6b104a433bebe5017756f02afdd1a77c61299c8160f5b2b4242a339588e6dbf1

Sharing

Copy URL Twitter E-mail

General

Target

6b104a433bebe5017756f02afdd1a77c61299c8160f5b2b4242a339588e6dbf1
Size

308KB
MD5

0735bca1a74f4d35703680fdf792561e
SHA1

0f3f0adb5a858314f1a68349f057008e4ce34050
SHA256

6b104a433bebe5017756f02afdd1a77c61299c8160f5b2b4242a339588e6dbf1
SHA512

3d482083499f117f76e4706453be37a23fd5b8037ad4dcf6d1bd07335ac603c4f316563f3b8b54bb2e83fafc32c0dcb82c569e38140c302350f6b208c3cf99d8
SSDEEP

6144:KxRVOwy30LIaNu88RpjornAkmJUE1Hzoqn8X7E:GVfy3kIIuPorAkcUE1a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6b104a433bebe5017756f02afdd1a77c61299c8160f5b2b4242a339588e6dbf1

Files

6b104a433bebe5017756f02afdd1a77c61299c8160f5b2b4242a339588e6dbf1
.exe windows x86

fb696e7b7dfdae28edb5258b2ea7a174

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
HeapFree
GetCommandLineA
HeapAlloc
RaiseException
HeapReAlloc
ExitProcess
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
GetACP
GetSystemTime
HeapCreate
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GlobalFlags
LocalAlloc
InterlockedIncrement
SetStdHandle
CompareStringA
CompareStringW
GetStartupInfoA
GetLocalTime
GetTimeZoneInformation
RtlUnwind
FileTimeToLocalFileTime
GetTickCount
SetErrorMode
FileTimeToSystemTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetCPInfo
GetFileSize
GetOEMCP
LocalReAlloc
GetProcessVersion
TlsGetValue
GlobalReAlloc
TlsSetValue
EnterCriticalSection
GlobalHandle
LeaveCriticalSection
TlsFree
InitializeCriticalSection
DeleteCriticalSection
TlsAlloc
VirtualFree
SizeofResource
CloseHandle
GetModuleFileNameA
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
GetCurrentDirectoryA
Sleep
WideCharToMultiByte
FormatMessageA
LocalFree
GetStringTypeW
GetShortPathNameA
GetProfileStringA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
MulDiv
SetLastError
MultiByteToWideChar
GetLastError
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFullPathNameA
GetTempFileNameA
lstrcpynA
GetFileAttributesA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GetProcAddress
InterlockedDecrement
lstrlenA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GlobalAddAtomA
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
LoadLibraryA

user32

DeleteMenu
GetMenuStringA
GetSysColorBrush
LoadStringA
DestroyIcon
CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatA
PostThreadMessageA
GetClassNameA
CharUpperA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
LoadMenuA
DestroyMenu
GetDesktopWindow
ReleaseCapture
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
MapWindowPoints
GetSysColor
AdjustWindowRectEx
ScreenToClient
DeferWindowPos
GetClientRect
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
InsertMenuA
GetSubMenu
GetMenuItemID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
SetForegroundWindow
RegisterWindowMessageA
OffsetRect
IsIconic
GetWindowPlacement
GetWindowRect
UnhookWindowsHookEx
MapDialogRect
GetWindow
SetWindowContextHelpId
wsprintfA
SetFocus
ShowWindow
SetWindowPos
MoveWindow
SetWindowLongA
GetDlgCtrlID
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetLastActivePopup
MessageBoxA
LoadCursorA
GetMenu
GetMenuItemCount
SystemParametersInfoA
SetCursor
ShowOwnedPopups
PostQuitMessage
PostMessageA
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetParent
GetWindowLongA
GetDlgItem
IsWindowEnabled
IntersectRect
IsRectEmpty
GetSystemMetrics
GetDC
ReleaseDC
SetTimer
UnionRect
KillTimer
LoadBitmapA
InflateRect
InvalidateRect
PtInRect
EqualRect
EnableWindow
UpdateWindow
LoadIconA
SendMessageA
GetForegroundWindow
GetMessagePos
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode

gdi32

DeleteObject
GetDeviceCaps
GetViewportExtEx
SetTextAlign
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
PatBlt
CreateDIBitmap
GetTextExtentPointA
IntersectClipRect
ScaleWindowExtEx
SetWindowExtEx
SetViewportExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
SetMapMode
SetViewportOrgEx
SetBkMode
GetStockObject
SelectObject
SaveDC
RestoreDC
GetObjectA
SetBkColor
DeleteDC
GetClipBox
SetTextColor
RoundRect
CreateCompatibleDC
CreateBitmap
CreateCompatibleBitmap
BitBlt

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryValueExA
RegQueryValueA
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
GetFileSecurityA
RegSetValueExA
RegDeleteValueA
SetFileSecurityA
RegCreateKeyA
RegSetValueA

shell32

ExtractIconA
SHGetFileInfoA
DragFinish
DragQueryFileA

comctl32

ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoTaskMemFree
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoTaskMemAlloc

olepro32

ord253

oleaut32

SysFreeString
SysStringLen
SysAllocStringByteLen
VariantChangeType
SysAllocString
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen

Sections

.text
Size: 220KB - Virtual size: 219KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fb696e7b7dfdae28edb5258b2ea7a174

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 220KB - Virtual size: 219KB

.rdata Size: 48KB - Virtual size: 46KB

.data Size: 16KB - Virtual size: 32KB

.rsrc Size: 20KB - Virtual size: 17KB

.text
Size: 220KB - Virtual size: 219KB

.rdata
Size: 48KB - Virtual size: 46KB

.data
Size: 16KB - Virtual size: 32KB

.rsrc
Size: 20KB - Virtual size: 17KB