c39507b28e6fa6f69903b1acd2378eac9df57694d234ff91f00eb57c5981bd14

Sharing

Copy URL

Twitter E-mail

General

Target

c39507b28e6fa6f69903b1acd2378eac9df57694d234ff91f00eb57c5981bd14
Size

2.9MB
MD5

3e574a1a7cae71d91299e4ad903c2822
SHA1

c5d708fb331c6b03bd04db4c1f5600bdbaa0b13f
SHA256

c39507b28e6fa6f69903b1acd2378eac9df57694d234ff91f00eb57c5981bd14
SHA512

3fd9effdb6adaa6406ccba0e09f8136e1ccd53a677ff100f6df5d73de4b3df311fcb1b4c7712142422c5405d2b3132cb0f2ca16a7e067aca58c5410f6fc35e6a
SSDEEP

49152:v07mjTmSw/pA+79Lv+00ibvOmLTTWkftwXCxwqB:M7u093rLpft7wq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c39507b28e6fa6f69903b1acd2378eac9df57694d234ff91f00eb57c5981bd14

Files

c39507b28e6fa6f69903b1acd2378eac9df57694d234ff91f00eb57c5981bd14
.exe windows x64

bdb93898a14534da0b6adb0a2c82a33d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

efcmres

r

user32

TranslateMessage
DispatchMessageW
SetWindowsHookExW
GetActiveWindow
GetScrollInfo
GetDlgCtrlID
DeleteMenu
CheckMenuRadioItem
UnhookWindowsHookEx
PostQuitMessage
GetSystemMenu
GetWindowLongW
DestroyIcon
SetWindowLongW
WinHelpW
GetWindowLongPtrW
RegisterClassExW
UnregisterClassW
GetClassInfoExW
CreateWindowExW
SetWindowTextW
SetWindowTextA
GetWindowTextW
GetWindowTextLengthW
SetWindowLongPtrW
GetClassLongPtrW
SetClassLongPtrW
PostMessageW
InvalidateRect
DrawTextW
IsWindow
IsWindowVisible
SetFocus
MessageBeep
MessageBoxW
MessageBoxA
CreateDialogParamW
DialogBoxParamW
CheckMenuItem
TrackPopupMenuEx
GetSystemMetrics
GetMenuItemInfoW
PeekMessageW
InsertMenuItemW
SetMenuItemInfoW
CharLowerW
CharLowerA
CharUpperW
CharUpperA
CharLowerBuffA
CharUpperBuffA
GetSysColorBrush
GetSysColor
UpdateWindow
LoadBitmapW
GetMessageTime
GetWindowPlacement
TranslateAcceleratorW
SetClipboardData
FindWindowW
DestroyWindow
ShowWindow
EnableWindow
IsWindowEnabled
OemToCharBuffA
LoadImageW
DrawStateW
GetWindow
GetTopWindow
CharUpperBuffW
CharLowerBuffW
DrawFocusRect
DrawFrameControl
GetForegroundWindow
FrameRect
ExitWindowsEx
BringWindowToTop
SetForegroundWindow
SetActiveWindow
IsIconic
CreateMenu
SetMenu
CallWindowProcW
GetFocus
EnableMenuItem
InsertMenuW
SetMenuDefaultItem
GetMenuItemCount
MoveWindow
GetDlgItem
OpenClipboard
GetClipboardData
CloseClipboard
CreatePopupMenu
KillTimer
DefWindowProcW
BeginPaint
FillRect
DrawIconEx
EndPaint
SystemParametersInfoW
CallNextHookEx
CreateAcceleratorTableW
DestroyAcceleratorTable
VkKeyScanW
GetCursorPos
WindowFromPoint
GetParent
ReleaseCapture
SetCapture
SetTimer
GetDC
ReleaseDC
DestroyCursor
GetWindowThreadProcessId
EmptyClipboard
OemToCharBuffW
GetDesktopWindow
GetWindowRect
ScreenToClient
SetWindowPos
SendMessageW
GetMessageW
GetMenu
IsMenu
DestroyMenu
GetDlgItemInt
SetDlgItemInt
GetClientRect
LoadCursorW
SetCursor
SetWindowPlacement
EndDialog

gdi32

RealizePalette
GetPaletteEntries
Rectangle
GetTextMetricsW
SetBkColor
MoveToEx
LineTo
GetDIBits
CreatePen
GetStockObject
BitBlt
SelectPalette
CreateCompatibleDC
CreateCompatibleBitmap
CreateSolidBrush
ExtTextOutA
GetEnhMetaFilePaletteEntries
PlayEnhMetaFile
SetEnhMetaFileBits
GetEnhMetaFileHeader
DeleteEnhMetaFile
SetWinMetaFileBits
CreatePalette
GetObjectW
SetBkMode
GetDeviceCaps
SelectObject
PatBlt
DeleteDC
CreateBitmap
CreatePatternBrush
SetTextColor
DeleteObject
CreateFontIndirectW

