e6cc221542a58bb571709849edd1874a1e5fb6d695ad51c259f38c67c311de63[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

e6cc221542a58bb571709849edd1874a1e5fb6d695ad51c259f38c67c311de63.exe
Size

6.7MB
MD5

b4a0031b7db2b5ea21012b9c5e5bdcfb
SHA1

8997816abf0180b2fa7a7282b604e5e08af6a901
SHA256

e6cc221542a58bb571709849edd1874a1e5fb6d695ad51c259f38c67c311de63
SHA512

15b303ffbaab4d1dfb2b39e934371dfd85a8bb85e13020ce2aecb4d1f2f36d18d9fea3584427b1e859cf68f2f6fd6bbb1e78c53c3c7b4176c1d93bcaccf1c24c
SSDEEP

98304:hm08KXr8hAy3kqgOhO7/An/Hd8VYOEpqPbPCxM:hm082mZ/Hd0JTq+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e6cc221542a58bb571709849edd1874a1e5fb6d695ad51c259f38c67c311de63.exe

Files

e6cc221542a58bb571709849edd1874a1e5fb6d695ad51c259f38c67c311de63.exe
.exe windows x86

561469b2e7cdde8c631ef7818ca7a78b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToLocalFileTime
InitializeCriticalSectionEx
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
CreateFileW
SetEnvironmentVariableA
GetTimeZoneInformation
GetFileAttributesExW
CreateProcessA
GetExitCodeProcess
LCMapStringEx
CompareStringEx
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleCP
GetStringTypeW
lstrlenA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount64
QueryPerformanceCounter
InitOnceExecuteOnce
GetProcessHeap
HeapAlloc
HeapQueryInformation
HeapSize
HeapReAlloc
HeapFree
WaitForSingleObjectEx
GetCurrentDirectoryW
IsValidCodePage
GetStartupInfoW
TerminateProcess
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetStdHandle
WriteConsoleW
OutputDebugStringW
GetFileType
GetStdHandle
GetSystemTimeAsFileTime
RaiseException
ExitThread
CreateThread
RtlUnwind
GetCommandLineA
HeapValidate
VirtualQuery
GetSystemInfo
SetThreadStackGuarantee
IsProcessorFeaturePresent
IsDebuggerPresent
GetDriveTypeW
AreFileApisANSI
GetModuleHandleExW
DecodePointer
EncodePointer
Sleep
SearchPathA
GetTempPathA
GetUserDefaultUILanguage
FindResourceExW
GetWindowsDirectoryA
GetTickCount
GetTempFileNameA
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetFileAttributesA
GetCPInfo
GetOEMCP
InitializeCriticalSectionAndSpinCount
FileTimeToSystemTime
VerifyVersionInfoA
VerSetConditionMask
OpenEventW
lstrcmpiA
GetCurrentProcess
GetHandleInformation
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
CreateFileA
VirtualProtect
GetProfileIntA
GetACP
GetThreadLocale
GetAtomNameA
SetErrorMode
DeleteFileA
GlobalFlags
GetCurrentDirectoryA
InterlockedIncrement
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DeleteCriticalSection
InitializeCriticalSection
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
FormatMessageA
MulDiv
LocalFree
GlobalSize
ResumeThread
SetThreadPriority
GetCurrentProcessId
GlobalAddAtomA
WaitForSingleObject
SetEvent
LoadLibraryW
GlobalUnlock
GetModuleFileNameW
GetVersion
SetLastError
OutputDebugStringA
GetFileAttributesW
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetModuleHandleW
GetModuleHandleA
FindResourceA
GlobalFree
FreeResource
GetLocaleInfoEx
GetThreadPreferredUILanguages
CompareStringA
ApplicationRecoveryFinished
ApplicationRecoveryInProgress
RegisterApplicationRestart
RegisterApplicationRecoveryCallback
lstrcmpA
GlobalDeleteAtom
GlobalLock
GlobalAlloc
LoadLibraryExW
FreeLibrary
GetVersionExA
GetCurrentThreadId
GetCurrentThread
GetLastError
MultiByteToWideChar
InterlockedExchange
EnterCriticalSection
LeaveCriticalSection
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
ExitProcess
FindClose
FindNextFileA
FindFirstFileA
GetEnvironmentVariableA
GlobalMemoryStatusEx
InterlockedDecrement
CopyFileA
GetModuleFileNameA
OpenProcess
LoadLibraryA
GetProcAddress
CloseHandle
Process32Next
Process32First
lstrcpyA
CreateToolhelp32Snapshot
VirtualAlloc
GetVolumeInformationA

