7c6e3a4fbcce4845cb1fde7f1b646e84d72e636b06beacb44c6b2cca9fbc10f6

Sharing

Copy URL Twitter E-mail

General

Target

7c6e3a4fbcce4845cb1fde7f1b646e84d72e636b06beacb44c6b2cca9fbc10f6
Size

2.5MB
MD5

a6da2edcf44e9c8e65a460e28a9e1f90
SHA1

396f6638583c3143a499d6c4211baad1769759b6
SHA256

7c6e3a4fbcce4845cb1fde7f1b646e84d72e636b06beacb44c6b2cca9fbc10f6
SHA512

0c6c4edf13e661cbdea7e1dc0c5171a64cfb669de74848cb410901cf9847e770feb333fd536a706d673a91e0a62639b6c82f0e5c1d3ae47b9fb5091c2842c32f
SSDEEP

49152:9ZOUP/5FuPCq2aSObvIn0mrQgghYUaYLzzvhNafT3:XL35APd2aSODIn0mrQgghYUaYLzzvhNe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7c6e3a4fbcce4845cb1fde7f1b646e84d72e636b06beacb44c6b2cca9fbc10f6

Files

7c6e3a4fbcce4845cb1fde7f1b646e84d72e636b06beacb44c6b2cca9fbc10f6
.exe windows x86

49dc89cc6c66768a3c7ca6280c52a2f9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileExW
GetTimeZoneInformation
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
DeleteFileW
EnumSystemLocalesW
IsValidLocale
LCMapStringW
CompareStringW
SetFilePointerEx
GetStdHandle
GetFileType
SetStdHandle
QueryPerformanceFrequency
IsValidCodePage
GetCommandLineW
GetCommandLineA
FreeLibraryAndExitThread
ExitThread
VirtualQuery
GetSystemInfo
GetModuleHandleExW
ExitProcess
RtlUnwind
GetStringTypeW
LCMapStringEx
RaiseException
OutputDebugStringW
FindNextFileW
GetEnvironmentStringsW
FreeEnvironmentStringsW
CreateDirectoryW
CreateFileW
WriteConsoleW
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetErrorMode
Sleep
SetEnvironmentVariableW
GetProfileIntA
SearchPathA
GetTempPathA
GetWindowsDirectoryA
FindResourceExW
SystemTimeToTzSpecificLocalTime
LocalFileTimeToFileTime
GetFileSizeEx
GetFileAttributesExA
FileTimeToLocalFileTime
GetStringTypeExA
MoveFileA
lstrcmpiA
GetShortPathNameA
LoadLibraryExA
DuplicateHandle
GetVolumeInformationA
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFileSize
FlushFileBuffers
DeleteFileA
GetCurrentDirectoryA
VerifyVersionInfoA
VerSetConditionMask
GetThreadLocale
FileTimeToSystemTime
lstrcpyA
GetACP
GetCPInfo
GetOEMCP
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GetUserDefaultLCID
SystemTimeToFileTime
ReplaceFileA
GetTempFileNameA
SetFileTime
GetFullPathNameA
GetFileTime
GetFileAttributesA
GetDiskFreeSpaceA
GetTickCount64
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetVersionExA
GetCurrentThread
lstrcmpA
ResumeThread
SetThreadPriority
SetEvent
GetCurrentProcessId
InitializeCriticalSectionAndSpinCount
FormatMessageA
MulDiv
LocalFree
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalAlloc
CompareStringA
MultiByteToWideChar
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
lstrcmpW
GlobalDeleteAtom
LoadLibraryW
LoadLibraryExW
GetModuleHandleW
GetModuleFileNameW
GetSystemDirectoryW
GetCurrentThreadId
SetLastError
EncodePointer
OutputDebugStringA
FindResourceA
WaitForSingleObject
CreateThread
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
FindClose
FindFirstFileA
CloseHandle
VirtualProtect
MapViewOfFile
CreateFileMappingA
CreateFileA
GetModuleHandleA
GetCurrentProcess
CopyFileA
GetModuleFileNameA
FreeLibrary
VirtualAlloc
IsBadReadPtr
VirtualFree
LoadLibraryA
GetProcAddress
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
HeapReAlloc
GetLastError
HeapSize
WideCharToMultiByte
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
HeapFree
FindResourceW
LoadResource
LockResource
SizeofResource
HeapQueryInformation

