9cd1084a1d8b1648ea1f3ac266ea98557243973cea0abc690d56f58593244cf7

Sharing

Copy URL

Twitter E-mail

General

Target

9cd1084a1d8b1648ea1f3ac266ea98557243973cea0abc690d56f58593244cf7
Size

1.5MB
MD5

f5088e5e2a073dd3eee8c981739ea8d3
SHA1

693bd0e53de04aa16f60380af0175bd19cdc6071
SHA256

9cd1084a1d8b1648ea1f3ac266ea98557243973cea0abc690d56f58593244cf7
SHA512

12d77cf00390cdbbba80c1b54edfe58c544452b6b35e1b82905b529d5a4992bd681464e771bb00d81e1159aa525db5f9e9a1517e4aa416025e32d887a0a95f06
SSDEEP

24576:UkzW5ZljAVRKGSqAYpO5A2pKH+qewxp8v2h2jmYpWKWZm:U3ZljzqYKex+xNc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9cd1084a1d8b1648ea1f3ac266ea98557243973cea0abc690d56f58593244cf7

Files

9cd1084a1d8b1648ea1f3ac266ea98557243973cea0abc690d56f58593244cf7
.exe windows x86

894fb016e02b3a0fc05e419c7fe2dbe3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathRemoveFileSpecA

kernel32

TlsGetValue
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
SetErrorMode
FileTimeToSystemTime
FileTimeToLocalFileTime
lstrlenW
GlobalSize
GetPrivateProfileIntA
WritePrivateProfileStringA
GetCurrentDirectoryA
RtlUnwind
ExitProcess
GetCommandLineA
GetFileType
HeapAlloc
HeapFree
HeapReAlloc
ExitThread
CreateThread
HeapSize
GetSystemTimeAsFileTime
GetACP
GetTimeFormatA
GetDateFormatA
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapDestroy
HeapCreate
VirtualFree
SetStdHandle
GetProcessHeap
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
VirtualProtect
GetSystemInfo
VirtualQuery
IsBadReadPtr
IsBadCodePtr
LocalReAlloc
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
SetConsoleCtrlHandler
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
TlsSetValue
GetProfileStringA
SizeofResource
LockResource
LoadResource
FindResourceA
GetModuleFileNameA
FatalAppExitA
GetLastError
CreateDirectoryA
GetEnvironmentVariableA
GetCurrentProcess
GetCurrentThreadId
SetLastError
CreateMutexA
FreeLibrary
DeleteFileA
CreateProcessA
GetStartupInfoA
CopyFileA
SetFileAttributesA
FindClose
SetCurrentDirectoryA
FindFirstFileA
GetTempPathA
lstrcmpiA
GetVersionExA
LoadLibraryA
lstrcpyA
lstrlenA
GetProcAddress
OutputDebugStringA
Sleep
GetPrivateProfileStringA
LocalAlloc
InterlockedExchange
RaiseException
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
GlobalFree
CreateEventA
LocalFree
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
WaitForSingleObject
GlobalAlloc
lstrcmpA
GetCurrentThread
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
GetVolumeInformationA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DuplicateHandle
CreateFileA
SetFileTime
CloseHandle
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileTime
GetFileSize
GetFileAttributesA
lstrcpynA
FormatMessageA
MultiByteToWideChar
WideCharToMultiByte
GlobalGetAtomNameA
InterlockedDecrement
InterlockedIncrement
GlobalLock
GlobalUnlock
MulDiv
GetVersion
lstrcatA
GetLocaleInfoA

