6436d85296838903c02e6286b1f170ec8de49f377020ea99e4d6e5381bc98b28

Sharing

Copy URL Twitter E-mail

General

Target

6436d85296838903c02e6286b1f170ec8de49f377020ea99e4d6e5381bc98b28
Size

3.1MB
MD5

25a854f9c54add9efc17437f4f684982
SHA1

74c9322b007a8dd86d57e413a42cbfa53ebe1afc
SHA256

6436d85296838903c02e6286b1f170ec8de49f377020ea99e4d6e5381bc98b28
SHA512

566ce0f39a44fd18a09ddf6224dcaeaea943f9b12a8f22e523feca7a502390fd04e91e88ead431ad456602adb97485d68c0e892963c1499263738b03ffec3d18
SSDEEP

98304:V5bnO4HFNJeH/eHMNBVaaCc7tw/VJXtReB:Vh/HFNJjuaWw/VJXu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6436d85296838903c02e6286b1f170ec8de49f377020ea99e4d6e5381bc98b28

Files

6436d85296838903c02e6286b1f170ec8de49f377020ea99e4d6e5381bc98b28
.exe windows x86

e983d85b06eb694b335d483faaa158d0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
VirtualQuery
VirtualAlloc
GetDriveTypeW
RtlUnwind
QueryPerformanceFrequency
OutputDebugStringW
GetCommandLineA
HeapQueryInformation
SetStdHandle
GetFileType
GetStdHandle
ExitProcess
GetACP
LCMapStringW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetStringTypeW
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
GetTempFileNameW
GetTempPathW
GetProfileIntW
SearchPathW
GetWindowsDirectoryW
FindResourceExW
SetErrorMode
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
VerifyVersionInfoW
VerSetConditionMask
GetCurrentDirectoryW
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GlobalFlags
GlobalGetAtomNameW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GetThreadLocale
lstrcmpiW
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
GetPrivateProfileIntW
lstrcmpA
GetVersionExW
GetCurrentThread
ResumeThread
SuspendThread
SetThreadPriority
CreateEventW
WaitForSingleObject
SetEvent
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindNextFileW
FindFirstFileW
FindClose
FileTimeToLocalFileTime
GetCurrentProcessId
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryW
LoadLibraryA
LoadLibraryExW
GetProcAddress
GetModuleHandleA
FreeResource
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
OutputDebugStringA
FormatMessageW
MulDiv
LocalFree
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
SetLastError
DeleteCriticalSection
RaiseException
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
DecodePointer
GetTickCount
WideCharToMultiByte
CopyFileW
DeleteFileW
CreateFileW
RemoveDirectoryW
CreateDirectoryW
WritePrivateProfileStringW
InterlockedExchange
GetCommandLineW
lstrcpyW
GetLocalTime
GetSystemTime
ReadFile
Sleep
GetModuleFileNameW
CreateMutexW
CloseHandle
GetModuleHandleW
GetPrivateProfileStringW
MultiByteToWideChar
FindResourceW
SizeofResource
LoadResource
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetLastError
LockResource
GetSystemInfo
WriteConsoleW

user32

SetRectEmpty
SendDlgItemMessageA
CopyImage
RealChildWindowFromPoint
LoadCursorW
GetSysColorBrush
MapVirtualKeyW
GetKeyNameTextW
CharUpperW
MapDialogRect
SetWindowContextHelpId
SetCursor
ShowOwnedPopups
PostQuitMessage
TranslateMessage
GetMessageW
GetMenuItemInfoW
DestroyMenu
LoadMenuW
GetWindowThreadProcessId
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
IsDialogMessageW
SetWindowTextW
IsWindowEnabled
CheckDlgButton
MoveWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
GetWindowLongW
EqualRect
MapWindowPoints
MessageBoxW
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
OffsetRect
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
GetForegroundWindow
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
SetFocus
GetDlgCtrlID
GetDlgItem
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
GetNextDlgGroupItem
EmptyClipboard
GetWindowPlacement
SetWindowPos
DrawIconEx
RegisterClipboardFormatW
DrawEdge
PostMessageW
EnableWindow
GetDC
ReleaseDC
SetWindowRgn
DestroyWindow
IsChild
IsMenu
IsWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
TrackMouseEvent
IsZoomed
SetCapture
ReleaseCapture
KillTimer
DeleteMenu
MessageBeep
WindowFromPoint
NotifyWinEvent
GetMenuDefaultItem
SetMenuDefaultItem
IsRectEmpty
UpdateLayeredWindow
EnableScrollBar
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
UnionRect
MonitorFromPoint
SetLayeredWindowAttributes
EnumDisplayMonitors
WaitMessage
CharNextW
CopyAcceleratorTableW
GetPropW
InvalidateRect
PtInRect
SendMessageW
GetWindowRect
GetParent
FindWindowW
SetWindowsHookExW
UnhookWindowsHookEx
UpdateWindow
SetWindowLongW
GetSubMenu
GetMenuItemID
GetMenuItemCount
ModifyMenuW
GetClientRect
CopyRect
InflateRect
ShowWindow
RegisterDeviceNotificationW
IsIconic
GetAsyncKeyState
GetSystemMetrics
GetSystemMenu
CreatePopupMenu
AppendMenuW
DrawIcon
SetForegroundWindow
InvalidateRgn
GetCursorPos
ClientToScreen
GetDesktopWindow
LoadIconW
SystemParametersInfoW
DrawStateW
DestroyIcon
SetTimer
UnregisterClassW
GetMenuStringW
GetMenuState
InsertMenuW
RemoveMenu
DrawTextW
DrawTextExW
GrayStringW
DrawFrameControl
DrawFocusRect
SetClassLongW
SetParent
SetRect
LoadImageW
OpenClipboard
CloseClipboard
BeginDeferWindowPos
TabbedTextOutW
GetWindowDC
BeginPaint
EndPaint
ScreenToClient
GetSysColor
FillRect
IntersectRect
GetFocus
SetClipboardData
CharUpperBuffW
LockWindowUpdate
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
LoadAcceleratorsW
CreateAcceleratorTableW
DestroyAcceleratorTable
BringWindowToTop
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
SetCursorPos
CopyIcon
FrameRect
PostThreadMessageW
GetIconInfo
HideCaret
InvertRect
IsClipboardFormatAvailable
GetDoubleClickTime
DestroyCursor
GetWindowRgn
SubtractRect
CreateMenu
GetUpdateRect
GetComboBoxInfo
MapVirtualKeyExW
IsCharLowerW
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
SetWindowPlacement

