e0555ca986ad9d81f351ccf7bc5be46323bc3a77f2dc33db7a2c1a19b0af36fa

Sharing

Copy URL Twitter E-mail

General

Target

e0555ca986ad9d81f351ccf7bc5be46323bc3a77f2dc33db7a2c1a19b0af36fa
Size

716KB
MD5

9968d1415db158c7100b357422f27984
SHA1

60a8471f0f7359fb5751b124340d9cf4b7b91603
SHA256

e0555ca986ad9d81f351ccf7bc5be46323bc3a77f2dc33db7a2c1a19b0af36fa
SHA512

3bcbfc2301fe545e86bfde8e92abb8e1a0ad2f21d42b08b15f490cc6c16b64451c19b8d26b4950e4e2096f1eda8f2c68d6e3748d9a66c8d86b86389630f4fa37
SSDEEP

12288:ZQtjg9X+Rp7PRaFnEcepC+FgmAfJ4O8sKBNronP5mGlW/cNV8qnunvzovze:2taXFFTIgmAfJ4O81NaV78+uvz4ze

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0555ca986ad9d81f351ccf7bc5be46323bc3a77f2dc33db7a2c1a19b0af36fa

Files

e0555ca986ad9d81f351ccf7bc5be46323bc3a77f2dc33db7a2c1a19b0af36fa
.exe windows x86

cd91400ea0d87183b2081dee17b0065e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
LCMapStringA
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
IsBadWritePtr
GetProfileStringA
VirtualAlloc
SetUnhandledExceptionFilter
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapSize
HeapReAlloc
GetACP
GetLocalTime
GetSystemTime
GetTimeZoneInformation
HeapFree
HeapAlloc
RaiseException
GetCommandLineA
GetStartupInfoA
TerminateProcess
ExitProcess
RtlUnwind
GetTickCount
CopyFileA
SetErrorMode
FindResourceExA
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetCurrentDirectoryA
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
SizeofResource
GlobalFlags
lstrlenW
GetShortPathNameA
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
SetLastError
GetThreadLocale
MulDiv
GetLastError
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFullPathNameA
GetTempFileNameA
lstrcpynA
GetFileAttributesA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
CloseHandle
GlobalAlloc
GetCurrentThread
lstrcmpA
FormatMessageA
LocalFree
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
lstrlenA
FreeLibrary
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
GlobalFree
LockResource
FindResourceA
LoadResource
GetProcAddress
LoadLibraryA
GlobalSize
GetModuleFileNameA
GlobalLock
GlobalUnlock
Sleep

user32

SetWindowContextHelpId
GetMessageA
TranslateMessage
ValidateRect
ShowOwnedPopups
PostQuitMessage
wvsprintfA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
MoveWindow
IsDialogMessageA
SetDlgItemTextA
LoadIconA
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
MessageBoxA
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
CallNextHookEx
GetClassLongA
SetPropA
LockWindowUpdate
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
GetDlgItem
IsWindowEnabled
GetWindowLongA
SetWindowTextA
DestroyWindow
UnregisterClassA
RegisterClassA
SetCapture
CreateWindowExA
ShowWindow
FillRect
BeginPaint
SetTimer
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
KillTimer
GetDCEx
GetTabbedTextExtentA
FindWindowA
SetRect
DrawFocusRect
EndPaint
OffsetRect
WindowFromPoint
GetWindowDC
PtInRect
ReleaseCapture
DefWindowProcA
ClientToScreen
PostMessageA
GetParent
GetWindowRect
ScreenToClient
InflateRect
PostThreadMessageA
SetParent
SetWindowsHookExA
RegisterClipboardFormatA
DestroyCursor
GetSystemMetrics
CreateCursor
GetSysColor
ReleaseDC
GetDC
LoadCursorA
SetCursor
InvalidateRect
GetClientRect
UpdateWindow
SendMessageA
EnableWindow
MessageBeep
GetNextDlgGroupItem
CopyAcceleratorTableA
DestroyIcon
GetMenuStringA
DeleteMenu
InsertMenuA
LoadStringA
GetSysColorBrush
GetClassNameA
IsClipboardFormatAvailable
UnionRect
IsRectEmpty
IsZoomed
CharUpperA
GetAsyncKeyState
GrayStringA
DrawTextA
TabbedTextOutA
CharNextA
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
LoadMenuA
DestroyMenu
GetDesktopWindow
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
UnhookWindowsHookEx
MapDialogRect
GetCursorPos

gdi32

SetAbortProc
CreateDCA
DeleteDC
GetBkColor
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
SetTextAlign
GetCurrentPositionEx
CreateRectRgn
StartDocA
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
CreatePatternBrush
PtVisible
RectVisible
Escape
GetTextExtentPoint32A
GetTextMetricsA
GetMapMode
SetRectRgn
CombineRgn
StretchDIBits
CreateCompatibleDC
CreateCompatibleBitmap
GetCharWidthA
CreateFontA
LPtoDP
GetNearestColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
GetWindowOrgEx
EnumFontFamiliesExA
CopyMetaFileA
BitBlt
StartPage
EndPage
EndDoc
AbortDoc
GetViewportOrgEx
DPtoLP
CreateRectRgnIndirect
PatBlt
CreateBitmap
GetObjectA
SetTextColor
GetClipBox
CreateFontIndirectA
DeleteObject
SelectObject
MoveToEx
LineTo
GetStockObject
Rectangle
TextOutA
SetBkColor
ExtTextOutA
GetPixel
GetDeviceCaps
CreatePen
CreateDIBitmap
GetTextExtentPointA
GetTextColor

comdlg32

ChooseColorA
GetOpenFileNameA
PrintDlgA
GetFileTitleA
CommDlgExtendedError
GetSaveFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegSetValueA
RegQueryValueExA
RegOpenKeyExA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
SetFileSecurityA
GetFileSecurityA
RegCloseKey
RegCreateKeyA

shell32

SHGetFileInfoA
DragQueryFileA
DragFinish
ExtractIconA

comctl32

ord17
ImageList_Destroy
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA

oledlg

ord8

ole32

OleDuplicateData
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
OleGetClipboard
ReleaseStgMedium
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleIsCurrentClipboard
CoTaskMemAlloc
OleFlushClipboard

olepro32

ord253

oleaut32

VariantClear
SysFreeString
SysAllocStringLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VariantCopy
SysAllocString
SysAllocStringByteLen
VariantChangeType
SafeArrayGetElement
VariantTimeToSystemTime
SysStringLen

Sections

.text
Size: 396KB - Virtual size: 394KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_BSS
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cd91400ea0d87183b2081dee17b0065e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 396KB - Virtual size: 394KB

.rdata Size: 84KB - Virtual size: 81KB

.data Size: 60KB - Virtual size: 75KB

_BSS Size: 4KB - Virtual size: 4B

.rsrc Size: 168KB - Virtual size: 167KB

.text
Size: 396KB - Virtual size: 394KB

.rdata
Size: 84KB - Virtual size: 81KB

.data
Size: 60KB - Virtual size: 75KB

_BSS
Size: 4KB - Virtual size: 4B

.rsrc
Size: 168KB - Virtual size: 167KB