93f799a209beb53d077604a213e6a291685c1ee61950f82fb3a40b73ffec26b1

Sharing

Copy URL Twitter E-mail

General

Target

93f799a209beb53d077604a213e6a291685c1ee61950f82fb3a40b73ffec26b1
Size

1.7MB
MD5

9250433a0034b0820421cbdc804d5574
SHA1

89068145c53c69c8342ae4cfa0323fec1c9a7fbc
SHA256

93f799a209beb53d077604a213e6a291685c1ee61950f82fb3a40b73ffec26b1
SHA512

1ee75535273f601a521cc6c7a14f2fd89650b652530fd1cd7c0e94428138590b8f7825b22cb09620742f26b88580566ccfeb1d19e906345dbb678c1a107495ae
SSDEEP

49152:zXEft36LvvJtk0lhHiRJXIX/bLj4w4h4/JETZyfG9XI3Yoxw:zXESvvjk0lhHGJXIXzLjd/SFyJxxw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93f799a209beb53d077604a213e6a291685c1ee61950f82fb3a40b73ffec26b1

Files

93f799a209beb53d077604a213e6a291685c1ee61950f82fb3a40b73ffec26b1
.exe windows x86

69880978c1da0ecf483155486dd20ca3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalHandle
TlsAlloc
LocalReAlloc
TlsFree
InterlockedIncrement
ReadFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
GetModuleHandleW
GetFileAttributesA
GetCPInfo
GetOEMCP
SetErrorMode
FileTimeToLocalFileTime
GetFileSizeEx
GetFileTime
GetTempFileNameA
SearchPathA
GetProfileIntA
VirtualProtect
FindResourceExA
GetCommandLineA
GetStartupInfoA
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapReAlloc
RtlUnwind
ExitProcess
RaiseException
ExitThread
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapSize
GetSystemTimeAsFileTime
SetStdHandle
GetFileType
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
GlobalReAlloc
VirtualFree
QueryPerformanceCounter
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetStringTypeW
CompareStringW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
FileTimeToSystemTime
GetThreadLocale
GlobalFlags
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
CopyFileA
GlobalSize
FormatMessageA
LocalFree
lstrlenW
MulDiv
InterlockedDecrement
GetModuleFileNameW
GlobalUnlock
ResumeThread
SetThreadPriority
FreeResource
GlobalFree
WritePrivateProfileStringA
GetPrivateProfileIntA
GlobalAddAtomA
SetLastError
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetModuleFileNameA
GetLocaleInfoA
LoadLibraryA
CompareStringA
InterlockedExchange
GlobalLock
GlobalAlloc
FreeLibrary
GetModuleHandleA
GetProcAddress
TlsGetValue
LocalAlloc
GetCurrentDirectoryA
GetVersionExA
lstrcmpA
GetSystemDefaultLangID
CreateThread
GetTempPathA
GetExitCodeThread
ResetEvent
GetLastError
CreateDirectoryA
CreateEventA
WriteFile
GetTickCount
SetEvent
lstrlenA
CreateFileA
MultiByteToWideChar
lstrcpyA
DeleteFileA
RemoveDirectoryA
lstrcatA
Sleep
GetCurrentProcessId
CloseHandle
CreateMutexA
LockResource
ProcessIdToSessionId
SizeofResource
WideCharToMultiByte
WaitForSingleObject
LoadResource
TlsSetValue
FindResourceA

