d9e6d5b35c6b8ac47c7a20d03f88e27117321c08f3bccbd1cf4682f2ce393ccb

Sharing

Copy URL

Twitter E-mail

General

Target

d9e6d5b35c6b8ac47c7a20d03f88e27117321c08f3bccbd1cf4682f2ce393ccb
Size

2.4MB
MD5

796756c72484d16699a134a5d18280e0
SHA1

bc7557a58ed8796ee91dfa2c8e6dadacdcdcd73a
SHA256

d9e6d5b35c6b8ac47c7a20d03f88e27117321c08f3bccbd1cf4682f2ce393ccb
SHA512

32fcb2a01660221b01b9647527d300a91d61664f4e8fb36e8952d801de5599f553e7a6a333e40b30131a7d1c60e57ae4403f6516dac1f2f1965f4e6230b2dae5
SSDEEP

49152:HXAUWfrBWZf8YuTUInQYD8IEu+1c5w2hL1SXJw2DqKsTylZDA4bhp7H7zFxRIIE8:wzWZf8YuoInLvE3c5w2hL1SXJw2D1DAO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9e6d5b35c6b8ac47c7a20d03f88e27117321c08f3bccbd1cf4682f2ce393ccb

Files

d9e6d5b35c6b8ac47c7a20d03f88e27117321c08f3bccbd1cf4682f2ce393ccb
.exe windows x86

60b5f121f18131f578c1f61f47a35164

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryW
GetStringTypeW
CompareStringW
GetTimeZoneInformation
WriteConsoleW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetDriveTypeW
GetProcessHeap
CreateFileW
HeapCreate
IsValidCodePage
GetConsoleMode
GetConsoleCP
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
SetStdHandle
HeapSize
HeapQueryInformation
VirtualQuery
VirtualAlloc
Sleep
FindFirstFileExA
GetDriveTypeA
GetFileInformationByHandle
CreateThread
ExitThread
GetSystemTimeAsFileTime
HeapReAlloc
GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapAlloc
HeapFree
EncodePointer
DecodePointer
ExitProcess
RaiseException
RtlUnwind
LCMapStringW
FindResourceExW
SearchPathA
GetProfileIntA
VirtualProtect
InitializeCriticalSectionAndSpinCount
SetErrorMode
GetNumberFormatA
GetWindowsDirectoryA
GetTempPathA
GetFileSizeEx
GetFileAttributesExA
FileTimeToLocalFileTime
GetShortPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
MoveFileA
lstrcmpiA
GetStringTypeExA
FileTimeToSystemTime
GetThreadLocale
GetACP
GetOEMCP
GetCPInfo
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GlobalFlags
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
GetEnvironmentStringsW
QueryPerformanceCounter
SetHandleCount
ReplaceFileA
GetPrivateProfileStringA
GetPrivateProfileIntA
ResumeThread
SetThreadPriority
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
InterlockedExchange
lstrcmpA
GetModuleHandleW
GlobalFree
CopyFileA
GlobalSize
GlobalAlloc
LocalFree
lstrlenW
MulDiv
FindResourceA
FreeResource
GetCurrentThreadId
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
CompareStringA
LoadLibraryW
lstrcmpW
GlobalLock
GlobalUnlock
GetCurrentProcessId
GlobalGetAtomNameA
GlobalAddAtomA
MultiByteToWideChar
ActivateActCtx
DeactivateActCtx
ExpandEnvironmentStringsA
GetStdHandle
GetFileType
WaitForMultipleObjects
PeekNamedPipe
FormatMessageA
WaitForSingleObject
GetModuleHandleA
LoadLibraryA
GetSystemDirectoryA
VerSetConditionMask
VerifyVersionInfoA
SleepEx
GetTickCount
SetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
FreeLibrary
GetProcAddress
WriteFile
SetFileTime
GetCurrentDirectoryA
GetFileAttributesA
CreateDirectoryA
LocalFileTimeToFileTime
lstrlenA
SystemTimeToFileTime
ReadFile
SetFilePointer
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameA
lstrcpyA
lstrcatA
WritePrivateProfileStringA
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SizeofResource
GetSystemInfo
DeleteFileA
CreateFileA
CloseHandle
FindFirstFileA
FindClose
GetLastError

