19405bbcd7971d9f614981e62efc112b0d34d14db082f51ad7dd6a40734898eb

Sharing

Copy URL

Twitter E-mail

General

Target

19405bbcd7971d9f614981e62efc112b0d34d14db082f51ad7dd6a40734898eb
Size

5.9MB
MD5

555d9b45cbea287dada7587dc6c3b74e
SHA1

5af61bf375dc5dd9dece971df5af908e43c295f6
SHA256

19405bbcd7971d9f614981e62efc112b0d34d14db082f51ad7dd6a40734898eb
SHA512

de643ac222258a5e3ed6f17ea31ed27fd7fa2f30cb54918f815908e54d5650b8624345a8431143509bfdc2673e72257c29617bf23a4efe55a1cfdc2b14c0909f
SSDEEP

98304:V5QEMSQfz2I+3azy/0Rzg6WN31K4spP7nbw:up2Iwaz9Rzto31KNpHw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19405bbcd7971d9f614981e62efc112b0d34d14db082f51ad7dd6a40734898eb

Files

19405bbcd7971d9f614981e62efc112b0d34d14db082f51ad7dd6a40734898eb
.exe windows x86

2dd69d188828b27b251ff440a7e2dc5e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
GetSystemTimeAsFileTime
ExitThread
HeapReAlloc
RtlUnwind
RaiseException
SetStdHandle
HeapSize
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapCreate
QueryPerformanceCounter
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
LCMapStringA
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
GetFileType
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
GetCurrentDirectoryA
GetDriveTypeA
GetProcessHeap
SetEnvironmentVariableA
WriteConsoleW
HeapAlloc
HeapFree
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
WritePrivateProfileStringW
SetErrorMode
GlobalFlags
GlobalGetAtomNameW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
TlsGetValue
InterlockedIncrement
GlobalReAlloc
lstrlenA
FindNextFileW
DeleteCriticalSection
CreateEventW
SetEvent
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
LoadLibraryExW
CompareStringA
InterlockedExchange
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
SetEndOfFile
UnlockFile
LockFile
GetThreadLocale
GetFileTime
GetFileAttributesExW
FindResourceExW
GetSystemDirectoryA
lstrcpynW
EnumResourceTypesW
EnumResourceNamesW
GetExitCodeThread
ResetEvent
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
lstrcmpW
GetVersionExA
InterlockedDecrement
GlobalFree
GlobalSize
GlobalAlloc
FormatMessageW
lstrlenW
MulDiv
CreateRemoteThread
VirtualFreeEx
WriteProcessMemory
VirtualAllocEx
UnmapViewOfFile
CreateFileA
MapViewOfFileEx
CreateFileMappingW
FlushFileBuffers
DuplicateHandle
GetTempFileNameW
GlobalUnlock
GlobalLock
LocalAlloc
lstrcmpiW
GetTimeFormatW
GetDateFormatW
SetUnhandledExceptionFilter
GetVolumePathNamesForVolumeNameW
FindVolumeClose
FindNextVolumeW
QueryDosDeviceW
FindFirstVolumeW
MoveFileExW
RemoveDirectoryW
GetLogicalDrives
VirtualProtect
LoadLibraryA
ResumeThread
GetCurrentThreadId
GetSystemInfo
OpenThread
EnterCriticalSection
VirtualAlloc
SetThreadPriority
LeaveCriticalSection
InitializeCriticalSection
VirtualFree
VirtualQuery
SetFileTime
LocalFileTimeToFileTime
GetCurrentDirectoryW
SystemTimeToFileTime
SetFilePointer
CopyFileW
GetTempPathW
FreeLibrary
MoveFileW
CreateDirectoryW
GetEnvironmentVariableW
ExpandEnvironmentStringsW
GetWindowsDirectoryW
GetLongPathNameW
WideCharToMultiByte
LocalFree
GetCurrentThread
FreeResource
WriteFile
SetFileAttributesW
GetFileAttributesW
DeviceIoControl
SizeofResource
GetSystemDirectoryW
GetDriveTypeW
ExitProcess
DeleteFileW
GetVersionExW
GetCurrentProcess
GetTickCount
GetVersion
GetModuleHandleA
GetUserDefaultUILanguage
GetModuleFileNameW
GetProcessTimes
ReadProcessMemory
GetFileSizeEx
ReadFile
GetFileSize
IsBadStringPtrA
IsBadReadPtr
CreateMutexW
CreateFileW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetCurrentProcessId
OpenProcess
Process32NextW
Process32FirstW
MultiByteToWideChar
CreateThread
TerminateThread
WaitForSingleObject
Module32NextW
Module32FirstW
CloseHandle
CreateToolhelp32Snapshot
GetProcAddress
GetModuleHandleW
LoadLibraryW
GetLastError
SetLastError
Sleep
FindResourceW
LoadResource
LockResource
GetStringTypeA