user32

GetClassInfoExA
CallWindowProcA
GetMessageTime
GetMessagePos
IsDialogMessageA
SetWindowLongA
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
SetFocus
GetDlgCtrlID
CheckDlgButton
MoveWindow
ShowWindow
SendDlgItemMessageA
NotifyWinEvent
LoadIconW
LoadIconA
LoadCursorW
GetTopWindow
SetParent
WindowFromPoint
MapWindowPoints
ScreenToClient
ClientToScreen
HideCaret
GetWindowRect
GetClientRect
EnableScrollBar
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
LockWindowUpdate
RedrawWindow
InvalidateRgn
InvalidateRect
GetWindowRgn
SetWindowRgn
GetUpdateRect
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
GetDC
SetForegroundWindow
GetForegroundWindow
UpdateWindow
GetSystemMenu
DrawMenuBar
KillTimer
SetTimer
SetCapture
GetCapture
OpenClipboard
GetNextDlgTabItem
GetNextDlgGroupItem
IsZoomed
BringWindowToTop
IsIconic
CreateWindowExA
ShowOwnedPopups
IsChild
CharNextA
LoadAcceleratorsW
UnhookWindowsHookEx
InvertRect
FrameRect
FillRect
DrawFocusRect
GetSysColorBrush
DrawStateA
GrayStringA
DrawTextExA
DrawTextA
DrawIcon
SetMenuDefaultItem
GetMenuDefaultItem
SetMenuItemInfoA
GetMenuItemInfoA
InsertMenuItemA
DeleteMenu
RemoveMenu
ModifyMenuA
AppendMenuA
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetSubMenu
EnableMenuItem
CheckMenuItem
CreatePopupMenu
CreateMenu
GetMenuState
GetMenuStringA
LoadMenuW
LoadMenuA
IsMenu
DrawFrameControl
DrawEdge
GetClassNameA
GetLastActivePopup
GetWindowThreadProcessId
MessageBoxA
CallNextHookEx
SetWindowsHookExA
GetCursorPos
ValidateRect
GetKeyState
CopyAcceleratorTableA
MessageBeep
SetRectEmpty
GetAsyncKeyState
GetClipboardFormatNameA
GetSystemMetrics
GetSysColor
SetCursor
PeekMessageA
DispatchMessageA
TranslateMessage
GetMessageA
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetFocus
TabbedTextOutA
PostMessageA
GetDesktopWindow
GetWindowLongA
SetActiveWindow
IsWindowEnabled
EnableWindow
GetActiveWindow
GetDlgItem
EndDialog
CreateDialogIndirectParamA
DestroyWindow
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetMenu
SetMenu
TrackPopupMenu
ScrollWindow
SetPropA
GetPropA
RemovePropA
AdjustWindowRectEx
CopyRect
EqualRect
GetClassLongA
SetScrollInfo
IsWindow
RegisterWindowMessageA
GetScrollInfo
WinHelpA
MonitorFromWindow
GetMonitorInfoA
WaitMessage
CopyImage
SystemParametersInfoA
IsWindowVisible
RealChildWindowFromPoint
SubtractRect
UnionRect
IntersectRect
InflateRect
SetRect
GetClassInfoA
DefWindowProcA
RegisterClassA
LoadCursorA
ReleaseCapture
SendMessageA
PostQuitMessage
SetWindowPos
SetWindowContextHelpId
GetParent
GetWindow
MapDialogRect
DestroyMenu
UnpackDDElParam
DestroyIcon
CharUpperA
LoadAcceleratorsA
TranslateAcceleratorA
LoadImageA
ReuseDDElParam
SetLayeredWindowAttributes
EnumDisplayMonitors
GetKeyNameTextA
MapVirtualKeyA
TrackMouseEvent
UpdateLayeredWindow
MonitorFromPoint
UnregisterClassA
RegisterClipboardFormatA
DrawIconEx
GetKeyboardLayout
GetKeyboardState
ToAsciiEx
CreateAcceleratorTableA
DestroyAcceleratorTable
PtInRect
GetComboBoxInfo
DestroyCursor
IsClipboardFormatAvailable
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
MapVirtualKeyExA
IsCharLowerA
GetDoubleClickTime
GetIconInfo
CopyIcon
IsRectEmpty
OffsetRect
CharUpperBuffA
LoadImageW
EmptyClipboard
SetClipboardData
CloseClipboard
ChangeWindowMessageFilter
SetClassLongA
PostThreadMessageA
SetCursorPos

