99afe01139e1337315d4969ad6aab79bf79f2445f202ef730100f33b6123cf3a[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

99afe01139e1337315d4969ad6aab79bf79f2445f202ef730100f33b6123cf3a.exe
Size

3.3MB
MD5

14ccf11593677bd44194748d7a34b4e3
SHA1

359f7dca8c6063c85b324e0ed87cd046546a1eaf
SHA256

99afe01139e1337315d4969ad6aab79bf79f2445f202ef730100f33b6123cf3a
SHA512

4bbca161c2f592d00bd79d8abd545ed6c60f22d63af8b09a00d03f53e2097be774ebe06ec9ab01bde3c4bd83939a3ad93e9284f03fc6fbf9fe00531ef6bd9c01
SSDEEP

49152:HfqXxGlVYQ+27Nmbn9uq5BPOLJ0C6R/H0Xb:/qXsoQ+L5BPOcR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99afe01139e1337315d4969ad6aab79bf79f2445f202ef730100f33b6123cf3a.exe

Files

99afe01139e1337315d4969ad6aab79bf79f2445f202ef730100f33b6123cf3a.exe
.exe windows x86

d197a585bbd6108c735aa3373f187876

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DecodePointer
EncodePointer
GetDriveTypeW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemInfo
VirtualQuery
HeapValidate
IsBadReadPtr
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RtlUnwind
CreateThread
ExitThread
RaiseException
GetSystemTimeAsFileTime
SetStdHandle
GetFileType
GetStdHandle
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
IsProcessorFeaturePresent
IsValidCodePage
GetLocaleInfoW
GetCurrentDirectoryW
HeapAlloc
HeapReAlloc
HeapSize
HeapQueryInformation
HeapFree
HeapCreate
GetTimeZoneInformation
QueryPerformanceCounter
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStringTypeW
LCMapStringW
CompareStringW
GetConsoleCP
GetConsoleMode
GetExitCodeProcess
CreateProcessA
IsValidLocale
EnumSystemLocalesA
SetEnvironmentVariableA
CreateFileW
OpenEventA
FileTimeToLocalFileTime
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
Sleep
SearchPathA
FindResourceExW
GetNumberFormatA
GetWindowsDirectoryA
GetTickCount
GetTempPathA
GetFileAttributesExA
GetFileSizeEx
GetUserDefaultLCID
GetTempFileNameA
GetFileTime
GetCPInfo
FileTimeToSystemTime
lstrcmpiA
GetFullPathNameA
GetVolumeInformationA
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetHandleInformation
GetProfileIntA
VirtualProtect
GetACP
GetAtomNameA
GetThreadLocale
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
DeleteFileA
GlobalFlags
SetErrorMode
InterlockedIncrement
GetCurrentDirectoryA
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
LoadLibraryW
GetVersionExA
lstrcmpW
GlobalGetAtomNameA
GlobalFindAtomA
MulDiv
lstrlenW
GlobalSize
FormatMessageA
LocalFree
ResumeThread
SetThreadPriority
GetCurrentProcessId
GlobalAddAtomA
SetEvent
WaitForSingleObject
GlobalUnlock
GetModuleHandleA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
FindResourceA
FreeResource
GlobalFree
CompareStringA
ActivateActCtx
DeactivateActCtx
SetLastError
GlobalLock
GlobalAlloc
GetModuleHandleW
FreeLibrary
GlobalDeleteAtom
lstrcmpA
GetCurrentThread
GetCurrentThreadId
GetLocaleInfoA
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
InitializeCriticalSectionAndSpinCount
GetOEMCP
GetLastError
lstrlenA
MultiByteToWideChar
InterlockedExchange
EnterCriticalSection
LeaveCriticalSection
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
ExitProcess
FindClose
FindNextFileA
FindFirstFileA
GetEnvironmentVariableA
GlobalMemoryStatusEx
InterlockedDecrement
CopyFileA
GetModuleFileNameA
OpenProcess
LoadLibraryA
GetProcAddress
CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
VirtualAlloc
GetFileAttributesA
lstrcpyA
GetProcessHeap

