 316KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 33KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6ea684edf1aa38ca31330bc8abbc2fb8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

gdiplus

version

imm32

winmm

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 316KB - Virtual size: 316KB

.data Size: 33KB - Virtual size: 60KB

.rsrc Size: 73KB - Virtual size: 73KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 316KB - Virtual size: 316KB

.data
Size: 33KB - Virtual size: 60KB

.rsrc
Size: 73KB - Virtual size: 73KB