f0effd26fa4eab1ee7c9ea1454a6f2d5fc0775667ae31fcf27e54f33b2a9bc65

Sharing

Copy URL

Twitter E-mail

General

Target

f0effd26fa4eab1ee7c9ea1454a6f2d5fc0775667ae31fcf27e54f33b2a9bc65
Size

1.6MB
MD5

c7fef371c929db0875c0cfa635742eb3
SHA1

555b65622ab7c7ed6cb410fb4e6773b4f7d6dfd8
SHA256

f0effd26fa4eab1ee7c9ea1454a6f2d5fc0775667ae31fcf27e54f33b2a9bc65
SHA512

d6e74eedb5c36492ec9dc0e86eef2525651ca4c26446f37c549519b2a7f52160ba4c8cd4228ef0312c623585e5ba505d6b1e9f370a1dec88a7f8617c43c06436
SSDEEP

24576:ewH+D4yyOTRByVtePltnd3nh2Vj1gbVA+m4GN4UGLc30H/0TB7p+wIL+jq:5GT6tePltndJk4GNLHkf0TB7p+1L/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0effd26fa4eab1ee7c9ea1454a6f2d5fc0775667ae31fcf27e54f33b2a9bc65

Files

f0effd26fa4eab1ee7c9ea1454a6f2d5fc0775667ae31fcf27e54f33b2a9bc65
.exe windows x86

1b33de50f4feae12b07d16c75ced11d0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
CompareStringW
HeapReAlloc
HeapAlloc
HeapFree
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileType
GetDriveTypeW
GetACP
GetStdHandle
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ResumeThread
ExitThread
CreateThread
LoadLibraryExW
TlsFree
InitializeCriticalSectionAndSpinCount
SetLastError
RtlUnwind
RaiseException
LCMapStringEx
GetCPInfo
CompareStringEx
DecodePointer
EncodePointer
InitializeCriticalSectionEx
GetStringTypeW
GetModuleFileNameA
GetModuleHandleA
TlsSetValue
TlsGetValue
GetLocaleInfoW
GetCurrentThread
Sleep
CreateMutexA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DuplicateHandle
SetFilePointer
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
WideCharToMultiByte
ReadConsoleW
FreeResource
CreateEventW
CreateMutexW
ReleaseMutex
SetEvent
CreateFileW
SetFilePointerEx
GetConsoleCP
FindClose
FindFirstFileExW
FindNextFileA
FindNextFileW
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
MultiByteToWideChar
VerifyVersionInfoW
VerSetConditionMask
DeleteFileW
GetFileAttributesW
SetFileAttributesW
CreateDirectoryW
FindResourceW
LoadLibraryW
OpenMutexW
SizeofResource
LoadResource
GetLastError
GetCurrentThreadId
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetProcAddress
LockResource
MulDiv
ReadFile
TerminateThread
WriteFile
GetFileSize
FreeLibrary
GetProcessHeap
GetModuleFileNameW
CloseHandle
WaitForSingleObject
TlsAlloc
FindFirstFileA
QueryPerformanceFrequency
SetEndOfFile
HeapSize
WriteConsoleW
GetTimeZoneInformation
SetStdHandle
GetFullPathNameA
GetFullPathNameW
GetCurrentDirectoryW
FlushFileBuffers
GetConsoleMode

