fc8e09cf3f61c09ab62e0392d2eb28f7df7a03886fb9e5508e018f963e6d49fb

Sharing

Copy URL

Twitter E-mail

General

Target

fc8e09cf3f61c09ab62e0392d2eb28f7df7a03886fb9e5508e018f963e6d49fb
Size

1.0MB
MD5

09b927368e15bb3d3f7c16b55f03189b
SHA1

abb91ac4b1a1537fdd130e8beba9732f379dba85
SHA256

fc8e09cf3f61c09ab62e0392d2eb28f7df7a03886fb9e5508e018f963e6d49fb
SHA512

64d5c81a638e657dacaf1ad490515b7374892cff095bca56609bc393337fcb3896a1c2eb611ef688936dd6f7f65960990d3fb380dddd54501e643c09a6a210f3
SSDEEP

12288:q960q8k9lxfHCpnaJ9HYpDcmcaPUvDoYZt2F1yk1Hu+/xlZrhgNnGWD+cXEUa7dv:q96b7d7HYF3Y/2XxX9IpUV7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc8e09cf3f61c09ab62e0392d2eb28f7df7a03886fb9e5508e018f963e6d49fb

Files

fc8e09cf3f61c09ab62e0392d2eb28f7df7a03886fb9e5508e018f963e6d49fb
.exe windows x86

ffbfdc34a510112012f5556fe38871a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
WritePrivateProfileStringA
GetThreadLocale
SetErrorMode
DuplicateHandle
SetFilePointer
LockFile
UnlockFile
SetEndOfFile
GetFullPathNameA
GetTickCount
GetFileSize
GetFileTime
RtlUnwind
HeapFree
GetSystemTimeAsFileTime
HeapAlloc
ExitProcess
GetCommandLineA
GetTimeFormatA
GetDateFormatA
HeapSize
HeapReAlloc
GetACP
TlsGetValue
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetTimeZoneInformation
VirtualProtect
GetSystemInfo
VirtualQuery
GetStringTypeA
GetStringTypeW
SetStdHandle
IsBadReadPtr
IsBadCodePtr
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
LocalReAlloc
TlsSetValue
GlobalReAlloc
GetProcessHeap
GetProfileStringA
TlsFree
GlobalHandle
TlsAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
MulDiv
GlobalFree
GlobalAlloc
GetCurrentThread
lstrcmpA
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalLock
GlobalUnlock
lstrcpynA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
LocalFree
RaiseException
InterlockedExchange
LocalAlloc
FlushFileBuffers
lstrlenA
OutputDebugStringA
lstrcmpiA
GetTempPathA
GetCurrentDirectoryA
DeleteFileA
SetCurrentDirectoryA
GetStartupInfoA
CreateProcessA
GetVersion
SetLastError
GetCurrentThreadId
GetCurrentProcess
GetVersionExA
GetWindowsDirectoryA
lstrcpyA
lstrcatA
ReadFile
WriteFile
CopyFileA
GetFileAttributesA
SetFileAttributesA
FindNextFileA
FindClose
FormatMessageA
GetLogicalDrives
GetVolumeInformationA
DeviceIoControl
CreateFileA
CloseHandle
FreeLibrary
ResetEvent
WaitForSingleObject
LoadLibraryA
GetLastError
GetProcAddress
CreateEventA
Sleep
FindFirstFileA
QueryDosDeviceA
GetModuleFileNameA
FindResourceA
LoadResource
LockResource
SizeofResource

user32

GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
PtInRect
GetDesktopWindow
LoadCursorA
GetSysColorBrush
CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
InvalidateRect
CharUpperA
InflateRect
RegisterClipboardFormatA
PostThreadMessageA
IsWindowVisible
GetTopWindow
MessageBoxA
IsChild
GetParent
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
ClientToScreen
GetKeyState
DefWindowProcA
TranslateMessage
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
GetWindow
DestroyMenu
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
GetWindowPlacement
EnumWindows
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
SendMessageA
LoadStringA
IsIconic
ShowWindow
EnableWindow
RedrawWindow
SetActiveWindow
DrawAnimatedRects
SetParent
FindWindowA
EnumChildWindows
SystemParametersInfoA
GetClassNameA
GetWindowRect
GetCursorPos
SetForegroundWindow
TrackPopupMenu
PostMessageA
GetMenuItemID
LoadMenuA
GetSubMenu
SetMenuDefaultItem
IsWindow
KillTimer
wsprintfA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
MapDialogRect
SetWindowContextHelpId
EndDialog
CreateDialogIndirectParamA
SetCursor
GetDlgCtrlID
PostQuitMessage
LoadIconA
DefDlgProcA
IsWindowUnicode
RegisterWindowMessageA
GetActiveWindow
ValidateRect
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
IsWindowEnabled
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
UpdateWindow
CopyRect
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
GetWindowLongA
GetMessageA
ScreenToClient
DestroyWindow
SendDlgItemMessageA

gdi32

SetTextColor
SetBkColor
GetObjectA
CreateBitmap
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
GetClipBox
DeleteObject
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
PatBlt
CreateDIBitmap
GetTextExtentPointA
BitBlt
CreateCompatibleDC

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

shell32

ShellExecuteA
SHAppBarMessage
Shell_NotifyIconA

comctl32

ord17

oledlg

ord8

ole32

OleUninitialize
OleInitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoFreeUnusedLibraries
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

VariantClear
VariantCopy
SysAllocString
SysAllocStringByteLen
VariantChangeType
SysFreeString
SysAllocStringLen
VariantTimeToSystemTime
SysStringLen

Sections

.text
Size: 304KB - Virtual size: 302KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 660KB - Virtual size: 656KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ffbfdc34a510112012f5556fe38871a0

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 304KB - Virtual size: 302KB

.rdata Size: 64KB - Virtual size: 60KB

.data Size: 16KB - Virtual size: 42KB

.rsrc Size: 660KB - Virtual size: 656KB

.text
Size: 304KB - Virtual size: 302KB

.rdata
Size: 64KB - Virtual size: 60KB

.data
Size: 16KB - Virtual size: 42KB

.rsrc
Size: 660KB - Virtual size: 656KB