user32

DestroyIcon
LoadAcceleratorsA
TranslateAcceleratorA
ReuseDDElParam
LoadImageA
GetKeyNameTextA
MapVirtualKeyA
MonitorFromPoint
UpdateLayeredWindow
UnregisterClassA
DrawIconEx
DestroyAcceleratorTable
CreateAcceleratorTableA
ToAsciiEx
GetKeyboardLayout
GetKeyboardState
SetCursorPos
SetClassLongA
RegisterClipboardFormatA
GetIconInfo
CopyImage
LoadImageW
SetClipboardData
CloseClipboard
EmptyClipboard
PtInRect
OffsetRect
CopyIcon
IsRectEmpty
CharUpperBuffA
DefFrameProcA
TranslateMDISysAccel
DefMDIChildProcA
IsClipboardFormatAvailable
GetDoubleClickTime
IsCharLowerA
MapVirtualKeyExA
DestroyCursor
SetRect
InflateRect
IntersectRect
UnionRect
SubtractRect
OpenClipboard
WindowFromPoint
SetParent
IsChild
GetTopWindow
ChildWindowFromPoint
ShowScrollBar
GetNextDlgTabItem
GetNextDlgGroupItem
SetCapture
GetCapture
KillTimer
SetTimer
EnableScrollBar
RedrawWindow
LockWindowUpdate
ShowOwnedPopups
IsWindowVisible
InvalidateRgn
InvalidateRect
GetUpdateRect
UpdateWindow
ReleaseDC
GetWindowDC
GetDC
EndPaint
CharNextA
ScreenToClient
ClientToScreen
MapWindowPoints
GetClientRect
GetWindowRect
BringWindowToTop
GetWindowRgn
SetWindowRgn
IsZoomed
IsIconic
GetSystemMenu
DrawMenuBar
UnhookWindowsHookEx
LoadMenuW
LoadMenuA
RemoveMenu
ModifyMenuA
InsertMenuItemA
InsertMenuA
CharUpperA
GetMenuItemInfoA
GetMenuStringA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenuDefaultItem
SetMenuDefaultItem
EnableMenuItem
CheckMenuItem
AppendMenuA
DeleteMenu
IsMenu
CreatePopupMenu
CreateMenu
GrayStringA
DrawTextExA
DrawTextA
DrawFocusRect
DrawFrameControl
DrawEdge
DrawStateA
DrawIcon
InvertRect
FrameRect
FillRect
GetSysColorBrush
GetClassNameA
MessageBoxA
GetLastActivePopup
GetWindowThreadProcessId
GetKeyState
CallNextHookEx
PeekMessageA
GetCursorPos
SetWindowsHookExA
ValidateRect
GetMessageA
TranslateMessage
DispatchMessageA
GetMenuCheckMarkDimensions
LoadBitmapW
SetMenuItemBitmaps
GetFocus
TabbedTextOutA
PostMessageA
EndDialog
GetDesktopWindow
GetActiveWindow
SetActiveWindow
IsWindow
EnableWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
RegisterWindowMessageA
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
GetParent
PostQuitMessage
DestroyMenu
LoadAcceleratorsW
SetLayeredWindowAttributes
EnumDisplayMonitors
SystemParametersInfoA
RealChildWindowFromPoint
WaitMessage
CreateWindowExA
GetClassInfoExA
MonitorFromWindow
GetMonitorInfoA
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
WinHelpA
TrackPopupMenu
SetWindowPlacement
GetWindowPlacement
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
SetMenu
GetMenu
GetMessageTime
GetMessagePos
ShowWindow
MoveWindow
SetWindowLongA
GetDlgCtrlID
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
CheckDlgButton
GetWindowTextLengthA
GetWindowTextA
SetFocus
UnpackDDElParam
GetClipboardFormatNameA
SetRectEmpty
GetAsyncKeyState
MessageBeep
GetSubMenu
CopyAcceleratorTableA
LoadIconW
LoadIconA
LoadCursorW
PostThreadMessageA
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
NotifyWinEvent
GetForegroundWindow
SetForegroundWindow
HideCaret
BeginPaint
SendMessageA
ReleaseCapture
LoadCursorA
RegisterClassA
DefWindowProcA
GetClassInfoA
SetCursor
GetSysColor
GetSystemMetrics

