89e645ecc44dd9aa110c9afe318228345e220f47c79cfdd1aba1793651125515

Sharing

Copy URL Twitter E-mail

General

Target

89e645ecc44dd9aa110c9afe318228345e220f47c79cfdd1aba1793651125515
Size

2.6MB
MD5

1f97133bbe218547df0ff2e942836346
SHA1

759e96d26b5b47057fcde0c91216f1bb30d49eb0
SHA256

89e645ecc44dd9aa110c9afe318228345e220f47c79cfdd1aba1793651125515
SHA512

720fd56ed628264dc629defd7ba7ab0712b90a1ed3c7b1c5a6df3c4756364a1b35a999e6aec6bc2e08872a8c1b2f1adfdb844d3e920d7fd214b03003a6583d42
SSDEEP

49152:hEQa53nPYHudkYorQWL5wrKtY69lCXRuBnXN6oQ:eQaSHu5ofcKtY+eRuxN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89e645ecc44dd9aa110c9afe318228345e220f47c79cfdd1aba1793651125515

Files

89e645ecc44dd9aa110c9afe318228345e220f47c79cfdd1aba1793651125515
.exe windows x86

3ddede229b99a0f4640c65ae28e126af

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MapViewOfFile
FileTimeToLocalFileTime
OpenEventA
CloseHandle
CreateFileA
UnmapViewOfFile
CreateFileMappingA
WriteFile
Sleep
MultiByteToWideChar
GetTempPathA
CreateDirectoryA
RemoveDirectoryA
SetLastError
GetLastError
GlobalGetAtomNameA
GetAtomNameA
GetModuleFileNameA
lstrlenA
WideCharToMultiByte
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ActivateActCtx
DeactivateActCtx
ReleaseActCtx
GetModuleFileNameW
InterlockedDecrement
FreeLibrary
FindResourceW
SizeofResource
LockResource
LoadResource
LocalFree
LocalAlloc
TlsAlloc
GlobalFree
GlobalUnlock
GlobalHandle
TlsFree
GlobalLock
GlobalReAlloc
GlobalAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GetCurrentProcessId
WaitForSingleObject
SetEvent
GetCurrentThreadId
GetProcAddress
LoadLibraryA
GetModuleHandleA
MulDiv
FormatMessageA
GlobalSize
CopyFileA
lstrlenW
lstrcmpA
FreeResource
FindResourceA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpW
GetVersionExA
LoadLibraryW
CompareStringA
SetThreadPriority
ResumeThread
VirtualProtect
GetProfileIntA
GlobalFlags
InterlockedIncrement
GetModuleHandleW
FileTimeToSystemTime
GetACP
GetCPInfo
GetOEMCP
GetUserDefaultUILanguage
GetLocaleInfoA
GetCurrentThread
InterlockedExchange
lstrcpyA
FindResourceExW
GetHandleInformation
DuplicateHandle
GetCurrentProcess
ReadFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
lstrcmpiA
GetWindowsDirectoryA
GetNumberFormatA
GetCurrentDirectoryA
GetTempFileNameA
GetFileAttributesA
GetFileSizeEx
GetFileTime
GetFileAttributesExA
DeleteFileA
GetTickCount
SearchPathA
InitializeCriticalSectionAndSpinCount
GetCommandLineA
HeapSetInformation
HeapValidate
IsBadReadPtr
RtlUnwind
DecodePointer
EncodePointer
RaiseException
CreateThread
ExitThread
VirtualAlloc
GetSystemInfo
VirtualQuery
ExitProcess
GetSystemTimeAsFileTime
GetStdHandle
OutputDebugStringA
WriteConsoleW
GetFileType
OutputDebugStringW
SetStdHandle
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoW
HeapCreate
HeapAlloc
HeapReAlloc
HeapSize
HeapQueryInformation
HeapFree
IsValidCodePage
IsProcessorFeaturePresent
LCMapStringW
GetStringTypeW
CompareStringW
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
CreateFileW
SetEnvironmentVariableA