user32

DestroyAcceleratorTable
LoadAcceleratorsA
CreateAcceleratorTableA
SetWindowRgn
NotifyWinEvent
CreatePopupMenu
SetParent
SetClassLongA
IsMenu
SetTimer
KillTimer
BringWindowToTop
LockWindowUpdate
EnumChildWindows
RegisterClipboardFormatA
DrawStateA
OpenClipboard
CopyImage
LoadImageA
SetClipboardData
CloseClipboard
EmptyClipboard
TranslateAcceleratorA
InsertMenuItemA
ReuseDDElParam
UnpackDDElParam
DrawEdge
DrawFrameControl
DrawFocusRect
DrawIconEx
SetCursorPos
UnionRect
EnableScrollBar
UpdateLayeredWindow
SetMenuDefaultItem
GetMenuDefaultItem
IsCharLowerA
MapVirtualKeyExA
IsClipboardFormatAvailable
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
FrameRect
GetUpdateRect
CharUpperBuffA
CopyIcon
SubtractRect
GetIconInfo
GetDoubleClickTime
CreateMenu
GetWindowRgn
DestroyCursor
DeleteMenu
LoadCursorA
GetSysColorBrush
ShowWindow
MoveWindow
IsDialogMessageA
CheckDlgButton
RegisterWindowMessageA
SendDlgItemMessageA
IsChild
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetForegroundWindow
ShowScrollBar
UpdateWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
GetAsyncKeyState
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
PtInRect
GetMenu
SetWindowLongA
IntersectRect
GetWindowPlacement
DestroyMenu
GetMenuItemInfoA
InflateRect
GetSysColor
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
ScreenToClient
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
GetWindowTextLengthA
GetWindowTextA
GetScrollPos
SetScrollPos
SetFocus
WinHelpA
SystemParametersInfoA
OffsetRect
MessageBeep
RedrawWindow
IsZoomed
GetMenuStringA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
MapVirtualKeyA
GetKeyNameTextA
ReleaseDC
GetDC
CopyRect
UnhookWindowsHookEx
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
ShowOwnedPopups
SetCursor
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
ModifyMenuA
GetMenuState
CheckMenuItem
MessageBoxA
wsprintfA
EnableWindow
SetWindowTextA
GetSystemMetrics
AppendMenuA
EnableMenuItem
SendMessageA
GetClientRect
DrawIcon
LoadIconA
IsIconic
GetWindowRect
GetSystemMenu
PostMessageA
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
PostThreadMessageA
LoadMenuA
SetRectEmpty
UnregisterClassA
GetNextDlgGroupItem
InvalidateRgn
InvalidateRect
SetRect
IsRectEmpty
CopyAcceleratorTableA
CharNextA
CharUpperA
DestroyIcon
WaitMessage
ReleaseCapture
WindowFromPoint
EqualRect
SetCapture
GetCapture

advapi32

RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyA
RegQueryValueA
RegDeleteValueA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegSetValueExA

shell32

ShellExecuteA
DragQueryFileA
DragFinish
SHBrowseForFolderA
SHGetPathFromIDListA
SHAppBarMessage
SHGetFileInfoA
ord680
SHGetSpecialFolderPathA
ShellExecuteExA

msimg32

TransparentBlt
AlphaBlend

comctl32

ImageList_GetIconSize
InitCommonControlsEx

shlwapi

PathFindExtensionA
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW
PathFindFileNameA

oledlg

ord8

gdiplus

GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipFree
GdipAlloc
GdipDeleteGraphics
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCloneImage

wininet

InternetCloseHandle
InternetOpenA
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetReadFile
InternetCrackUrlA
InternetConnectA
HttpQueryInfoA

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

gdi32

GetTextColor
GetRgnBox
GetTextMetricsA
CreateRectRgnIndirect
PatBlt
GetDeviceCaps
CopyMetaFileA
SaveDC
RestoreDC
SetBkColor
SetBkMode
SetPolyFillMode
SetROP2
SetTextColor
GetBkColor
GetDCOrgEx
GetTextExtentPoint32A
CreateFontIndirectA
CreateHatchBrush
CreateSolidBrush
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
CreatePen
GetObjectType
SelectPalette
GetStockObject
CreateCompatibleDC
CreatePatternBrush
SetTextAlign
DeleteObject
SelectClipRgn
CreateRectRgn
GetObjectA
GetViewportExtEx
GetWindowExtEx
BitBlt
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
CreateBitmap
SetPixelV
GetTextFaceA
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
OffsetRgn
CreateDIBitmap
CreateCompatibleBitmap
EnumFontFamiliesA
GetTextCharsetInfo
CreateRoundRectRgn
SetDIBColorTable
GetDIBits
RealizePalette
StretchBlt
SetPixel
CreateDIBSection
CreateEllipticRgn
CreatePolygonRgn
Polyline
Ellipse
Polygon
Rectangle
RoundRect
CreatePalette
GetPaletteEntries
GetWindowOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetViewportOrgEx
LPtoDP
ExtFloodFill
SetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
EnumFontFamiliesExA
ScaleViewportExtEx

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

comdlg32

GetFileTitleA

ole32

CoRevokeClassObject
CoRegisterMessageFilter
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleGetClipboard
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleLockRunning
OleInitialize
CoFreeUnusedLibraries
CoGetClassObject
CLSIDFromProgID
OleUninitialize
CoInitializeEx
CoUninitialize
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoCreateInstance
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CLSIDFromString

oleaut32

SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
VariantCopy
SysAllocStringByteLen
SysFreeString
SysStringLen
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysAllocString

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 281KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

69880978c1da0ecf483155486dd20ca3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

msimg32

comctl32

shlwapi

oledlg

gdiplus

wininet

oleacc

imm32

winmm

gdi32

winspool.drv

comdlg32

ole32

oleaut32

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 281KB - Virtual size: 280KB

.data Size: 25KB - Virtual size: 53KB

.rsrc Size: 184KB - Virtual size: 183KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 281KB - Virtual size: 280KB

.data
Size: 25KB - Virtual size: 53KB

.rsrc
Size: 184KB - Virtual size: 183KB