gdi32

GetTextExtentPoint32W
CopyMetaFileW
CreateBitmap
CreateHatchBrush
CreatePen
CreatePatternBrush
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
MoveToEx
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
GetDIBColorTable
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectW
CreateRectRgnIndirect
GetMapMode
PatBlt
SetRectRgn
DPtoLP
GetTextMetricsW
CreateRoundRectRgn
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetTextColor
GetRgnBox
EnumFontFamiliesExW
RealizePalette
SetPixel
OffsetRgn
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
LPtoDP
ExtFloodFill
SetPaletteEntries
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
SetPixelV
GetTextFaceW
AddFontMemResourceEx
AddFontResourceExW
GetDeviceCaps
CreateDCW
Rectangle
CreateSolidBrush
TextOutW
GetObjectW
SetDIBColorTable
CreateDIBSection
StretchBlt
SelectObject
GetTextExtentPointW
GetPixel
DeleteObject
DeleteDC
CreateRectRgn
CreateCompatibleDC
CombineRgn
OffsetViewportOrgEx
GetBkColor
BitBlt

msimg32

AlphaBlend
TransparentBlt

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegQueryValueW
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegDeleteKeyW
RegEnumKeyExW
RegEnumValueW
RegCloseKey
RegEnumKeyW
RegSetValueExW
RegDeleteValueW

shell32

Shell_NotifyIconW
SHGetFileInfoW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHAppBarMessage
SHBrowseForFolderW
DragFinish
DragQueryFileW
ShellExecuteW

comctl32

ImageList_ReplaceIcon
_TrackMouseEvent
ImageList_GetIcon
ImageList_GetIconSize
InitCommonControlsEx

shlwapi

PathFindExtensionW
PathStripToRootW
PathRemoveFileSpecW
StrFormatKBSizeW
PathIsUNCW
PathFindFileNameW

uxtheme

GetThemePartSize
GetWindowTheme
IsAppThemed
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor

ole32

IsAccelerator
CoRevokeClassObject
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CreateStreamOnHGlobal
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CoInitializeEx
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoInitialize
CoRegisterMessageFilter

oleaut32

VariantClear
VariantInit
SysFreeString
SysAllocStringLen
SafeArrayDestroy
VariantChangeType
VariantCopy
VarBstrFromDate
OleCreateFontIndirect
SysAllocString
LoadTypeLi
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime

oledlg

OleUIBusyW

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromStream
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI

hid

HidP_GetCaps
HidD_GetAttributes
HidD_GetHidGuid
HidD_GetPreparsedData
HidD_FreePreparsedData
HidD_GetFeature
HidD_SetFeature
HidD_GetProductString

setupapi

SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

winmm

mixerGetNumDevs
mixerOpen
PlaySoundW
mixerClose

imm32

ImmGetContext
ImmReleaseContext
ImmGetOpenStatus

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 417KB - Virtual size: 417KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 495KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 531KB - Virtual size: 530KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 182KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e983d85b06eb694b335d483faaa158d0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

hid

setupapi

oleacc

winmm

imm32

Sections

.text Size: 2.0MB - Virtual size: 2.0MB

.rdata Size: 417KB - Virtual size: 417KB

.data Size: 23KB - Virtual size: 495KB

.rsrc Size: 531KB - Virtual size: 530KB

.reloc Size: 182KB - Virtual size: 181KB

.text
Size: 2.0MB - Virtual size: 2.0MB

.rdata
Size: 417KB - Virtual size: 417KB

.data
Size: 23KB - Virtual size: 495KB

.rsrc
Size: 531KB - Virtual size: 530KB

.reloc
Size: 182KB - Virtual size: 181KB