998f6fea6a5470b58c9ba7553266090f506a993e6da1712e7658efd88f390749

Sharing

Copy URL Twitter E-mail

General

Target

998f6fea6a5470b58c9ba7553266090f506a993e6da1712e7658efd88f390749
Size

4.1MB
MD5

19d6e10e5fb2dbd07455726fa93c7484
SHA1

fdce08b3e245b9b31fdac7b80bce687aab41cfc1
SHA256

998f6fea6a5470b58c9ba7553266090f506a993e6da1712e7658efd88f390749
SHA512

43618b7240ec66da12f92a20d17d82695bcdc49b78096c4cd6e4a7998742c504b2a5718abe6a952705ba80ccd0d04be176539763ec74acf361614def3104a29c
SSDEEP

49152:4RqLOU1lopk8wxyY07SPsYEhBjkd7Gz8ZE/kPVzQpBhBACjY:4WBk5Ixs8ih+C0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
998f6fea6a5470b58c9ba7553266090f506a993e6da1712e7658efd88f390749

Files

998f6fea6a5470b58c9ba7553266090f506a993e6da1712e7658efd88f390749
.exe windows x86

1d29846c78c9e229a3a4bc4f9cae7942

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MapViewOfFile
UnmapViewOfFile
InitializeCriticalSectionEx
FileTimeToLocalFileTime
OpenEventW
VirtualAlloc
GetLocalTime
CreateFileMappingW
VirtualFree
FreeLibrary
GetProcAddress
LoadLibraryA
LoadResource
LockResource
SizeofResource
FindResourceW
WideCharToMultiByte
GetCurrentDirectoryA
InterlockedExchange
GetCurrentThread
GetCurrentThreadId
GetVersionExA
GetModuleFileNameA
LoadLibraryExW
GlobalAlloc
GlobalLock
GlobalDeleteAtom
lstrcmpA
RegisterApplicationRecoveryCallback
RegisterApplicationRestart
ApplicationRecoveryInProgress
ApplicationRecoveryFinished
MultiByteToWideChar
CompareStringA
GetThreadPreferredUILanguages
GetLocaleInfoEx
GetFileAttributesW
OutputDebugStringA
GetLastError
SetLastError
GetVersion
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
LoadLibraryW
FreeResource
GlobalUnlock
GlobalFree
FindResourceA
CloseHandle
SetEvent
WaitForSingleObject
SetThreadPriority
ResumeThread
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
GlobalAddAtomA
GetCurrentProcessId
GlobalReAlloc
LocalFree
FileTimeToSystemTime
GlobalSize
MulDiv
FormatMessageA
CopyFileA
lstrcmpW
GlobalFindAtomA
GlobalGetAtomNameA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalHandle
LocalAlloc
LocalReAlloc
InterlockedDecrement
InterlockedIncrement
GlobalFlags
DeleteFileA
SetErrorMode
GetAtomNameA
GetProfileIntA
VirtualProtect
CreateFileA
FindClose
FindFirstFileA
FlushFileBuffers
GetFileSize
GetFullPathNameA
LockFile
ReadFile
SetEndOfFile
SetFilePointer
UnlockFile
WriteFile
DuplicateHandle
GetHandleInformation
GetCurrentProcess
lstrcmpiA
Sleep
GetVolumeInformationA
GetThreadLocale
GetFileAttributesA
GetFileAttributesExA
GetFileSizeEx
GetFileTime
GetACP
lstrcpyA
InitializeCriticalSectionAndSpinCount
GetOEMCP
GetCPInfo
GetTempFileNameA
FindResourceExW
GetUserDefaultUILanguage
GetWindowsDirectoryA
GetTickCount
VerSetConditionMask
VerifyVersionInfoA
GetTempPathA
SearchPathA
EncodePointer
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
GetModuleHandleExW
RaiseException
RtlUnwind
GetCommandLineA
HeapValidate
GetSystemInfo
ExitProcess
AreFileApisANSI
SetStdHandle
GetFileType
CreateThread
ExitThread
SetThreadStackGuarantee
VirtualQuery
GetStdHandle
OutputDebugStringW
WriteConsoleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
TerminateProcess
GetStartupInfoW
InitOnceExecuteOnce
WaitForSingleObjectEx
lstrlenA
IsValidCodePage
GetTimeZoneInformation
GetProcessHeap
QueryPerformanceCounter
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapFree
HeapReAlloc
HeapSize
HeapQueryInformation
HeapAlloc
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetStringTypeW
GetExitCodeProcess
CreateProcessA
GetFileAttributesExW
GetTimeFormatEx
GetDateFormatEx
CompareStringEx
LCMapStringEx
CreateFileW
SetEnvironmentVariableA

