9dcec5630e93deeaf27bc53ea930538e68c76ac8bb374a5a0c5ad1e367fbb390

Sharing

Copy URL Twitter E-mail

General

Target

9dcec5630e93deeaf27bc53ea930538e68c76ac8bb374a5a0c5ad1e367fbb390
Size

4.8MB
MD5

6ec8ca6405f76b22214e867bb211e80f
SHA1

1a1a4e62d9718c6a2ed5ea924aa62728fe3336a4
SHA256

9dcec5630e93deeaf27bc53ea930538e68c76ac8bb374a5a0c5ad1e367fbb390
SHA512

d377284f124d9d47f4d680553319797f3a2b2952fc5dc7f27dafc885793508f7cfcd0c99fb9d8069ff200c094b59e45dc1622d198c2e3246ea650ab4820c20cc
SSDEEP

49152:jAACFPmzvpK6KCJjckt8InDOq0FazfILZLc3H+26PcVUiwSUA9gos/AcrxYdyl:9CFOV1zQktVDOdaLkLsH8+Us9XYk8l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9dcec5630e93deeaf27bc53ea930538e68c76ac8bb374a5a0c5ad1e367fbb390

Files

9dcec5630e93deeaf27bc53ea930538e68c76ac8bb374a5a0c5ad1e367fbb390
.exe windows x86

a8ec2e0ace7cc4b9036b4ee1d2168e06

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GlobalFlags
InterlockedIncrement
GetCPInfo
GetOEMCP
GetModuleHandleW
GetCurrentDirectoryA
SetErrorMode
GetTickCount
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
HeapFree
GetCommandLineA
GetStartupInfoA
RtlUnwind
SetEnvironmentVariableA
RaiseException
HeapAlloc
VirtualAlloc
VirtualQuery
HeapReAlloc
ExitProcess
HeapSize
TlsAlloc
IsValidCodePage
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
HeapCreate
VirtualFree
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
CompareStringW
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetFullPathNameA
GetVolumeInformationA
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
GetThreadLocale
MoveFileA
GetFileSizeEx
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
WritePrivateProfileStringA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
InterlockedExchange
lstrcmpA
InterlockedDecrement
GetModuleFileNameW
GlobalFree
GlobalAlloc
FormatMessageA
LocalFree
GlobalLock
GlobalUnlock
MulDiv
lstrlenA
FreeResource
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
SetLastError
FreeLibrary
lstrcmpW
SetVolumeLabelA
GetDiskFreeSpaceA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
FindNextFileA
CreateThread
RemoveDirectoryA
DeleteFileA
SetFileAttributesA
FindClose
FindFirstFileA
CreateDirectoryA
GetFileAttributesA
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFileTime
Sleep
SetCurrentDirectoryA
WinExec
WaitForSingleObject
CreateProcessA
ReadFile
GetModuleFileNameA
GetDiskFreeSpaceExA
GetDriveTypeA
GetLogicalDriveStringsA
GetUserDefaultLangID
GetTimeZoneInformation
MultiByteToWideChar
GetVersionExA
GetSystemInfo
GetLastError
CreateMutexA
GetModuleHandleA
CopyFileA
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
SetUnhandledExceptionFilter
VirtualProtect
LoadLibraryA
GetProcAddress
CloseHandle
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetACP
CreateFileA

user32

PostThreadMessageA
IsRectEmpty
CopyAcceleratorTableA
CharNextA
ReleaseCapture
SetCapture
UnregisterClassA
GetSysColorBrush
DestroyMenu
CharUpperA
GetMessageA
TranslateMessage
ValidateRect
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
SetWindowContextHelpId
MapDialogRect
GetWindowThreadProcessId
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
SendDlgItemMessageA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
IsWindow
SetFocus
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
GetKeyState
SetMenu
SetForegroundWindow
UpdateWindow
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
GetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
RegisterClipboardFormatA
GetWindow
OemToCharBuffA
MessageBeep
GetNextDlgGroupItem
WinHelpA
InvalidateRgn
PostQuitMessage
PeekMessageA
PostMessageA
LoadCursorA
SetCursor
PtInRect
ScreenToClient
IsWindowVisible
GetCursorPos
ReleaseDC
GetDC
GetWindowRect
SetWindowLongA
wsprintfA
InvalidateRect
DrawIcon
GetSystemMetrics
IsIconic
MessageBoxA
AppendMenuA
GetSystemMenu
LoadIconA
GetParent
FrameRect
LoadBitmapA
GrayStringA
DrawTextExA
TabbedTextOutA
SetRect
SendMessageA
DrawTextA
FillRect
GetClientRect
GetSysColor
CopyRect
EnableWindow
GetWindowTextLengthA

gdi32

ExtSelectClipRgn
DeleteDC
GetDeviceCaps
ScaleWindowExtEx
CreateRectRgnIndirect
CreateFontIndirectA
GetBkColor
GetTextColor
GetRgnBox
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
GetWindowExtEx
GetViewportExtEx
GetStockObject
SetMapMode
SetStretchBltMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
Rectangle
StretchBlt
GetObjectA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateSolidBrush
BitBlt
DPtoLP
GetMapMode
CreateCompatibleBitmap
LPtoDP
CreateCompatibleDC
DeleteObject

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegEnumKeyA
RegQueryValueA
RegOpenKeyA
RegEnumValueA
RegDeleteKeyA
RegOpenKeyExA
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegEnumKeyExA
RegQueryInfoKeyA
RegCloseKey

shell32

SHGetPathFromIDListA
ShellExecuteA
SHBrowseForFolderA

comctl32

InitCommonControlsEx

shlwapi

PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
SHDeleteKeyA

oledlg

ord8

ole32

CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CoCreateInstance
CoInitialize
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SysAllocStringByteLen
SysFreeString
SysStringLen
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear

Sections

.text
Size: 376KB - Virtual size: 375KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a8ec2e0ace7cc4b9036b4ee1d2168e06

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 376KB - Virtual size: 375KB

.rdata Size: 77KB - Virtual size: 76KB

.data Size: 17KB - Virtual size: 32KB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.reloc Size: 45KB - Virtual size: 45KB

.text
Size: 376KB - Virtual size: 375KB

.rdata
Size: 77KB - Virtual size: 76KB

.data
Size: 17KB - Virtual size: 32KB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

.reloc
Size: 45KB - Virtual size: 45KB