48370958fac67ac6e4b494c8c46034cdd478f7f3f8bf6aef34d7f529fd9f3da3

Sharing

Copy URL Twitter E-mail

General

Target

48370958fac67ac6e4b494c8c46034cdd478f7f3f8bf6aef34d7f529fd9f3da3
Size

14.6MB
MD5

6d224afcb274f15d29ade61d814ef978
SHA1

c504f30799807164ce39e4414d0fe3691818cc12
SHA256

48370958fac67ac6e4b494c8c46034cdd478f7f3f8bf6aef34d7f529fd9f3da3
SHA512

d500275c18f0f6a29e7f2f010549541f2253a822f7a97a226b5e70bc00a014eed72b1feafcd04d1f7f6f190290a14924808b55ee4e01f07709b1353b5e84f62c
SSDEEP

393216:GeKr6JOV4FbvqxL85PEqQ4Un0QZ2jtJvZ6T:y6JOV4Fbvq9Wcq60q2jNM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48370958fac67ac6e4b494c8c46034cdd478f7f3f8bf6aef34d7f529fd9f3da3

Files

48370958fac67ac6e4b494c8c46034cdd478f7f3f8bf6aef34d7f529fd9f3da3
.exe windows x86

49c0d28c5520c5684f7102598c9e7096

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

dbghelp

MiniDumpWriteDump

kernel32

GetProcessHeap
SetEndOfFile
SetStdHandle
WriteConsoleW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStringTypeW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetFileType
SetHandleCount
HeapCreate
HeapSize
IsValidCodePage
OutputDebugStringW
IsProcessorFeaturePresent
GetLocaleInfoW
GetStdHandle
lstrcpynW
UnhandledExceptionFilter
TerminateProcess
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetCPInfo
LCMapStringW
HeapReAlloc
GetStartupInfoW
HeapSetInformation
GetCommandLineA
MoveFileA
HeapAlloc
HeapFree
RtlUnwind
DecodePointer
EncodePointer
InitializeCriticalSection
Sleep
GetOEMCP
GetLocalTime
lstrcpyW
FormatMessageW
LocalFree
CloseHandle
GetCurrentProcess
GetCurrentProcessId
IsDebuggerPresent
GetCurrentThreadId
CreateFileW
WriteFile
SetFileTime
GetFileAttributesW
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFilePointer
GlobalAlloc
ExitProcess
MulDiv
GetTickCount
GlobalLock
GlobalUnlock
GetCurrentDirectoryW
GetACP
GetFileSize
ReadFile
WideCharToMultiByte
FreeResource
LockResource
FindNextFileW
FindFirstFileW
FindClose
CreateDirectoryW
DeleteFileW
QueryPerformanceFrequency
QueryPerformanceCounter
GetModuleFileNameW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
lstrcmpiW
InterlockedDecrement
InterlockedIncrement
GetTempPathW
LeaveCriticalSection
EnterCriticalSection
lstrlenW
FreeLibrary
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
RaiseException
CreateThread
LoadLibraryW
GetProcAddress
GetModuleHandleW
CopyFileW
SetUnhandledExceptionFilter

user32

SetForegroundWindow
GetKeyboardLayout
MapVirtualKeyExW
GetKeyNameTextW
GetCaretBlinkTime
CreatePopupMenu
AppendMenuW
EnableMenuItem
TrackPopupMenu
DestroyMenu
GetCaretPos
SetCaretPos
ShowCaret
HideCaret
CreateCaret
GetWindowRgn
DrawTextW
SetRect
CharPrevW
FillRect
GetWindowTextW
GetWindowTextLengthW
GetClassInfoExW
RegisterClassW
SetPropW
GetPropW
CallWindowProcW
EnableWindow
wsprintfW
IsWindowEnabled
EqualRect
GetMessageW
TranslateMessage
DrawTextA
wsprintfA
InvalidateRgn
ScreenToClient
PostQuitMessage
SetCursorPos
ClientToScreen
MoveWindow
GetWindowRect
UnhookWindowsHookEx
CallNextHookEx
SetWindowsHookExW
GetSystemMetrics
PostMessageW
SetWindowTextW
GetGUIThreadInfo
SetWindowPos
GetMonitorInfoW
MonitorFromWindow
SetFocus
SetWindowRgn
DispatchMessageW
GetActiveWindow
GetWindow
GetUpdateRect
IsWindowVisible
GetSysColor
MapWindowPoints
GetFocus
IsZoomed
GetCursorPos
IsIconic
ReleaseDC
UpdateLayeredWindow
GetDC
GetClientRect
KillTimer
SetTimer
SendMessageW
ShowWindow
GetParent
CharNextW
UpdateWindow
CreateWindowExW
LoadStringW
FindWindowW
EndPaint
BeginPaint
DestroyWindow
DefWindowProcW
RegisterClassExW
LoadCursorW
SystemParametersInfoW
PtInRect
IntersectRect
OffsetRect
IsRectEmpty
SetCursor
InflateRect
ReleaseCapture
UnionRect
GetKeyState
SetWindowLongW
GetWindowLongW
InvalidateRect
IsWindow
SetCapture
CreateAcceleratorTableW
MessageBoxW
LoadImageW