user32

GetWindowTextA
RemovePropA
GetPropA
SetPropA
ScrollWindow
TrackPopupMenu
SetMenu
GetMenu
SetFocus
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
RegisterWindowMessageA
GetSysColor
InvertRect
FrameRect
FillRect
DrawFocusRect
GetSysColorBrush
DrawStateA
GrayStringA
DrawTextExA
DrawTextA
DrawIcon
SetMenuDefaultItem
GetMenuDefaultItem
SetMenuItemInfoA
GetMenuItemInfoA
InsertMenuItemA
DeleteMenu
ModifyMenuA
EnableMenuItem
CheckMenuItem
CreatePopupMenu
CreateMenu
LoadMenuW
LoadMenuA
DrawFrameControl
DrawEdge
RemoveMenu
AppendMenuA
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringA
IsMenu
SetWindowPos
GetWindowThreadProcessId
MessageBoxA
SetCursor
NotifyWinEvent
LoadIconW
LoadIconA
LoadCursorW
LoadCursorA
SetScrollInfo
GetLastActivePopup
GetTopWindow
GetWindowTextLengthA
SetParent
GetParent
WindowFromPoint
MapWindowPoints
ScreenToClient
ClientToScreen
HideCaret
SetWindowContextHelpId
GetWindowRect
GetClientRect
EnableScrollBar
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
LockWindowUpdate
RedrawWindow
InvalidateRgn
InvalidateRect
GetWindowRgn
SetWindowRgn
GetUpdateRect
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
GetDC
SetForegroundWindow
GetForegroundWindow
UpdateWindow
GetScrollInfo
WinHelpA
MonitorFromWindow
GetMonitorInfoA
GetCursorPos
SetWindowsHookExA
SubtractRect
UnionRect
IntersectRect
GetSystemMenu
DrawMenuBar
KillTimer
SetTimer
SetCapture
GetCapture
OpenClipboard
GetNextDlgTabItem
GetNextDlgGroupItem
ShowWindow
EmptyClipboard
MoveWindow
CheckDlgButton
SendDlgItemMessageA
SetWindowTextA
IsDialogMessageA
WaitMessage
ReleaseCapture
CopyImage
SystemParametersInfoA
RealChildWindowFromPoint
AdjustWindowRectEx
CopyRect
EqualRect
SetWindowLongA
GetClassLongA
GetClassNameA
UnhookWindowsHookEx
InflateRect
SetRect
CallNextHookEx
PostThreadMessageA
IsChild
ShowOwnedPopups
IsWindowVisible
LoadAcceleratorsW
DestroyMenu
SetRectEmpty
GetAsyncKeyState
CharUpperA
IsIconic
BringWindowToTop
IsZoomed
GetClipboardFormatNameA
UnpackDDElParam
DestroyIcon
LoadAcceleratorsA
TranslateAcceleratorA
LoadImageA
ReuseDDElParam
CharNextA
CopyAcceleratorTableA
MessageBeep
UnregisterClassA
RegisterClipboardFormatA
DrawIconEx
GetIconInfo
SetLayeredWindowAttributes
EnumDisplayMonitors
CloseClipboard
SetClipboardData
GetSystemMetrics
PostQuitMessage
SendMessageA
PostMessageA
IsWindow
TabbedTextOutA
MapDialogRect
GetKeyNameTextA
MapVirtualKeyA
GetFocus
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
DestroyWindow
CreateDialogIndirectParamA
EndDialog
GetDlgItem
GetActiveWindow
EnableWindow
IsWindowEnabled
SetActiveWindow
GetWindowLongA
GetDesktopWindow
GetMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
GetKeyState
PtInRect
DestroyCursor
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
IsClipboardFormatAvailable
IsRectEmpty
CharUpperBuffA
CopyIcon
GetDoubleClickTime
ChangeWindowMessageFilter
SetClassLongA
SetCursorPos
DestroyAcceleratorTable
CreateAcceleratorTableA
ToAsciiEx
GetKeyboardState
MapVirtualKeyExA
IsCharLowerA
GetKeyboardLayout
OffsetRect
GetComboBoxInfo
TrackMouseEvent
MonitorFromPoint
UpdateLayeredWindow
LoadImageW
GetWindow
ValidateRect

