d0c40ba03de3437a42da02e1010564f7f7c7b3249a37eb1f8917b74251ce84b6

Sharing

Copy URL Twitter E-mail

General

Target

d0c40ba03de3437a42da02e1010564f7f7c7b3249a37eb1f8917b74251ce84b6
Size

4.6MB
MD5

9759fd20d468ae60d9764b1eba24a160
SHA1

4a40af5196c37c32b7dc2e527a13e4b6bc695eae
SHA256

d0c40ba03de3437a42da02e1010564f7f7c7b3249a37eb1f8917b74251ce84b6
SHA512

d34f88280eb8c08ce02efbdba1fa5880e2dbfa4abd70256d9305fe0bd62d01079c1760d01dfb8f2cbab7cd57f489c9a3a20860d560be235a4bd9009d91f560d8
SSDEEP

98304:7mFiHM++iuFEQFvT9Cs2cv7LXZXmLuKIUWEXNQFqh:7mFMM++icTFB2cvXULuZUWEXNQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0c40ba03de3437a42da02e1010564f7f7c7b3249a37eb1f8917b74251ce84b6

Files

d0c40ba03de3437a42da02e1010564f7f7c7b3249a37eb1f8917b74251ce84b6
.exe windows x86

0a4534cf7ac3bb53eaef297294a77da0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
SizeofResource
LockResource
LoadResource
FindResourceA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
GetLocalTime
Sleep
FreeLibrary
GetModuleFileNameA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
MultiByteToWideChar
lstrlenA
LocalFree
FormatMessageA
MulDiv
SetLastError
GetLastError
GetVersionExA
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
lstrcmpW
CompareStringA
EnumResourceLanguagesA
ConvertDefaultLocale
GetLocaleInfoA
OpenEventA
FileTimeToLocalFileTime
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetCurrentThread
lstrcmpA
InterlockedExchange
SetEnvironmentVariableA
CompareStringW
GetProcessHeap
GetTimeZoneInformation
GetConsoleOutputCP
WriteConsoleA
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
InitializeCriticalSectionAndSpinCount
HeapReAlloc
HeapSize
HeapAlloc
HeapFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetTickCount
QueryPerformanceCounter
IsValidCodePage
GetACP
LCMapStringW
LCMapStringA
SetHandleCount
LoadLibraryW
OutputDebugStringW
WriteConsoleW
OutputDebugStringA
GetStdHandle
DebugBreak
GetFileType
SetStdHandle
ExitProcess
GetSystemInfo
RaiseException
RtlUnwind
IsBadReadPtr
HeapValidate
GetStartupInfoA
GetCommandLineA
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WideCharToMultiByte
GetFileTime
GetFileSizeEx
GetFileAttributesA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetOEMCP
GetCPInfo
GlobalFlags
FileTimeToSystemTime
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GetModuleFileNameW
GetModuleHandleW
GetAtomNameA
SetErrorMode
InterlockedIncrement
InterlockedDecrement
GetCurrentProcessId
SetEvent
CloseHandle
WritePrivateProfileStringA

user32

LoadMenuA
ModifyMenuA
InsertMenuItemA
GetMenuItemInfoA
EnableMenuItem
CheckMenuItem
CreatePopupMenu
GrayStringA
DrawTextExA
DrawTextA
FillRect
GetSysColorBrush
GetWindowThreadProcessId
SetCursor
GetMessageA
TranslateMessage
EndDialog
CreateDialogIndirectParamA
PostQuitMessage
IsWindowEnabled
ShowWindow
SetWindowTextA
IsDialogMessageA
GetMenuCheckMarkDimensions
LoadBitmapA
SetMenuItemBitmaps
RegisterWindowMessageA
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
SendDlgItemMessageA
GetSysColor
PeekMessageA
DispatchMessageA
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
WinHelpA
TrackPopupMenu
GetDlgItem
GetWindowTextA
DestroyWindow
GetDlgCtrlID
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
SetMenu
GetMenu
GetMessageTime
GetMessagePos
OffsetRect
IntersectRect
GetWindowPlacement
GetSystemMetrics
TabbedTextOutA
LoadIconA
EnableWindow
GetForegroundWindow
SetForegroundWindow
GetLastActivePopup
GetWindow
GetTopWindow
DestroyIcon
SystemParametersInfoA
SetWindowPos
GetWindowLongA
GetNextDlgTabItem
GetDesktopWindow
GetFocus
SetCapture
GetCapture
SetActiveWindow
GetActiveWindow
DestroyMenu
SetRectEmpty
GetClipboardFormatNameA
UnpackDDElParam
LoadAcceleratorsA
CharUpperA
TranslateAcceleratorA
ReuseDDElParam
UnregisterClassA
GetKeyState
SetWindowLongA
GetCursorPos
ReleaseCapture
UnionRect
InflateRect
SetRect
PtInRect
IsRectEmpty
LoadCursorA
UpdateLayeredWindow
IsWindow
GetParent
SendMessageA
PostMessageA
InvalidateRect
GetMenuItemID
GetMenuState
ShowOwnedPopups
IsWindowVisible
ValidateRect
GetUpdateRect
UpdateWindow
ReleaseDC
GetWindowDC
GetDC
EndPaint
BeginPaint
ScreenToClient
ClientToScreen
MapWindowPoints
GetClientRect
GetWindowRect
BringWindowToTop
SetWindowRgn
IsZoomed
IsIconic
IsMenu
GetMenuItemCount
GetSubMenu

