cef2a94cd38f2beb05ae61bddcbb253dce6aaf506b3592aaa79613efba44e4a1

Sharing

Copy URL

Twitter E-mail

General

Target

cef2a94cd38f2beb05ae61bddcbb253dce6aaf506b3592aaa79613efba44e4a1
Size

1.1MB
MD5

8848fd9dcaaf6de7133ac45926d9282c
SHA1

50fe252498a08967b2a7374279f73427e9566abe
SHA256

cef2a94cd38f2beb05ae61bddcbb253dce6aaf506b3592aaa79613efba44e4a1
SHA512

02eb8babd60084369170eda2a5e14273980e6c55b4c0b1410808df1e5165983b4db6a0bef3aca0638f49e8938f6f3ab96b48956d858e279e578aa4aada7e599f
SSDEEP

24576:f6kNx+2vdPkzuhKN9hPONp9ZRNA1rOIBC9BFO0xcAvafGHgzn:/Nx+2lSuhycp9ZU1699B8mWf0w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cef2a94cd38f2beb05ae61bddcbb253dce6aaf506b3592aaa79613efba44e4a1

Files

cef2a94cd38f2beb05ae61bddcbb253dce6aaf506b3592aaa79613efba44e4a1
.exe windows x86

dc52809d93e841acfa4ee1f2e2953b00

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
HeapSize
HeapReAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
CompareStringW
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetStringTypeA
GetStringTypeW
SetStdHandle
GetDriveTypeA
GetOEMCP
SetEnvironmentVariableA
HeapAlloc
FindResourceA
GlobalAddAtomA
GetProfileStringA
HeapFree
RaiseException
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RtlUnwind
ExitProcess
GetStartupInfoW
GetTickCount
GetCurrentDirectoryW
SetErrorMode
SizeofResource
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
lstrcmpiA
GetCurrentThread
lstrcmpA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileTime
GetFileSize
GetFileAttributesW
lstrcmpiW
GetThreadLocale
GetFullPathNameW
lstrcpynW
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
GlobalFree
MulDiv
SetLastError
InterlockedDecrement
InterlockedIncrement
GetModuleHandleA
lstrlenA
FindResourceW
LoadResource
LockResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
LoadLibraryA
IsValidCodePage
GetSystemDefaultLangID
GetACP
GetSystemInfo
CreateMutexW
ReleaseMutex
GetPrivateProfileStringW
FormatMessageW
GetVersion
GetPrivateProfileIntW
MultiByteToWideChar
WritePrivateProfileStringW
lstrcmpW
GetVolumeInformationW
LoadLibraryW
GetProcAddress
FreeLibrary
GetModuleHandleW
lstrcatW
CreateFileW
CloseHandle
FindNextFileW
FindFirstFileW
FindClose
LocalUnlock
LocalFree
GetVersionExW
WideCharToMultiByte
GlobalAlloc
GetLastError
GlobalLock
GlobalUnlock
lstrcpyW
GetModuleFileNameW
CompareStringA
lstrlenW