user32

MonitorFromPoint
MapVirtualKeyExA
IsCharLowerA
SetClassLongA
SetCursorPos
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
CopyAcceleratorTableA
CreateAcceleratorTableA
DestroyAcceleratorTable
LoadAcceleratorsW
DrawIconEx
CopyImage
GetIconInfo
MessageBeep
CharUpperA
SetLayeredWindowAttributes
EnumDisplayMonitors
RealChildWindowFromPoint
SystemParametersInfoA
MapVirtualKeyA
GetKeyNameTextA
GetClipboardFormatNameA
LoadImageA
DestroyIcon
UnpackDDElParam
ReuseDDElParam
DestroyMenu
TranslateAcceleratorA
LoadAcceleratorsA
ReleaseCapture
SetCursor
SetRectEmpty
GetSystemMetrics
GetAsyncKeyState
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
CheckDlgButton
LoadCursorW
LoadCursorA
PostThreadMessageA
NotifyWinEvent
GetForegroundWindow
SetForegroundWindow
HideCaret
OpenClipboard
WindowFromPoint
SetParent
ShowScrollBar
GetNextDlgTabItem
GetNextDlgGroupItem
SetCapture
KillTimer
SetTimer
EnableScrollBar
RedrawWindow
LockWindowUpdate
ShowOwnedPopups
IsWindowVisible
UpdateLayeredWindow
InvalidateRect
GetUpdateRect
UpdateWindow
GetMessageA
GetWindowRgn
SetWindowRgn
IsZoomed
IsIconic
GetSystemMenu
DrawMenuBar
GetMenuCheckMarkDimensions
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
LoadIconW
LoadIconA
SendDlgItemMessageA
MonitorFromWindow
GetMonitorInfoA
GetClientRect
MapWindowPoints
GetFocus
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetWindowRect
GetScrollInfo
SetScrollInfo
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetWindow
GetCapture
WinHelpA
TrackPopupMenu
SetWindowPlacement
GetWindowPlacement
GetWindowTextLengthA
GetDlgCtrlID
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
SetMenu
ValidateRect
SetWindowsHookExA
GetCursorPos
CallNextHookEx
GetMenu
GetMessageTime
GetMenuItemCount
GetMenuItemID
GetMenuDefaultItem
GetMessagePos
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
EndDialog
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetSysColor
EndPaint
BeginPaint
GetWindowDC
GetClassNameA
GetParent
SendMessageA
GetWindowTextA
EnumChildWindows
wsprintfA
EnumWindows
PostQuitMessage
PeekMessageA
UnhookWindowsHookEx
MapDialogRect
IsWindow
PostMessageA
TabbedTextOutA
GetWindowThreadProcessId
EnableWindow
ReleaseDC
GetDC
ClientToScreen
ScreenToClient
LoadMenuW
LoadMenuA
IsWindowEnabled
GetLastActivePopup
GetWindowLongA
MessageBoxA
DispatchMessageA
TranslateMessage
SubtractRect
UnionRect
IntersectRect
InflateRect
SetRect
GetMenuState
GetMenuStringA
GetMenuItemInfoA
GetSubMenu
InsertMenuA
InsertMenuItemA
ModifyMenuA
RemoveMenu
SetMenuItemBitmaps
GetKeyState
GetSysColorBrush
LoadBitmapW
FillRect
FrameRect
InvertRect
DrawIcon
DrawStateA
DrawEdge
DrawFrameControl
DrawFocusRect
DrawTextA
DrawTextExA
GrayStringA
CreateMenu
CreatePopupMenu
IsMenu
DeleteMenu
AppendMenuA
CheckMenuItem
EnableMenuItem
SetMenuDefaultItem
DestroyCursor
GetDoubleClickTime
IsClipboardFormatAvailable
DefMDIChildProcA
TranslateMDISysAccel
DefFrameProcA
CharUpperBuffA
IsRectEmpty
CopyIcon
PtInRect
RegisterClipboardFormatA
EmptyClipboard
CloseClipboard
SetClipboardData
LoadImageW
WaitMessage
BringWindowToTop
OffsetRect

