574f8d9d8232510c87645241480b3baa01311373b48c5b633865bf14b84eb188

Sharing

Copy URL

Twitter E-mail

General

Target

574f8d9d8232510c87645241480b3baa01311373b48c5b633865bf14b84eb188
Size

5.3MB
MD5

d2ef1cda9897359444b6a134897a0ee8
SHA1

6bc318bb5405c610ec9783cb019f0af7745dcff5
SHA256

574f8d9d8232510c87645241480b3baa01311373b48c5b633865bf14b84eb188
SHA512

8220e794e9f936a5c912310d0708d75be95790ada66c07dff4062ea58151b31433c38b9c48a154fc03033d09f93dbf19077fdad5b108024e96e6c2981f0c1991
SSDEEP

98304:JTw4uv+FzAJC6UcvwzsIqba4JMSEjyueKbOKbjk:Zw4o+FzAJC6XMsIl4Oyueth

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
574f8d9d8232510c87645241480b3baa01311373b48c5b633865bf14b84eb188

Files

574f8d9d8232510c87645241480b3baa01311373b48c5b633865bf14b84eb188
.exe windows x64

ad11f459606b8592c04fde99f0ed3335

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ws2_32

WSAStartup
accept
closesocket
recv
send
socket
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSAResetEvent
WSASetEvent
WSAWaitForMultipleEvents
WSAGetLastError
gethostname
ioctlsocket
htonl
freeaddrinfo
getaddrinfo
sendto
recvfrom
listen
ntohl
inet_pton
WSAIoctl
setsockopt
htons
getsockopt
getsockname
getpeername
connect
bind
WSASetLastError
select
ntohs
WSACleanup
__WSAFDIsSet

kernel32

GetVersionExA
GetModuleHandleA
LoadLibraryA
SizeofResource
LockResource
LoadResource
FreeResource
GetFullPathNameW
FindFirstFileW
FindClose
HeapSize
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
HeapReAlloc
GetTimeZoneInformation
DeleteFileW
PeekConsoleInputA
ReadConsoleInputW
GetNumberOfConsoleInputEvents
SetConsoleMode
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetCurrentThread
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
ExitProcess
SetStdHandle
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetDriveTypeW
GetConsoleCP
FreeLibraryAndExitThread
ExitThread
CreateThread
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlUnwind
InterlockedFlushSList
InterlockedPushEntrySList
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetStartupInfoW
ResetEvent
InitializeCriticalSectionAndSpinCount
GetFileAttributesW
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GlobalLock
GlobalUnlock
GlobalAlloc
GetCPInfo
CompareStringEx
GetStringTypeW
GetLocaleInfoEx
CloseThreadpoolWait
GetLocalTime
GetVersionExW
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
CreateThreadpoolTimer
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
GetTickCount64
GetSystemTimeAsFileTime
GetCurrentProcessorNumber
FlushProcessWriteBuffers
CreateEventExW
SleepConditionVariableSRW
SleepConditionVariableCS
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
InitOnceExecuteOnce
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
LCMapStringEx
DecodePointer
EncodePointer
GetNativeSystemInfo
GetExitCodeThread
SwitchToThread
TryEnterCriticalSection
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
CreateSymbolicLinkW
FlushInstructionCache
GetCurrentProcess
HeapDestroy
HeapCreate
DebugBreak
GetModuleHandleW
GetProcessHeap
GetCurrentProcessId
CreateMutexExW
GetProcAddress
HeapAlloc
OpenSemaphoreW
WaitForSingleObjectEx
ReleaseMutex
GetModuleHandleExW
HeapFree
CreateSemaphoreExW
GetModuleFileNameA
SetCurrentDirectoryW
OutputDebugStringA
SetConsoleTextAttribute
GetTickCount
GetFileInformationByHandleEx
CreateHardLinkW
MoveFileExW
CopyFileW
CreateDirectoryExW
DeviceIoControl
AreFileApisANSI
GetTempPathW
SetFileTime
SetFilePointerEx
SetFileInformationByHandle
UnmapViewOfFile
GetStdHandle
WriteConsoleW
GenerateConsoleCtrlEvent
SetConsoleCtrlHandler
GetConsoleWindow
SetFileAttributesW
SetEndOfFile
GetFinalPathNameByHandleW
lstrlenA
GetFileInformationByHandle
LoadLibraryW
SetThreadpoolWait
FreeLibrary
GetFileAttributesExW
GetDiskFreeSpaceExW
FindNextFileW
IsBadReadPtr
MulDiv
CreateThreadpoolWait
FindResourceW
OpenEventW
OpenFileMappingW
SetEvent
ResumeThread
AssignProcessToJobObject
SetInformationJobObject
CreateJobObjectW
SetErrorMode
FindFirstFileExW
OpenThread
OpenProcess
WaitForMultipleObjects
GetModuleFileNameW
CreateEventW
MapViewOfFile
CreateFileMappingW
AllocConsole
SetHandleInformation
CreatePipe
WriteFile
ReadFile
CreateProcessW
Sleep
GetProcessTimes
GetExitCodeProcess
MultiByteToWideChar
WideCharToMultiByte
GetCurrentDirectoryW
LocalFree
FormatMessageA
ReleaseSemaphore
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
CreateSemaphoreW
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
CreateDirectoryW
IsDebuggerPresent
FormatMessageW
GetCurrentThreadId
OutputDebugStringW
CreateFileW
GetLastError
SetLastError
IsProcessorFeaturePresent
GetFileSizeEx
CreateFileA
VerifyVersionInfoW
VerSetConditionMask
PeekNamedPipe
GetFileType
MoveFileExA
GetEnvironmentVariableA
GetSystemDirectoryA
QueryPerformanceFrequency
SleepEx
InitializeCriticalSectionEx
QueryPerformanceCounter

