4ac23f7c49e85cf4fb7561916567c003672e4a4ffc89148adb0d4c7d4bf30104

Sharing

Copy URL Twitter E-mail

General

Target

4ac23f7c49e85cf4fb7561916567c003672e4a4ffc89148adb0d4c7d4bf30104
Size

725KB
MD5

7469133c8e442c72d434b395edc11f95
SHA1

98b650b72ba488bad52a1f8ee4719c92fac0ef28
SHA256

4ac23f7c49e85cf4fb7561916567c003672e4a4ffc89148adb0d4c7d4bf30104
SHA512

37851a7d385626cfe20477de3bc7474e1a3d8b43518fd455a78f05582b3576f56af0445fb27f1ebb1952bb89ce6db690b4c554a05f7c4f46088fcb240a721790
SSDEEP

12288:I4KzfbRcDDIYdOAi9LPjgsCfnue8ai1TSCxLVWWug16OYaGs9qGk3Tw3ZePoiFdT:IJzRcDYbvT3aFWD1eaRW766F9SyJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ac23f7c49e85cf4fb7561916567c003672e4a4ffc89148adb0d4c7d4bf30104

Files

4ac23f7c49e85cf4fb7561916567c003672e4a4ffc89148adb0d4c7d4bf30104
.exe windows x86

b7f85fa4f8142a168f69eef412a795ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SystemTimeToFileTime
SetFileTime
SetFileAttributesA
SetErrorMode
lstrlenW
GlobalSize
HeapFree
HeapAlloc
RtlUnwind
RaiseException
SetEnvironmentVariableA
SetCurrentDirectoryA
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
ExitThread
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetACP
HeapSize
HeapReAlloc
SetStdHandle
GetFileType
HeapDestroy
HeapCreate
FatalAppExitA
LocalFileTimeToFileTime
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
Sleep
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
SetConsoleCtrlHandler
CompareStringA
CompareStringW
GetLocaleInfoW
GetFileTime
GetFileAttributesA
GetCurrentDirectoryA
GetProfileStringA
InterlockedExchange
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LocalAlloc
EnterCriticalSection
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
MulDiv
SetLastError
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
WaitForSingleObject
GetModuleFileNameA
lstrcmpA
GetCurrentThread
FormatMessageA
LocalFree
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GetFileSize
SetFilePointer
GetPrivateProfileIntA
WritePrivateProfileSectionA
GetPrivateProfileSectionA
CopyFileA
lstrcpyA
MultiByteToWideChar
FindResourceA
SizeofResource
LoadResource
LockResource
FindNextFileA
GetWindowsDirectoryA
GetSystemDirectoryA
TerminateThread
CreateThread
WinExec
LoadLibraryExA
GetProcAddress
FreeLibrary
GetEnvironmentVariableA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
WritePrivateProfileStringA
GetPrivateProfileStringA
FindFirstFileA
FindClose
CreateDirectoryA
VirtualFree
VirtualAlloc
GetLastError
ReadFile
WriteFile
DeleteFileA
CreateFileA
GetTickCount
IsBadWritePtr
CloseHandle

user32

TranslateAcceleratorA
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
InvalidateRect
BringWindowToTop
InflateRect
RegisterClipboardFormatA
RemoveMenu
PostThreadMessageA
DestroyIcon
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
GetNextDlgTabItem
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
IsWindowEnabled
OemToCharA
CharToOemA
PostMessageA
UpdateWindow
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
GetFocus
SetActiveWindow
IsWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
LoadAcceleratorsA
SetScrollPos
GetTopWindow
GetWindowThreadProcessId
GetParent
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
InsertMenuA
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
wsprintfA
MessageBoxA
EnableWindow
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
LoadIconA
GetClientRect
IsIconic
GetSystemMenu
AppendMenuA
SetRectEmpty
MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
CharNextA
GetMenuStringA
GetScrollPos
DeleteMenu
DrawIcon
GetSystemMetrics
DefDlgProcA
IsWindowUnicode
SendDlgItemMessageA
SendMessageA
WaitMessage
ReleaseCapture
SetCapture
GetDialogBaseUnits
GetSysColorBrush
LoadCursorA
PtInRect
GetClassNameA
GetDesktopWindow
CharUpperA
DestroyMenu
GrayStringA
DrawTextA
SetMenuItemBitmaps
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
LoadStringA
MapDialogRect
SetWindowContextHelpId
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
SetCursor
ShowOwnedPopups
PostQuitMessage
wvsprintfA
GetMenuCheckMarkDimensions
LoadBitmapA
GetKeyState
WindowFromPoint
GetMenuState
IsChild
ModifyMenuA
TabbedTextOutA

