8970b4b56ef6a351fc94fc8ae70a5990ce9876264dfde9a29b3df386bf163f42

Sharing

Copy URL Twitter E-mail

General

Target

8970b4b56ef6a351fc94fc8ae70a5990ce9876264dfde9a29b3df386bf163f42
Size

1.4MB
MD5

e4ef0f770b7db9b2503a082a6ddb5851
SHA1

04c72227a2aced5c6efe9da73fc694ee066a9bf3
SHA256

8970b4b56ef6a351fc94fc8ae70a5990ce9876264dfde9a29b3df386bf163f42
SHA512

d322ddad9b70d2886d37739ef416a228c4dee7145ade402a0526a1009cab7c5494b593c6728d6641a590999c7844cacc67dd3824a90d2a2cb5f2e526e89e7cea
SSDEEP

24576:uHPn34MhTCilQoR1Ke2xnk6c/gfsGfhyQemrNDgPUzCgnextHWUziJm4IFMesbTC:+P9RbGGc9eTYmEbTrJwdwh/AVnmnJAYi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8970b4b56ef6a351fc94fc8ae70a5990ce9876264dfde9a29b3df386bf163f42

Files

8970b4b56ef6a351fc94fc8ae70a5990ce9876264dfde9a29b3df386bf163f42
.exe windows x86

469abafc14b6bd0e7edf0c0da9f1b611

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryW
GetTickCount
WriteFile
SizeofResource
DeleteFileW
LoadResource
IsBadWritePtr
GetNativeSystemInfo
GetCurrentProcess
MultiByteToWideChar
LocalFree
LockResource
LoadLibraryW
WideCharToMultiByte
IsBadReadPtr
GetVolumeInformationW
GetCurrentProcessId
WritePrivateProfileStringW
GetPrivateProfileStringW
FindResourceW
GetACP
ExitProcess
FreeResource
MulDiv
InterlockedIncrement
InterlockedDecrement
lstrcpyW
SetFilePointer
GetFileType
DuplicateHandle
ReadFile
SystemTimeToFileTime
DosDateTimeToFileTime
CreateDirectoryW
SetFileTime
GetFileSize
GlobalUnlock
GlobalLock
GlobalAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
GetTimeFormatA
GetDateFormatA
GetStartupInfoW
RaiseException
RtlUnwind
HeapReAlloc
GetSystemTimeAsFileTime
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapCreate
GetCPInfo
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetTimeZoneInformation
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
QueryPerformanceCounter
HeapSize
GetModuleHandleA
LoadLibraryA
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetModuleHandleW
GetProcAddress
GetDriveTypeW
GetLogicalDriveStringsW
GetLocalTime
CloseHandle
Sleep
GetLastError
CreateFileW
GetModuleFileNameW
DeviceIoControl

user32

PostMessageW
RegisterClassW
LoadCursorW
RegisterClassExW
GetClassInfoExW
CreateWindowExW
GetKeyState
UnionRect
InvalidateRect
SetTimer
KillTimer
SetCapture
ReleaseCapture
ScreenToClient
PtInRect
CharNextW
DestroyWindow
GetFocus
MapWindowPoints
IntersectRect
GetUpdateRect
IsRectEmpty
EndPaint
BeginPaint
GetActiveWindow
GetCursorPos
OffsetRect
SetCursor
SetPropW
GetWindowRgn
MoveWindow
IsZoomed
SetWindowRgn
FillRect
InvalidateRgn
GetGUIThreadInfo
CreateAcceleratorTableW
GetWindowTextW
GetWindowTextLengthW
GetCaretPos
GetCaretBlinkTime
SetForegroundWindow
DrawTextW
CharPrevW
SetRect
CreateCaret
HideCaret
ShowCaret
SetCaretPos
GetSysColor
LoadImageW
SendMessageW
EnableWindow
GetMessageW
SetFocus
TranslateMessage
DispatchMessageW
ShowWindow
IsWindow
SetWindowLongW
DefWindowProcW
GetPropW
GetWindowLongW
CallWindowProcW
wvsprintfW
wsprintfW
GetWindowRect
GetParent
GetWindow
GetMonitorInfoW
MonitorFromWindow
ClientToScreen
PostQuitMessage
SetWindowTextW
GetClientRect
IsWindowVisible
MessageBoxW
ReleaseDC
GetDC
EnumDisplayDevicesW
SetWindowPos
IsIconic
GetSystemMetrics