user32

ShowOwnedPopups
MapDialogRect
SetWindowContextHelpId
RegisterClipboardFormatA
PostQuitMessage
DestroyCursor
LoadCursorA
InflateRect
SetCursorPos
IsZoomed
ReuseDDElParam
UnpackDDElParam
LoadImageA
DestroyIcon
IntersectRect
InsertMenuItemA
DestroyMenu
CreatePopupMenu
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
BringWindowToTop
TranslateMessage
GetMessageA
MapVirtualKeyA
GetKeyNameTextA
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
GetWindowThreadProcessId
GetDesktopWindow
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
DrawStateA
SystemParametersInfoA
LoadCursorW
IsRectEmpty
FillRect
ClientToScreen
GetCursorPos
SetCursor
SetWindowRgn
DrawIcon
KillTimer
SetTimer
ReleaseCapture
SetCapture
InvalidateRect
RemoveMenu
AppendMenuA
InsertMenuA
GetMenuState
GetMenuStringA
OffsetRect
SetRectEmpty
LoadBitmapW
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetRect
EnableMenuItem
CheckMenuItem
IsDialogMessageA
SetWindowTextA
IsWindowEnabled
SendDlgItemMessageA
CheckDlgButton
SetDlgItemTextA
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
MonitorFromPoint
GetScrollInfo
SetScrollInfo
LoadIconW
LoadIconA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetLastActivePopup
GetTopWindow
GetClassNameA
GetParent
GetClassLongA
SetWindowLongA
GetWindowLongA
PtInRect
EqualRect
CopyRect
GetSysColor
SetParent
PostThreadMessageA
CharNextA
CopyAcceleratorTableA
InvalidateRgn
EnableWindow
SendMessageA
PostMessageA
MapWindowPoints
ScreenToClient
MessageBoxA
AdjustWindowRectEx
GetClientRect
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
GetMenuItemInfoA
CopyImage
GetSysColorBrush
RealChildWindowFromPoint
GetAsyncKeyState
TrackMouseEvent
LoadImageW
SetLayeredWindowAttributes
EnumDisplayMonitors
CharUpperA
LoadMenuW
GetSystemMenu
DeleteMenu
EndPaint
BeginPaint
MessageBeep
WindowFromPoint
NotifyWinEvent
GetMenuDefaultItem
SetMenuDefaultItem
UpdateLayeredWindow
EnableScrollBar
SetMenuItemBitmaps
OpenClipboard
GetSystemMetrics
UnregisterClassA
UpdateWindow
IsWindow
IsChild
SetFocus
GetFocus
GetWindowRect
GetWindow
RegisterWindowMessageA
DispatchMessageA
PeekMessageA
GetMessagePos
GetMessageTime
DefWindowProcA
CallWindowProcA
RegisterClassA
GetClassInfoA
GetClassInfoExA
CreateWindowExA
IsMenu
DestroyWindow
SetWindowPos
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsWindowVisible
IsIconic
GetDlgItem
GetDlgCtrlID
GetKeyState
GetCapture
GetMenu
SetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
TrackPopupMenu
SetActiveWindow
GetForegroundWindow
SetForegroundWindow
GetNextDlgGroupItem
LoadAcceleratorsW
GetTabbedTextExtentW
UnionRect
CreateMenu
DrawFocusRect
DrawIconEx
GetIconInfo
HideCaret
InvertRect
GetWindowRgn
SubtractRect
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
DrawMenuBar
GetUpdateRect
GetDoubleClickTime
MapVirtualKeyExA
IsCharLowerA
GetComboBoxInfo
IsClipboardFormatAvailable
WaitMessage
ModifyMenuA
CharUpperBuffA
LockWindowUpdate
DestroyAcceleratorTable
CreateAcceleratorTableA
ToAsciiEx
GetKeyboardState
GetKeyboardLayout
FrameRect
CopyIcon
DrawFrameControl
DrawEdge
SetClassLongA
EmptyClipboard
SetClipboardData
CloseClipboard
WinHelpA

