39547e7f7621ebd937a22173b449d481968afc4bc251ec7c45c4f8d4e9d61e2b

Sharing

Copy URL Twitter E-mail

General

Target

39547e7f7621ebd937a22173b449d481968afc4bc251ec7c45c4f8d4e9d61e2b
Size

796KB
MD5

6e6dfe466338212d93217e0b27df08cb
SHA1

f840df6d6aef98607ffd7c8e7ef3648ed9b6903c
SHA256

39547e7f7621ebd937a22173b449d481968afc4bc251ec7c45c4f8d4e9d61e2b
SHA512

88ea58c754ef51ff735b14685145f50760686753e7f27ed1e1beb24a7e228bf243372d9aa24a7758a6001225b7d6a34e7be13606d9f77a46437a8f4c21eca735
SSDEEP

12288:3lJU/oUXtyy4p+4D+lyxyAWUt+2LAFZLlOSWPsqFSqXYV4TnimPS43J5KgUptcZG:3lK9x4xy6vAFZLlWPsqlX1TniyXOSvu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39547e7f7621ebd937a22173b449d481968afc4bc251ec7c45c4f8d4e9d61e2b

Files

39547e7f7621ebd937a22173b449d481968afc4bc251ec7c45c4f8d4e9d61e2b
.exe windows x86

b8a109ef6be82de9286a736b98442698

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStringTypeA
GetStringTypeW
LCMapStringA
IsBadCodePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetTimeZoneInformation
FlushInstructionCache
VirtualProtect
GetProfileStringA
InterlockedExchange
GetACP
HeapSize
GetFileType
SetStdHandle
HeapReAlloc
GetCommandLineA
GetStartupInfoA
RaiseException
ExitProcess
RtlUnwind
FileTimeToLocalFileTime
FileTimeToSystemTime
SetErrorMode
GetFileTime
GetFileSize
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
FormatMessageA
LocalFree
SetLastError
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalFree
MultiByteToWideChar
WideCharToMultiByte
InterlockedIncrement
GlobalDeleteAtom
lstrcmpiA
GetCurrentThread
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
HeapFree
GetProcessHeap
HeapAlloc
GetLastError
GetVersionExA
GetVersion
FindResourceA
LoadResource
LockResource
SizeofResource
lstrcpynA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetModuleHandleA
GetProcAddress
GetCurrentThreadId
lstrcmpA
lstrcatA
WinExec
lstrcpyA
LoadLibraryA
FreeLibrary
InterlockedDecrement
GetTempPathA
GetTempFileNameA
CreateToolhelp32Snapshot
Process32First
Process32Next
OpenProcess
TerminateProcess
Sleep
GetModuleFileNameA
GetFileAttributesA
DeleteFileA
GetTickCount
lstrlenA
CreateThread
SetThreadPriority
ResumeThread
GetCurrentDirectoryA
WaitForSingleObject
TerminateThread
IsBadReadPtr
CloseHandle

