a25432ef5601ef9d1c280467584c7c997775b0400ef06a7e5f5bcb70a7322393

Sharing

Copy URL Twitter E-mail

General

Target

a25432ef5601ef9d1c280467584c7c997775b0400ef06a7e5f5bcb70a7322393
Size

5.0MB
MD5

222a0a8c206b651e38ee4a6015ba7ea3
SHA1

e0f43d81b7c2f1412504108e116b6c95c42759fa
SHA256

a25432ef5601ef9d1c280467584c7c997775b0400ef06a7e5f5bcb70a7322393
SHA512

b336c8fe6fcc310adf5c5909159b3763963bf4d3cf955b4fdda52a853bf12aa5ed493d0695b2c6dfd8d4194509fe725f8d957b162706730fc152d284cca734b6
SSDEEP

98304:DdR/suStCl52Wvqq6dASmmAMa+n7iOh2TWzvXtX69IHOJdMYDcAVjBBN:Dd1wCl52Wvqq6dASmmAMa+n71h2TC/tS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a25432ef5601ef9d1c280467584c7c997775b0400ef06a7e5f5bcb70a7322393

Files

a25432ef5601ef9d1c280467584c7c997775b0400ef06a7e5f5bcb70a7322393
.exe windows x86

5a94bee2615f9ac3081b9e850f3a54bf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

HttpSendRequestA
HttpOpenRequestA
InternetWriteFile
InternetReadFile
InternetConnectA
HttpEndRequestW
HttpQueryInfoA
InternetCloseHandle
InternetOpenA
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetGetConnectedState

d3d11

D3D11CreateDevice

dbghelp

MiniDumpWriteDump
SymFromAddr
SymInitialize

winmm

mciSendStringA
mciGetErrorStringA
joyGetPos
joyGetPosEx
timeGetDevCaps
timeBeginPeriod
timeEndPeriod

ws2_32

gethostname
socket
setsockopt
sendto
send
recvfrom
recv
listen
inet_ntoa
inet_addr
getsockopt
ioctlsocket
connect
closesocket
bind
accept
getpeername
select
__WSAFDIsSet
ntohs
ntohl
htons
htonl
WSAStartup
WSACleanup
WSAGetLastError
WSAAddressToStringA
freeaddrinfo
getaddrinfo

gdiplus

GdiplusStartup
GdiplusShutdown

comctl32

InitCommonControlsEx

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

rpcrt4

UuidToStringW
UuidCreate

dxgi

CreateDXGIFactory1

winhttp

WinHttpCloseHandle
WinHttpConnect
WinHttpSetOption
WinHttpOpen
WinHttpSetStatusCallback
WinHttpOpenRequest
WinHttpWebSocketReceive
WinHttpWebSocketSend
WinHttpWebSocketCompleteUpgrade
WinHttpReceiveResponse
WinHttpSendRequest