gdi32

CreatePen
CreatePatternBrush
CreateRectRgn
Escape
ExcludeClipRect
GetClipBox
GetCurrentPositionEx
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextAlign
StartDocA
MoveToEx
TextOutA
ExtTextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
CreateHatchBrush
CreateCompatibleBitmap
GetTextExtentPoint32A
GetTextMetricsA
CreateFontIndirectA
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
GetViewportOrgEx
Rectangle
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
CombineRgn
GetMapMode
SetRectRgn
CreateRoundRectRgn
GetCharWidthA
GetBkColor
GetTextColor
GetRgnBox
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetTextExtentPointA
GetTextExtentPoint32W
GetWindowOrgEx
GetTextFaceA
EnumFontFamiliesExA
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
SetPixel
StretchBlt
SetDIBColorTable
CreatePolygonRgn
Polygon
Polyline
OffsetRgn
RoundRect
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
SetPixelV
GetStockObject
CreateSolidBrush
LPtoDP
DPtoLP
CreateDIBSection
SelectObject
Ellipse
DeleteObject
CreateEllipticRgn
BitBlt
GetDeviceCaps
CreateDCA
CopyMetaFileA
CreateBitmap
GetObjectA
SetTextColor
SetBkColor
PatBlt
CreateCompatibleDC
DeleteDC

msimg32

AlphaBlend
TransparentBlt

winspool.drv

DocumentPropertiesA
ClosePrinter
GetJobA
OpenPrinterA

advapi32

RegSetValueExA
GetLengthSid
RegEnumKeyExA
RegOpenKeyExW
RegEnumValueA
GetFileSecurityA
SetFileSecurityA
RegQueryValueA
RegEnumKeyA
OpenProcessToken
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueA
RegCloseKey

shell32

DragFinish
SHAddToRecentDocs
ExtractIconA
SHGetFileInfoA
ShellExecuteA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHBrowseForFolderA
SHAppBarMessage
DragQueryFileA

comctl32

InitCommonControlsEx

shlwapi

PathFindExtensionA
PathStripToRootA
PathRemoveFileSpecW
StrFormatKBSizeA
PathIsUNCA
PathFindFileNameA

uxtheme

IsAppThemed
GetWindowTheme
GetThemeSysColor
GetCurrentThemeName
GetThemeColor
GetThemePartSize
DrawThemeText
DrawThemeParentBackground
DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
OpenThemeData
CloseThemeData

ole32

CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
DoDragDrop
OleGetClipboard
OleUninitialize
CoLockObjectExternal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoGetClassObject
CoDisconnectObject
CLSIDFromProgID
CLSIDFromString
OleInitialize
CoFreeUnusedLibraries
CoInitialize
CoCreateGuid
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CoCreateInstance
CoInitializeSecurity
CoInitializeEx
OleLockRunning
RegisterDragDrop
RevokeDragDrop

oleaut32

SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
SysAllocStringByteLen
VariantCopy
VarBstrFromDate
LoadTypeLi
OleCreateFontIndirect
VariantChangeType
SysAllocStringLen
SysAllocString
VariantClear
SysFreeString
VariantInit

oledlg

ord8

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette

winhttp

WinHttpConnect
WinHttpOpenRequest
WinHttpSendRequest
WinHttpOpen
WinHttpReadData
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpCloseHandle
WinHttpCrackUrl

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundA

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 362KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 342KB - Virtual size: 342KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

49dc89cc6c66768a3c7ca6280c52a2f9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

winhttp

oleacc

imm32

winmm

Sections

.text Size: 1.7MB - Virtual size: 1.7MB

.rdata Size: 362KB - Virtual size: 362KB

.data Size: 25KB - Virtual size: 42KB

.rsrc Size: 342KB - Virtual size: 342KB

.reloc Size: 149KB - Virtual size: 148KB

.text
Size: 1.7MB - Virtual size: 1.7MB

.rdata
Size: 362KB - Virtual size: 362KB

.data
Size: 25KB - Virtual size: 42KB

.rsrc
Size: 342KB - Virtual size: 342KB

.reloc
Size: 149KB - Virtual size: 148KB