15c396ee75e0fe3a8c837c546b68bb923d8a427eb392407a0120dfbf8bbaef98

Sharing

Copy URL

Twitter E-mail

General

Target

15c396ee75e0fe3a8c837c546b68bb923d8a427eb392407a0120dfbf8bbaef98
Size

4.1MB
MD5

62c968080a4e8d2709077b3abe44fdcb
SHA1

c90a53ab373084d45cb2607e450e079b462836e6
SHA256

15c396ee75e0fe3a8c837c546b68bb923d8a427eb392407a0120dfbf8bbaef98
SHA512

f9715fcbf619c5c5b53c6cf1edb004099563197409acf2d8e1fc4f88ae9b4e608580b4c616530a08b437b35e689e33e4c542a5fa86fa0f9e7785c9e352053ecb
SSDEEP

98304:sKUhq8YHPon0CMrJ4WZKttIyXneMk6ozjqvNaeifDXoLuRxoYS7LIgwskYdQUdK:+liPLpujvOD4kF+LIgwsk+K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15c396ee75e0fe3a8c837c546b68bb923d8a427eb392407a0120dfbf8bbaef98

Files

15c396ee75e0fe3a8c837c546b68bb923d8a427eb392407a0120dfbf8bbaef98
.exe windows x86

d06fbce7f6bc0c31caf9e3a06caecb17

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetCurrentDirectoryW
LCMapStringW
GetFullPathNameA
WriteConsoleW
SetEnvironmentVariableA
GetConsoleMode
GetConsoleCP
IsProcessorFeaturePresent
GetTimeZoneInformation
GetStringTypeW
SetConsoleCtrlHandler
FatalAppExitA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
QueryPerformanceCounter
HeapDestroy
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
SetUnhandledExceptionFilter
HeapQueryInformation
GetFileType
SetStdHandle
HeapSize
HeapReAlloc
RaiseException
RtlUnwind
GetDateFormatW
GetTimeFormatW
GetSystemTimeAsFileTime
EncodePointer
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapAlloc
HeapFree
CreateThread
ExitThread
DecodePointer
ExitProcess
GetStartupInfoW
HeapSetInformation
GetCommandLineW
LocalLock
LocalUnlock
FindResourceExW
VirtualProtect
SearchPathW
InitializeCriticalSectionAndSpinCount
GetDiskFreeSpaceW
ReplaceFileW
GetUserDefaultLCID
GetTempPathW
GetTempFileNameW
SetErrorMode
GetNumberFormatW
GetFileTime
GetFileSizeEx
GetFileAttributesW
SetFileTime
LocalFileTimeToFileTime
SetFileAttributesW
GetFileAttributesExW
GetShortPathNameW
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
MoveFileW
GetStringTypeExW
GetSystemDirectoryW
GetCurrentDirectoryW
GlobalFlags
SystemTimeToFileTime
GetThreadLocale
GetAtomNameW
GlobalGetAtomNameW
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
TlsGetValue
LocalAlloc
GetCurrentProcessId
InterlockedIncrement
GetProfileIntW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindFirstFileW
FindNextFileW
FindClose
CreateEventW
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
lstrlenA
lstrcmpA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
LoadLibraryExW
CompareStringA
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
FreeResource
CopyFileW
FormatMessageW
LocalFree
GetTickCount
lstrcmpW
WinExec
lstrcatW
lstrcpyW
FreeLibrary
GetWindowsDirectoryW
MulDiv
GlobalSize
GetVersionExW
MultiByteToWideChar
GetDiskFreeSpaceExW
DeleteFileW
CreateFileW
CloseHandle
lstrcmpiW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
WideCharToMultiByte
GlobalFree
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
ActivateActCtx
GetModuleFileNameW
GetProcAddress
GetModuleHandleW
LoadLibraryW
GetLastError
DeactivateActCtx
SetLastError
FindResourceW
LoadResource
LockResource
SizeofResource
GetPrivateProfileIntW
lstrlenW
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
GetPrivateProfileStringW
WritePrivateProfileStringW
Sleep
GetDriveTypeW

