60696d0d19fe880f53ff499db4ef69b2bd83cacfde2bd71adb2b688d6c395126

Sharing

Copy URL Twitter E-mail

General

Target

60696d0d19fe880f53ff499db4ef69b2bd83cacfde2bd71adb2b688d6c395126
Size

4.5MB
MD5

258c29c6ab83e83ecde5e1ec4cdffa90
SHA1

0bbc800190c5ed84fb2d1a228373c3ba972f4aa6
SHA256

60696d0d19fe880f53ff499db4ef69b2bd83cacfde2bd71adb2b688d6c395126
SHA512

b96c05344e79581da44b5b3b9c2dc8c13dbbd2028ccc22990ef59091b95ea1f63599f84e69292cad0e0257f350fb2b4f418e1686bdd6deb68b2e51b7d45e2394
SSDEEP

98304:o1SQ678UYZksUo3Ff3TYxa1DrJ/PEn9o9ZlVALTbwC+:Ua4rYE1pU9o7A0C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60696d0d19fe880f53ff499db4ef69b2bd83cacfde2bd71adb2b688d6c395126

Files

60696d0d19fe880f53ff499db4ef69b2bd83cacfde2bd71adb2b688d6c395126
.exe windows x86

ae3691176311fea6b3bf7899092923f5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
GetCommandLineW
FindNextFileW
GetCurrentProcess
TerminateProcess
GetModuleFileNameW
CreatePipe
PeekNamedPipe
FindClose
GetFileAttributesW
OpenProcess
MultiByteToWideChar
GetLastError
GlobalFlags
GetSystemInfo
GetCurrentDirectoryW
GetCurrentProcessId
CreateProcessW
GetModuleHandleW
WideCharToMultiByte
VirtualQuery
GenerateConsoleCtrlEvent
GetExitCodeProcess
HeapFree
HeapReAlloc
HeapAlloc
GetProcessHeap
ResetEvent
GetSystemTimeAsFileTime
OpenFileMappingW
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
WriteConsoleW
FreeLibrary
FlushFileBuffers
GetStringTypeW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
LCMapStringW
CompareStringW
ReadConsoleW
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
GetFileType
DecodePointer
GetStdHandle
GetCommandLineA
GetModuleHandleExW
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
RaiseException
RtlUnwind
InitializeSListHead
QueryPerformanceCounter
GetStartupInfoW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
CreateDirectoryW
GetProcAddress
LoadLibraryW
FindResourceW
LoadResource
LockResource
GetCurrentThreadId
FreeResource
SizeofResource
GlobalReAlloc
MulDiv
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
GlobalSize
LeaveCriticalSection
SetWaitableTimer
CreateWaitableTimerW
IsDebuggerPresent
CreateEventW
CreateThread
WaitForSingleObject
SetEvent
WriteFile
ReadFile
SetFilePointer
SetFilePointerEx
CreateFileW
CloseHandle
GetTempPathW
GetVolumeInformationW
GetTickCount
DeleteFileW
ExitProcess
DeleteCriticalSection
TryEnterCriticalSection
EnterCriticalSection
InitializeCriticalSection
HeapSize
SetEndOfFile

user32

LoadStringW
GetPropW
MessageBoxW
GetMessageW
TranslateMessage
DispatchMessageW
MsgWaitForMultipleObjects
PeekMessageW
ReleaseDC
RemovePropW
SendMessageW
CreateWindowExW
DestroyWindow
DefWindowProcW
GetWindowLongW
GetDC
LoadImageW
GetParent
GetDesktopWindow
LoadCursorW
LoadIconW
SetPropW
EnumDisplaySettingsW
EnumWindows
WaitForInputIdle
MonitorFromWindow
GetWindowThreadProcessId
RegisterClassW
wsprintfW
GetClassInfoW

gdi32

SelectObject
CreateDIBSection
SetDIBColorTable
CreateCompatibleDC
StretchBlt
RealizePalette
GetStockObject
CreateCompatibleBitmap
GetDeviceCaps
GetSystemPaletteEntries
DeleteDC
SelectPalette
CreatePalette
GetObjectW
SetStretchBltMode
DeleteObject
GetDIBits

shell32

SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetSpecialFolderPathW

ole32

CoCreateInstance
CoSetProxyBlanket
CoInitialize
CoUninitialize
CreateStreamOnHGlobal
CoInitializeEx

oleaut32

VariantInit
VariantClear

comctl32

ImageList_Create
ImageList_AddMasked
ImageList_Destroy

bcrypt

BCryptOpenAlgorithmProvider
BCryptCloseAlgorithmProvider
BCryptGetProperty
BCryptGenerateSymmetricKey
BCryptEncrypt
BCryptDestroyKey
BCryptDecrypt
BCryptSetProperty

hpsocket_u

SYS_GuessCompressBound
SYS_GZipGuessUncompressBound
SYS_GZipUncompress
HP_Create_TcpPackClient
HP_Destroy_TcpPackClient
SYS_GZipCompress

libcurl

curl_global_init
curl_easy_setopt
curl_global_cleanup
curl_easy_init
curl_easy_cleanup
curl_slist_append
curl_easy_pause
curl_slist_free_all
curl_easy_perform
curl_easy_getinfo

gdiplus

GdipDisposeImage
GdipGetImagePixelFormat
GdipFree
GdipBitmapLockBits
GdipDrawImageRectI
GdipDeleteGraphics
GdipGetImagePalette
GdipSetCompositingMode
GdipGetImageWidth
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipAlloc
GdipCreateBitmapFromStream
GdipCloneImage
GdipGetImagePaletteSize
GdipGetImageHeight
GdiplusStartup
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdiplusShutdown

urlmon

URLDownloadToFileW

wininet

DeleteUrlCacheEntryW

ws2_32

gethostname
WSAStartup
WSACleanup

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 443KB - Virtual size: 443KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ae3691176311fea6b3bf7899092923f5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

oleaut32

comctl32

bcrypt

hpsocket_u

libcurl

gdiplus

urlmon

wininet

ws2_32

iphlpapi

Sections

.text Size: 443KB - Virtual size: 443KB

.rdata Size: 1.7MB - Virtual size: 1.7MB

.data Size: 9KB - Virtual size: 14KB

.rsrc Size: 2.4MB - Virtual size: 2.4MB

.reloc Size: 37KB - Virtual size: 37KB

.text
Size: 443KB - Virtual size: 443KB

.rdata
Size: 1.7MB - Virtual size: 1.7MB

.data
Size: 9KB - Virtual size: 14KB

.rsrc
Size: 2.4MB - Virtual size: 2.4MB

.reloc
Size: 37KB - Virtual size: 37KB