a9d74fa2cb5e5dc57e839f23e768ccd122870b9bb8b77b8462ba5ec675721ecc

Sharing

Copy URL Twitter E-mail

General

Target

a9d74fa2cb5e5dc57e839f23e768ccd122870b9bb8b77b8462ba5ec675721ecc
Size

562KB
MD5

68eeee8fafced86579c74f56a92004a3
SHA1

396dd53818ef9bdabde40db0654d6afa2e484c08
SHA256

a9d74fa2cb5e5dc57e839f23e768ccd122870b9bb8b77b8462ba5ec675721ecc
SHA512

ec000e1acad6f383f650ac0c6f85a571ab5ff96b9254dd51d83451c44281cb1a02051ad68c7c99d909dda74657801857020812f6a8019fef4b8dc411336a2b31
SSDEEP

6144:L4TvzrQLDXWWfpFxec7LOYoRmnc8ySPvW19RsJClNhRZJ2NPlItQTmyZ3Fh:LArQPFFORKc8ygvW19yJWNhRZGPr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9d74fa2cb5e5dc57e839f23e768ccd122870b9bb8b77b8462ba5ec675721ecc

Files

a9d74fa2cb5e5dc57e839f23e768ccd122870b9bb8b77b8462ba5ec675721ecc
.exe windows x86

c888ccbb8252b0f288d3cb8e08f7d6f3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindNextFileW
FlushInstructionCache
SetLastError
GlobalReAlloc
WaitForSingleObject
GetPrivateProfileStringW
lstrcpynW
GetTempPathW
FreeResource
FindResourceExW
FindResourceW
LoadResource
SizeofResource
LockResource
GetDriveTypeW
DeviceIoControl
CreateThread
CreateFileMappingW
ResetEvent
ReleaseSemaphore
InitializeCriticalSection
SetEvent
lstrcmpA
FlushFileBuffers
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
LoadLibraryExW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
GetStdHandle
GetModuleHandleExW
ExitProcess
lstrcatA
GetACP
IsValidCodePage
EnumSystemLocalesW
GetUserDefaultLCID
VerifyVersionInfoW
FindClose
LCMapStringW
CreateSemaphoreW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
CreateEventW
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
RtlUnwind
GetCommandLineW
VirtualQuery
VirtualProtect
GetSystemTimeAsFileTime
EncodePointer
GetStringTypeW
WideCharToMultiByte
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
OutputDebugStringW
IsDebuggerPresent
lstrcpyA
lstrcpynA
OpenFileMappingW
SetNamedPipeHandleState
WaitNamedPipeW
PeekNamedPipe
RaiseException
GlobalUnlock
CreateFileW
GetModuleFileNameW
MulDiv
LeaveCriticalSection
HeapDestroy
LoadLibraryW
GlobalAlloc
WriteFile
HeapReAlloc
WritePrivateProfileStringW
ReadFile
CopyFileW
Sleep
UnmapViewOfFile
MapViewOfFile
FindFirstFileW
lstrcpyW
SetFileAttributesW
LocalFree
DeleteFileW
CloseHandle
GetCurrentThreadId
DeleteCriticalSection
lstrcatW
lstrcmpiW
GetSystemInfo
DecodePointer
GlobalFree
EnterCriticalSection
HeapSize
GetProcAddress
GetLocaleInfoW
GetLastError
lstrlenW
InitializeCriticalSectionEx
MultiByteToWideChar
IsValidLocale
lstrcmpW
GetProcessHeap
GetModuleHandleW
GlobalLock
CreateDirectoryW
HeapFree
GetCurrentProcess
MoveFileExW
VerSetConditionMask
HeapAlloc
lstrlenA
SetFilePointer
GetFileSize
GetOEMCP
ExitThread

