11239cb76cb246ddc888d97a1456d267e1bcbe2df0e53b3ce3eb0bd84c22f4f5

Sharing

Copy URL

Twitter E-mail

General

Target

11239cb76cb246ddc888d97a1456d267e1bcbe2df0e53b3ce3eb0bd84c22f4f5
Size

1.9MB
MD5

d5eaf41b66f4a6cb0e9478fe97fcfe4d
SHA1

214741306619e3d318ea1d471cbecae4918730a0
SHA256

11239cb76cb246ddc888d97a1456d267e1bcbe2df0e53b3ce3eb0bd84c22f4f5
SHA512

387c1fcf0dd33464aa45cadc1299f6bfc56e68c940f31d388c64c145cac52bdd812fd8154f3c95b91b44e9d6e6b196c0089ddc4d10cfe6e75fe0f5a8a61e84b7
SSDEEP

49152:nAf/UYZDlNfFKf3ZTJ7uOzonskQ7GhVof6JsUHTz53BLUQNMCJSSGVeKKJgw7XKn:n+UYZDlNfFKf3ZTJ7uOzonskQ7GhVofB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11239cb76cb246ddc888d97a1456d267e1bcbe2df0e53b3ce3eb0bd84c22f4f5

Files

11239cb76cb246ddc888d97a1456d267e1bcbe2df0e53b3ce3eb0bd84c22f4f5
.exe windows x86

b441bd28fa955237ec257f7efd853f1c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetNetworkParams
GetAdaptersInfo

kernel32

GetStringTypeA
GetStringTypeW
LCMapStringW
IsBadReadPtr
IsBadCodePtr
GetStdHandle
LCMapStringA
FreeEnvironmentStringsW
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetFileType
GetEnvironmentStrings
SetHandleCount
GetEnvironmentStringsW
UnhandledExceptionFilter
FreeEnvironmentStringsA
ExitProcess
VirtualAlloc
SetUnhandledExceptionFilter
IsBadWritePtr
HeapCreate
VirtualFree
GetACP
HeapDestroy
GetTimeZoneInformation
TerminateProcess
HeapReAlloc
HeapSize
InterlockedDecrement
WideCharToMultiByte
GetLocalTime
GetSystemTime
Sleep
GetTickCount
GetCurrentDirectoryA
ReadFile
GetProcAddress
GetCurrentThreadId
CreateFileA
WriteFile
GetLastError
CloseHandle
lstrcatA
WinExec
lstrcpyA
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
lstrcmpA
GlobalAlloc
GlobalFree
lstrcmpiA
FindResourceA
LoadResource
LockResource
GetCPInfo
lstrlenW
lstrlenA
GetVersion
GetVersionExA
RaiseException
GetCommandLineA
GetStartupInfoA
HeapFree
RtlUnwind
HeapAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
WritePrivateProfileStringA
SetErrorMode
GetFileSize
GetFileTime
GetOEMCP
GetFileAttributesA
SizeofResource
LocalReAlloc
GetProcessVersion
TlsGetValue
TlsFree
TlsSetValue
GlobalReAlloc
LocalAlloc
GlobalHandle
TlsAlloc
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentThread
InitializeCriticalSection
GlobalFlags
GetThreadLocale
GetModuleFileNameA
GetVolumeInformationA
GetFullPathNameA
FindFirstFileA
FindClose
UnlockFile
SetEndOfFile
SetFilePointer
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
GlobalGetAtomNameA
GlobalDeleteAtom
GlobalAddAtomA
GlobalFindAtomA
LocalFree
lstrcpynA
FormatMessageA
MulDiv
GlobalLock
GlobalUnlock
MultiByteToWideChar
GetModuleHandleA
SetLastError
InterlockedIncrement
GetProfileStringA