shell32

ShellExecuteW
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHGetMalloc
ord727
SHFileOperationW
SHGetDataFromIDListW
ShellExecuteExW
SHGetFileInfoW
CommandLineToArgvW
SHGetPathFromIDListW

ole32

OleInitialize
DoDragDrop
OleUninitialize
CoCreateInstance

comdlg32

ChooseColorW
GetSaveFileNameW
GetOpenFileNameW
ChooseFontW

comctl32

InitCommonControlsEx
ord17
ImageList_Destroy
ImageList_GetIcon
ImageList_GetIconSize
ImageList_AddMasked
ImageList_Draw
CreateToolbarEx
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Create

mpr

WNetDisconnectDialog
WNetConnectionDialog
WNetGetConnectionW

ws2_32

htons
ntohl
htonl
ntohs

kernel32

FlushFileBuffers
GetTimeZoneInformation
SetStdHandle
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
GetEnvironmentStrings
FreeEnvironmentStringsA
LCMapStringW
LCMapStringA
GetFileType
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetProcessHeap
GetFileAttributesA
SetHandleCount
HeapCreate
HeapSetInformation
InitializeCriticalSectionAndSpinCount
GetModuleFileNameA
GetStdHandle
GetLocalTime
SystemTimeToFileTime
FileTimeToSystemTime
GetSystemTime
GetModuleFileNameW
Sleep
CreateMutexW
GetCurrentProcessId
CreateDirectoryW
DeleteFileW
DeviceIoControl
SetErrorMode
GlobalUnlock
GlobalLock
GetVersionExW
GetDiskFreeSpaceW
SetLastError
SetFilePointer
GetDateFormatW
GetTimeFormatW
CompareStringA
FreeLibrary
GetDriveTypeW
GetModuleHandleW
GetTickCount
CopyFileW
SetFileTime
GetVolumeInformationW
SetCurrentDirectoryW
RemoveDirectoryW
MoveFileW
MoveFileExW
GetCurrentThreadId
FindClose
FindNextFileW
FindFirstFileW
GetProcAddress
LoadLibraryA
ExpandEnvironmentStringsA
WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetCommandLineW
GlobalFree
LeaveCriticalSection
EnterCriticalSection
CloseHandle
UnmapViewOfFile
SetEndOfFile
FileTimeToLocalFileTime
MultiByteToWideChar
WideCharToMultiByte
CompareStringW
VirtualProtect
QueryPerformanceFrequency
QueryPerformanceCounter
LocalFileTimeToFileTime
MulDiv
CreateThread
GlobalAlloc
GetLastError
LocalFree
FormatMessageW
OpenProcess
TerminateProcess
GetSystemDefaultLangID
GetLocaleInfoW
DeleteCriticalSection
GetCurrentDirectoryW
GetFullPathNameW
ReadFile
WriteFile
GetFileSize
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetShortPathNameW
MapViewOfFile
CreateFileMappingW
GetWindowsDirectoryW
GetCurrentProcess
GetTempPathW
GetFileAttributesW
SetFileAttributesW
CreateFileW
FindFirstFileExW
GetFileInformationByHandle
GetLogicalDrives
ExpandEnvironmentStringsW
CreateFileMappingA
CreateFileA
GlobalSize
ResumeThread
RtlLookupFunctionEntry
RtlUnwindEx
ExitProcess
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetStartupInfoA
HeapSize
GetCurrentDirectoryA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlCaptureContext
RaiseException
RtlPcToFileHeader
GetDriveTypeA
GetFullPathNameA
IsDebuggerPresent
RtlVirtualUnwind
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
DeleteFileA

advapi32

LookupPrivilegeValueW
RegOpenKeyExA
RegQueryValueExA
RegQueryValueExW
RegOpenKeyExW
RegSetValueExA
RegSetValueExW
InitiateSystemShutdownW
AdjustTokenPrivileges
OpenProcessToken
RegCreateKeyExW
RegDeleteValueW
RegDeleteValueA
RegDeleteKeyW
RegCloseKey

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 404KB - Virtual size: 403KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 843KB - Virtual size: 843KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bdb93898a14534da0b6adb0a2c82a33d

Headers

DLL Characteristics

File Characteristics

Imports

efcmres

user32

gdi32

shell32

ole32

comdlg32

comctl32

mpr

ws2_32

kernel32

advapi32

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 404KB - Virtual size: 403KB

.data Size: 52KB - Virtual size: 118KB

.pdata Size: 81KB - Virtual size: 80KB

.rsrc Size: 843KB - Virtual size: 843KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 404KB - Virtual size: 403KB

.data
Size: 52KB - Virtual size: 118KB

.pdata
Size: 81KB - Virtual size: 80KB

.rsrc
Size: 843KB - Virtual size: 843KB