033d41070b9d02c50f5089e62ac4b82f68977bac9e848e5a8e7661eadbe256aa

Sharing

Copy URL Twitter E-mail

General

Target

033d41070b9d02c50f5089e62ac4b82f68977bac9e848e5a8e7661eadbe256aa
Size

2.2MB
MD5

50f48e64c646c4d9d64694f20bd99ed4
SHA1

020789de37c2aa604af8171ab0836c84f08e6b4b
SHA256

033d41070b9d02c50f5089e62ac4b82f68977bac9e848e5a8e7661eadbe256aa
SHA512

ad294c5f7b51112462c80f1e9cf0ee94c7d23c69f5306ca119d143b538a254cd52ff55678fb77c032aaacb391d972b2abf1cfe4e8827f4b7ad57b4cbf1544930
SSDEEP

49152:03e3XH+em8mW5AWB8IEZTRBi5VSBci2H/w23ZNGKAudESQzEv3QznnPgNag6gvgM:7XH+emG5bHEZTRBifSBci2H/732GpQz8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
033d41070b9d02c50f5089e62ac4b82f68977bac9e848e5a8e7661eadbe256aa

Files

033d41070b9d02c50f5089e62ac4b82f68977bac9e848e5a8e7661eadbe256aa
.exe windows x86

6bee32712575d51f9c0fadeba1d4ddf3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Connect_MachineA
CM_Locate_DevNode_ExA
CM_Disconnect_Machine
CM_Get_Sibling_Ex
CM_Get_Child_Ex
CM_Get_DevNode_Registry_Property_ExA

rpcrt4

UuidFromStringA

kernel32

FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
CompareStringW
GetConsoleCP
GetConsoleMode
WriteConsoleW
CreateFileW
SetEnvironmentVariableA
SizeofResource
LockResource
LoadResource
FindResourceW
WideCharToMultiByte
Sleep
GetComputerNameA
CloseHandle
SystemTimeToFileTime
GetLastError
DeviceIoControl
LCMapStringW
GetLocalTime
CreateFileA
GlobalUnlock
GlobalSize
GlobalLock
GlobalAlloc
VirtualAlloc
VirtualFree
FindResourceA
GetModuleHandleA
GetTickCount
WriteFile
SetFilePointer
FreeLibrary
GetProcAddress
GetTimeZoneInformation
lstrcmpA
InterlockedExchange
SetLastError
DeactivateActCtx
LoadLibraryA
ActivateActCtx
CompareStringA
GetLocaleInfoA
GetModuleFileNameA
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
MultiByteToWideChar
GetCurrentThreadId
GetCurrentThread
GlobalDeleteAtom
SetThreadPriority
IsProcessorFeaturePresent
GetStringTypeW
IsValidCodePage
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetFileType
SetStdHandle
HeapSize
HeapQueryInformation
VirtualQuery
GetSystemInfo
CreateThread
ExitThread
ExitProcess
GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapReAlloc
RaiseException
GetDateFormatA
GetTimeFormatA
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
DecodePointer
ResumeThread
GetStdHandle
GetModuleHandleW
HeapCreate
EncodePointer
RtlUnwind
WaitForSingleObject
FindResourceExW
VirtualProtect
SearchPathA
GetProfileIntA
InitializeCriticalSectionAndSpinCount
GetNumberFormatA
GetWindowsDirectoryA
GetTempPathA
GetTempFileNameA
GetFileTime
GetFileSizeEx
GetFileAttributesA
FileTimeToLocalFileTime
GetFileAttributesExA
SetErrorMode
FileTimeToSystemTime
GetOEMCP
GetCPInfo
GetACP
lstrcpyA
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFlags
GetCurrentDirectoryA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
ReadFile
DeleteFileA
lstrcmpiA
GetThreadLocale
InterlockedDecrement
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
CopyFileA
FormatMessageA
LocalFree
lstrlenW
GlobalGetAtomNameA
GlobalFindAtomA
GetVersionExA
LoadLibraryW
lstrcmpW
MulDiv
GlobalFree
FreeResource
GetCurrentProcessId
GlobalAddAtomA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
lstrlenA