user32

DestroyIcon
PostMessageW
DefWindowProcW
CallWindowProcW
UnregisterClassW
RegisterClassExW
CreateWindowExW
SetTimer
GetDlgItem
GetClientRect
GetWindowRect
MapWindowPoints
GetWindowLongW
GetCursorPos
RegisterWindowMessageW
GetActiveWindow
GetWindowLongPtrW
SetWindowLongPtrW
GetParent
GetWindow
KillTimer
GetForegroundWindow
MessageBoxW
GetLastActivePopup
FindWindowW
FillRect
InvertRect
DrawIconEx
OffsetRect
IsWindowVisible
SetForegroundWindow
SendMessageW
DestroyWindow
ShowWindow
SetWindowPos
LoadCursorW
UpdateLayeredWindow
MapVirtualKeyA
CharLowerBuffW
GetDesktopWindow
SetActiveWindow
EnableWindow
SystemParametersInfoA
DrawTextW
GetWindowPlacement
GetSystemMetrics
EnableMenuItem
ClientToScreen
MsgWaitForMultipleObjects
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
GetSysColor
SetMenuContextHelpId
GetMenuItemInfoW
SetMenuInfo
GetMenuInfo
TrackPopupMenu
DeleteMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
CheckMenuItem
DestroyMenu
CreatePopupMenu
IsWindowEnabled
IsMenu
GetIconInfo
CharNextW
LoadImageW
CreateIconFromResource
LoadBitmapW
GetKeyState
GetFocus
LoadIconW
DestroyCursor
PtInRect
EqualRect
SetRect
SetCursor
GetClassNameW
IsRectEmpty
UnionRect
IntersectRect
InflateRect
CopyRect
ScreenToClient
SetCaretPos
HideCaret
GetCaretBlinkTime
CreateCaret
SetWindowTextW
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
GetDC
UpdateWindow
ReleaseCapture
SetCapture
GetCapture
SetFocus
IsZoomed
IsIconic
SetLayeredWindowAttributes
AnimateWindow
IsWindow
PostQuitMessage
TrackMouseEvent
GetMonitorInfoW
MonitorFromWindow