gdi32

CreateCompatibleDC
PtInRegion
CreatePatternBrush
CreateSolidBrush
CreateCompatibleBitmap
SaveDC
BitBlt
GetObjectA
SelectObject
TextOutW
GetCharABCWidthsW
GetTextExtentPoint32W
CreateRoundRectRgn
CreatePenIndirect
MoveToEx
LineTo
SetBkColor
ExtTextOutW
SetStretchBltMode
StretchBlt
CombineRgn
GetClipBox
CreateRectRgnIndirect
ExtSelectClipRgn
SelectClipRgn
SetBkMode
SetTextColor
GetDeviceCaps
CreateDIBSection
RoundRect
CreateRectRgn
RestoreDC
Rectangle
SetWindowOrgEx
DeleteDC
CreatePen
GetStockObject
GetObjectW
CreateFontIndirectW
DeleteObject
GdiFlush
GetTextMetricsW

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

SetEntriesInAclW
StartServiceW
CreateServiceW
CloseServiceHandle
DeleteService
OpenServiceW
OpenSCManagerW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
GetSecurityInfo
SetSecurityInfo
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegQueryValueExW

ole32

CreateStreamOnHGlobal
OleLockRunning
CLSIDFromProgID
CLSIDFromString
CoInitialize
CoCreateInstance
CoUninitialize
CoTaskMemFree
StringFromCLSID

comctl32

_TrackMouseEvent
ord17

iphlpapi

GetAdaptersAddresses
GetAdaptersInfo

winmm

waveOutGetDevCapsW
waveOutGetNumDevs

imm32

ImmSetCompositionWindow
ImmSetCompositionFontW
ImmReleaseContext
ImmGetContext

oleaut32

VariantInit
VariantClear
SysFreeString
SysAllocString

gdiplus

GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipGetImageWidth
GdipLoadImageFromStreamICM
GdipGetPropertyItem
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipGetImageHeight
GdipImageGetFrameDimensionsCount
GdiplusShutdown
GdipFree
GdipAlloc
GdipDeleteBrush
GdipCreateStringFormat
GdipDeleteStringFormat
GdipDeleteGraphics
GdipDeleteFontFamily
GdipDeleteFont
GdipDisposeImage
GdipCreateBitmapFromScan0
GdiplusStartup
GdipCreateLineBrushI
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipCreateFromHDC
GdipGetImageGraphicsContext
GdipSetCompositingQuality
GdipSetTextRenderingHint
GdipSetInterpolationMode
GdipSetSmoothingMode
GdipSetPixelOffsetMode
GdipGraphicsClear
GdipDrawString
GdipDrawImage
GdipDrawImageRectI
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipGetFamily
GdipCloneBrush
GdipCloneImage
GdipLoadImageFromStream

Sections

.text
Size: 438KB - Virtual size: 437KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 810KB - Virtual size: 810KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

469abafc14b6bd0e7edf0c0da9f1b611

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

ole32

comctl32

iphlpapi

winmm

imm32

oleaut32

gdiplus

Sections

.text Size: 438KB - Virtual size: 437KB

.rdata Size: 95KB - Virtual size: 94KB

.data Size: 23KB - Virtual size: 42KB

.rsrc Size: 810KB - Virtual size: 810KB

.reloc Size: 33KB - Virtual size: 32KB

.text
Size: 438KB - Virtual size: 437KB

.rdata
Size: 95KB - Virtual size: 94KB

.data
Size: 23KB - Virtual size: 42KB

.rsrc
Size: 810KB - Virtual size: 810KB

.reloc
Size: 33KB - Virtual size: 32KB