fe49347e6d016327ced39c65473e98720dd605c10e69b8d99670b1d72c481e51

Sharing

Copy URL Twitter E-mail

General

Target

fe49347e6d016327ced39c65473e98720dd605c10e69b8d99670b1d72c481e51
Size

523KB
MD5

1f7c85259db1ea676e9d8047dca054a8
SHA1

f95f7d66f14a69589d16d345133e2f356be86737
SHA256

fe49347e6d016327ced39c65473e98720dd605c10e69b8d99670b1d72c481e51
SHA512

86abbc64494c4be1f15c62748b4e687173879a2bee69d5d27c592cef5adab5ce41b47b18c841bfb3fd26c5cd235f6f8d00ba8d22c3899f0eeb132227f1fe8e22
SSDEEP

12288:4XMtxCqVogjAKtps8CUwdMGf0QCK0FZC1K5b4p:aMtAqVVjVsQWMU0ZFZC16I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe49347e6d016327ced39c65473e98720dd605c10e69b8d99670b1d72c481e51

Files

fe49347e6d016327ced39c65473e98720dd605c10e69b8d99670b1d72c481e51
.exe windows x86

f6b9832329a7eecc80ce95a4a87c1f0f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSection
GetSystemDirectoryW
lstrcmpW
GlobalAddAtomA
GlobalFindAtomA
GlobalGetAtomNameA
InitializeCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalAlloc
LocalReAlloc
GetFileAttributesExA
GetFileSizeEx
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
CompareStringW
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GlobalFlags
GetOEMCP
GetCPInfo
IsDebuggerPresent
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
GetCommandLineA
RtlUnwind
CompareStringA
EnterCriticalSection
ExitProcess
GetModuleHandleExW
AreFileApisANSI
HeapQueryInformation
IsValidCodePage
GetDriveTypeW
GetStdHandle
GetStartupInfoW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetTimeZoneInformation
GetStringTypeW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
ReadConsoleW
LCMapStringW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetCurrentDirectoryW
CreateFileW
WriteConsoleW
OutputDebugStringW
GetExitCodeProcess
GetFileAttributesExW
SetEnvironmentVariableA
lstrcmpA
GlobalDeleteAtom
LoadLibraryExW
GetFileType
EncodePointer
GetCurrentThreadId
GetCurrentThread
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
FormatMessageA
LocalFree
FileTimeToLocalFileTime
LoadLibraryW
GetModuleFileNameW
SetLastError
OutputDebugStringA
DeleteCriticalSection
DecodePointer
HeapSize
RaiseException
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapFree
HeapAlloc
HeapReAlloc
GetTempPathA
GetConsoleWindow
WinExec
lstrcatA
lstrlenA
GetEnvironmentVariableA
GetVolumeInformationA
FreeLibrary
LoadLibraryA
WaitForSingleObject
CreateProcessA
GlobalFree
GetCurrentProcessId
GlobalUnlock
GlobalLock
GlobalAlloc
TerminateProcess
GetVersionExA
GetLastError
GetCurrentProcess
GetModuleHandleW
GetProcAddress
Sleep
GetACP
MultiByteToWideChar
WriteFile
FindResourceA
DeleteFileA
RemoveDirectoryA
SetFileAttributesA
GetDriveTypeA
OpenFile
FindClose
FindNextFileA
GetFileAttributesA
FindFirstFileA
GetModuleFileNameA
GetModuleHandleA
FileTimeToSystemTime
CloseHandle
GetFileTime
CreateFileA
FindResourceW
LoadResource
LockResource
SizeofResource
SetStdHandle
WideCharToMultiByte

user32

GetLastActivePopup
GetTopWindow
GetClassLongA
SetWindowLongA
PtInRect
CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
RemovePropA
GetPropA
SetPropA
RedrawWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
UpdateWindow
SetMenu
GetMenu
EnableWindow
GetCapture
GetKeyState
GetFocus
GetDlgCtrlID
GetDlgItem
IsWindowVisible
SetWindowPos
DestroyWindow
IsWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
SetWindowsHookExA
GetMessageTime
GetMessagePos
PeekMessageA
RegisterWindowMessageA
PostQuitMessage
PostMessageA
CharUpperA
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetParent
GetClientRect
GetMessageA
TranslateMessage
DispatchMessageA
ReleaseDC
MessageBoxA
MoveWindow
GetWindowRect
GetWindowLongA
SendMessageA
GetClassNameA
GetWindowThreadProcessId
GetWindowTextA
GetWindow
GetSystemMetrics
UnhookWindowsHookEx
CallNextHookEx
LoadIconA
LoadIconW
WinHelpA
MonitorFromWindow
GetMonitorInfoA
ShowWindow
DestroyMenu
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
InvalidateRect
KillTimer
SetTimer
RealChildWindowFromPoint
ClientToScreen
SetCursor
LoadBitmapW
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetCursorPos
GetActiveWindow
LoadCursorA
GetSysColorBrush
GetDC
SetWindowTextA
IsWindowEnabled
DefWindowProcA

gdi32

PtVisible
RectVisible
RestoreDC
SaveDC
SelectObject
SetMapMode
SetBkColor
TextOutA
ExtTextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetStockObject
GetClipBox
Escape
DeleteDC
DeleteObject
CreateBitmap
GetDeviceCaps
SetTextColor

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegQueryValueA
RegEnumKeyA
RegSetValueExA
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegEnumValueA

shell32

ShellExecuteA

shlwapi

PathIsUNCA
PathStripToRootA
PathFindExtensionA
PathFindFileNameA
PathFileExistsA

ole32

CoUninitialize
CoCreateGuid
CoTaskMemFree
CoInitialize
CoCreateInstance

oleaut32

VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysFreeString

imagehlp

MakeSureDirectoryPathExists

oleacc

CreateStdAccessibleObject
LresultFromObject

Sections

.text
Size: 231KB - Virtual size: 230KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 197KB - Virtual size: 197KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f6b9832329a7eecc80ce95a4a87c1f0f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

shlwapi

ole32

oleaut32

imagehlp

oleacc

Sections

.text Size: 231KB - Virtual size: 230KB

.rdata Size: 65KB - Virtual size: 65KB

.data Size: 12KB - Virtual size: 28KB

.rsrc Size: 197KB - Virtual size: 197KB

.reloc Size: 16KB - Virtual size: 16KB

.text
Size: 231KB - Virtual size: 230KB

.rdata
Size: 65KB - Virtual size: 65KB

.data
Size: 12KB - Virtual size: 28KB

.rsrc
Size: 197KB - Virtual size: 197KB

.reloc
Size: 16KB - Virtual size: 16KB