user32

GetIconInfo
HideCaret
InvertRect
GetMenuDefaultItem
CreateAcceleratorTableA
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
SetCursorPos
DestroyAcceleratorTable
SetClassLongA
NotifyWinEvent
IsMenu
GetAsyncKeyState
UpdateLayeredWindow
EnableScrollBar
MonitorFromPoint
DrawIconEx
DrawFocusRect
DrawFrameControl
DrawEdge
DrawStateA
UnregisterClassA
GetTabbedTextExtentW
CreateMenu
DrawIcon
PostThreadMessageA
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
CharNextA
CharUpperA
SetCapture
LockWindowUpdate
GetDCEx
WindowFromPoint
KillTimer
SetTimer
UnionRect
SetLayeredWindowAttributes
EnumDisplayMonitors
GetSysColorBrush
MapVirtualKeyA
GetKeyNameTextA
SetWindowRgn
RealChildWindowFromPoint
SystemParametersInfoA
GetMenuItemInfoA
InflateRect
LoadCursorW
LoadCursorA
DestroyCursor
SetRect
RegisterClipboardFormatA
SetWindowContextHelpId
MapDialogRect
LoadMenuW
LoadAcceleratorsW
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
ShowOwnedPopups
GetMessageA
TranslateMessage
GetCursorPos
PostQuitMessage
SetParent
GetSystemMenu
DeleteMenu
IsRectEmpty
IsZoomed
GetSystemMetrics
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
CopyImage
GetMenuStringA
AppendMenuA
InsertMenuA
RemoveMenu
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
IsChild
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
MessageBoxA
GetClassInfoExA
RegisterClassA
ScreenToClient
DeferWindowPos
GetScrollInfo
SetScrollInfo
PtInRect
SetWindowPlacement
GetWindowPlacement
DefWindowProcA
CallWindowProcA
GetClassNameA
GetSysColor
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
IsClipboardFormatAvailable
WaitMessage
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
LoadImageW
SetMenuDefaultItem
CopyIcon
GetDoubleClickTime
GetUpdateRect
CharUpperBuffA
SubtractRect
FrameRect
WinHelpA
LoadImageA
DestroyIcon
SetFocus
GetWindowThreadProcessId
IsWindowEnabled
EqualRect
GetDlgItem
GetDlgCtrlID
GetKeyState
LoadIconW
IsCharLowerA
GetWindowRgn
FillRect
MapVirtualKeyExA
SetCursor
PeekMessageA
GetCapture
ReleaseCapture
LoadAcceleratorsA
SetActiveWindow
IsWindowVisible
IsIconic
InsertMenuItemA
CreatePopupMenu
GetClassInfoA
IntersectRect
OffsetRect
SetRectEmpty
CopyRect
GetLastActivePopup
PostMessageA
SetMenu
GetDesktopWindow
GetWindow
ShowWindow
AdjustWindowRectEx
RedrawWindow
SetWindowPos
GetClientRect
GetWindowLongA
SetWindowLongA
IsWindow
TranslateAcceleratorA
TranslateMDISysAccel
BringWindowToTop
GetActiveWindow
DrawMenuBar
CreateWindowExA
GetParent
GetMenuItemCount
GetSubMenu
GetMenuItemID
DefMDIChildProcA
SendMessageA
GetMenu
DefFrameProcA
wsprintfA
UpdateWindow
EnableWindow
InvalidateRect
GetWindowRect
ValidateRect