user32

RegisterClipboardFormatA
PostThreadMessageA
GetMenuStringA
DeleteMenu
InsertMenuA
GetDesktopWindow
CharUpperA
LoadStringA
MapDialogRect
SetWindowContextHelpId
SetWindowTextA
IsDialogMessageA
SetFocus
AdjustWindowRectEx
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
GetWindowTextLengthA
GetDlgCtrlID
GetClassLongA
GetMessageTime
GetForegroundWindow
IntersectRect
SystemParametersInfoA
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
TranslateMessage
GetLastActivePopup
MessageBoxA
PostQuitMessage
GetMessagePos
WindowFromDC
FrameRect
OffsetRect
MapWindowPoints
CopyRect
GetSysColorBrush
PeekMessageA
GetMenuItemCount
GetMenuItemID
GetMenuState
GetSubMenu
GetWindowPlacement
GetMenu
CharNextA
DrawIconEx
DestroyIcon
ValidateRect
IsWindowEnabled
DrawFrameControl
IsWindowVisible
RemovePropA
DestroyWindow
DrawEdge
BeginPaint
EndPaint
ClientToScreen
KillTimer
SetForegroundWindow
SetTimer
UpdateWindow
RegisterWindowMessageA
EnableWindow
LoadIconA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
GetActiveWindow
UnregisterClassA
RegisterClassA
CreateWindowExA
SetPropA
GetPropA
ScreenToClient
CreatePopupMenu
GetCursorPos
DestroyMenu
GetMenuItemInfoA
DispatchMessageA
GetMessageA
GetNextDlgGroupItem
GetKeyState
CopyAcceleratorTableA
ShowScrollBar
SetScrollRange
SetScrollPos
SetScrollInfo
GetScrollRange
GetScrollPos
GetScrollInfo
EnableScrollBar
GetWindowInfo
GetWindow
IsZoomed
MoveWindow
ShowWindow
PostMessageA
GetWindowDC
IsWindowUnicode
SendMessageA
AppendMenuA
GetSystemMenu
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
IsWindow
MessageBeep
SetCapture
RedrawWindow
ReleaseCapture
PtInRect
SetCursor
SetWindowLongA
InvalidateRect
GetSysColor
InflateRect
ReleaseDC
GetDC
GetParent
GetWindowRect
LoadCursorA
FillRect
SetRect
DrawStateA
GetWindowTextA
TabbedTextOutA
DrawTextA
GrayStringA
CallNextHookEx
GetClassNameA
SetWindowsHookExA
UnhookWindowsHookEx
DefWindowProcA
GetFocus
IsRectEmpty
SetWindowRgn
SetWindowPos
GetWindowLongA
CallWindowProcA
SendDlgItemMessageA

gdi32

SetWindowExtEx
ScaleWindowExtEx
GetViewportExtEx
GetWindowExtEx
GetMapMode
GetTextColor
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
RestoreDC
SaveDC
SetWindowOrgEx
PlayEnhMetaFile
SelectClipRgn
CreatePatternBrush
SetBrushOrgEx
PatBlt
UnrealizeObject
IntersectClipRect
GetClipBox
ExcludeClipRect
SetStretchBltMode
StretchDIBits
StretchBlt
GetStockObject
GetTextExtentPointA
SetBkMode
MoveToEx
LineTo
ExtFloodFill
GetDeviceCaps
SelectPalette
RealizePalette
CreateBitmap
SetBkColor
SetTextColor
CreateICA
GetDIBits
DeleteDC
CreateRectRgn
GetRegionData
ExtCreateRegion
CreateRectRgnIndirect
OffsetRgn
CombineRgn
DeleteObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateCompatibleBitmap
CreateCompatibleDC
LPtoDP
DPtoLP
GetBkColor
RoundRect
BitBlt
SelectObject
CreatePen
CreateSolidBrush
GetTextExtentPoint32A
GetObjectA
CreateFontIndirectA
CreateDIBitmap

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueA

shell32

ShellExecuteA

comctl32

InitCommonControlsEx
ImageList_GetIcon
ImageList_Draw
ImageList_GetIconSize
ord17
_TrackMouseEvent

oledlg

ord8

ole32

OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CLSIDFromString
CLSIDFromProgID
CoInitialize
CoUninitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject

olepro32

ord253

oleaut32

SysAllocStringLen
VariantClear
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysAllocString
SysAllocStringByteLen
SysStringLen
SysFreeString

wininet

InternetGetLastResponseInfoA
HttpQueryInfoA
HttpSendRequestA
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetQueryDataAvailable
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetQueryOptionA
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
InternetSetOptionExA
InternetSetStatusCallback

Sections

.text
Size: 392KB - Virtual size: 388KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 304KB - Virtual size: 302KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b8a109ef6be82de9286a736b98442698

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wininet

Sections

.text Size: 392KB - Virtual size: 388KB

.rdata Size: 76KB - Virtual size: 72KB

.data Size: 20KB - Virtual size: 98KB

.rsrc Size: 304KB - Virtual size: 302KB

.text
Size: 392KB - Virtual size: 388KB

.rdata
Size: 76KB - Virtual size: 72KB

.data
Size: 20KB - Virtual size: 98KB

.rsrc
Size: 304KB - Virtual size: 302KB