2bbef21faa3998b220ebe6f75980d8289ede887dc70e83a4d6f42c04885480ab

Sharing

Copy URL Twitter E-mail

General

Target

2bbef21faa3998b220ebe6f75980d8289ede887dc70e83a4d6f42c04885480ab
Size

1.0MB
MD5

856b7c53d530ae6d5b574afeaaf816c8
SHA1

9989a98db15ac3737be0a88a3c77c55f49b9932d
SHA256

2bbef21faa3998b220ebe6f75980d8289ede887dc70e83a4d6f42c04885480ab
SHA512

eb53a65660d7c2e0fe8a60346acfc185531b16c35369d3f39061ffa0a20b95272efab05bd7298dfd22dae415047180b35a448915749717204e23db1595ba8605
SSDEEP

6144:qujZ1jBCF2z5+HaqRRSl6aPM7tOF3ZSwLGqFSiCtqn2L7bBc:VjZ1FCFU+HFRRYCwFpScGqFSiit7bBc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bbef21faa3998b220ebe6f75980d8289ede887dc70e83a4d6f42c04885480ab

Files

2bbef21faa3998b220ebe6f75980d8289ede887dc70e83a4d6f42c04885480ab
.exe windows x86

64c9d712e066b47c7470d1cef92156e2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapReAlloc
HeapSize
LCMapStringEx
FlushFileBuffers
WriteConsoleW
GetStringTypeW
SetStdHandle
LoadLibraryW
OutputDebugStringW
LoadLibraryExW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount64
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetModuleFileNameA
RaiseException
SetLastError
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
InterlockedIncrement
SetFilePointer
GetConsoleCP
GetModuleHandleW
TerminateProcess
GetCurrentProcess
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ReadConsoleW
GetConsoleMode
GetStartupInfoW
InitOnceExecuteOnce
GetFileType
RtlUnwind
InitializeCriticalSectionAndSpinCount
GetStdHandle
AreFileApisANSI
GetProcAddress
GetModuleHandleExW
ExitProcess
InterlockedDecrement
GetProcessHeap
DecodePointer
EncodePointer
GetCommandLineA
IsProcessorFeaturePresent
IsDebuggerPresent
GetFileAttributesExW
CreateDirectoryW
HeapAlloc
HeapFree
lstrcatW
GlobalFree
GlobalUnlock
GlobalAlloc
GlobalLock
lstrcpyW
GetCurrentDirectoryW
GetVersionExW
GetCurrentThreadId
lstrcmpW
PurgeComm
WaitCommEvent
SetCommMask
GetOverlappedResult
CreateFileW
ReadFile
SetCommTimeouts
SetCommState
WriteFile
GetCommState
ClearCommError
SetupComm
WaitForSingleObject
GetLocalTime
Sleep
WaitForMultipleObjects
ResetEvent
WideCharToMultiByte
CreateThread
CloseHandle
DeleteCriticalSection
CreateEventW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
SetEvent
GetShortPathNameW
FindNextFileW
FindClose
GetLastError
GetModuleFileNameW
FindFirstFileW
GetSystemDefaultLangID
MultiByteToWideChar
SetFilePointerEx
SetEndOfFile

user32

RegisterHotKey
GetForegroundWindow
LoadImageW
CreateAcceleratorTableW
RegisterClassW
UnregisterHotKey
GetDlgItem
DialogBoxIndirectParamW
MapDialogRect
SetWindowTextW
SendMessageW
MessageBoxW
GetWindowTextW
wsprintfW
CopyRect
DispatchMessageW
UpdateWindow
LoadBitmapW
FrameRect
ShowWindow
ReleaseDC
OffsetRect
LoadIconW
GetClientRect
DrawIconEx
IsZoomed
DrawTextW
FillRect
GetWindowDC
GetWindowRect
ScreenToClient
TranslateMessage
PostQuitMessage
GetSystemMetrics
GetKeyState
GetFocus
ClientToScreen
CallWindowProcW
GetMessageW
SetWindowRgn
TranslateAcceleratorW
DefWindowProcW
FindWindowW
DrawEdge
EndDialog
GetSysColor
CallNextHookEx
SetWindowsHookExW
UnhookWindowsHookEx
SetCursor
TrackPopupMenu
LoadCursorW
AppendMenuW
EnableMenuItem
CreatePopupMenu
RemoveMenu
DestroyMenu
SetMenuItemInfoW
CheckMenuItem
DrawIcon
PostMessageW
GetScrollInfo
SystemParametersInfoW
ScrollWindow
SetScrollInfo
GetWindowTextLengthW
GetParent
EnableWindow
SetWindowPos
TrackMouseEvent
KillTimer
GetWindowLongW
SetTimer
DestroyWindow
SetFocus
GetDC
SetLayeredWindowAttributes
MoveWindow
EndPaint
SetCapture
BeginPaint
PtInRect
GetCapture
InvalidateRect
SetWindowLongW
CreateWindowExW
ReleaseCapture
GetDlgCtrlID

gdi32

CreateRectRgnIndirect
CombineRgn
RectInRegion
CreateCompatibleBitmap
BitBlt
SelectObject
SetStretchBltMode
CreateSolidBrush
GetTextMetricsW
DeleteObject
SetTextColor
SetBkMode
GetObjectW
GetBitmapBits
CreatePen
DeleteDC
LineTo
MoveToEx
SetBkColor
TextOutW
Rectangle
GetStockObject
SetROP2
CreateFontIndirectW
StretchDIBits
CreateCompatibleDC
CreateRectRgn

comdlg32

GetOpenFileNameW
GetSaveFileNameW
ChooseColorW

advapi32

CryptReleaseContext
RegOpenKeyExW
CryptHashData
CryptDestroyHash
CryptCreateHash
RegEnumValueW
CryptAcquireContextW
CryptGetHashParam
RegCloseKey

shell32

SHGetPathFromIDListW
ShellExecuteW
SHGetSpecialFolderLocation

ws2_32

WSAIoctl
gethostname
setsockopt
gethostbyname
connect
WSAStartup
recvfrom
WSAGetLastError
htons
sendto
WSACleanup
recv
bind
socket
closesocket
send
listen
accept
inet_ntoa
inet_addr
shutdown

msimg32

GradientFill

comctl32

ord17
InitCommonControlsEx

uxtheme

SetWindowTheme

shlwapi

StrChrW
PathFileExistsW
StrStrW

Sections

.text
Size: 288KB - Virtual size: 287KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 318KB - Virtual size: 522KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 351KB - Virtual size: 351KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

64c9d712e066b47c7470d1cef92156e2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ws2_32

msimg32

comctl32

uxtheme

shlwapi

Sections

.text Size: 288KB - Virtual size: 287KB

.rdata Size: 58KB - Virtual size: 57KB

.data Size: 318KB - Virtual size: 522KB

.rsrc Size: 351KB - Virtual size: 351KB

.reloc Size: 41KB - Virtual size: 40KB

.text
Size: 288KB - Virtual size: 287KB

.rdata
Size: 58KB - Virtual size: 57KB

.data
Size: 318KB - Virtual size: 522KB

.rsrc
Size: 351KB - Virtual size: 351KB

.reloc
Size: 41KB - Virtual size: 40KB