user32

SendMessageW
SwitchToThisWindow
GetSystemMetrics
MessageBoxW
UnionRect
GetWindowThreadProcessId
GetKeyboardState
DrawTextW
MapVirtualKeyW
SetWindowTextW
GetWindowTextW
FindWindowW
GetMonitorInfoW
LoadImageW
CreateWindowExW
GetDesktopWindow
MonitorFromWindow
ReleaseDC
SystemParametersInfoW
GetForegroundWindow
GetDC
wsprintfW
PtInRect
AttachThreadInput
SetForegroundWindow
SetParent
MapDialogRect
DefWindowProcW
CallWindowProcW
ShowWindow
EndDialog
SetWindowLongW
GetWindowLongW
BeginPaint
GetClientRect
DialogBoxIndirectParamW
EndPaint
GetDlgCtrlID
SetDlgItemTextW
IsDlgButtonChecked
GetDlgItem
GetParent
EnableWindow
GetDlgItemTextW
CheckRadioButton
CheckDlgButton
SendDlgItemMessageW
PostMessageW
VkKeyScanW
GetWindow
SetScrollInfo
UpdateWindow
MapWindowPoints
ScrollWindowEx
GetActiveWindow
SetWindowPos
SetScrollPos
InvalidateRect
GetScrollInfo
DrawEdge
SetFocus
FillRect
GetWindowRect
DestroyWindow
IsWindow
RedrawWindow
SetRect
CreateDialogIndirectParamW
RegisterClassExW
GetClassInfoExW
LoadCursorW
InflateRect
GetWindowTextLengthW
ToUnicode
GetSysColorBrush
GetSysColor
UnregisterClassW

gdi32

Rectangle
CreatePen
CreateDIBSection
StretchBlt
SetBrushOrgEx
SetBkColor
SetDIBColorTable
GetDIBColorTable
SetStretchBltMode
CreateSolidBrush
EnumFontFamiliesW
SetTextColor
SetBkMode
GetStockObject
BitBlt
SetViewportOrgEx
DeleteObject
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
CreateFontIndirectW
GetDeviceCaps
SelectObject
GetTextExtentPointW
GetObjectW
GetTextExtentPoint32W
GetObjectA

comdlg32

GetOpenFileNameW
GetSaveFileNameW
ChooseFontW
ChooseColorW

advapi32

RegSetValueExW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegDeleteKeyW
RegQueryValueExW
RegQueryValueExA
RegCreateKeyExW

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
CommandLineToArgvW
ord75
ShellExecuteExW
ShellExecuteW

ole32

CLSIDFromString
CreateStreamOnHGlobal
CoInitialize
CoUninitialize
CoInitializeEx
CoTaskMemFree

shlwapi

PathFileExistsW
PathAppendW
PathStripPathW
PathRemoveFileSpecW
StrChrW
PathFindFileNameW
StrToIntW

gdiplus

GdipCreateFontFromLogfontW
GdipGetDC
GdipAddPathLine
GdipAddPathArc
GdipGetDpiY
GdipSaveImageToStream
GdipCreatePath
GdipGetDpiX
GdipReleaseDC
GdiplusShutdown
GdipGetImageHeight
GdipDrawImageRectRectI
GdipSetInterpolationMode
GdipSetPageUnit
GdipGetCompositingQuality
GdipGetInterpolationMode
GdipGetPageUnit
GdipDrawString
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipDeleteStringFormat
GdipCloneStringFormat
GdipStringFormatGetGenericTypographic
GdipMeasureString
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipGetTextRenderingHint
GdipDeletePath
GdipDrawPath
GdipFillPath
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipSetPixelOffsetMode
GdipSetSmoothingMode
GdipGetPixelOffsetMode
GdipGetSmoothingMode
GdipDeletePen
GdipDrawLineI
GdipCreatePen1
GdipSetTextRenderingHint
GdipCreateFromHDC
GdipCreateBitmapFromFile
GdiplusStartup
GdipCloneImage
GdipBitmapLockBits
GdipGetImagePaletteSize
GdipDisposeImage
GdipAlloc
GdipDrawImageI
GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipCreateBitmapFromScan0
GdipGetImagePixelFormat
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipFree
GdipGetImageWidth
GdipSetCompositingQuality

msimg32

TransparentBlt
AlphaBlend

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

comctl32

_TrackMouseEvent

wininet

DeleteUrlCacheEntryW

urlmon

URLDownloadToFileW

Sections

.text
Size: 385KB - Virtual size: 384KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c888ccbb8252b0f288d3cb8e08f7d6f3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

shlwapi

gdiplus

msimg32

version

comctl32

wininet

urlmon

Sections

.text Size: 385KB - Virtual size: 384KB

.rdata Size: 90KB - Virtual size: 89KB

.data Size: 12KB - Virtual size: 21KB

.rsrc Size: 49KB - Virtual size: 48KB

.reloc Size: 25KB - Virtual size: 24KB

.text
Size: 385KB - Virtual size: 384KB

.rdata
Size: 90KB - Virtual size: 89KB

.data
Size: 12KB - Virtual size: 21KB

.rsrc
Size: 49KB - Virtual size: 48KB

.reloc
Size: 25KB - Virtual size: 24KB