99595e8eaea2acb64ba68b40ca2af2adff9f97926a5468e0233ed6453e181886

Sharing

Copy URL Twitter E-mail

General

Target

99595e8eaea2acb64ba68b40ca2af2adff9f97926a5468e0233ed6453e181886
Size

1.9MB
MD5

a19e2ab2efb2f2a0006d7dac274daea1
SHA1

350ec5d3f850e98783be6d66713ed251d513e4aa
SHA256

99595e8eaea2acb64ba68b40ca2af2adff9f97926a5468e0233ed6453e181886
SHA512

23869ca459bdbcd7ef37b024e71ca5dac928a10b66d2817319c00c7174f3a3d5ca9f9bdc32cc805bb845aa9f95e0aa889ef4c0d2147ac8a342904f7562175778
SSDEEP

49152:4Af/UYZDlNfFKf3ZTJ7uOzonskQ7GhVof6JsUHTz53BLUQNMCJSSGVeKKJgw7XKn:4+UYZDlNfFKf3ZTJ7uOzonskQ7GhVofB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99595e8eaea2acb64ba68b40ca2af2adff9f97926a5468e0233ed6453e181886

Files

99595e8eaea2acb64ba68b40ca2af2adff9f97926a5468e0233ed6453e181886
.exe windows x86

b441bd28fa955237ec257f7efd853f1c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetNetworkParams
GetAdaptersInfo

kernel32

GetStringTypeA
GetStringTypeW
LCMapStringW
IsBadReadPtr
IsBadCodePtr
GetStdHandle
LCMapStringA
FreeEnvironmentStringsW
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetFileType
GetEnvironmentStrings
SetHandleCount
GetEnvironmentStringsW
UnhandledExceptionFilter
FreeEnvironmentStringsA
ExitProcess
VirtualAlloc
SetUnhandledExceptionFilter
IsBadWritePtr
HeapCreate
VirtualFree
GetACP
HeapDestroy
GetTimeZoneInformation
TerminateProcess
HeapReAlloc
HeapSize
InterlockedDecrement
WideCharToMultiByte
GetLocalTime
GetSystemTime
Sleep
GetTickCount
GetCurrentDirectoryA
ReadFile
GetProcAddress
GetCurrentThreadId
CreateFileA
WriteFile
GetLastError
CloseHandle
lstrcatA
WinExec
lstrcpyA
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
lstrcmpA
GlobalAlloc
GlobalFree
lstrcmpiA
FindResourceA
LoadResource
LockResource
GetCPInfo
lstrlenW
lstrlenA
GetVersion
GetVersionExA
RaiseException
GetCommandLineA
GetStartupInfoA
HeapFree
RtlUnwind
HeapAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
WritePrivateProfileStringA
SetErrorMode
GetFileSize
GetFileTime
GetOEMCP
GetFileAttributesA
SizeofResource
LocalReAlloc
GetProcessVersion
TlsGetValue
TlsFree
TlsSetValue
GlobalReAlloc
LocalAlloc
GlobalHandle
TlsAlloc
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentThread
InitializeCriticalSection
GlobalFlags
GetThreadLocale
GetModuleFileNameA
GetVolumeInformationA
GetFullPathNameA
FindFirstFileA
FindClose
UnlockFile
SetEndOfFile
SetFilePointer
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
GlobalGetAtomNameA
GlobalDeleteAtom
GlobalAddAtomA
GlobalFindAtomA
LocalFree
lstrcpynA
FormatMessageA
MulDiv
GlobalLock
GlobalUnlock
MultiByteToWideChar
GetModuleHandleA
SetLastError
InterlockedIncrement
GetProfileStringA

