d64d794ed4295f4764a084dc53efed19b29c9aeeebcb320668a1661d11e05ba6

Sharing

Copy URL Twitter E-mail

General

Target

d64d794ed4295f4764a084dc53efed19b29c9aeeebcb320668a1661d11e05ba6
Size

2.0MB
MD5

7029641b5051140d27f3847ce5809785
SHA1

78ea376f4b4e15cbf182c92ffc529c472f345826
SHA256

d64d794ed4295f4764a084dc53efed19b29c9aeeebcb320668a1661d11e05ba6
SHA512

b1e446ef4441e27a170ebfc85d2ea116901f33e148f2c2846e78102613c2ec3bfa147f6b29cb57e06377a5610f564775288734e5c4ba7b9139101e3c96e78cbf
SSDEEP

24576:Z1LKfCQbEWJGBtlfvrVbU4gNHl4v92rl1U1lzFONUzTC:Z1W6QbubU7lrrsOizT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d64d794ed4295f4764a084dc53efed19b29c9aeeebcb320668a1661d11e05ba6

Files

d64d794ed4295f4764a084dc53efed19b29c9aeeebcb320668a1661d11e05ba6
.exe windows x86

555ac4c5bb1da870ea5f9804420c91dd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

AlphaBlend

kernel32

CreateThread
ExitThread
HeapSize
SetStdHandle
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
CompareStringA
CompareStringW
VirtualAlloc
IsBadWritePtr
GetLocalTime
GetCurrentDirectoryA
LCMapStringA
LCMapStringW
IsBadReadPtr
IsBadCodePtr
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeA
GetStringTypeW
GetDriveTypeA
GetLocaleInfoW
GetACP
GetOEMCP
SetEnvironmentVariableA
GetSystemTime
GetTimeZoneInformation
FindResourceA
GlobalAddAtomA
GetProfileStringA
InterlockedExchange
HeapReAlloc
GetDriveTypeW
RaiseException
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
GetStartupInfoW
SetErrorMode
GetFileTime
GetFileSize
GetFileAttributesW
FindResourceExW
GetCurrentDirectoryW
GetProfileIntW
GetThreadLocale
GetStringTypeExW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
UnlockFile
LockFile
SetFilePointer
DuplicateHandle
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GetProcessVersion
GlobalFlags
lstrcmpiW
FileTimeToLocalFileTime
FileTimeToSystemTime
LoadLibraryA
GetVersion
lstrcatW
GlobalAddAtomW
GlobalFindAtomW
lstrcpyW
SuspendThread
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
lstrlenA
InterlockedDecrement
InterlockedIncrement
MulDiv
GetModuleHandleA
SetLastError
GlobalSize
SizeofResource
LoadResource
LockResource
SetCurrentDirectoryW
TerminateThread
GlobalFree
ResumeThread
FlushFileBuffers
WriteFile
ReadFile
SetFilePointerEx
SetEndOfFile
GetFileSizeEx
CreateFileW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetWindowsDirectoryW
GetTickCount
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
MultiByteToWideChar
WideCharToMultiByte
GetPrivateProfileStringW
GetCurrentProcess
GetModuleHandleW
GetTempPathW
CreateDirectoryW
GetFileAttributesExW
GetShortPathNameW
GetLastError
FormatMessageW
LocalFree
CopyFileW
MoveFileW
DeleteFileW
GlobalAlloc
GlobalLock
GlobalUnlock
SetThreadPriority
SetEvent
CreateEventW
Sleep
CreateProcessW
TerminateProcess
GetExitCodeProcess
CloseHandle
lstrlenW
GetVersionExW
lstrcpynW
LoadLibraryW
GetProcAddress
FreeLibrary
lstrcmpW
FindResourceW
WaitForSingleObject
GetModuleFileNameW
SetUnhandledExceptionFilter