user32

RegisterClipboardFormatW
PostThreadMessageW
GetDlgItemInt
UpdateWindow
SendDlgItemMessageW
SendDlgItemMessageA
MapWindowPoints
PeekMessageW
DispatchMessageW
SetActiveWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
GetTopWindow
MessageBoxW
IsChild
WinHelpW
GetClassInfoW
RegisterClassW
GetMenu
GetMenuItemCount
GetDlgItem
GetWindowTextLengthW
GetWindowTextW
GetDlgCtrlID
DestroyWindow
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
SetPropW
UnhookWindowsHookEx
GetPropW
CallWindowProcW
RemovePropW
DefWindowProcW
GetMessageTime
GetMessagePos
GetLastActivePopup
GetWindow
SetWindowPos
IntersectRect
SystemParametersInfoW
GetWindowRect
GetFocus
RegisterWindowMessageW
IsWindow
GetWindowThreadProcessId
AttachThreadInput
IsWindowVisible
GetSystemMenu
DeleteMenu
AppendMenuW
GetDC
SetForegroundWindow
TrackPopupMenu
GetForegroundWindow
GetMenuItemID
SetMenuDefaultItem
KillTimer
IsIconic
GetSystemMetrics
DrawIcon
FindWindowW
RegisterHotKey
LoadIconW
GetKeyState
LoadBitmapW
SetWindowLongW
LoadCursorW
SetTimer
GetWindowDC
ReleaseDC
GetAsyncKeyState
EmptyClipboard
SetClipboardData
OpenClipboard
CloseClipboard
PostMessageW
DestroyCursor
RedrawWindow
UnregisterClassW
GetWindowTextLengthA
HideCaret
ShowCaret
ExcludeUpdateRgn
GetWindowTextA
DrawTextA
GetClassInfoA
DefDlgProcA
DefWindowProcA
CharNextA
CallWindowProcA
LoadMenuW
GetSubMenu
DrawTextExW
wsprintfW
EnableWindow
GrayStringW
DrawTextW
TabbedTextOutW
LoadStringW
SetCursor
GetWindowLongW
CopyRect
FrameRect
InflateRect
FillRect
MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableW
CharNextW
GetWindowPlacement
GetSysColor
OffsetRect
SendMessageW
DrawStateW
DrawFocusRect
GetActiveWindow
GetParent
GetCapture
SetCapture
GetClientRect
PtInRect
RemovePropA
SetWindowsHookExA
GetWindowLongA
SendMessageA
IsWindowUnicode
GetClassNameA
SetWindowLongA
SetPropA
GetPropA
LoadImageW
InvalidateRect
ReleaseCapture
GetSysColorBrush
GetDesktopWindow
GetClassNameW
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
GetMessageW
TranslateMessage
ValidateRect
DestroyMenu
CharUpperW
EndDialog
CreateDialogIndirectParamW
EndPaint
BeginPaint
ClientToScreen
WindowFromPoint
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuW
SetMenuItemBitmaps
UnregisterHotKey
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
GetCursorPos
SetDlgItemInt

gdi32

GetClipBox
SetTextColor
SetBkColor
CreateBitmap
DeleteDC
SaveDC
RestoreDC
GetStockObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
MoveToEx
LineTo
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
DPtoLP
CreateDCW
LPtoDP
EnumFontsW
CreateFontW
GetTextExtentPoint32W
PatBlt
GetMapMode
CreatePen
Rectangle
GetObjectW
StretchBlt
EnumFontFamiliesExW
CreateSolidBrush
GetTextMetricsW
GetTextColor
GetBkColor
CreateFontIndirectW
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
BitBlt
CreateDIBitmap
ExtTextOutA
GetTextExtentPointA
DeleteObject

comdlg32

ChooseColorW
GetFileTitleW
PrintDlgW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegSetValueExW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW

shell32

ShellExecuteW
Shell_NotifyIconW

comctl32

ImageList_Draw
ord17
ImageList_Destroy
ImageList_LoadImageW

oledlg

OleUIBusyW

ole32

StgOpenStorageOnILockBytes
CoGetClassObject
StgCreateDocfileOnILockBytes
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
CLSIDFromProgID
CreateILockBytesOnHGlobal
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

SysAllocString
VariantCopy
VariantClear
SysFreeString
SysAllocStringLen
VariantTimeToSystemTime
SysStringLen
VariantChangeType

Sections

.text
Size: 392KB - Virtual size: 391KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 504KB - Virtual size: 502KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dc52809d93e841acfa4ee1f2e2953b00

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 392KB - Virtual size: 391KB

.rdata Size: 80KB - Virtual size: 76KB

.data Size: 112KB - Virtual size: 129KB

.rsrc Size: 504KB - Virtual size: 502KB

.text
Size: 392KB - Virtual size: 391KB

.rdata
Size: 80KB - Virtual size: 76KB

.data
Size: 112KB - Virtual size: 129KB

.rsrc
Size: 504KB - Virtual size: 502KB