gdi32

SetDIBColorTable
CreateDIBSection
GetTextCharsetInfo
EnumFontFamiliesA
CreateDIBitmap
GetSystemPaletteEntries
EnumFontFamiliesExA
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
MoveToEx
SetTextAlign
SetTextColor
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SetBkColor
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
LineTo
IntersectClipRect
GetClipBox
ExcludeClipRect
DeleteObject
DeleteDC
GetTextFaceA
Polyline
Polygon
LPtoDP
DPtoLP
CreatePolygonRgn
TextOutA
GetObjectA
GetTextMetricsA
SetRectRgn
StretchBlt
SetPixelV
SetPixel
SetPaletteEntries
SelectObject
RoundRect
RealizePalette
Rectangle
RectVisible
PtVisible
PtInRegion
PatBlt
OffsetRgn
GetWindowOrgEx
GetWindowExtEx
GetViewportOrgEx
GetViewportExtEx
GetTextExtentPoint32A
GetTextColor
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectType
GetNearestPaletteIndex
GetMapMode
GetBoundsRect
GetBkColor
FrameRgn
FillRgn
ExtFloodFill
Escape
Ellipse
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgnIndirect
CreateRectRgn
CreatePatternBrush
CreatePen
CreatePalette
CreateHatchBrush
CreateFontIndirectA
CreateEllipticRgn
CreateCompatibleDC
CreateCompatibleBitmap
CombineRgn
BitBlt
GetDeviceCaps
CreateDCA
CopyMetaFileA
CreateBitmap
ExtTextOutA

msimg32

AlphaBlend
TransparentBlt

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RevertToSelf
OpenThreadToken
SetThreadToken
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegEnumKeyExA
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey

shell32

ShellExecuteA
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListA
DragFinish
DragQueryFileA
SHBrowseForFolderA
SHGetFileInfoA
SHGetKnownFolderPath
SHCreateItemFromParsingName
SHGetSpecialFolderPathA
SHAppBarMessage

shlwapi

PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW
PathFindFileNameA
PathFindExtensionA
StrFormatKBSizeA

uxtheme

IsThemeBackgroundPartiallyTransparent
IsAppThemed
DrawThemeParentBackground
DrawThemeTextEx
BufferedPaintInit
BufferedPaintUnInit
BeginBufferedPaint
EndBufferedPaint
GetThemeColor
GetCurrentThemeName
GetThemeSysColor
GetWindowTheme
DrawThemeBackground
CloseThemeData
OpenThemeData
GetThemePartSize

dwmapi

DwmDefWindowProc
DwmSetWindowAttribute
DwmIsCompositionEnabled

ole32

StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
StringFromGUID2
CoGetClassObject
CoInitializeEx
ReleaseStgMedium
OleDuplicateData
CreateILockBytesOnHGlobal
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoInitialize
CoCreateInstance
CoCreateGuid
CoUninitialize
CoRevokeClassObject
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
CreateStreamOnHGlobal
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
DoDragDrop
OleGetClipboard
OleLockRunning
CoTaskMemFree
IsAccelerator
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
StringFromCLSID

oleaut32

SystemTimeToVariantTime
VariantTimeToSystemTime
VariantCopy
SafeArrayDestroy
SysStringLen
SysAllocString
OleCreateFontIndirect
VarBstrFromDate
VariantChangeType
VariantClear
VariantInit
SysAllocStringByteLen
SysFreeString
SysAllocStringLen

odbc32

ord68
ord61
ord59
ord41
ord76
ord39
ord20
ord49
ord19
ord48
ord18
ord38
ord45
ord44
ord43
ord17
ord16
ord15
ord14
ord13
ord12
ord11
ord10
ord9
ord8
ord5
ord3
ord2
ord1

crypt32

CryptUnprotectData
CryptProtectData

oledlg

ord8

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

gdiplus

GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusShutdown
GdiplusStartup
GdipFree
GdipAlloc
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipGetImageWidth
GdipDrawImageRectI

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundA

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 435KB - Virtual size: 435KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 313KB - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 272KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1d29846c78c9e229a3a4bc4f9cae7942

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

shlwapi

uxtheme

dwmapi

ole32

oleaut32

odbc32

crypt32

oledlg

oleacc

gdiplus

imm32

winmm

Sections

.text Size: 3.1MB - Virtual size: 3.1MB

.rdata Size: 435KB - Virtual size: 435KB

.data Size: 313KB - Virtual size: 344KB

.rsrc Size: 272KB - Virtual size: 272KB

.text
Size: 3.1MB - Virtual size: 3.1MB

.rdata
Size: 435KB - Virtual size: 435KB

.data
Size: 313KB - Virtual size: 344KB

.rsrc
Size: 272KB - Virtual size: 272KB