user32

WinHelpW
IsChild
SetWindowsHookExW
CallNextHookEx
GetClassLongW
RemovePropW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
MessageBoxW
GetClassInfoExW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
CallWindowProcW
GetMenu
GetWindow
MapVirtualKeyW
GetKeyNameTextW
SetWindowPos
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetMenuState
GetMenuStringW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
ClientToScreen
IsWindowVisible
IsRectEmpty
GetDoubleClickTime
DrawStateW
GetPropW
SetPropW
GetClassNameW
WindowFromPoint
EndPaint
BeginPaint
DrawIconEx
GetMessageW
SendDlgItemMessageA
GetWindowLongW
DestroyWindow
RegisterClassW
DestroyIcon
RegisterWindowMessageW
OffsetRect
RedrawWindow
CopyIcon
MessageBeep
SetWindowLongW
DestroyCursor
GetCapture
ClipCursor
InvertRect
PtInRect
GetFocus
GetMessagePos
IsClipboardFormatAvailable
ScreenToClient
GetCursorPos
IntersectRect
DefWindowProcW
GetClassInfoW
DrawEdge
FrameRect
GetDC
SystemParametersInfoW
DrawIcon
DispatchMessageW
TranslateMessage
PeekMessageW
LoadCursorW
SetCursor
GetDlgCtrlID
UpdateWindow
AppendMenuW
GetSystemMenu
SendDlgItemMessageW
CheckDlgButton
CheckRadioButton
GetDlgItem
LoadIconW
EnableWindow
KillTimer
SendMessageW
IsWindow
GetDlgItemInt
SetWindowRgn
FillRect
SetRect
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetKeyState
PostMessageW
SetCapture
LoadBitmapW
ReleaseCapture
DrawFocusRect
LoadImageW
GetWindowRect
GetDlgItemTextW
SetDlgItemInt
SetDlgItemTextW
IsDlgButtonChecked
IsDialogMessageW
SetWindowTextW
MoveWindow
ShowWindow
ScrollWindowEx
CheckMenuItem
EnableMenuItem
ModifyMenuW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
LoadMenuW
GetParent
CopyRect
InflateRect
UnionRect
SetRectEmpty
GetSysColor
InvalidateRect
ReleaseDC
GetWindowDC
GetClientRect
GetSystemMetrics
IsIconic
SetTimer
PostQuitMessage
MapDialogRect
SetWindowContextHelpId
ValidateRect
ShowOwnedPopups
DeleteMenu
GetMenuItemInfoW
DestroyMenu
RegisterClipboardFormatW
GetSysColorBrush
GetWindowThreadProcessId
RealChildWindowFromPoint
GetDialogBaseUnits
UnregisterClassW
WaitMessage
GetTabbedTextExtentW
GetWindowRgn
WindowFromDC
EnumChildWindows
GetDCEx
SubtractRect
CharUpperBuffW
GetUpdateRect
SendNotifyMessageW
SetMenuDefaultItem
CreateMenu
InSendMessage
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
IsMenu
MonitorFromPoint
UpdateLayeredWindow
MapVirtualKeyExW
IsCharLowerW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
LockWindowUpdate
SetCursorPos
CreateAcceleratorTableW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
DrawFrameControl
SetClassLongW
DestroyAcceleratorTable
SetParent
IsZoomed
CopyImage
GetIconInfo
NotifyWinEvent
EnableScrollBar
HideCaret
GetAsyncKeyState
GetMenuDefaultItem
UnpackDDElParam
ReuseDDElParam
GetMenuBarInfo
LoadAcceleratorsW
InsertMenuItemW
CreatePopupMenu
BringWindowToTop
TranslateAcceleratorW
PostThreadMessageW
CharUpperW
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableW
CharNextW
SetLayeredWindowAttributes
EnumDisplayMonitors
CreateWindowExW

