3eba5bbc1933287a166e9d4e9206fa68238b7c921bf319010fa55ce5c55881e3

Sharing

Copy URL Twitter E-mail

General

Target

3eba5bbc1933287a166e9d4e9206fa68238b7c921bf319010fa55ce5c55881e3
Size

1.5MB
MD5

20867d2aa3f03d831c46357fa30a116d
SHA1

47cef1ca76ad6da91165094c4ae149aa1911be51
SHA256

3eba5bbc1933287a166e9d4e9206fa68238b7c921bf319010fa55ce5c55881e3
SHA512

df38d850f8d7e87c30ab888dc6e7eddb6d3dbde1a854f0e0dfa963cbd3bab38346bf432293f3c7adb47aff5a3e75b58b075695d2855508bce745bbc2d0f9ae4f
SSDEEP

24576:EdF9TsfkQoGWC8l8FHQjqF7j61lzFwkyP0Tch:E7Rl8FM6CwkyMT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3eba5bbc1933287a166e9d4e9206fa68238b7c921bf319010fa55ce5c55881e3

Files

3eba5bbc1933287a166e9d4e9206fa68238b7c921bf319010fa55ce5c55881e3
.exe windows x86

293d8a5ca5e228da82d360d755d4c2dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

AlphaBlend

kernel32

UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
CompareStringA
CompareStringW
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetLocalTime
IsBadReadPtr
IsBadCodePtr
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeA
GetStringTypeW
SetStdHandle
GetDriveTypeA
GetLocaleInfoW
GetACP
GetOEMCP
SetEnvironmentVariableA
GetSystemTime
GetTimeZoneInformation
FindResourceA
GlobalAddAtomA
GetProfileStringA
InterlockedExchange
HeapSize
ExitThread
CreateThread
HeapReAlloc
GetDriveTypeW
RaiseException
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
GetStartupInfoW
SetErrorMode
GetFileTime
GetFileSize
GetFileAttributesW
FindResourceExW
GetCurrentDirectoryW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetThreadLocale
GetStringTypeExW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
UnlockFile
LockFile
SetFilePointer
DuplicateHandle
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GetProcessVersion
GlobalFlags
lstrcmpiW
LoadLibraryA
GetVersion
lstrcatW
GlobalAddAtomW
GlobalFindAtomW
lstrcpyW
GlobalFree
SuspendThread
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrlenA
InterlockedDecrement
InterlockedIncrement
MulDiv
GetModuleHandleA
SetLastError
GlobalAlloc
SizeofResource
LoadResource
LockResource
SetCurrentDirectoryW
ResumeThread
FlushFileBuffers
WriteFile
ReadFile
SetFilePointerEx
SetEndOfFile
GetFileSizeEx
CreateFileW
MultiByteToWideChar
WideCharToMultiByte
GetWindowsDirectoryW
GetTickCount
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetCurrentProcess
GetModuleHandleW
GetTempPathW
CreateDirectoryW
GetFileAttributesExW
GetShortPathNameW
GetLastError
LocalFree
MoveFileW
DeleteFileW
SetThreadPriority
SetEvent
CreateEventW
Sleep
CreateProcessW
WaitForSingleObject
TerminateProcess
GetExitCodeProcess
CloseHandle
GlobalLock
GlobalUnlock
lstrlenW
GetVersionExW
lstrcpynW
LoadLibraryW
GetProcAddress
FreeLibrary
lstrcmpW
FindResourceW
GetModuleFileNameW
GetCurrentDirectoryA