user32

UpdateLayeredWindow
UnionRect
MonitorFromPoint
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
RegisterClipboardFormatA
CopyImage
EnableScrollBar
HideCaret
InvertRect
GetMenuDefaultItem
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsA
InsertMenuItemA
TranslateAcceleratorA
LockWindowUpdate
BringWindowToTop
SetCursorPos
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
DrawIconEx
GetSystemMenu
SetClassLongA
GetAsyncKeyState
NotifyWinEvent
CreatePopupMenu
DestroyAcceleratorTable
SetParent
SetWindowRgn
IsZoomed
UnregisterClassA
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
CharNextA
WaitMessage
GetSysColorBrush
LoadCursorW
SetLayeredWindowAttributes
EnumDisplayMonitors
SetRectEmpty
KillTimer
SetTimer
RealChildWindowFromPoint
DeleteMenu
GetMenuItemInfoA
CharUpperA
MapVirtualKeyA
GetKeyNameTextA
IntersectRect
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
CheckDlgButton
GetMenuStringA
AppendMenuA
InsertMenuA
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
IsMenu
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
GetMenuItemID
GetMenuItemCount
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
CallWindowProcA
GetMenu
SetWindowLongA
EndPaint
BeginPaint
GetWindowDC
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
EndDialog
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
ShowOwnedPopups
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
PostQuitMessage
LoadMenuW
GetClassInfoA
DefWindowProcA
LoadCursorA
GetDoubleClickTime
GetFocus
IsWindowVisible
ScreenToClient
IsRectEmpty
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetWindowRgn
SubtractRect
MapVirtualKeyExA
IsCharLowerA
CharUpperBuffA
CopyIcon
LoadImageW
GetMessagePos
ReleaseCapture
SystemParametersInfoA
SetCapture
GetCapture
PtInRect
IsWindow
RedrawWindow
DrawFrameControl
DrawEdge
SetRect
GetUpdateRect
IsClipboardFormatAvailable
SetMenuDefaultItem
PostThreadMessageA
BeginDeferWindowPos
CreateMenu
EmptyClipboard
SetClipboardData
OpenClipboard
CloseClipboard
DestroyMenu
LoadMenuA
DestroyCursor
LoadImageA
GetSysColor
GetSubMenu
TrackPopupMenuEx
PostMessageA
SetCursor
GetWindowLongA
WindowFromPoint
GetParent
GetNextDlgTabItem
GetActiveWindow
InvalidateRect
ClientToScreen
GetWindowRect
DrawFocusRect
FrameRect
FillRect
OffsetRect
InflateRect
CopyRect
DrawStateA
GetIconInfo
CreateIconIndirect
GetDC
ReleaseDC
DestroyIcon
wsprintfA
MessageBoxA
GetSystemMetrics
LoadIconW
EnableWindow
UpdateWindow
GetClientRect
IsIconic
SendMessageA
DrawIcon
LoadBitmapW
RemoveMenu

gdi32

SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
SelectObject
CreatePatternBrush
SelectPalette
GetObjectType
CreateHatchBrush
CopyMetaFileA
RoundRect
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetBkColor
GetTextColor
GetRgnBox
CreateDIBSection
CreateRoundRectRgn
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
OffsetRgn
SetDIBColorTable
EnumFontFamiliesExA
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
GetTextFaceA
SetPixelV
GetTextMetricsA
GetCharWidthA
PatBlt
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateSolidBrush
GetTextExtentPoint32A
RealizePalette
GetDeviceCaps
CreatePalette
CreateFontIndirectA
CreatePen
Rectangle
CreateCompatibleBitmap
GetPixel
SetPixel
SetBkColor
BitBlt
SetTextColor
DeleteDC
DeleteObject
StretchBlt
CreateCompatibleDC
GetObjectA
CreateDCA
GetStockObject
CreateBitmap

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCloseKey
RegEnumValueA

shell32

ShellExecuteA
SHGetFileInfoA
DragFinish
DragQueryFileA
SHBrowseForFolderA
SHAppBarMessage
ShellExecuteExA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetDesktopFolder

comctl32

_TrackMouseEvent
ImageList_GetIconSize

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathRemoveFileSpecW

ole32

DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CreateStreamOnHGlobal
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoInitializeEx
StgOpenStorageOnILockBytes
CoGetClassObject
CoInitialize
CoCreateInstance
CoUninitialize
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
CreateILockBytesOnHGlobal
CoRevokeClassObject

oleaut32

VarBstrFromDate
VariantCopy
SafeArrayDestroy
SystemTimeToVariantTime
VariantTimeToSystemTime
OleCreateFontIndirect
SysStringLen
SysAllocStringByteLen
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysAllocString
SysFreeString

oledlg

ord8

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

gdiplus

GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageI

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundA

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 278KB - Virtual size: 278KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6bee32712575d51f9c0fadeba1d4ddf3

Headers

DLL Characteristics

File Characteristics

Imports

setupapi

rpcrt4

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

oleacc

gdiplus

imm32

winmm

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 278KB - Virtual size: 278KB

.data Size: 35KB - Virtual size: 63KB

.rsrc Size: 4.2MB - Virtual size: 4.2MB

.reloc Size: 180KB - Virtual size: 180KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 278KB - Virtual size: 278KB

.data
Size: 35KB - Virtual size: 63KB

.rsrc
Size: 4.2MB - Virtual size: 4.2MB

.reloc
Size: 180KB - Virtual size: 180KB