user32

SetCapture
LockWindowUpdate
GetDCEx
ReleaseCapture
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
wvsprintfA
CharUpperA
LoadStringA
EndDialog
CreateDialogIndirectParamA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
IsWindowEnabled
ShowWindow
MoveWindow
IsDialogMessageA
SetRectEmpty
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetActiveWindow
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
IsWindowVisible
RegisterClipboardFormatA
PostThreadMessageA
MessageBoxA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
TrackPopupMenu
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowPos
RegisterWindowMessageA
GetWindowPlacement
IntersectRect
EndPaint
BeginPaint
GetWindowDC
DestroyMenu
IsIconic
DrawIcon
GetSystemMenu
LoadIconA
LoadCursorA
CopyIcon
IsWindow
GetMessagePos
ScreenToClient
PtInRect
SetTimer
MessageBeep
KillTimer
SetWindowLongA
LoadImageA
GetIconInfo
CreateIconIndirect
DrawStateA
FrameRect
InflateRect
OffsetRect
DrawFocusRect
GetWindowRect
PostMessageA
ClientToScreen
WindowFromPoint
GetActiveWindow
SetCursor
SetParent
GetNextDlgGroupItem
CopyAcceleratorTableA
CharNextA
GetTopWindow
UnhookWindowsHookEx
GetParent
GetNextDlgTabItem
IsMenu
SendMessageA
GetWindowLongA
DestroyCursor
IsChild
InvalidateRect
GetClassNameA
GetClientRect
EnableWindow
GetSubMenu
GrayStringA
TabbedTextOutA
LoadBitmapA
GetSysColorBrush
GetMenuStringA
CreateMenu
CreatePopupMenu
GetMenuItemID
GetMenuState
ModifyMenuA
GetMenuItemCount
AppendMenuA
GetSystemMetrics
GetDesktopWindow
GetDC
DrawTextA
ReleaseDC
DrawIconEx
DestroyIcon
SystemParametersInfoA
GetSysColor
CopyRect
FillRect
DrawEdge
SetRect
GetMenuItemInfoA
WinHelpA
GetCapture
SetWindowTextA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode

gdi32

CreateDIBitmap
GetTextExtentPointA
CreateSolidBrush
DeleteDC
SelectPalette
CreateFontIndirectA
SetBkMode
SetMapMode
SetViewportOrgEx
SetStretchBltMode
SetViewportExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
GetClipBox
SelectClipRgn
ScaleWindowExtEx
IntersectClipRect
ExcludeClipRect
LineTo
MoveToEx
GetBkMode
RestoreDC
CreateRectRgn
GetViewportExtEx
CreatePatternBrush
GetWindowExtEx
GetMapMode
SetRectRgn
DPtoLP
CombineRgn
CreateFontA
GetTextMetricsA
GetCharWidthA
GetBkColor
LPtoDP
GetTextColor
SaveDC
CreateRectRgnIndirect
RoundRect
SetDIBitsToDevice
StretchDIBits
CreatePalette
CreateBitmap
SetBkColor
GetDIBits
RealizePalette
GetStockObject
SetTextColor
Rectangle
Escape
ExtTextOutA
TextOutA
PatBlt
GetPixel
SetPixel
GetObjectA
CreateDIBSection
SelectObject
RectVisible
GetDeviceCaps
CreatePen
DeleteObject
Ellipse
GetTextExtentPoint32A
PtVisible
CreateCompatibleBitmap
BitBlt
GetTextExtentPoint32W
CreateCompatibleDC

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegQueryValueA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA

shell32

ShellExecuteA
ShellExecuteExA

comctl32

_TrackMouseEvent
ImageList_Draw
ImageList_GetImageCount
ImageList_GetIcon
ImageList_AddMasked
ImageList_ReplaceIcon
ord17
ImageList_Destroy
ImageList_Create

oledlg

ord8

ole32

CLSIDFromString
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
CoGetClassObject
OleInitialize
OleUninitialize
CLSIDFromProgID
CoFreeUnusedLibraries
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject

olepro32

ord253

oleaut32

SysStringLen
SysFreeString
SysAllocStringByteLen
SysAllocString
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen

wsock32

sendto
WSAGetLastError
inet_ntoa
recvfrom
connect
select
recv
WSAStartup
ioctlsocket
bind
getsockname
closesocket
WSACleanup
htonl
htons
gethostname
gethostbyname
setsockopt
socket

netapi32

Netbios

Sections

.text
Size: 240KB - Virtual size: 238KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b441bd28fa955237ec257f7efd853f1c

Headers

File Characteristics

Imports

iphlpapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wsock32

netapi32

Sections

.text Size: 240KB - Virtual size: 238KB

.rdata Size: 52KB - Virtual size: 51KB

.data Size: 16KB - Virtual size: 31KB

.rsrc Size: 1.6MB - Virtual size: 1.6MB

.text
Size: 240KB - Virtual size: 238KB

.rdata
Size: 52KB - Virtual size: 51KB

.data
Size: 16KB - Virtual size: 31KB

.rsrc
Size: 1.6MB - Virtual size: 1.6MB