121fe4c709bed8089613be9aaf6c01a6509c1ad6d851bda01d1bc901424a7735

Sharing

Copy URL Twitter E-mail

General

Target

121fe4c709bed8089613be9aaf6c01a6509c1ad6d851bda01d1bc901424a7735
Size

480KB
MD5

ca038451dd7afc1ced44bb9f30d64cbf
SHA1

9d8638a100c857c23b7b3480d328a604dbadac2d
SHA256

121fe4c709bed8089613be9aaf6c01a6509c1ad6d851bda01d1bc901424a7735
SHA512

f073c4e50796c376c85d4b2c12b26a5401382bfd8886d3620061cffa5ae4023458864011c784fdbda1a37ab67c6b4ec4f0bc10e8dfc735d4ada24963c4f54948
SSDEEP

12288:py42ePUDumJX29tpJMwo2YxWhvlYUKnhdce:py42yqJipq3xWhvl7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
121fe4c709bed8089613be9aaf6c01a6509c1ad6d851bda01d1bc901424a7735

Files

121fe4c709bed8089613be9aaf6c01a6509c1ad6d851bda01d1bc901424a7735
.exe windows x86

af973582457569fe5a4fd4fce7da3ac9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

hid

HidD_GetPreparsedData
HidD_GetAttributes
HidD_GetHidGuid
HidP_GetCaps
HidD_GetInputReport

setupapi

SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
CMP_WaitNoPendingInstallEvents
SetupDiGetClassDevsW

kernel32

GetLocaleInfoW
GetUserDefaultLCID
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
WaitForSingleObjectEx
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
FindNextFileW
FindFirstFileExW
GetTimeZoneInformation
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
SetFilePointerEx
EnumSystemLocalesW
IsValidLocale
LCMapStringW
GetStdHandle
ExitProcess
GetCommandLineW
GetCommandLineA
HeapQueryInformation
GetFileType
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
RtlUnwind
GetCPInfo
GetStringTypeW
LCMapStringEx
GetExitCodeThread
RaiseException
OutputDebugStringW
GlobalFlags
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
FileTimeToLocalFileTime
GetCurrentProcessId
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
FileTimeToSystemTime
lstrcmpA
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
LoadLibraryA
LoadLibraryExW
GetCurrentProcess
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
FormatMessageW
LocalFree
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
LoadLibraryW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
SetLastError
OutputDebugStringA
GetACP
WideCharToMultiByte
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
HeapReAlloc
HeapSize
InitializeCriticalSectionEx
HeapFree
CancelIo
FindClose
PurgeComm
WriteFile
ReadFile
SetCommState
GetCommState
WriteConsoleW
CreateFileW
CloseHandle
GetModuleFileNameW
WaitForSingleObject
GetLastError
CreateEventW
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
Sleep
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle

user32

GetDC
SetWindowTextW
IsWindowEnabled
GetMonitorInfoW
MonitorFromWindow
WinHelpW
LoadIconW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassNameW
GetSysColorBrush
LoadCursorW
GetWindowThreadProcessId
DrawTextW
GetClassLongW
SetWindowLongW
PtInRect
CopyRect
GetSysColor
DrawTextExW
ScreenToClient
MessageBoxW
AdjustWindowRectEx
GetWindowRect
RemovePropW
GetPropW
SetPropW
GrayStringW
TabbedTextOutW
ClientToScreen
RealChildWindowFromPoint
DestroyMenu
CheckMenuItem
ReleaseDC
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
RegisterDeviceNotificationW
GetClientRect
SetRectEmpty
OffsetRect
GetParent
GetSubMenu
GetMenuItemID
GetMenuItemCount
DefWindowProcW
CharUpperW
GetSystemMetrics
SendMessageW
GetScrollPos
GetWindowTextW
GetWindowLongW
GetWindow
RegisterWindowMessageW
DispatchMessageW
PeekMessageW
SetMenuItemInfoW
LoadBitmapW
PostQuitMessage
GetMessagePos
GetMessageTime
MapWindowPoints
RedrawWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetMenu
GetMenu
EnableWindow
GetCapture
GetKeyState
GetFocus
GetDlgCtrlID
GetDlgItem
IsIconic
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPos
DestroyWindow
IsMenu
IsWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
PostMessageW

gdi32

DeleteObject
Escape
GetClipBox
GetStockObject
PtVisible
RectVisible
RestoreDC
SaveDC
SelectObject
SetMapMode
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateBitmap
SetTextColor
SetBkColor
GetDeviceCaps
DeleteDC

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegCloseKey
RegEnumValueW
RegOpenKeyExW

shlwapi

PathFindFileNameW
PathIsUNCW
PathStripToRootW

ole32

CoCreateInstance
CoUninitialize
CoInitialize

oleaut32

VariantChangeType
VariantClear
VariantInit

oleacc

LresultFromObject
CreateStdAccessibleObject

Exports

Exports

CRYPT_EnableCommandKey
CRYPT_SetCommandKey
GetImage
GetImageInfo
GetProgramInfo
ISP_BlankCheck
ISP_CRCCheck
ISP_CloseSerialPortConnect
ISP_EraseMass
ISP_ErasePage
ISP_Execute
ISP_Exit
ISP_GetInformation
ISP_GetTransProgress
ISP_GetUserData
ISP_GetUserResult
ISP_IsConnectedToDevice
ISP_ReadData
ISP_Reset
ISP_ResetToIAP
ISP_SendAuthentication
ISP_SendUserCmd
ISP_SetEncrypt
ISP_SetupSerialPortConnection
ISP_WaitForConnect
ISP_WriteProgramB

Sections

.text
Size: 333KB - Virtual size: 333KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

af973582457569fe5a4fd4fce7da3ac9

Headers

DLL Characteristics

File Characteristics

Imports

hid

setupapi

kernel32

user32

gdi32

winspool.drv

advapi32

shlwapi

ole32

oleaut32

oleacc

Exports

Exports

Sections

.text Size: 333KB - Virtual size: 333KB

.rdata Size: 108KB - Virtual size: 107KB

.data Size: 7KB - Virtual size: 21KB

.rsrc Size: 9KB - Virtual size: 8KB

.reloc Size: 21KB - Virtual size: 20KB

.text
Size: 333KB - Virtual size: 333KB

.rdata
Size: 108KB - Virtual size: 107KB

.data
Size: 7KB - Virtual size: 21KB

.rsrc
Size: 9KB - Virtual size: 8KB

.reloc
Size: 21KB - Virtual size: 20KB