504583c4a2176e938a917be9cd54aed5198b5283e987ac7987a1da2641e66ab1

Sharing

Copy URL

Twitter E-mail

General

Target

504583c4a2176e938a917be9cd54aed5198b5283e987ac7987a1da2641e66ab1
Size

1.3MB
MD5

249bc08480ac244e3a3c6d9e80bb8b3a
SHA1

74486d8854b56dae2f0da0699ae27d69e987c1b5
SHA256

504583c4a2176e938a917be9cd54aed5198b5283e987ac7987a1da2641e66ab1
SHA512

e5c31637451557190e9b48fee828b167dc3a44e1995e64e266176a913128f1069b34bec467786150d02955b6858598ff5afaea99afda544e6a0aef02ae03f3d0
SSDEEP

12288:+9TKpcp9ue8x3N0T2aLLhUuPHgZydDWckaN5b0IcTOoTTBZfTjWLc:WExKTdLeZydD5xqOoT1l/Wg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
504583c4a2176e938a917be9cd54aed5198b5283e987ac7987a1da2641e66ab1

Files

504583c4a2176e938a917be9cd54aed5198b5283e987ac7987a1da2641e66ab1
.exe windows x86

5787db072ef03c7453dc3d2cba799305

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
GetWindowsDirectoryW
VirtualFree
VirtualAlloc
LocalFree
InterlockedCompareExchange
GetFileSizeEx
FormatMessageW
LocalAlloc
FlushFileBuffers
CreateFileA
InterlockedIncrement
OutputDebugStringW
InterlockedDecrement
GetDiskFreeSpaceExW
GetExitCodeThread
SleepEx
DuplicateHandle
TerminateThread
SetEnvironmentVariableA
GetLocaleInfoW
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetCurrentDirectoryA
GetFullPathNameA
QueryPerformanceCounter
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
FreeLibrary
GetTimeZoneInformation
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStartupInfoA
GetStdHandle
SetHandleCount
HeapCreate
GetConsoleMode
GetConsoleCP
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCPInfo
RtlUnwind
FindFirstFileA
GetDriveTypeA
FileTimeToLocalFileTime
ExitProcess
GetModuleHandleA
ExitThread
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
LoadLibraryA
GetThreadLocale
GetLocaleInfoA
GetACP
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetVersionExA
GetCurrentProcess
SetLastError
GetCurrentThreadId
GetCommandLineW
FreeResource
LoadLibraryW
FlushInstructionCache
GetFileSize
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameW
InterlockedExchange
CreateMutexW
OpenProcess
RemoveDirectoryW
FindNextFileW
GetModuleFileNameA
WaitForMultipleObjects
SetFilePointer
SetEndOfFile
ResetEvent
SetEvent
CreateThread
CreateEventW
CopyFileW
CreateDirectoryW
GetFileAttributesW
SetFileAttributesW
QueryDosDeviceW
GetLogicalDriveStringsW
MoveFileW
ExpandEnvironmentStringsW
Module32NextW
Module32FirstW
CreateToolhelp32Snapshot
GetCurrentProcessId
ReleaseMutex
DeleteCriticalSection
InitializeCriticalSection
GetTickCount
GetLocalTime
RaiseException
GetFileType
GetPrivateProfileStringW
GetPrivateProfileIntW
MultiByteToWideChar
WriteFile
lstrlenA
ReadFile
Sleep
WaitForSingleObject
FindClose
FindFirstFileW
GetStartupInfoW
DeleteFileW
FindResourceW
GetSystemDefaultLangID
GetLastError
GetVersionExW
GetSystemInfo
GetModuleHandleW
GetProcAddress
WideCharToMultiByte
lstrlenW
GetSystemDirectoryW
CloseHandle
FileTimeToSystemTime
CreateFileW
FindResourceExW
LoadResource
LockResource
SizeofResource

user32

GetMonitorInfoW
KillTimer
MonitorFromWindow
GetNextDlgTabItem
SetRect
BeginPaint
GetWindow
DestroyWindow
LoadCursorW
GetWindowLongW
DefWindowProcW
ClientToScreen
SetFocus
DrawIconEx
IntersectRect
InflateRect
RegisterClassExW
MapWindowPoints
PostMessageW
IsWindow
GetWindowRect
GetActiveWindow
GetClassInfoExW
EnableWindow
GetWindowThreadProcessId
GetDlgCtrlID
GetClientRect
SystemParametersInfoW
AttachThreadInput
SetForegroundWindow
IsWindowEnabled
FindWindowW
RegisterWindowMessageW
SetActiveWindow
SetWindowLongW
SendMessageW
GetDC
SetWindowPos
ReleaseDC
InvalidateRect
MoveWindow
CreateWindowExW
GetDesktopWindow
CopyRect
GetParent
ExitWindowsEx
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
PostThreadMessageW
DestroyIcon
GetCursorPos
OffsetRect
ScreenToClient
SetCapture
DrawTextW
DrawFrameControl
UnionRect
ShowWindow
EqualRect
SetTimer
CallWindowProcW
GetFocus
ReleaseCapture
IsChild
UpdateLayeredWindow
IsWindowVisible
IsDialogMessageW
GetDlgItem
LoadImageW
SetRectEmpty
IsRectEmpty
SetCursor
PtInRect
EndPaint
LoadIconW
GetForegroundWindow
UnregisterClassA