gdi32

CombineRgn
GetTextExtentPoint32W
GetDeviceCaps
CreateFontIndirectW
GetCurrentObject
StartDocW
StartPage
EndPage
EndDoc
AbortDoc
CreateFontW
GetViewportOrgEx
SetViewportOrgEx
Rectangle
Polygon
GetTextMetricsW
PatBlt
CopyMetaFileW
CreateDCW
CreateRectRgnIndirect
SetTextColor
SetBkColor
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
LineTo
MoveToEx
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetLayout
SetLayout
SetArcDirection
SetColorAdjustment
SelectClipRgn
GetClipRgn
CreateRectRgn
SelectClipPath
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
ExtCreateRegion
ScaleWindowExtEx
GetCurrentPositionEx
ArcTo
PolyDraw
PolylineTo
PolyBezierTo
ExtSelectClipRgn
CreateDIBPatternBrushPt
CreatePatternBrush
SelectPalette
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
ExtCreatePen
CreateHatchBrush
SetRectRgn
SetAbortProc
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetTextColor
GetRgnBox
GetCharWidthW
StretchDIBits
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
Polyline
Ellipse
GetDIBits
SetPixel
OffsetRgn
EnumFontFamiliesExW
RoundRect
GetWindowOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceW
CreateMetaFileW
CloseMetaFile
DeleteMetaFile
CreateEllipticRgn
CreatePolygonRgn
CreateRoundRectRgn
CreateSolidBrush
CreatePen
Escape
TextOutW
RectVisible
PtVisible
GetPixel
GetBkColor
DPtoLP
GetViewportExtEx
GetWindowExtEx
GetMapMode
CreateCompatibleBitmap
LPtoDP
BitBlt
GetStockObject
ExtTextOutW
GetObjectW
SetDIBColorTable
SelectObject
GetDIBColorTable
StretchBlt
DeleteObject
CreateDIBSection
CreateCompatibleDC
SetWindowExtEx
CreateBitmap
DeleteDC

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
GetJobW
ClosePrinter

advapi32

GetFileSecurityW
RegQueryValueExW
RegCloseKey
RegQueryValueW
RegSetValueW
RegDeleteKeyW
RegEnumKeyW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegEnumValueW
RegEnumKeyExW
RegOpenKeyExW
SetFileSecurityW

shell32

SHAddToRecentDocs
ShellExecuteW
SHBrowseForFolderW
ShellExecuteExW
SHAppBarMessage
SHGetSpecialFolderLocation
SHGetDesktopFolder
DragFinish
SHGetFileInfoW
ExtractIconW
SHGetPathFromIDListW
DragQueryFileW
SHGetMalloc
SHGetSpecialFolderPathW

comctl32

_TrackMouseEvent
ImageList_Draw
InitCommonControlsEx
ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Create
ImageList_GetImageCount
ImageList_Destroy
ImageList_AddMasked
ImageList_Remove
ImageList_DrawEx

shlwapi

PathFindExtensionW
PathFileExistsW
PathFindFileNameW
PathRemoveFileSpecW
PathIsUNCW
PathRemoveExtensionW
PathStripToRootW

ole32

StgIsStorageFile
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
StgOpenStorage
IsAccelerator
OleLockRunning
OleSetMenuDescriptor
OleSave
WriteClassStm
OleSaveToStream
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreate
OleLoad
GetHGlobalFromILockBytes
OleSetContainedObject
OleCreateFromFile
OleCreateLinkToFile
OleRegEnumVerbs
CreateItemMoniker
CreateGenericComposite
CreateDataAdviseHolder
CreateOleAdviseHolder
CreateFileMoniker
StgCreateDocfile
PropVariantCopy
OleRun
CoRegisterMessageFilter
CoRevokeClassObject
CoRegisterClassObject
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
StringFromGUID2
CoDisconnectObject
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
OleQueryLinkFromData
OleQueryCreateFromData
OleRegGetMiscStatus
OleTranslateAccelerator
OleGetIconOfClass
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleGetClipboard
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
OleDuplicateData
CoTreatAsClass
StringFromCLSID
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
CoUninitialize
CoInitializeEx
CoInitialize
CoGetMalloc
GetRunningObjectTable
OleIsRunning