user32

EndDialog
wvsprintfA
GetClassNameA
PtInRect
GetDesktopWindow
GetSysColorBrush
DestroyMenu
InsertMenuA
AppendMenuA
GetMenuStringA
RemoveMenu
WaitMessage
GetWindowThreadProcessId
WindowFromPoint
DeleteMenu
GetDialogBaseUnits
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
CreateDialogIndirectParamA
GetMessageA
TranslateMessage
GetActiveWindow
ValidateRect
GetCursorPos
SetCursor
ShowOwnedPopups
PostQuitMessage
CharUpperA
InflateRect
OemToCharA
CharToOemA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
IsWindowEnabled
MoveWindow
SetWindowTextA
IsDialogMessageA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
PostMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetActiveWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetRect
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
IntersectRect
DefDlgProcA
CharNextA
IsWindowUnicode
RegisterClassA
LoadCursorA
DefWindowProcA
DrawEdge
OffsetRect
GetSysColor
GetClientRect
IsRectEmpty
ReleaseCapture
SetCapture
InvalidateRect
EnableWindow
MessageBoxA
wsprintfA
GetUserObjectInformationA
GetThreadDesktop
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
SetTimer
KillTimer
GetSystemMetrics
DrawIcon
LoadIconA
LoadStringA
FindWindowA
SetForegroundWindow
IsIconic
ShowWindow
GrayStringA
DrawTextA
TabbedTextOutA
RedrawWindow
IsWindow
GetParent
SendMessageA
EqualRect

gdi32

CreateCompatibleDC
CreateRectRgn
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetDCOrgEx
GetClipBox
SetTextColor
SetBkColor
GetObjectA
CreateBitmap
DeleteDC
StartDocA
SaveDC
RestoreDC
SelectPalette
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
CreateCompatibleBitmap
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetCurrentPositionEx
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
DeleteObject
GetClipRgn
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
ExtCreatePen
CreateHatchBrush
CreatePatternBrush
CreateDIBPatternBrushPt
GetMapMode
PatBlt
SetRectRgn
CombineRgn
CreateRectRgnIndirect
CreateFontIndirectA
DPtoLP
CopyMetaFileA
CreateDCA
GetTextMetricsA
CreatePen
CreateSolidBrush
Ellipse
Pie
GetTextExtentPoint32A
BitBlt
SelectObject
GetStockObject
LineTo
CreateDIBitmap
GetTextExtentPointA
CreateFontA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

shell32

DragQueryFileA
DragFinish
SHGetFileInfoA
DragAcceptFiles

comctl32

ImageList_Read
ImageList_Merge
ImageList_LoadImageA
ImageList_Create
ImageList_Destroy
ord14
ord13
ord17
ImageList_Write

ole32

WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateBindCtx
OleDuplicateData
OleRegGetUserType
CoTaskMemFree
CoDisconnectObject
CoCreateInstance
OleRun
CLSIDFromString
CLSIDFromProgID
ReadFmtUserTypeStg
ReadClassStg
StringFromCLSID
CoTreatAsClass
ReleaseStgMedium
CoTaskMemAlloc

oleaut32

LoadTypeLi
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
VariantChangeType
SysFreeString
VariantClear
SysAllocString
SysStringLen
SysAllocStringByteLen
VariantCopy
SysAllocStringLen
SysReAllocStringLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
SysStringByteLen
VarCyFromStr
VarBstrFromCy
VarDateFromStr
VarBstrFromDate
SafeArrayCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock

Sections

.text
Size: 500KB - Virtual size: 499KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didat
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

894fb016e02b3a0fc05e419c7fe2dbe3

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

gdi32

comdlg32

winspool.drv

shell32

comctl32

ole32

oleaut32

Sections

.text Size: 500KB - Virtual size: 499KB

.rdata Size: 88KB - Virtual size: 84KB

.data Size: 24KB - Virtual size: 41KB

.idata Size: 16KB - Virtual size: 14KB

.didat Size: 4KB - Virtual size: 2KB

.rsrc Size: 3.1MB - Virtual size: 3.1MB

.reloc Size: 40KB - Virtual size: 39KB

.text
Size: 500KB - Virtual size: 499KB

.rdata
Size: 88KB - Virtual size: 84KB

.data
Size: 24KB - Virtual size: 41KB

.idata
Size: 16KB - Virtual size: 14KB

.didat
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 3.1MB - Virtual size: 3.1MB

.reloc
Size: 40KB - Virtual size: 39KB