user32

CreateWindowExW
SetPropW
GetPropW
CallWindowProcW
RemovePropW
DefWindowProcW
GetMessageTime
GetMessagePos
GetForegroundWindow
IntersectRect
SystemParametersInfoW
GetWindowPlacement
MapDialogRect
ShowWindow
GetCapture
GetAsyncKeyState
RegisterClipboardFormatW
EndDialog
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuW
SetMenuItemBitmaps
EnableMenuItem
GetNextDlgTabItem
GetActiveWindow
CallNextHookEx
ValidateRect
IsWindowVisible
GetCursorPos
SetWindowsHookExW
GetLastActivePopup
MessageBoxW
PostQuitMessage
wsprintfW
UnhookWindowsHookEx
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
BeginDeferWindowPos
EndDeferWindowPos
PtInRect
DrawIcon
DestroyIcon
FindWindowW
ExitWindowsEx
GetMessageW
PeekMessageW
TranslateMessage
DispatchMessageW
GetMenuStringW
DeleteMenu
GetWindowTextW
GetKeyState
OpenClipboard
IsClipboardFormatAvailable
GetClipboardData
CloseClipboard
GetDC
ReleaseDC
GetWindowTextLengthW
IsWindowEnabled
SetFocus
RegisterWindowMessageW
ScreenToClient
LoadCursorW
DestroyCursor
UnregisterClassW
GetWindowTextLengthA
HideCaret
ShowCaret
ExcludeUpdateRgn
GetWindowTextA
GetWindow
GetWindowLongW
SetWindowLongW
GetDlgCtrlID
SetWindowPos
GetMenu
GetMenuItemCount
GetMenuItemID
GetSystemMetrics
DrawFocusRect
SetClassLongW
OffsetRect
GetFocus
DrawFrameControl
GetParent
KillTimer
TrackPopupMenu
RegisterClassW
GetClassInfoW
WinHelpW
IsChild
GetTopWindow
SetTimer
GrayStringW
DrawTextW
TabbedTextOutW
InflateRect
IsWindow
CopyRect
GetSysColor
EnableWindow
LoadMenuW
LoadIconW
LoadImageW
InvalidateRect
SetForegroundWindow
GetSystemMenu
InsertMenuW
GetClientRect
PostMessageW
IsIconic
GetWindowRect
SendMessageW
DrawTextA
GetClassInfoA
DefDlgProcA
DefWindowProcA
CharNextA
CallWindowProcA
RemovePropA
SetWindowsHookExA
GetWindowLongA
SendMessageA
IsWindowUnicode
GetClassNameA
SetWindowLongA
SetPropA
GetPropA
LoadBitmapW
CheckMenuItem
TrackPopupMenuEx
GetSubMenu
DeferWindowPos
EqualRect
AdjustWindowRectEx
MapWindowPoints
SendDlgItemMessageW
SetParent
SetCapture
LockWindowUpdate
GetDCEx
ReleaseCapture
PostThreadMessageW
CharUpperW
GetSysColorBrush
LoadStringW
GetDesktopWindow
GetClassNameW
SetRect
WindowFromPoint
DestroyMenu
wvsprintfW
SetRectEmpty
MoveWindow
SetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
GetDlgItemInt
CheckDlgButton
SetCursor
UpdateWindow
SendDlgItemMessageA

gdi32

SetBkMode
SetTextColor
CombineRgn
CreateRectRgn
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
CreateBitmap
GetDeviceCaps
CreatePatternBrush
GetCharWidthW
CreateFontW
SetRectRgn
GetTextMetricsW
EnumFontFamiliesExW
SetBkColor
SaveDC
GetClipBox
CreateRectRgnIndirect
ExtSelectClipRgn
SetStretchBltMode
StretchDIBits
SetDIBitsToDevice
RestoreDC
CreateDIBSection
DeleteDC
SelectObject
PatBlt
DeleteObject
GetTextExtentPoint32W
GetStockObject
GetBkMode
GetBkColor
GetTextColor
GetMapMode
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateSolidBrush
GetObjectW
CreateDIBitmap
ExtTextOutA
GetTextExtentPointA
CreateFontIndirectW

comdlg32

GetFileTitleW
GetOpenFileNameW
GetSaveFileNameW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

AdjustTokenPrivileges
OpenProcessToken
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegDeleteKeyW
RegDeleteValueW
LookupPrivilegeValueW

shell32

DragFinish
DragQueryFileW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetMalloc
SHGetDesktopFolder
SHGetFileInfoW
SHGetSpecialFolderPathW
DragAcceptFiles
ShellExecuteW

comctl32

_TrackMouseEvent
ImageList_GetImageCount
ImageList_Draw
ImageList_AddMasked
ImageList_SetBkColor
ImageList_Destroy
ImageList_Create
PropertySheetW
DestroyPropertySheetPage
CreatePropertySheetPageW
ord17
ImageList_DrawIndirect
ImageList_GetImageInfo

oledlg

OleUIBusyW

ole32

OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoInitialize
CoCreateInstance
CoUninitialize
CoCreateGuid

oleaut32

SysAllocString
SysFreeString

shlwapi

PathIsRootW
PathRemoveFileSpecW
PathFindExtensionW
PathFindFileNameW
PathIsDirectoryW
PathFileExistsW

wininet

HttpQueryInfoW
InternetCrackUrlW
InternetReadFile
InternetCloseHandle
InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestW

Sections

.text
Size: 788KB - Virtual size: 785KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 492KB - Virtual size: 510KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

293d8a5ca5e228da82d360d755d4c2dc

Headers

File Characteristics

Imports

msimg32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

oleaut32

shlwapi

wininet

Sections

.text Size: 788KB - Virtual size: 785KB

.rdata Size: 124KB - Virtual size: 123KB

.data Size: 492KB - Virtual size: 510KB

.rsrc Size: 92KB - Virtual size: 90KB

.text
Size: 788KB - Virtual size: 785KB

.rdata
Size: 124KB - Virtual size: 123KB

.data
Size: 492KB - Virtual size: 510KB

.rsrc
Size: 92KB - Virtual size: 90KB