oleaut32

VariantClear
VariantChangeType
VariantInit
SysAllocString
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SysAllocStringLen
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SysStringLen
VarDateFromStr
SysReAllocStringLen
VarCyFromStr
VarBstrFromCy
VarBstrFromDec
VarDecFromStr
VarBstrFromDate
OleCreateFontIndirect
SysStringByteLen
SysAllocStringByteLen
SysFreeString
VariantTimeToSystemTime
VarUdateFromDate
SystemTimeToVariantTime
SafeArrayCopy

oledlg

OleUIBusyW

urlmon

URLDownloadToFileW

avcodec-58

av_init_packet
av_packet_alloc
av_packet_rescale_ts
av_packet_unref
avcodec_alloc_context3
avcodec_close
avcodec_find_decoder
avcodec_find_encoder
avcodec_flush_buffers
avcodec_free_context
avcodec_open2
avcodec_parameters_copy
avcodec_parameters_from_context
avcodec_parameters_to_context
avcodec_receive_frame
avcodec_receive_packet
avcodec_send_frame
avcodec_send_packet

avformat-58

av_dump_format
av_find_default_stream_index
av_guess_frame_rate
av_interleaved_write_frame
av_read_frame
av_seek_frame
av_write_trailer
avformat_alloc_output_context2
avformat_close_input
avformat_find_stream_info
avformat_free_context
avformat_new_stream
avformat_open_input
avformat_seek_file
avformat_write_header
avio_closep
avio_open

avutil-56

av_audio_fifo_alloc
av_audio_fifo_free
av_audio_fifo_read
av_audio_fifo_reset
av_audio_fifo_size
av_audio_fifo_write
av_dict_copy
av_dict_free
av_dict_get
av_dict_set
av_frame_alloc
av_frame_free
av_frame_get_buffer
av_frame_unref
av_free
av_freep
av_get_default_channel_layout
av_gettime
av_log
av_malloc
av_mallocz_array
av_opt_set_int
av_opt_set_sample_fmt
av_rescale_q
av_rescale_q_rnd
av_rescale_rnd

swresample-3

swr_alloc
swr_alloc_set_opts
swr_convert
swr_convert_frame
swr_free
swr_get_delay
swr_init

gdiplus

GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdiplusStartup
GdiplusShutdown
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageI
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipDisposeImage
GdipAlloc
GdipFree
GdipCreateBitmapFromStreamICM

sdl2

SDL_DestroyCond
SDL_CondWait
SDL_memset
SDL_MixAudioFormat
SDL_Init
SDL_OpenAudioDevice
SDL_PauseAudioDevice
SDL_Log
SDL_CloseAudioDevice
SDL_Delay
SDL_CondBroadcast
SDL_CreateThread
SDL_WaitThread
SDL_DestroyMutex
SDL_CreateCond
SDL_GetError
SDL_CondSignal
SDL_LockMutex
SDL_UnlockMutex
SDL_CreateMutex

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 481KB - Virtual size: 481KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 186KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d06fbce7f6bc0c31caf9e3a06caecb17

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

urlmon

avcodec-58

avformat-58

avutil-56

swresample-3

gdiplus

sdl2

oleacc

imm32

winmm

Sections

.text Size: 2.2MB - Virtual size: 2.2MB

.rdata Size: 481KB - Virtual size: 481KB

.data Size: 35KB - Virtual size: 68KB

.rsrc Size: 1.2MB - Virtual size: 1.2MB

.reloc Size: 186KB - Virtual size: 185KB

.text
Size: 2.2MB - Virtual size: 2.2MB

.rdata
Size: 481KB - Virtual size: 481KB

.data
Size: 35KB - Virtual size: 68KB

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

.reloc
Size: 186KB - Virtual size: 185KB