gdi32

CreateFontIndirectA
CreateHatchBrush
CreatePalette
CreatePen
CreatePatternBrush
CreateRectRgn
CreateRectRgnIndirect
CreateRoundRectRgn
CreateSolidBrush
Ellipse
Escape
ExtFloodFill
FillRgn
FrameRgn
GetBkColor
GetBoundsRect
GetDeviceCaps
GetMapMode
GetNearestPaletteIndex
GetObjectType
GetPaletteEntries
GetPixel
GetRgnBox
GetTextColor
GetTextExtentPoint32A
GetViewportExtEx
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
OffsetRgn
PatBlt
PtInRegion
PtVisible
RectVisible
Rectangle
RealizePalette
RoundRect
SetPaletteEntries
SetPixel
SetPixelV
StretchBlt
SetRectRgn
GetTextMetricsA
TextOutA
CreatePolygonRgn
DPtoLP
LPtoDP
Polygon
Polyline
GetTextFaceA
CopyMetaFileA
ExcludeClipRect
GetClipBox
IntersectClipRect
LineTo
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
MoveToEx
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
EnumFontFamiliesExA
SetDIBColorTable
GetSystemPaletteEntries
CreateDCA
CreateCompatibleBitmap
CombineRgn
BitBlt
CreateBitmap
ExtTextOutA
DeleteDC
CreateEllipticRgn
CreateCompatibleDC
CreateDIBSection
SelectObject
GetObjectA
GetStockObject
DeleteObject

msimg32

AlphaBlend
TransparentBlt

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegEnumKeyExA
RegQueryValueA
RegEnumKeyA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
GetLengthSid
OpenProcessToken
SetThreadToken
OpenThreadToken
RevertToSelf
RegEnumValueA

shell32

DragQueryFileA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHGetDesktopFolder
SHCreateItemFromParsingName
SHAppBarMessage
ShellExecuteA
DragFinish
SHGetFileInfoA
SHGetKnownFolderPath

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameA
PathRemoveFileSpecW
PathIsUNCA
PathStripToRootA
PathFindExtensionA
StrFormatKBSizeA

uxtheme

GetThemePartSize
IsThemeBackgroundPartiallyTransparent
DrawThemeParentBackground
DrawThemeTextEx
BufferedPaintInit
BufferedPaintUnInit
BeginBufferedPaint
EndBufferedPaint
GetThemeColor
GetCurrentThemeName
GetThemeSysColor
GetWindowTheme
CloseThemeData
OpenThemeData
IsAppThemed
DrawThemeBackground

dwmapi

DwmDefWindowProc
DwmIsCompositionEnabled
DwmSetWindowAttribute

ole32

CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CoInitialize
OleCreateMenuDescriptor
CLSIDFromString
CoCreateGuid
CoUninitialize
CoInitializeSecurity
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
OleDestroyMenuDescriptor
IsAccelerator
OleDuplicateData
ReleaseStgMedium
CoGetClassObject
StringFromGUID2
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
DoDragDrop
CreateStreamOnHGlobal
CoRegisterMessageFilter
CoInitializeEx
RevokeDragDrop
OleTranslateAccelerator
CoCreateInstance
OleLockRunning
CLSIDFromProgID

oleaut32

VariantChangeType
OleCreateFontIndirect
SysStringLen
SafeArrayDestroy
SysAllocStringByteLen
SysFreeString
VariantCopy
VarBstrFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocStringLen
SysAllocString
VariantClear
VariantInit

oledlg

ord8

gdiplus

GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDrawImageRectI
GdipSetInterpolationMode
GdipDeleteGraphics
GdipCreateFromHDC
GdiplusStartup
GdipCreateBitmapFromScan0
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipAlloc
GdipFree
GdipDisposeImage
GdiplusShutdown
GdipDrawImageI

ws2_32

recv
socket
inet_addr
htons
WSACleanup
closesocket
WSAStartup
send
connect

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundA

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 457KB - Virtual size: 457KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 604KB - Virtual size: 604KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

561469b2e7cdde8c631ef7818ca7a78b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

dwmapi

ole32

oleaut32

oledlg

gdiplus

ws2_32

oleacc

imm32

winmm

Sections

.text Size: 3.0MB - Virtual size: 3.0MB

.rdata Size: 457KB - Virtual size: 457KB

.data Size: 26KB - Virtual size: 56KB

.rsrc Size: 2.7MB - Virtual size: 2.7MB

.reloc Size: 604KB - Virtual size: 604KB

.text
Size: 3.0MB - Virtual size: 3.0MB

.rdata
Size: 457KB - Virtual size: 457KB

.data
Size: 26KB - Virtual size: 56KB

.rsrc
Size: 2.7MB - Virtual size: 2.7MB

.reloc
Size: 604KB - Virtual size: 604KB