gdi32

SetPaletteEntries
GetPaletteEntries
CreatePalette
DeleteObject
GetStockObject
GetObjectA
CreateDIBSection
SelectObject
CreateCompatibleDC
DeleteDC
CreateCompatibleBitmap
CreateFontA
CreateFontIndirectA
CreatePatternBrush
CreateHatchBrush
GetNearestPaletteIndex
SetDIBColorTable
CreateSolidBrush
ExtCreatePen
CreatePen
GetObjectType
CreateBitmap
ExtTextOutA
EnumFontFamiliesExA
GetSystemPaletteEntries
CreateDIBitmap
GetTextCharsetInfo
EnumFontFamiliesA
ExtSelectClipRgn
SetLayout
GetLayout
SetTextAlign
LineTo
MoveToEx
IntersectClipRect
ExcludeClipRect
SelectClipRgn
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
SelectPalette
RestoreDC
SaveDC
CopyMetaFileA
CreateRectRgn
CreateRectRgnIndirect
CreateEllipticRgn
CreatePolygonRgn
CreateRoundRectRgn
SetRectRgn
CombineRgn
OffsetRgn
GetRgnBox
PtInRegion
CreateDCA
GetDeviceCaps
RealizePalette
GetBkColor
GetTextColor
GetMapMode
GetViewportOrgEx
GetViewportExtEx
GetWindowOrgEx
GetWindowExtEx
DPtoLP
LPtoDP
FillRgn
FrameRgn
PtVisible
RectVisible
Polyline
Ellipse
Polygon
Rectangle
PatBlt
BitBlt
StretchBlt
GetPixel
SetPixel
ExtFloodFill
TextOutA
GetTextExtentPoint32A
GetTextFaceA
GetTextMetricsA
Escape
GetBoundsRect
StartDocA
StartPage
EndPage
AbortDoc
EndDoc
SetPixelV
PolyBezier

advapi32

RegEnumKeyA
SetThreadToken
RevertToSelf
OpenThreadToken
RegEnumValueA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueA
GetLengthSid
OpenProcessToken
RegEnumKeyExA

ole32

OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
CLSIDFromString
CreateStreamOnHGlobal
CoRegisterMessageFilter
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleGetClipboard
CLSIDFromProgID
CoCreateGuid
CoRevokeClassObject
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
StringFromGUID2
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoUninitialize
CoInitialize
ReleaseStgMedium
CoTaskMemAlloc
StringFromCLSID
CoTaskMemFree
OleDuplicateData
CoCreateInstance
CoInitializeSecurity
CoInitializeEx

oleaut32

SysFreeString
SysAllocString
SystemTimeToVariantTime
VariantClear
VariantInit
VariantTimeToSystemTime
SysAllocStringLen
SysAllocStringByteLen
VariantChangeType
SysStringLen
OleCreateFontIndirect
SafeArrayDestroy
VariantCopy
VarBstrFromDate

msimg32

GradientFill
AlphaBlend
TransparentBlt

comctl32

ImageList_GetIconSize
InitCommonControlsEx

shlwapi

PathFindExtensionA
PathFindFileNameA
PathRemoveFileSpecW
PathIsUNCA
PathStripToRootA

oledlg

ord8

gdiplus

GdipCreateBitmapFromStream
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageI
GdipGetImageGraphicsContext
GdipDrawImageRectI
GdipSetInterpolationMode
GdipDeleteGraphics
GdipCreateFromHDC
GdiplusStartup
GdipCreateBitmapFromScan0
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipAlloc
GdipFree
GdipDisposeImage
GdiplusShutdown
GdipCreateBitmapFromStreamICM

ws2_32

inet_addr
socket
WSAStartup
WSACleanup
closesocket
recv
connect
send
htons

oleacc

CreateStdAccessibleObject
LresultFromObject
AccessibleObjectFromWindow

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

comdlg32

GetFileTitleA

shell32

SHAppBarMessage
ShellExecuteA
DragQueryFileA
DragFinish
SHGetFileInfoA
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHBrowseForFolderA
SHGetMalloc
SHGetPathFromIDListA

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 518KB - Virtual size: 517KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 151KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 235KB - Virtual size: 234KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d197a585bbd6108c735aa3373f187876

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

msimg32

comctl32

shlwapi

oledlg

gdiplus

ws2_32

oleacc

imm32

winmm

winspool.drv

comdlg32

shell32

Sections

.text Size: 2.4MB - Virtual size: 2.4MB

.rdata Size: 518KB - Virtual size: 517KB

.data Size: 26KB - Virtual size: 57KB

.rsrc Size: 151KB - Virtual size: 152KB

.reloc Size: 235KB - Virtual size: 234KB

.text
Size: 2.4MB - Virtual size: 2.4MB

.rdata
Size: 518KB - Virtual size: 517KB

.data
Size: 26KB - Virtual size: 57KB

.rsrc
Size: 151KB - Virtual size: 152KB

.reloc
Size: 235KB - Virtual size: 234KB