651a19c696583b0600cb2b3bf50fea74e330f393bbd5337a5228f9f67de76037

Sharing

Copy URL Twitter E-mail

General

Target

651a19c696583b0600cb2b3bf50fea74e330f393bbd5337a5228f9f67de76037
Size

786KB
MD5

0ba63ea2a5019c5d468145d1e8586a82
SHA1

42e41c4bab21d0e0f880721b26a546ef563dac9f
SHA256

651a19c696583b0600cb2b3bf50fea74e330f393bbd5337a5228f9f67de76037
SHA512

77be8f2860fabae237f8f1ffca94d1fd29185d6326eb0ce31b7fcf0de4bc743780644bfc8cb740339b80f55a32525996540b3afc00b1540070be0feaabbb871f
SSDEEP

12288:IKoOaYXL2+RuS09zfVGgpOB5cxRtgJr5/BFmGElw2XVkGkuC7rXt:Ps7OuS09pGgpO8tgJNRETXVi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
651a19c696583b0600cb2b3bf50fea74e330f393bbd5337a5228f9f67de76037

Files

651a19c696583b0600cb2b3bf50fea74e330f393bbd5337a5228f9f67de76037
.exe windows x86

7979c00735e32b015214328a35b225e0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFlags
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
InterlockedIncrement
GetCPInfo
GetOEMCP
GetThreadLocale
FileTimeToSystemTime
GetModuleHandleW
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
WaitForSingleObject
GetVolumeInformationA
GetFullPathNameA
SetErrorMode
GetTickCount
FileTimeToLocalFileTime
GetFileSizeEx
GetFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
ExitProcess
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
RtlUnwind
RaiseException
HeapReAlloc
VirtualProtect
VirtualAlloc
VirtualQuery
ExitThread
CreateThread
HeapSize
GetACP
IsValidCodePage
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
HeapCreate
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
SleepEx
VerifyVersionInfoA
VerSetConditionMask
GetSystemDirectoryA
PeekNamedPipe
WaitForMultipleObjects
ExpandEnvironmentStringsA
WritePrivateProfileStringA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
InterlockedExchange
lstrcmpA
InterlockedDecrement
GetModuleFileNameW
GetCurrentProcessId
GetModuleFileNameA
GlobalAlloc
FormatMessageA
LocalFree
MulDiv
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
MultiByteToWideChar
FreeLibrary
lstrcmpW
GetVersionExA
SetLastError
GetProcAddress
GetModuleHandleA
LoadLibraryA
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
GetFileInformationByHandle
GetDriveTypeA
SetFileTime
WriteFile
CreateDirectoryA
GetFileAttributesA
LocalFileTimeToFileTime
lstrcatA
lstrlenA
lstrcpyA
GetCurrentDirectoryA
SystemTimeToFileTime
ReadFile
SetFilePointer
Process32Next
Module32First
Process32First
CreateToolhelp32Snapshot
GetCurrentProcess
GetFileSize
DeleteFileA
FindClose
FindFirstFileA
GetSystemInfo
UnmapViewOfFile
MapViewOfFile
CloseHandle
CreateFileMappingA
GetLastError
CreateFileA
FindResourceA
LoadResource
LockResource
SizeofResource
DuplicateHandle
WideCharToMultiByte

user32

MessageBeep
CharUpperA
RegisterClipboardFormatA
PostThreadMessageA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
TrackPopupMenu
GetKeyState
SetMenu
SetForegroundWindow
IsWindowVisible
GetNextDlgGroupItem
PostMessageA
GetMenuItemID
MessageBoxA
CreateWindowExA
GetClassInfoExA
RegisterClassA
GetSysColor
AdjustWindowRectEx
EqualRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
PtInRect
GetMenu
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
ReleaseDC
CopyRect
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
LoadCursorA
GetSysColorBrush
EndPaint
WinHelpA
BeginPaint
EnableWindow
SendMessageA
ClientToScreen
LoadMenuA
GetWindowDC
GrayStringA
InvalidateRgn
SetRect
IsRectEmpty
CopyAcceleratorTableA
CharNextA
UpdateWindow
ReleaseCapture
wsprintfA
EnableMenuItem
GetDC
CreateIconFromResourceEx
MoveWindow
ScreenToClient
GetWindowRect
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
LoadIconA
GetSubMenu
SetCapture
UnregisterClassA
GetClassInfoA
InvalidateRect
DrawTextExA
DrawTextA
TabbedTextOutA
SetCursor
GetMessageA
TranslateMessage
GetCursorPos
ValidateRect
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
DestroyMenu
GetWindowThreadProcessId
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
GetMenuState
CheckMenuItem
IsChild
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
SendDlgItemMessageA
GetMenuItemCount
ShowWindow

gdi32

SetMapMode
SetStretchBltMode
RestoreDC
SaveDC
DeleteObject
CreateCompatibleDC
CreateCompatibleBitmap
StretchDIBits
ExtTextOutA
GetDeviceCaps
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateRectRgnIndirect
GetRgnBox
GetTextColor
GetBkColor
GetMapMode
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
GetStockObject

advapi32

RegEnumKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
CryptEncrypt
CryptDestroyKey
RegDeleteKeyA
AdjustTokenPrivileges
OpenProcessToken
CryptImportKey
RegOpenKeyA
RegQueryValueA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptGetHashParam

shell32

ShellExecuteA

comctl32

InitCommonControlsEx

shlwapi

PathFindExtensionA
PathFindFileNameA
PathRemoveFileSpecW
PathStripToRootA
PathIsUNCA

oledlg

ord8

oleacc

CreateStdAccessibleObject
LresultFromObject

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

comdlg32

GetFileTitleA

ole32

CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoUninitialize
CoCreateInstance
CoInitializeEx
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

VariantClear
SysFreeString
SysAllocStringByteLen
VariantCopy
VariantChangeType
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysAllocString
VariantInit
SysAllocStringLen
SysStringLen

ws2_32

ntohl
htonl
gethostname
ioctlsocket
listen
accept
recvfrom
sendto
getaddrinfo
freeaddrinfo
connect
socket
closesocket
getpeername
getsockopt
WSACleanup
WSAStartup
WSASetLastError
__WSAFDIsSet
WSAGetLastError
select
recv
send
WSAIoctl
setsockopt
getsockname
ntohs
bind
htons

crypt32

CertFreeCertificateContext

wldap32

ord143
ord60
ord50
ord26
ord30
ord200
ord32
ord35
ord79
ord33
ord301
ord27
ord41
ord46
ord22
ord211

Sections

.text
Size: 545KB - Virtual size: 545KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7979c00735e32b015214328a35b225e0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

comctl32

shlwapi

oledlg

oleacc

winspool.drv

comdlg32

ole32

oleaut32

ws2_32

crypt32

wldap32

Sections

.text Size: 545KB - Virtual size: 545KB

.rdata Size: 123KB - Virtual size: 122KB

.data Size: 12KB - Virtual size: 27KB

.rsrc Size: 104KB - Virtual size: 103KB

.text
Size: 545KB - Virtual size: 545KB

.rdata
Size: 123KB - Virtual size: 122KB

.data
Size: 12KB - Virtual size: 27KB

.rsrc
Size: 104KB - Virtual size: 103KB