user32

SetCapture
LockWindowUpdate
GetDCEx
ReleaseCapture
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
wvsprintfA
CharUpperA
LoadStringA
EndDialog
CreateDialogIndirectParamA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
IsWindowEnabled
ShowWindow
MoveWindow
IsDialogMessageA
SetRectEmpty
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetActiveWindow
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
IsWindowVisible
RegisterClipboardFormatA
PostThreadMessageA
MessageBoxA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
TrackPopupMenu
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowPos
RegisterWindowMessageA
GetWindowPlacement
IntersectRect
EndPaint
BeginPaint
GetWindowDC
DestroyMenu
IsIconic
DrawIcon
GetSystemMenu
LoadIconA
LoadCursorA
CopyIcon
IsWindow
GetMessagePos
ScreenToClient
PtInRect
SetTimer
MessageBeep
KillTimer
SetWindowLongA
LoadImageA
GetIconInfo
CreateIconIndirect
DrawStateA
FrameRect
InflateRect
OffsetRect
DrawFocusRect
GetWindowRect
PostMessageA
ClientToScreen
WindowFromPoint
GetActiveWindow
SetCursor
SetParent
GetNextDlgGroupItem
CopyAcceleratorTableA
CharNextA
GetTopWindow
UnhookWindowsHookEx
GetParent
GetNextDlgTabItem
IsMenu
SendMessageA
GetWindowLongA
DestroyCursor
IsChild
InvalidateRect
GetClassNameA
GetClientRect
EnableWindow
GetSubMenu
GrayStringA
TabbedTextOutA
LoadBitmapA
GetSysColorBrush
GetMenuStringA
CreateMenu
CreatePopupMenu
GetMenuItemID
GetMenuState
ModifyMenuA
GetMenuItemCount
AppendMenuA
GetSystemMetrics
GetDesktopWindow
GetDC
DrawTextA
ReleaseDC
DrawIconEx
DestroyIcon
SystemParametersInfoA
GetSysColor
CopyRect
FillRect
DrawEdge
SetRect
GetMenuItemInfoA
WinHelpA
GetCapture
SetWindowTextA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode

gdi32

CreateDIBitmap
GetTextExtentPointA
CreateSolidBrush
DeleteDC
SelectPalette
CreateFontIndirectA
SetBkMode
SetMapMode
SetViewportOrgEx
SetStretchBltMode
SetViewportExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
GetClipBox
SelectClipRgn
ScaleWindowExtEx
IntersectClipRect
ExcludeClipRect
LineTo
MoveToEx
GetBkMode
RestoreDC
CreateRectRgn
GetViewportExtEx
CreatePatternBrush
GetWindowExtEx
GetMapMode
SetRectRgn
DPtoLP
CombineRgn
CreateFontA
GetTextMetricsA
GetCharWidthA
GetBkColor
LPtoDP
GetTextColor
SaveDC
CreateRectRgnIndirect
RoundRect
SetDIBitsToDevice
StretchDIBits
CreatePalette
CreateBitmap
SetBkColor
GetDIBits
RealizePalette
GetStockObject
SetTextColor
Rectangle
Escape
ExtTextOutA
TextOutA
PatBlt
GetPixel
SetPixel
GetObjectA
CreateDIBSection
SelectObject
RectVisible
GetDeviceCaps
CreatePen
DeleteObject
Ellipse
GetTextExtentPoint32A
PtVisible
CreateCompatibleBitmap
BitBlt
GetTextExtentPoint32W
CreateCompatibleDC

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegQueryValueA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA

shell32

ShellExecuteA
ShellExecuteExA

comctl32

_TrackMouseEvent
ImageList_Draw
ImageList_GetImageCount
ImageList_GetIcon
ImageList_AddMasked
ImageList_ReplaceIcon
ord17
ImageList_Destroy
ImageList_Create

oledlg

ord8

ole32

CLSIDFromString
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
CoGetClassObject
OleInitialize
OleUninitialize
CLSIDFromProgID
CoFreeUnusedLibraries
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject

olepro32

ord253

oleaut32

SysStringLen
SysFreeString
SysAllocStringByteLen
SysAllocString
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen

wsock32

sendto
WSAGetLastError
inet_ntoa
recvfrom
connect
select
recv
WSAStartup
ioctlsocket
bind
getsockname
closesocket
WSACleanup
htonl
htons
gethostname
gethostbyname
setsockopt
socket

netapi32

Netbios

Sections

.text
Size: 240KB - Virtual size: 238KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b441bd28fa955237ec257f7efd853f1c

Headers

File Characteristics

Imports

iphlpapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wsock32

netapi32

Sections

.text Size: 240KB - Virtual size: 238KB

.rdata Size: 52KB - Virtual size: 51KB

.data Size: 16KB - Virtual size: 31KB

.rsrc Size: 1.6MB - Virtual size: 1.6MB

.text
Size: 240KB - Virtual size: 238KB

.rdata
Size: 52KB - Virtual size: 51KB

.data
Size: 16KB - Virtual size: 31KB

.rsrc
Size: 1.6MB - Virtual size: 1.6MB