d246bd90d4113a7f9215a59459bb96b522f25c017b4c33f8c2dcd74a7c804ee1

Sharing

Copy URL Twitter E-mail

General

Target

d246bd90d4113a7f9215a59459bb96b522f25c017b4c33f8c2dcd74a7c804ee1
Size

4.0MB
MD5

fff563a7f75195a27215f06ce6814f1d
SHA1

ab4b1d98d4b8261405bd3fdd6aff6fbfe1d9ff20
SHA256

d246bd90d4113a7f9215a59459bb96b522f25c017b4c33f8c2dcd74a7c804ee1
SHA512

890c8d8b6e779067ac9e0d2438f3805e5f608207e07141e798158e7a8546f3fa1b847221e356c724dd55ec91641d8f3e56836251e8ddf6bf7467e16f66abebb4
SSDEEP

24576:lkgNLpPee4ablv+DKWXZsFYIwreg86Nf:lkQpPeeDbwGYIM8e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d246bd90d4113a7f9215a59459bb96b522f25c017b4c33f8c2dcd74a7c804ee1

Files

d246bd90d4113a7f9215a59459bb96b522f25c017b4c33f8c2dcd74a7c804ee1
.exe windows x86

d2bffbb8c5d1ec8c8b5837dd077daf8d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

ZwReadFile
RtlFreeUnicodeString
RtlAnsiStringToUnicodeString
RtlInitAnsiString
ZwWriteFile
ZwSetInformationFile
RtlInitUnicodeString
ZwCreateFile
ZwQueryInformationFile
RtlUnwind
ZwFsControlFile
ZwDeviceIoControlFile

kernel32

GetACP
LCMapStringA
LCMapStringW
SetHandleCount
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
HeapSize
CompareStringW
SetEnvironmentVariableA
GetDriveTypeA
GetLogicalDrives
GetDiskFreeSpaceA
GetDiskFreeSpaceExA
CopyFileA
FindNextFileA
ReleaseMutex
GetExitCodeThread
TerminateThread
GetTickCount
WaitForMultipleObjects
PeekNamedPipe
ExpandEnvironmentStringsA
SleepEx
FindFirstFileW
FindNextFileW
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
HeapReAlloc
ExitThread
CreateThread
HeapFree
HeapAlloc
RaiseException
GetCommandLineA
GetStartupInfoA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
TerminateProcess
ExitProcess
GetFileType
SetStdHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
SetErrorMode
GetFileAttributesA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
FlushFileBuffers
SetFilePointer
WriteFile
GetFullPathNameW
GetCurrentDirectoryW
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetCurrentDirectoryA
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
SizeofResource
GetLastError
GlobalFlags
InterlockedExchange
FormatMessageA
LocalFree
lstrcpynA
GlobalAlloc
lstrcmpA
GetCurrentThread
CreateEventA
SetEvent
WaitForSingleObject
MulDiv
SetLastError
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
lstrcmpiA
GlobalFindAtomA
lstrcpyA
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
GetCurrentThreadId
GlobalAddAtomA
GlobalDeleteAtom
CreateDirectoryA
SetFileAttributesA
GetCurrentProcessId
GetModuleFileNameA
GetWindowsDirectoryA
GetTempPathA
GetVersionExA
GetModuleHandleA
GetProcAddress
OpenMutexA
CloseHandle
CreateMutexA
AllocConsole
GetStdHandle
WriteConsoleW
Sleep
DeleteFileA
RemoveDirectoryA
GetDriveTypeW
CreateFileW
GetFileInformationByHandle
GetProfileStringA
CompareStringA

