402c8db339eed94ea724c832de2c2b1d92c76f7efee6a46792b8969b1c75892d

Sharing

Copy URL Twitter E-mail

General

Target

402c8db339eed94ea724c832de2c2b1d92c76f7efee6a46792b8969b1c75892d
Size

3.2MB
MD5

9251c18ff604a2f8575ab72d7ab74c30
SHA1

e3bdfd764e6aec79748ad7222a8aedd743135a30
SHA256

402c8db339eed94ea724c832de2c2b1d92c76f7efee6a46792b8969b1c75892d
SHA512

3c8315b28d7232969f8c6558086eb575495dd55c66749ea0794c12d2394834500a884e3ed49fd918ecdeb98bea49971a229b9e36e19db3b10d9ea8a28768ea0f
SSDEEP

98304:xvvjfiwCk0IM2SrH9Lmkk45jawCqD59yoj9ghi1RebMIg9Cbk/V8:xvv7iwMsX7qD59yojDIg9Cbk/V8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
402c8db339eed94ea724c832de2c2b1d92c76f7efee6a46792b8969b1c75892d

Files

402c8db339eed94ea724c832de2c2b1d92c76f7efee6a46792b8969b1c75892d
.exe windows x86

b3268fd68f2f3b36f9f67d26aadeb88f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringW
WriteConsoleW
GetEnvironmentStringsW
QueryPerformanceCounter
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetStdHandle
HeapCreate
CreateFileW
SetHandleCount
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetTimeZoneInformation
IsProcessorFeaturePresent
LCMapStringW
IsValidCodePage
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
HeapSize
HeapQueryInformation
ExitThread
GetFileType
SetStdHandle
HeapReAlloc
VirtualQuery
VirtualAlloc
RaiseException
RtlUnwind
HeapFree
GetStartupInfoW
HeapSetInformation
GetCommandLineA
ExitProcess
GetSystemTimeAsFileTime
DecodePointer
EncodePointer
GetNumberFormatA
GetWindowsDirectoryA
FindResourceExW
GetACP
GetOEMCP
GetCPInfo
VirtualProtect
GetTempPathA
SearchPathA
GetProfileIntA
GetTickCount
GetCurrentDirectoryA
SetErrorMode
GlobalFlags
GetShortPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
ReadFile
MoveFileA
DeleteFileA
lstrcmpiA
GetStringTypeExA
GetThreadLocale
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
TlsGetValue
LocalAlloc
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
ReplaceFileA
ResumeThread
SetThreadPriority
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
GetModuleHandleW
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
CompareStringA
lstrcmpW
LoadLibraryW
GetCurrentProcessId
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
GetFileSize
FindResourceA
InitializeCriticalSectionAndSpinCount
GlobalReAlloc
InterlockedExchange
FreeResource
GetCurrentThreadId
GetFileTime
GetFileSizeEx
GetFileAttributesA
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileAttributesExA
ActivateActCtx
DeactivateActCtx
GetModuleHandleA
lstrcmpA
ReleaseMutex
CreateMutexA
SetLastError
GlobalSize
lstrlenW
MultiByteToWideChar
MulDiv
InterlockedDecrement
InterlockedIncrement
GetPrivateProfileIntA
GetPrivateProfileStringA
CopyFileA
SetUnhandledExceptionFilter
LocalFree
lstrlenA
FormatMessageA
GetVersion
WritePrivateProfileStringA
IsBadReadPtr
WriteFile
GetLocalTime
SetFilePointer
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileInformationByHandle
CreateDirectoryA
CreateFileA
GetSystemInfo
CloseHandle
CreateIoCompletionPort
WaitForMultipleObjects
PostQueuedCompletionStatus
SetEvent
CreateEventA
GetQueuedCompletionStatus
WaitForSingleObject
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CreateThread
Sleep
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcpyA
FindClose
FindFirstFileA
GetModuleFileNameA
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
FreeLibrary
GetProcAddress
GetLastError
LoadLibraryA
GetProcessHeap
HeapAlloc