gdi32

Rectangle
CreateDIBSection
CreateRectRgnIndirect
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
SetRectRgn
CombineRgn
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
CreateEllipticRgn
LPtoDP
Ellipse
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceA
GetTextExtentPointA
GetTextExtentPoint32W
GetWindowOrgEx
CreatePolygonRgn
Polyline
Polygon
GetViewportOrgEx
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
SetPixel
SetDIBColorTable
StretchBlt
EnumFontFamiliesExA
ExtFloodFill
SetPaletteEntries
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
SetPixelV
ExtTextOutA
TextOutA
RectVisible
EndDoc
AbortDoc
PtVisible
SetAbortProc
Escape
EndPage
StartPage
DPtoLP
StretchDIBits
CreateFontA
GetCharWidthA
GetTextExtentPoint32A
GetTextMetricsA
CreateHatchBrush
CreateSolidBrush
CreatePen
GetObjectType
SelectPalette
GetStockObject
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
StartDocA
GetPixel
BitBlt
CreateRoundRectRgn
CreateFontIndirectA
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
DeleteObject
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreateDCA
CopyMetaFileA
GetDeviceCaps
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
CreateCompatibleDC
CreateCompatibleBitmap
PatBlt
SelectObject

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
GetJobA
ClosePrinter

advapi32

RegDeleteKeyA
CryptGenRandom
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptGetHashParam
CryptDestroyKey
CryptEncrypt
CryptImportKey
RegCloseKey
RegSetValueA
RegEnumKeyExA
RegOpenKeyExW
RegEnumValueA
GetFileSecurityA
SetFileSecurityA
RegQueryValueA
RegEnumKeyA
RegQueryValueExA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
CryptReleaseContext

shell32

DragFinish
DragQueryFileA
SHAddToRecentDocs
ExtractIconA
SHGetFileInfoA
SHAppBarMessage
SHBrowseForFolderA
ShellExecuteA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetDesktopFolder

comctl32

InitCommonControlsEx
ImageList_GetIconSize

shlwapi

PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathStripPathA
PathRemoveFileSpecW

ole32

CoLockObjectExternal
DoDragDrop
OleGetClipboard
StringFromCLSID
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CoCreateGuid
CLSIDFromProgID
CLSIDFromString
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoUninitialize
CoCreateInstance
CoInitialize
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CreateStreamOnHGlobal
CoInitializeEx
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
RevokeDragDrop
RegisterDragDrop
CoTaskMemFree
OleLockRunning

oleaut32

VariantClear
SysAllocString
OleCreateFontIndirect
VarBstrFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
SysStringLen
SysAllocStringByteLen
SysFreeString
SysAllocStringLen
VariantInit
VariantChangeType
VariantCopy

oledlg

ord8

wldap32

ord22
ord211
ord143
ord60
ord50
ord26
ord30
ord200
ord32
ord35
ord79
ord33
ord301
ord27
ord41
ord46

ws2_32

WSACleanup
WSASetLastError
__WSAFDIsSet
WSAGetLastError
select
recv
send
WSAIoctl
setsockopt
getsockname
ntohs
bind
htons
getsockopt
getpeername
closesocket
socket
connect
freeaddrinfo
getaddrinfo
sendto
recvfrom
accept
listen
ioctlsocket
gethostname
ntohl
htonl
WSAStartup

crypt32

CertFreeCertificateContext

gdiplus

GdipAlloc
GdipDeleteGraphics
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdipDrawImageI
GdipFree

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 333KB - Virtual size: 333KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 395KB - Virtual size: 395KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 177KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

60b5f121f18131f578c1f61f47a35164

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

wldap32

ws2_32

crypt32

gdiplus

oleacc

imm32

winmm

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 333KB - Virtual size: 333KB

.data Size: 26KB - Virtual size: 55KB

.rsrc Size: 395KB - Virtual size: 395KB

.reloc Size: 177KB - Virtual size: 176KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 333KB - Virtual size: 333KB

.data
Size: 26KB - Virtual size: 55KB

.rsrc
Size: 395KB - Virtual size: 395KB

.reloc
Size: 177KB - Virtual size: 176KB