user32

GetWindowDC
BeginPaint
EndPaint
GetCursorPos
ValidateRect
DestroyMenu
LoadStringA
GetClassNameA
GetSysColorBrush
ExitWindowsEx
ShowWindow
MoveWindow
IsDialogMessageA
SendDlgItemMessageA
MapWindowPoints
SetFocus
AdjustWindowRectEx
ScreenToClient
IsWindowVisible
GetScrollPos
GetTopWindow
MessageBoxA
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetLastActivePopup
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
IntersectRect
SystemParametersInfoA
GetWindowPlacement
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
DrawStateA
IsWindow
UpdateWindow
GetFocus
IsRectEmpty
RegisterWindowMessageA
GrayStringA
DrawTextA
TabbedTextOutA
GetMessagePos
FrameRect
FillRect
DefDlgProcA
CharNextA
IsWindowUnicode
GetSysColor
LoadImageA
GetIconInfo
CreateIconIndirect
DrawIconEx
CopyRect
InflateRect
DrawFocusRect
ClientToScreen
WindowFromPoint
SetCursor
GetNextDlgTabItem
GetWindowLongA
DestroyIcon
FindWindowA
FindWindowExA
GetDC
ReleaseDC
PostThreadMessageA
SetTimer
RegisterHotKey
UnregisterHotKey
OffsetRect
GetParent
PtInRect
GetSystemMenu
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
TrackPopupMenu
EnableMenuItem
DeleteMenu
AppendMenuA
PostMessageA
GetMessageA
LoadCursorA
IsIconic
GetSystemMetrics
DrawIcon
LoadIconA
InvalidateRect
PeekMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
LoadBitmapA
GetWindowRect
SendMessageA
GetClientRect
SetWindowTextW
SetWindowTextA
EnableWindow
ExcludeUpdateRgn
ShowCaret
HideCaret
UnregisterClassA
GetForegroundWindow

gdi32

SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
GetDeviceCaps
CreatePen
PatBlt
SetBkMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
CreateRectRgn
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetBkColor
GetCurrentObject
RoundRect
CreateFontIndirectA
CreateBitmap
GetPixel
SetPixel
SelectObject
DeleteDC
GetStockObject
DeleteObject
GetTextExtentPoint32A
CreatePatternBrush
BitBlt
CreateCompatibleDC
GetObjectA
CreateCompatibleBitmap
StretchBlt
GetTextExtentPointA
CreateDIBitmap
CreateSolidBrush

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

AdjustTokenPrivileges
RegQueryValueExA
RegOpenKeyExA
StartServiceCtrlDispatcherA
CloseServiceHandle
CreateServiceA
OpenSCManagerA
SetServiceStatus
RegisterServiceCtrlHandlerA
QueryServiceConfigA
OpenServiceA
StartServiceA
ControlService
RegCreateKeyExA
DeleteService
OpenProcessToken
LookupPrivilegeValueA
RegCloseKey
RegDeleteValueA
RegSetValueExA

shell32

ShellExecuteExA
ShellExecuteA
SHGetSpecialFolderPathA

comctl32

ImageList_SetBkColor
ImageList_GetBkColor
ImageList_GetImageInfo
ord17
ImageList_Destroy
ImageList_Create
ImageList_DrawIndirect

ole32

CoInitialize
CoCreateInstance
CoUninitialize

wsock32

closesocket
gethostbyname
recv
send
inet_ntoa
socket
recvfrom
sendto
htonl
listen
__WSAFDIsSet
select
getsockopt
setsockopt
getprotobyname
htons
bind
inet_addr
ntohs
ioctlsocket
accept
connect
getsockname
WSACleanup
WSAStartup
WSASetLastError
getpeername
WSAGetLastError

winmm

timeGetTime

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 560KB - Virtual size: 557KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 140KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

shared
Size: 4KB - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d2bffbb8c5d1ec8c8b5837dd077daf8d

Headers

File Characteristics

Imports

ntdll

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

ole32

wsock32

winmm

iphlpapi

Sections

.text Size: 560KB - Virtual size: 557KB

.rdata Size: 140KB - Virtual size: 138KB

.data Size: 56KB - Virtual size: 107KB

shared Size: 4KB - Virtual size: 1B

.rsrc Size: 3.2MB - Virtual size: 3.2MB

.text
Size: 560KB - Virtual size: 557KB

.rdata
Size: 140KB - Virtual size: 138KB

.data
Size: 56KB - Virtual size: 107KB

shared
Size: 4KB - Virtual size: 1B

.rsrc
Size: 3.2MB - Virtual size: 3.2MB