gdi32

GetObjectW
OffsetRgn
CreateRectRgnIndirect
GetTextExtentPoint32W
LineTo
MoveToEx
TextOutW
SetTextColor
CreatePen
RoundRect
CreateDIBSection
Rectangle
CombineRgn
CreateRectRgn
ExtSelectClipRgn
GetClipRgn
CreateRoundRectRgn
SetViewportOrgEx
DeleteDC
GetViewportOrgEx
ExtTextOutW
SetBkColor
GetTextColor
SelectObject
RestoreDC
CreateCompatibleDC
SaveDC
GetCurrentObject
SelectClipRgn
SetBkMode
CreateFontIndirectW
GetStockObject
GetDeviceCaps
DeleteObject
BitBlt
RectInRegion

advapi32

RegCreateKeyExW
RegOpenKeyW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW

shell32

ShellExecuteW

shlwapi

PathAddBackslashW
StrToIntA
PathFindFileNameW
PathAppendW
PathFileExistsW
PathRemoveFileSpecW
StrToIntW

comctl32

_TrackMouseEvent

msimg32

AlphaBlend

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

gdiplus

GdipSetStringFormatTrimming
GdipSetStringFormatFlags
GdipDeleteStringFormat
GdipDrawLineI
GdipDrawImageRectRectI
GdipDrawLine
GdipAddPathStringI
GdipDrawImageRectI
GdipDrawImageI
GdipCreateFont
GdipCreateFontFromLogfontW
GdipDrawLinesI
GdipCreateStringFormat
GdiplusShutdown
GdipAddPathRectangleI
GdiplusStartup
GdipPrivateAddFontFile
GdipRotateWorldTransform
GdipSetStringFormatLineAlign
GdipNewPrivateFontCollection
GdipTranslateWorldTransform
GdipMeasureString
GdipResetWorldTransform
GdipDrawString
GdipSetPixelOffsetMode
GdipSetPenDashStyle
GdipCloneFontFamily
GdipSetSmoothingMode
GdipCreateLineBrushFromRectWithAngleI
GdipGetFontCollectionFamilyList
GdipGetFontCollectionFamilyCount
GdipSetInterpolationMode
GdipSetImageAttributesColorMatrix
GdipFillPath
GdipDisposeImageAttributes
GdipSetTextRenderingHint
GdipCreateImageAttributes
GdipAddPathArcI
GdipDisposeImage
GdipSetCompositingQuality
GdipFillRectangleI
GdipGetImageHeight
GdipFillRectangle
GdipSetPenMode
GdipGetImageWidth
GdipGraphicsClear
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipClosePathFigure
GdipAlloc
GdipCreateFromHDC
GdipCloneImage
GdipDrawPath
GdipDeletePath
GdipSetPenEndCap
GdipLoadImageFromFile
GdipSetPenStartCap
GdipSetClipPath
GdipCreateSolidFill
GdipCreatePath
GdipGetFontSize
GdipDeletePen
GdipCloneBrush
GdipDrawRectangleI
GdipDeleteBrush
GdipGetFamily
GdipCreatePen1
GdipDeleteFont
GdipFree
GdipDeleteFontFamily
GdipCreateBitmapFromScan0
GdipAddPathPieI
GdipDeletePrivateFontCollection
GdipSetStringFormatAlign
GdipDrawImageRectRect

ws2_32

connect
__WSAFDIsSet
WSASetLastError
ioctlsocket
WSAStartup
socket
closesocket
gethostbyname
WSACleanup
inet_ntoa
WSAGetLastError
recv
send
getsockname
ntohs
bind
htons
getsockopt
setsockopt
select

Sections

.text
Size: 744KB - Virtual size: 743KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 148KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 412KB - Virtual size: 411KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5787db072ef03c7453dc3d2cba799305

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

shlwapi

comctl32

msimg32

version

gdiplus

ws2_32

Sections

.text Size: 744KB - Virtual size: 743KB

.rdata Size: 148KB - Virtual size: 145KB

.data Size: 16KB - Virtual size: 24KB

.rsrc Size: 412KB - Virtual size: 411KB

.text
Size: 744KB - Virtual size: 743KB

.rdata
Size: 148KB - Virtual size: 145KB

.data
Size: 16KB - Virtual size: 24KB

.rsrc
Size: 412KB - Virtual size: 411KB