user32

GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
WinHelpA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
SetActiveWindow
DispatchMessageA
GetMessageTime
GetMessagePos
PeekMessageA
MonitorFromWindow
ScrollWindow
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
DefWindowProcA
CallWindowProcA
GetMenu
SetRect
DrawIconEx
GetSysColorBrush
DrawFocusRect
DrawEdge
GetSysColor
GetWindowThreadProcessId
GetLastActivePopup
MessageBoxA
CharUpperBuffA
MapWindowPoints
SetParent
LockWindowUpdate
ValidateRect
BringWindowToTop
MonitorFromPoint
GetMonitorInfoA
CreatePopupMenu
GetWindowTextLengthA
GetWindowTextA
SetWindowPos
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowLongA
GetDlgCtrlID
SetWindowTextA
IsDialogMessageA
GetDlgItem
CheckDlgButton
SystemParametersInfoA
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
FillRect
DrawStateA
CopyImage
GetIconInfo
DestroyIcon
GetSystemMetrics
TranslateAcceleratorA
IsCharLowerA
GetClassLongA
GetWindowLongA
GetMenuItemInfoA
DrawFrameControl
IsRectEmpty
RegisterWindowMessageA
CharUpperA
SetFocus
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
IsIconic
IsZoomed
GetAsyncKeyState
SetCursor
MessageBeep
ReleaseCapture
LoadCursorA
LoadCursorW
WindowFromPoint
SetCapture
KillTimer
SetTimer
ScreenToClient
DeleteMenu
BeginDeferWindowPos
EndDeferWindowPos
IsChild
EqualRect
IntersectRect
OffsetRect
InflateRect
SetRectEmpty
PtInRect
DestroyAcceleratorTable
DestroyWindow
NotifyWinEvent
GetKeyState
GetTopWindow
GetCapture
IsWindowVisible
SetWindowRgn
PostMessageA
MapVirtualKeyA
GetKeyNameTextA
SetLastErrorEx
SendMessageA
LoadImageA
RedrawWindow
GetSystemMenu
ReleaseDC
GetDC
CopyRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
GetParent
ModifyMenuA
CheckMenuItem
GetMenuState
GetMenuStringA
AppendMenuA
InsertMenuA
GetMenuItemCount
RemoveMenu
ClientToScreen
SendDlgItemMessageA
GetMenuItemID
TrackPopupMenu
SetForegroundWindow
GetCursorPos
SetMenuDefaultItem
GetSubMenu
InsertMenuItemA
LoadAcceleratorsA
LoadMenuA
ReuseDDElParam
UnpackDDElParam
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
GetWindowDC
BeginPaint
EndPaint
PostQuitMessage
LoadMenuW
LoadIconW
LoadIconA
wsprintfA
GetWindow
UpdateWindow
InvalidateRect
GetWindowRect
EnableWindow
IsWindow
HideCaret
InvertRect
DestroyMenu
MapVirtualKeyExA
EnableMenuItem
GetClientRect
GetWindowRgn
DrawIcon
CreateMenu
GetDoubleClickTime
TranslateMessage
GetNextDlgGroupItem
MapDialogRect
UnregisterClassA
SubtractRect
GetUpdateRect
EnumChildWindows
PostThreadMessageA
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
CopyIcon
FrameRect
SetCursorPos
SetClassLongA
GetMenuDefaultItem
RegisterClipboardFormatA
UpdateLayeredWindow
EnableScrollBar
UnionRect
SetLayeredWindowAttributes
EnumDisplayMonitors
CopyAcceleratorTableA
WaitMessage
IsClipboardFormatAvailable
RealChildWindowFromPoint
ShowOwnedPopups
IsMenu
GetMessageA
DestroyCursor

gdi32

RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
GetObjectType
SaveDC
SetRectRgn
DPtoLP
OffsetRgn
GetRgnBox
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
ExtFloodFill
CreatePalette
GetPaletteEntries
SetPaletteEntries
GetWindowOrgEx
LPtoDP
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetViewportOrgEx
EnumFontFamiliesExA
GetNearestPaletteIndex
GetSystemPaletteEntries
GetTextFaceA
SetPixelV
CreatePen
PatBlt
CreateRectRgnIndirect
CreateFontIndirectA
SetTextColor
RoundRect
Rectangle
CreatePatternBrush
ExtTextOutA
Polygon
Ellipse
Polyline
GetTextColor
GetBkColor
CreatePolygonRgn
CreateEllipticRgn
CreateHatchBrush
CreateSolidBrush
CreateDIBSection
SetPixel
GetPixel
StretchBlt
CombineRgn
CreateRectRgn
GetStockObject
SelectPalette
RealizePalette
GetDIBits
SetBkColor
BitBlt
SetDIBColorTable
DeleteDC
GetObjectA
DeleteObject
GetTextMetricsA
GetTextExtentPoint32A
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
GetDeviceCaps
CreateBitmap
CreateDCA
CopyMetaFileA
CreateRoundRectRgn

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegDeleteKeyA
CryptDestroyHash
CryptReleaseContext
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptSetKeyParam
CryptDecrypt
RegEnumValueA
RegEnumKeyExA
RegOpenKeyExW
GetFileSecurityA
SetFileSecurityA
RegQueryValueA
RegEnumKeyA
CryptDestroyKey
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueA
RegCloseKey

shell32

SHBrowseForFolderA
SHAppBarMessage
DragFinish
DragQueryFileA
SHGetFileInfoA
ShellExecuteA
SHGetDesktopFolder
ExtractIconA
SHAddToRecentDocs
Shell_NotifyIconA
SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation

comctl32

ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Create
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_Destroy
ImageList_DrawEx

shlwapi

PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFileExistsA
PathRemoveFileSpecW

ole32

StringFromCLSID
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CreateStreamOnHGlobal
CoCreateGuid
CoCreateInstance
OleLockRunning
CoUninitialize
CoInitialize
DoDragDrop
CoInitializeEx
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
OleGetClipboard
CoTaskMemFree

oleaut32

SysFreeString
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysStringLen
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
SysAllocString

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipGetImageHeight

wininet

HttpQueryInfoA
InternetCloseHandle
InternetOpenA
InternetGetConnectedState
InternetReadFile
InternetCheckConnectionA
InternetOpenUrlA

winmm

timeGetTime
PlaySoundA

ws2_32

WSACleanup
recvfrom
setsockopt
socket
send
WSARecv
WSAIoctl
listen
bind
htons
WSASocketA
WSAGetLastError
WSAStartup
inet_ntoa
ntohs
closesocket

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 316KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b3268fd68f2f3b36f9f67d26aadeb88f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

gdiplus

wininet

winmm

ws2_32

imm32

oleacc

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 316KB - Virtual size: 316KB

.data Size: 25KB - Virtual size: 54KB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.reloc Size: 175KB - Virtual size: 174KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 316KB - Virtual size: 316KB

.data
Size: 25KB - Virtual size: 54KB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

.reloc
Size: 175KB - Virtual size: 174KB