gdi32

SelectObject
DeleteDC
CreateDIBSection
CreateRectRgn
DeleteObject
RestoreDC
BitBlt
SaveDC
CreateSolidBrush
CreatePatternBrush
SetTextColor
SetBkMode
SelectClipRgn
ExtSelectClipRgn
CreateRectRgnIndirect
GetClipBox
CreateCompatibleDC
StretchBlt
SetStretchBltMode
LineTo
MoveToEx
CreatePenIndirect
TextOutW
GetTextExtentPoint32W
GetCharABCWidthsW
SetBkColor
GetObjectA
GdiFlush
PtInRegion
GetBitmapBits
SetBitmapBits
GetTextExtentPointA
GetTextMetricsW
GetObjectW
CreateFontIndirectW
GetStockObject
PlayEnhMetaFile
CreateCompatibleBitmap
GetDeviceCaps
GetEnhMetaFileHeader
CreateDIBitmap
CreatePen
AddFontMemResourceEx
RemoveFontMemResourceEx
SetWindowOrgEx
CloseEnhMetaFile
CreateEnhMetaFileW
CombineRgn
CreateRoundRectRgn
Rectangle

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegQueryInfoKeyW
RegCreateKeyExW
RegDeleteKeyW
RegQueryValueExW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
RegDeleteValueW

shell32

DragQueryFileW
ShellExecuteW

ole32

OleLockRunning
CLSIDFromProgID
CLSIDFromString
ReleaseStgMedium
CreateStreamOnHGlobal
OleDuplicateData
DoDragDrop
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoInitialize
OleInitialize
OleUninitialize
CoUninitialize

oleaut32

SysFreeString
VarUI4FromStr
VariantInit
VariantClear
SysAllocString

comctl32

_TrackMouseEvent
ord17
InitCommonControlsEx

gdiplus

GdipDrawPath
GdipFillRectangleI
GdipFillPath
GdipDrawString
GdipMeasureString
GdipDrawImageRectRect
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipCloneBrush
GdipCloneImage
GdipCreatePen2
GdipCreateBitmapFromScan0
GdipSetPenStartCap
GdipSetPenEndCap
GdipGetImageGraphicsContext
GdipDrawLine
GdipDrawImageI
GdipTranslateWorldTransform
GdipRotateWorldTransform
GdipDrawRectangleI
GdipResetWorldTransform
GdipSetWorldTransform
GdipSetSmoothingMode
GdipSetInterpolationMode
GdipSetTextRenderingHint
GdipReleaseDC
ord1
GdipAddPathLine
GdipSetStringFormatTrimming
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipSetPenMode
GdipCreateSolidFill
GdipTranslateMatrix
GdipRotateMatrix
GdipSetImageAttributesColorMatrix
GdipDisposeImage
GdipLoadImageFromStreamICM
GdipLoadImageFromStream
GdipDeleteFont
GdipDeletePath
GdipCreatePath
GdipStringFormatGetGenericTypographic
GdipDeleteStringFormat
GdipCloneStringFormat
GdipDeletePen
GdipCreatePen1
GdipDeleteBrush
GdipDeleteMatrix
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipAlloc
GdipFree
GdipDrawImageRectI
GdipCreateFromHDC
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipGetImageHeight
GdipGetImageWidth
GdipDeleteGraphics
GdiplusShutdown
GdiplusStartup
GdipCreateMatrix

imm32

ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow

shlwapi

PathIsDirectoryW
PathFindFileNameW

ws2_32

WSAStartup
gethostname
gethostbyname

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 276KB - Virtual size: 275KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 492KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 17B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13.0MB - Virtual size: 13.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

49c0d28c5520c5684f7102598c9e7096

Headers

DLL Characteristics

File Characteristics

Imports

dbghelp

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

gdiplus

imm32

shlwapi

ws2_32

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 276KB - Virtual size: 275KB

.data Size: 13KB - Virtual size: 492KB

.tls Size: 512B - Virtual size: 17B

.rsrc Size: 13.0MB - Virtual size: 13.0MB

.reloc Size: 150KB - Virtual size: 150KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 276KB - Virtual size: 275KB

.data
Size: 13KB - Virtual size: 492KB

.tls
Size: 512B - Virtual size: 17B

.rsrc
Size: 13.0MB - Virtual size: 13.0MB

.reloc
Size: 150KB - Virtual size: 150KB