kernel32

SetConsoleCtrlHandler
SetCurrentDirectoryW
HeapReAlloc
GetTimeZoneInformation
SetStdHandle
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
EnumSystemLocalesW
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
DecodePointer
WriteFile
GetStdHandle
PeekNamedPipe
GetFileType
GetFileInformationByHandle
GetDriveTypeW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindFirstFileExW
ReadFile
MoveFileExW
SetFileAttributesW
GetFileAttributesExW
GetModuleHandleExW
HeapWalk
HeapValidate
EncodePointer
LoadLibraryExW
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
VirtualQuery
GetProcessHeap
HeapFree
HeapAlloc
InitializeSListHead
RaiseException
GetACP
GetOEMCP
GetStartupInfoW
IsDebuggerPresent
TerminateProcess
UnhandledExceptionFilter
SleepConditionVariableSRW
SleepConditionVariableCS
WakeAllConditionVariable
IsProcessorFeaturePresent
CreateSymbolicLinkW
GetFileInformationByHandleEx
CloseThreadpoolWait
SetThreadpoolWait
CreateThreadpoolWait
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
CreateThreadpoolTimer
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
GetProcAddress
LoadLibraryW
WideCharToMultiByte
GetLastError
MultiByteToWideChar
CloseHandle
WaitForSingleObjectEx
CreateEventExW
GetCPInfo
GetConsoleWindow
GetCurrentDirectoryW
DeleteFileW
GetFullPathNameW
SetLastError
CreateThread
GetExitCodeThread
GetModuleHandleW
LocalFree
FormatMessageW
SetCurrentDirectoryA
GetCurrentDirectoryA
FreeLibrary
GetEnvironmentVariableW
CreateDirectoryW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
RemoveDirectoryW
Sleep
GetExitCodeProcess
CreateProcessW
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
SetWaitableTimer
CreateWaitableTimerW
GetTickCount64
GetCurrentProcess
GetCurrentThread
SetThreadPriority
SetPriorityClass
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalMemoryStatusEx
GetSystemInfo
GetVersionExW
GetLocaleInfoW
GetUserDefaultLCID
ExitProcess
lstrlenA
GetCommandLineW
ExpandEnvironmentStringsW
CreateFileW
GetFinalPathNameByHandleW
SetUnhandledExceptionFilter
SetErrorMode
GetCurrentProcessId
GetCurrentThreadId
GetModuleFileNameW
MoveFileA
WakeConditionVariable
InitializeConditionVariable
TryEnterCriticalSection
InitializeCriticalSectionEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
RtlCaptureStackBackTrace
SetFileInformationByHandle
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitOnceExecuteOnce
CreateSemaphoreExW
FlushProcessWriteBuffers
GetCurrentProcessorNumber
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
OutputDebugStringW
GetStringTypeW
SetEndOfFile
IsValidCodePage
HeapSize
OutputDebugStringA
WriteConsoleW
GetSystemTimeAsFileTime
FormatMessageA

user32

keybd_event
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
IsClipboardFormatAvailable
GetFocus
MessageBoxA
SetDlgItemTextA
TranslateMessage
DispatchMessageW
PeekMessageW
IsDialogMessageW
SetProcessDPIAware
GetForegroundWindow
GetAsyncKeyState
SetWindowLongW
EnumDisplaySettingsW
MonitorFromWindow
GetMonitorInfoW
ScreenToClient
SetWindowTextW
ReleaseDC
GetDC
DrawTextW
GetDlgItemTextW
SetDlgItemTextW
MapWindowPoints
EndDialog
DialogBoxParamW
CreateDialogParamW
LoadImageW
wsprintfW
GetCursorPos
UpdateWindow
LoadCursorW
CallNextHookEx
SetCursor
AdjustWindowRectEx
GetWindowRect
GetClientRect
SetForegroundWindow
GetSystemMetrics
ReleaseCapture
SetCapture
GetKeyState
SetFocus
BringWindowToTop
SetWindowPos
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassExW
DefWindowProcW
PostMessageW
SendMessageW
MessageBoxW
GetRawInputDeviceList
GetRawInputDeviceInfoA
ClientToScreen
GetActiveWindow
SetCursorPos
GetDlgItem
MoveWindow

gdi32

SelectObject
GetStockObject
GetDeviceCaps

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW

shell32

ShellExecuteW
SHGetFolderPathW

ole32

CoCreateInstance
CoCreateFreeThreadedMarshaler
CoTaskMemFree
CoInitialize

dwmapi

DwmGetCompositionTimingInfo

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 989KB - Virtual size: 988KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 538KB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

minATL
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mydata
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 305KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5a94bee2615f9ac3081b9e850f3a54bf

Headers

DLL Characteristics

File Characteristics

Imports

wininet

d3d11

dbghelp

winmm

ws2_32

gdiplus

comctl32

version

rpcrt4

dxgi

winhttp

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

dwmapi

Sections

.text Size: 3.2MB - Virtual size: 3.2MB

.rdata Size: 989KB - Virtual size: 988KB

.data Size: 538KB - Virtual size: 2.8MB

minATL Size: 512B - Virtual size: 12B

.mydata Size: 512B - Virtual size: 8B

.rsrc Size: 305KB - Virtual size: 304KB

.text
Size: 3.2MB - Virtual size: 3.2MB

.rdata
Size: 989KB - Virtual size: 988KB

.data
Size: 538KB - Virtual size: 2.8MB

minATL
Size: 512B - Virtual size: 12B

.mydata
Size: 512B - Virtual size: 8B

.rsrc
Size: 305KB - Virtual size: 304KB