gdi32

SetDIBColorTable
CreateDIBSection
GetSystemPaletteEntries
EnumFontFamiliesExA
CreateDIBitmap
GetTextCharsetInfo
EnumFontFamiliesA
CopyMetaFileA
ExtSelectClipRgn
DeleteObject
SetLayout
GetLayout
SetTextAlign
LineTo
MoveToEx
IntersectClipRect
ExcludeClipRect
SelectClipRgn
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
SelectPalette
RestoreDC
SaveDC
DeleteDC
SetPixelV
GetBoundsRect
Escape
GetTextMetricsA
GetTextFaceA
GetTextExtentPoint32A
TextOutA
ExtFloodFill
SetPixel
GetPixel
StretchBlt
BitBlt
PatBlt
Rectangle
Polygon
Ellipse
Polyline
RectVisible
PtVisible
FrameRgn
FillRgn
LPtoDP
DPtoLP
GetWindowExtEx
GetWindowOrgEx
GetViewportExtEx
GetViewportOrgEx
GetTextColor
GetBkColor
RealizePalette
SelectObject
GetDeviceCaps
CreateCompatibleDC
CreateDCA
PtInRegion
GetRgnBox
OffsetRgn
CombineRgn
SetRectRgn
CreateRoundRectRgn
CreatePolygonRgn
CreateEllipticRgn
CreateRectRgnIndirect
CreateRectRgn
GetNearestPaletteIndex
SetPaletteEntries
GetPaletteEntries
CreatePalette
CreateCompatibleBitmap
CreateBitmap
CreateFontIndirectA
CreatePatternBrush
CreateHatchBrush
CreateSolidBrush
CreatePen
GetObjectType
GetStockObject
GetObjectA
ExtTextOutA

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

OpenThreadToken
RevertToSelf
SetThreadToken
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegSetValueExA
RegEnumKeyExA
RegDeleteValueA

shell32

SHGetSpecialFolderPathA
DragFinish
DragQueryFileA
SHAppBarMessage
SHBrowseForFolderA
ShellExecuteA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHGetFileInfoA

comctl32

ImageList_GetIconSize

shlwapi

PathFindFileNameA
PathRemoveFileSpecW
PathIsUNCA
PathFindExtensionA
PathStripToRootA

ole32

OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
DoDragDrop
CreateStreamOnHGlobal
OleGetClipboard
CoInitialize
CoCreateGuid
CoUninitialize
CoInitializeEx
ReleaseStgMedium
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CoTaskMemAlloc
StringFromCLSID
CoTaskMemFree
OleDuplicateData
CoCreateInstance

oleaut32

SysStringLen
VarBstrFromDate
SysAllocString
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocStringLen
VariantChangeType
VariantInit
VariantClear
SysFreeString

wininet

InternetOpenUrlA
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
InternetOpenA

oleacc

LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow

gdiplus

GdipCreateBitmapFromStream
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipAlloc
GdipCloneImage
GdipFree
GdipDisposeImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipDeleteGraphics
GdipCreateFromHDC
GdiplusShutdown
GdipCreateBitmapFromStreamICM

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 349KB - Virtual size: 349KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 218KB - Virtual size: 218KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3ddede229b99a0f4640c65ae28e126af

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

wininet

oleacc

gdiplus

imm32

winmm

Sections

.text Size: 2.1MB - Virtual size: 2.1MB

.rdata Size: 349KB - Virtual size: 349KB

.data Size: 21KB - Virtual size: 51KB

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 218KB - Virtual size: 218KB

.text
Size: 2.1MB - Virtual size: 2.1MB

.rdata
Size: 349KB - Virtual size: 349KB

.data
Size: 21KB - Virtual size: 51KB

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 218KB - Virtual size: 218KB