user32

GetWindowTextW
CreateWindowExW
SetPropW
GetPropW
CallWindowProcW
RemovePropW
DefWindowProcW
GetMessageTime
GetMessagePos
GetForegroundWindow
IntersectRect
SystemParametersInfoW
GetWindowPlacement
MapDialogRect
ShowWindow
GetCapture
GetAsyncKeyState
RegisterClipboardFormatW
EndDialog
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuW
SetMenuItemBitmaps
EnableMenuItem
GetNextDlgTabItem
GetActiveWindow
CallNextHookEx
ValidateRect
IsWindowVisible
GetCursorPos
SetWindowsHookExW
GetLastActivePopup
PostQuitMessage
wsprintfW
UnhookWindowsHookEx
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
BeginDeferWindowPos
EndDeferWindowPos
PtInRect
MessageBoxW
DrawIcon
LoadImageW
DestroyIcon
FindWindowW
ExitWindowsEx
GetClipboardData
CloseClipboard
OpenClipboard
GetMessageW
PeekMessageW
TranslateMessage
DispatchMessageW
GetMenuStringW
DeleteMenu
GetKeyState
GetDC
SetCursor
IsWindowEnabled
SetFocus
LoadCursorW
LoadBitmapW
UnregisterClassW
GetWindowTextLengthW
HideCaret
ShowCaret
ExcludeUpdateRgn
GetWindowTextA
RegisterWindowMessageW
ScreenToClient
GetWindow
GetWindowLongW
SetWindowLongW
GetDlgCtrlID
SetWindowPos
GetMenu
GetMenuItemCount
GetMenuItemID
GetSystemMetrics
DrawFocusRect
SetClassLongW
GetFocus
DrawFrameControl
GetParent
LoadIconW
KillTimer
SendDlgItemMessageW
DeferWindowPos
EqualRect
AdjustWindowRectEx
MapWindowPoints
SendDlgItemMessageA
SetParent
SetCapture
LockWindowUpdate
SetTimer
OffsetRect
InflateRect
GrayStringW
DrawTextW
TabbedTextOutW
CopyRect
GetSysColor
IsIconic
IsWindow
InvalidateRect
GetSystemMenu
InsertMenuW
GetWindowRect
GetClientRect
PostMessageW
LoadMenuW
SendMessageW
GetSubMenu
TrackPopupMenuEx
FlashWindow
DrawTextA
GetClassInfoA
DefDlgProcA
DefWindowProcA
CharNextA
CallWindowProcA
RemovePropA
SetWindowsHookExA
GetWindowLongA
SendMessageA
IsWindowUnicode
GetClassNameA
SetWindowLongA
SetPropA
GetPropA
DestroyCursor
EnableWindow
SetForegroundWindow
CheckMenuItem
TrackPopupMenu
RegisterClassW
GetClassInfoW
WinHelpW
IsChild
GetTopWindow
GetWindowTextLengthA
GetDCEx
ReleaseCapture
PostThreadMessageW
IsClipboardFormatAvailable
CharUpperW
GetSysColorBrush
LoadStringW
GetDesktopWindow
GetClassNameW
SetRect
WindowFromPoint
DestroyMenu
wvsprintfW
SetRectEmpty
MoveWindow
SetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
GetDlgItemInt
CheckDlgButton
ReleaseDC
UpdateWindow

gdi32

CombineRgn
CreateRectRgn
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
SetTextColor
GetDeviceCaps
CreatePatternBrush
GetCharWidthW
CreateFontW
SetRectRgn
GetTextMetricsW
EnumFontFamiliesExW
CopyMetaFileW
SetBkMode
CreateBitmap
SetBkColor
SaveDC
GetClipBox
CreateRectRgnIndirect
ExtSelectClipRgn
SetStretchBltMode
StretchDIBits
SetDIBitsToDevice
RestoreDC
CreateDIBSection
DeleteDC
PatBlt
DeleteObject
SelectObject
GetTextExtentPoint32W
GetBkMode
GetBkColor
GetTextColor
GetMapMode
BitBlt
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
CreateCompatibleDC
CreateCompatibleBitmap
CreateSolidBrush
GetStockObject
GetObjectW
CreateDIBitmap
ExtTextOutA
GetTextExtentPointA
CreateFontIndirectW

comdlg32

GetFileTitleW
GetOpenFileNameW
GetSaveFileNameW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

AdjustTokenPrivileges
OpenProcessToken
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
LookupPrivilegeValueW

shell32

DragAcceptFiles
SHGetSpecialFolderPathW
SHGetFileInfoW
SHFileOperationW
DragQueryFileW
DragFinish
SHGetDesktopFolder
SHGetMalloc
SHBrowseForFolderW
ShellExecuteW
SHGetPathFromIDListW

comctl32

ImageList_GetImageInfo
ImageList_AddMasked
_TrackMouseEvent
ImageList_GetImageCount
ImageList_SetBkColor
ImageList_Destroy
ImageList_Create
PropertySheetW
DestroyPropertySheetPage
CreatePropertySheetPageW
ord17
ImageList_DrawIndirect
ImageList_Draw

oledlg

OleUIBusyW

ole32

CoRevokeClassObject
CoRegisterMessageFilter
OleGetClipboard
ReleaseStgMedium
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoInitialize
CoCreateInstance
CoUninitialize
CoCreateGuid
OleFlushClipboard
OleIsCurrentClipboard
OleDuplicateData
CoTaskMemAlloc

oleaut32

VarBstrFromDate
VariantClear
SysAllocString
SysFreeString

shlwapi

PathIsURLW
PathFindExtensionW
PathIsDirectoryW
PathFindFileNameW
PathRemoveFileSpecW
PathIsRootW
PathGetCharTypeW
PathFileExistsW

wininet

InternetQueryOptionW
InternetSetOptionW
InternetGetConnectedState
HttpQueryInfoW
InternetCrackUrlW
InternetReadFile
InternetCloseHandle
InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestW

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 184KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 580KB - Virtual size: 599KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

555ac4c5bb1da870ea5f9804420c91dd

Headers

File Characteristics

Imports

msimg32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

oleaut32

shlwapi

wininet

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 184KB - Virtual size: 182KB

.data Size: 580KB - Virtual size: 599KB

.rsrc Size: 100KB - Virtual size: 96KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 184KB - Virtual size: 182KB

.data
Size: 580KB - Virtual size: 599KB

.rsrc
Size: 100KB - Virtual size: 96KB