gdi32

CreateFontIndirectA
CreatePatternBrush
CreateSolidBrush
GetObjectType
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
ExtTextOutA
GetDIBits
GetObjectA
GetDeviceCaps
GetStockObject
CombineRgn
CreateCompatibleDC
SelectObject
PtVisible
RectVisible
BitBlt
GetPixel
SetPixel
TextOutA
GetTextExtentPoint32A
Escape
DeleteDC
SaveDC
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
CreateCompatibleBitmap
ScaleWindowExtEx
DeleteObject
CreateRectRgn

msimg32

AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RevertToSelf
RegOpenKeyA
RegEnumKeyA
RegQueryValueA
RegDeleteKeyA
OpenThreadToken
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
SetThreadToken

shell32

DragQueryFileA
DragAcceptFiles
DragFinish
SHGetSpecialFolderPathA

comctl32

_TrackMouseEvent
InitCommonControlsEx

shlwapi

PathFindExtensionA
PathFindFileNameA
PathRemoveFileSpecW
PathIsUNCA
PathIsDirectoryA
PathStripToRootA

ole32

CoUninitialize
CoInitializeEx
CoCreateInstance
StringFromCLSID
CoTaskMemFree
CreateStreamOnHGlobal

oleaut32

VariantInit
VariantChangeType
VariantClear
SysAllocStringLen

gdiplus

GdipDeleteGraphics
GdipDrawImageRectRectI
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipFree
GdipAlloc
GdipCloneImage
GdipDisposeImage
GdipCreateHBITMAPFromBitmap
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipCreatePath
GdipDeletePath
GdipDeleteFontFamily
GdipGetFamily
GdipAddPathString
GdipGetFontSize
GdipGetFontStyle
GdiplusStartup
GdipGetFontHeightGivenDPI
GdipCreateStringFormat
GdipCreateFromHDC
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipCreateFontFamilyFromName
GdipCreateFont
GdipDeleteFont
GdipSetTextRenderingHint
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipDrawString
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipFillRectangleI
GdipCreatePen1
GdipDeletePen
GdipDrawLineI
GdipSetPenColor
GdipSetPenWidth
GdipDrawRectanglesI
GdipGetImageWidth
GdipGetImageHeight
GdipDeleteStringFormat
GdiplusShutdown
GdipGetPathWorldBounds

winmm

timeSetEvent
timeBeginPeriod
timeGetDevCaps
timeEndPeriod
timeKillEvent

Sections

.text
Size: 603KB - Virtual size: 602KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 295KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0a4534cf7ac3bb53eaef297294a77da0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

gdiplus

winmm

Sections

.text Size: 603KB - Virtual size: 602KB

.rdata Size: 136KB - Virtual size: 136KB

.data Size: 295KB - Virtual size: 311KB

.rsrc Size: 3.5MB - Virtual size: 3.5MB

.reloc Size: 81KB - Virtual size: 81KB

.text
Size: 603KB - Virtual size: 602KB

.rdata
Size: 136KB - Virtual size: 136KB

.data
Size: 295KB - Virtual size: 311KB

.rsrc
Size: 3.5MB - Virtual size: 3.5MB

.reloc
Size: 81KB - Virtual size: 81KB