user32

EndDialog
GetMenuState
GetMenuStringW
InsertMenuW
GetSubMenu
WindowFromPoint
GetWindowDC
GetDesktopWindow
RegisterWindowMessageW
GetDlgItem
SetWindowTextW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
wsprintfA
GetNextDlgTabItem
DispatchMessageW
GetMessageW
SetCapture
ClipCursor
GetCapture
GetScrollPos
SetFocus
SetScrollPos
GetWindowTextLengthW
SendDlgItemMessageW
SetDlgItemTextW
InflateRect
DrawFocusRect
IsWindowEnabled
CreateDialogIndirectParamW
SetActiveWindow
GetActiveWindow
MapVirtualKeyW
GetDCEx
PostThreadMessageW
SetParent
UnionRect
LockWindowUpdate
SendMessageW
GetWindowRect
GetClientRect
InvalidateRect
UpdateWindow
LoadIconW
GetWindow
CreatePopupMenu
IsDialogMessageW
ReleaseCapture
MoveWindow
AppendMenuW
GetSystemMetrics
SetMenuItemBitmaps
EnableMenuItem
GetCursorPos
DestroyIcon
GetMenuItemCount
GetMenuItemID
EnableWindow
MessageBoxW
LoadAcceleratorsW
IsWindow
SetMenuDefaultItem
TranslateAcceleratorW
GetDlgCtrlID
ClientToScreen
ScreenToClient
GetWindowLongW
PtInRect
RedrawWindow
LoadImageW
wsprintfW
CreateCaret
ShowCaret
GetClassNameW
GetWindowThreadProcessId
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
BeginPaint
EndPaint
GetWindowPlacement
SystemParametersInfoA
IntersectRect
OffsetRect
GetMenu
CallWindowProcW
DefWindowProcW
SetScrollInfo
GetScrollInfo
DeferWindowPos
EqualRect
AdjustWindowRectEx
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
ShowScrollBar
SetMenu
GetKeyState
TrackPopupMenu
MapWindowPoints
PeekMessageW
GetMessagePos
GetMessageTime
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
GetLastActivePopup
GetForegroundWindow
RemovePropW
GetPropW
EnumWindows
SetWindowPos
GetWindowTextW
IsWindowVisible
ShowWindow
DestroyWindow
PostMessageW
CheckMenuItem
SetCursor
SetPropW
GetClassLongW
CallNextHookEx
SetWindowsHookExW
IsChild
WinHelpW
SendDlgItemMessageA
GetMenuItemInfoW
DestroyMenu
SystemParametersInfoW
ModifyMenuW
GetMenuCheckMarkDimensions
LoadMenuW
CharUpperW
PostQuitMessage
MapDialogRect
SetWindowContextHelpId
ValidateRect
TranslateMessage
ShowOwnedPopups
GetSysColorBrush
UnregisterClassW
SetRectEmpty
WaitMessage
DeleteMenu
CharNextW
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
BringWindowToTop
InsertMenuItemW
LoadCursorW
GetSystemMenu
LoadBitmapW
IsIconic
DrawIcon
ReuseDDElParam
UnpackDDElParam
SetTimer
KillTimer
TranslateMDISysAccel
DrawMenuBar
RegisterClipboardFormatW
DefFrameProcW
LoadStringA
MessageBoxA
GetAsyncKeyState
GetTabbedTextExtentA
GetKeyboardLayoutList
GetKeyboardState
ToUnicodeEx
SetCursorPos
GetMenuDefaultItem
GetDoubleClickTime
SendMessageTimeoutW
IsWindowUnicode
GetWindowLongA
SetWindowLongA
IsMenu
GetWindowRgn
DrawFrameControl
DrawIconEx
CreateIconIndirect
CopyIcon
SetWindowRgn
GetCursor
GetIconInfo
DrawStateW
HideCaret
LookupIconIdFromDirectoryEx
CreateIconFromResourceEx
DrawEdge
IsRectEmpty
CopyRect
FillRect
SetRect
ReleaseDC
GetDC
GetFocus
GetSysColor
GetParent
SetWindowLongW
UnhookWindowsHookEx
SetForegroundWindow
UnregisterHotKey
RegisterHotKey
SetClassLongW
GetTabbedTextExtentW
EnableScrollBar
SetCaretPos
DestroyCaret
IsClipboardFormatAvailable
DragDetect
GetClipboardData
InvertRect