user32

SetWindowsHookExW
UnhookWindowsHookEx
GetClassNameW
EnumWindows
GetWindowLongW
PtInRect
CallNextHookEx
LoadCursorW
SendMessageW
DialogBoxParamW
EndDialog
GetDlgItem
LoadIconW
IsDialogMessageW
SystemParametersInfoW
MonitorFromWindow
GetMonitorInfoW
GetWindowThreadProcessId
SetRect
FillRect
ScreenToClient
ClientToScreen
GetCursorPos
MessageBoxExW
SetDlgItemTextW
GetDlgItemTextW
SetFocus
EnableWindow
PostMessageW
CreatePopupMenu
DestroyMenu
InsertMenuW
TrackPopupMenu
GetParent
LoadStringW
GetDC
SetWindowPos
GetSystemMetrics
AdjustWindowRectEx
AdjustWindowRect
GetWindowRect
GetClientRect
SetWindowTextW
InvalidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
GetMenuItemRect
SetMenuItemBitmaps
DeleteMenu
RemoveMenu
AppendMenuW
CreateMenu
SetMenu
TranslateAcceleratorW
LoadAcceleratorsW
KillTimer
SetTimer
GetDlgItemInt
SetDlgItemInt
IsIconic
IsWindowVisible
SetWindowPlacement
GetWindowPlacement
SetLayeredWindowAttributes
UpdateLayeredWindow
DestroyWindow
IsWindow
GetClassInfoExW
RegisterClassExW
PostQuitMessage
DefWindowProcW
AttachThreadInput
DispatchMessageW
TranslateMessage
GetMessageW
RegisterWindowMessageW
UpdateWindow
UnregisterHotKey
RegisterHotKey
SetWindowLongW
GetWindowTextW
GetMenuItemCount
GetMenuItemID
GetSubMenu
EnableMenuItem
DrawMenuBar
GetMenu
GetAsyncKeyState
ShowWindow
CreateWindowExW
CallWindowProcW
ReleaseDC

gdi32

SetBkColor
SelectObject
GetStockObject
DeleteDC
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
SetDCBrushColor
TextOutW
GetTextExtentPoint32W
DeleteObject
CreateFontIndirectW
GetObjectW
GetDeviceCaps
CreateFontW
SetBkMode
SetTextColor
CreateDIBSection
BitBlt

comdlg32

FindTextW
ChooseFontW
GetOpenFileNameW
GetSaveFileNameW
ChooseColorW

shell32

DragQueryFileW
ShellExecuteW
Shell_NotifyIconW
DragFinish

ole32

StringFromGUID2
CoCreateInstance
CoUninitialize
CoInitialize
CreateStreamOnHGlobal

gdiplus

GdipAlloc
GdipDrawImageRectRect
GdipSetImageAttributesWrapMode
GdipSetImageAttributesColorMatrix
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipDrawImageRectRectI
GdipSetInterpolationMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipGetImageHeight
GdipGetImageWidth
GdipCreateBitmapFromStreamICM
GdipDisposeImage
GdipCloneImage
GdipFree
GdipCreateBitmapFromStream

msimg32

AlphaBlend

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

shlwapi

ord12
PathFileExistsW
PathFindFileNameW
PathFindExtensionW
PathRemoveExtensionW

comctl32

ord413
ord412
ord410
ord17
CreateStatusWindowW

ws2_32

socket
shutdown
send
recv
WSAStartup
htons
ioctlsocket
connect
closesocket
gethostbyname
WSACleanup
WSAGetLastError
inet_addr
select

crypt32

CertEnumCertificatesInStore
CertCloseStore
CertOpenSystemStoreA

advapi32

CryptReleaseContext
CryptGenRandom
CryptAcquireContextW

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 197KB - Virtual size: 250KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 177KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1b33de50f4feae12b07d16c75ced11d0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

shell32

ole32

gdiplus

msimg32

version

shlwapi

comctl32

ws2_32

crypt32

advapi32

Sections

.text Size: 1.0MB - Virtual size: 1.0MB

.rdata Size: 208KB - Virtual size: 208KB

.data Size: 197KB - Virtual size: 250KB

.rsrc Size: 177KB - Virtual size: 176KB

.reloc Size: 41KB - Virtual size: 41KB

.text
Size: 1.0MB - Virtual size: 1.0MB

.rdata
Size: 208KB - Virtual size: 208KB

.data
Size: 197KB - Virtual size: 250KB

.rsrc
Size: 177KB - Virtual size: 176KB

.reloc
Size: 41KB - Virtual size: 41KB