gdi32

SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetCurrentPositionEx
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
DeleteObject
GetClipRgn
CreateRectRgn
SelectClipPath
ExtSelectClipRgn
SetStretchBltMode
GetObjectType
EnumMetaFile
PlayMetaFile
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreatePen
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreatePatternBrush
CreateDIBPatternBrushPt
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextExtentPoint32A
GetTextMetricsA
CreateFontIndirectA
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
PatBlt
SetRectRgn
CombineRgn
CreateRectRgnIndirect
CopyMetaFileA
CreateDCA
SetROP2
SetPolyFillMode
SetBkMode
SelectPalette
GetStockObject
SelectObject
RestoreDC
SaveDC
StartDocA
DeleteDC
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
PlayMetaFileRecord
CreateDIBitmap
GetTextExtentPointA
BitBlt
CreateCompatibleDC
GetDCOrgEx

comdlg32

GetSaveFileNameA
GetOpenFileNameA
GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegQueryInfoKeyA
RegEnumKeyA
RegQueryValueA
RegSetValueA
RegDeleteKeyA
RegCreateKeyExA
RegCreateKeyA
RegCloseKey
RegEnumKeyExA
RegOpenKeyA
RegQueryValueExA
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA

shell32

DragQueryFileA
DragFinish
SHGetFileInfoA
DragAcceptFiles
SHFileOperationA
ShellExecuteA
SHGetSpecialFolderPathA
ExtractIconA

comctl32

ord17

oledlg

ord8

ole32

StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
OleRun
CoDisconnectObject
CoFreeUnusedLibraries
OleDuplicateData
CreateBindCtx
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
CoGetClassObject
ReadFmtUserTypeStg
StringFromCLSID
CoTreatAsClass
ReleaseStgMedium
CoRegisterMessageFilter
CoRegisterClassObject
CoRevokeClassObject
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
CreateStreamOnHGlobal
OleInitialize
OleUninitialize
CLSIDFromString
CLSIDFromProgID
CoInitialize
CoCreateInstance
CoUninitialize
OleRegGetUserType
ReadClassStg

olepro32

ord253

oleaut32

VariantClear
SysFreeString
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysReAllocStringLen
SysAllocString
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
SysAllocStringByteLen
SysStringByteLen
VarCyFromStr
VarBstrFromCy
VarDateFromStr
VarBstrFromDate
SafeArrayCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SysStringLen
LoadTypeLi
SysAllocStringLen

urlmon

URLOpenStreamA

wininet

InternetGetLastResponseInfoA
GopherFindFirstFileA
InternetFindNextFileA
FtpFindFirstFileA
HttpQueryInfoA
HttpSendRequestExA
HttpEndRequestA
HttpSendRequestA
HttpAddRequestHeadersA
InternetErrorDlg
HttpOpenRequestA
GopherOpenFileA
GopherGetAttributeA
GopherCreateLocatorA
FtpGetFileA
FtpPutFileA
FtpOpenFileA
FtpGetCurrentDirectoryA
FtpSetCurrentDirectoryA
FtpRemoveDirectoryA
FtpCreateDirectoryA
FtpRenameFileA
FtpDeleteFileA
InternetConnectA
InternetQueryDataAvailable
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetGetCookieA
InternetSetCookieA
InternetSetStatusCallback
InternetSetOptionExA
InternetOpenUrlA
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetQueryOptionA
InternetOpenA
InternetCloseHandle

Sections

.text
Size: 432KB - Virtual size: 429KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7.3MB - Virtual size: 7.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b7f85fa4f8142a168f69eef412a795ef

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

urlmon

wininet

Sections

.text Size: 432KB - Virtual size: 429KB

.rdata Size: 92KB - Virtual size: 90KB

.data Size: 20KB - Virtual size: 35KB

.rsrc Size: 7.3MB - Virtual size: 7.3MB

.text
Size: 432KB - Virtual size: 429KB

.rdata
Size: 92KB - Virtual size: 90KB

.data
Size: 20KB - Virtual size: 35KB

.rsrc
Size: 7.3MB - Virtual size: 7.3MB