gdi32

GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
PolyBezierTo
ExtSelectClipRgn
GetViewportExtEx
CreatePatternBrush
CreateBitmap
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
GetTextMetricsW
GetCharWidthW
CreateFontW
SelectClipRgn
GetTextColor
GetRgnBox
DeleteDC
DeleteObject
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetTextColor
SetStretchBltMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
PatBlt
CreateRectRgnIndirect
GetDeviceCaps
SetROP2
SelectObject
CreateFontIndirectW
CreateSolidBrush
GetStockObject
SetBoundsRect
Rectangle
Polygon
EnumFontFamiliesExW
GetBitmapBits
ExtCreateRegion
GetCurrentObject
StretchBlt
CreateDIBSection
GetDIBits
PtInRegion
Polyline
GetViewportOrgEx
GetTextAlign
GetTextExtentPoint32A
Ellipse
StrokePath
FillPath
StrokeAndFillPath
EndPath
CloseFigure
BeginPath
CreatePolygonRgn
FillRgn
FrameRgn
SetPixelV
RoundRect
GetWindowOrgEx
GetTextExtentPoint32W
CreateCompatibleBitmap
CreatePen
CreateRectRgn
BitBlt
GetObjectW
CreateCompatibleDC
GetBkColor
StretchDIBits
GetClipRgn
SetPixel

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegEnumValueW
OpenServiceW
QueryServiceStatus
StartServiceW
ControlService
CloseServiceHandle
LookupPrivilegeNameW
LookupPrivilegeDisplayNameW
LookupPrivilegeValueW
RegCreateKeyExW
RegQueryValueW
RegOpenKeyW
RegQueryValueExW
RegRestoreKeyW
DeleteService
EnumServicesStatusW
OpenSCManagerW
RegEnumKeyW
RegQueryInfoKeyW
RegOpenKeyExW
ConvertSidToStringSidW
GetTokenInformation
OpenThreadToken
RegDeleteKeyW
RegCloseKey
RegSetValueExW
RegCreateKeyW
AdjustTokenPrivileges
OpenProcessToken

shell32

SHAppBarMessage
DragQueryFileW
DragFinish
ShellExecuteExW
SHGetPathFromIDListW
SHBrowseForFolderW
SHFileOperationW
SHGetSpecialFolderPathW
ShellExecuteW
SHGetFileInfoW

comctl32

InitCommonControlsEx
_TrackMouseEvent
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_DrawEx
ImageList_Destroy

shlwapi

PathFindFileNameW
PathIsUNCW
PathStripToRootW
PathFindExtensionW
PathRemoveFileSpecW
PathIsDirectoryW
PathFileExistsW
UrlUnescapeW

oledlg

OleUIBusyW
OleUIAddVerbMenuW

ole32

OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
OleFlushClipboard
StgOpenStorageOnILockBytes
CoGetClassObject
CoRegisterMessageFilter
CoDisconnectObject
CLSIDFromString
CoInitializeEx
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CoCreateInstance
CoInitialize
CLSIDFromProgID
StgCreateDocfileOnILockBytes

oleaut32

OleLoadPicturePath
SysAllocString
OleCreateFontIndirect
SafeArrayDestroy
VariantCopy
LoadTypeLi
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysStringByteLen
SysAllocStringByteLen
SysFreeString
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime

urlmon

URLDownloadToFileW

dbghelp

MiniDumpWriteDump
ImageDirectoryEntryToData

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

odbc32

ord145
ord150
ord51
ord141
ord110
ord61
ord3
ord16
ord2
ord1
ord15
ord9
ord14
ord111
ord18
ord13
ord5

wintrust

CryptCATAdminAcquireContext
CryptCATAdminCalcHashFromFileHandle
CryptCATAdminEnumCatalogFromHash
WinVerifyTrust
CryptCATCatalogInfoFromContext
CryptCATAdminReleaseContext
CryptCATAdminReleaseCatalogContext

netapi32

NetUserGetInfo
NetUserEnum
NetUserDel
NetApiBufferFree

ws2_32

inet_ntoa

wininet

InternetOpenUrlW
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetOpenW
InternetGetLastResponseInfoW
InternetCloseHandle
InternetQueryDataAvailable
InternetQueryOptionW
InternetCanonicalizeUrlW
InternetCrackUrlW

winmm

PlaySoundW

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 880KB - Virtual size: 879KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 336KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2dd69d188828b27b251ff440a7e2dc5e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

urlmon

dbghelp

version

odbc32

wintrust

netapi32

ws2_32

wininet

winmm

Sections

.text Size: 3.0MB - Virtual size: 3.0MB

.rdata Size: 880KB - Virtual size: 879KB

.data Size: 336KB - Virtual size: 362KB

.rsrc Size: 1.7MB - Virtual size: 1.7MB

.text
Size: 3.0MB - Virtual size: 3.0MB

.rdata
Size: 880KB - Virtual size: 879KB

.data
Size: 336KB - Virtual size: 362KB

.rsrc
Size: 1.7MB - Virtual size: 1.7MB