gdi32

RoundRect
SaveDC
ExtSelectClipRgn
SetRectRgn
SetROP2
SetTextColor
GetWorldTransform
SetWorldTransform
CreateDIBSection
ExtCreatePen
Polyline
GetCurrentObject
GetViewportOrgEx
RestoreDC
PtInRegion
Pie
OffsetRgn
IntersectClipRect
GetTextExtentPoint32W
GetTextColor
Ellipse
ExcludeClipRect
GetClipRgn
RectInRegion
SetViewportOrgEx
CreateCompatibleBitmap
GetDCOrgEx
SetBkMode
Rectangle
GetStockObject
GetClipBox
CreateSolidBrush
CreateFontIndirectW
SetGraphicsMode
GetDeviceCaps
CreateBitmap
EnumFontsW
GetObjectW
StretchBlt
SelectObject
DeleteDC
CreateCompatibleDC
DeleteObject
CreateRoundRectRgn
BitBlt
GetRgnBox
Arc
CombineRgn
CreateEllipticRgnIndirect
CreatePen
CreatePatternBrush
CreateRectRgn
CreateRectRgnIndirect

shell32

SetCurrentProcessExplicitAppUserModelID
Shell_NotifyIconW
ShellExecuteW
GetCurrentProcessExplicitAppUserModelID
SHGetKnownFolderPath

ole32

CoCreateInstance
CLSIDFromProgID
CLSIDFromString
OleLockRunning
CreateStreamOnHGlobal
OleUninitialize
OleInitialize
StringFromGUID2
CoCreateGuid
CoTaskMemFree
CreateBindCtx

oleaut32

CreateErrorInfo
SysFreeString
SysAllocString
GetErrorInfo
SetErrorInfo
VariantChangeType
VariantClear
VariantInit

shlwapi

StrToIntExW

iphlpapi

GetTcpTable
GetUdpTable

wininet

InternetQueryOptionW
InternetSetOptionW

imm32

ImmGetContext
ImmReleaseContext
ImmAssociateContext

gdiplus

GdipGetImageEncoders
GdipGetImageEncodersSize
GdipDrawImageRectI
GdipGraphicsClear
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipGetImageHeight
GdipGetImageGraphicsContext
GdipSaveImageToFile
GdipGetImageWidth
GdipCloneImage
GdiplusShutdown
GdiplusStartup
GdipFree
GdipAlloc
GdipDisposeImage

msimg32

AlphaBlend
GradientFill

crypt32

CertAddCertificateContextToStore
CryptDecodeObjectEx
PFXImportCertStore
CertFindExtension
CertFreeCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore
CertGetNameStringA
CryptQueryObject
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChain
CryptStringToBinaryA

advapi32

CryptAcquireContextA
CryptEncrypt
CryptImportKey
CryptDestroyKey
CryptReleaseContext
CryptGetHashParam
CryptGenRandom
CryptCreateHash
CryptHashData
CryptDestroyHash

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 806KB - Virtual size: 805KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ad11f459606b8592c04fde99f0ed3335

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

kernel32

user32

gdi32

shell32

ole32

oleaut32

shlwapi

iphlpapi

wininet

imm32

gdiplus

msimg32

crypt32

advapi32

Sections

.text Size: 3.0MB - Virtual size: 3.0MB

.rdata Size: 806KB - Virtual size: 805KB

.data Size: 45KB - Virtual size: 122KB

.pdata Size: 166KB - Virtual size: 166KB

_RDATA Size: 512B - Virtual size: 244B

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.reloc Size: 29KB - Virtual size: 29KB

.text
Size: 3.0MB - Virtual size: 3.0MB

.rdata
Size: 806KB - Virtual size: 805KB

.data
Size: 45KB - Virtual size: 122KB

.pdata
Size: 166KB - Virtual size: 166KB

_RDATA
Size: 512B - Virtual size: 244B

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

.reloc
Size: 29KB - Virtual size: 29KB