4d820244fba56c047497d9af5ff44b1a00ba2166b394de1eb5afcc495d7f7dad

Sharing

Copy URL Twitter E-mail

General

Target

4d820244fba56c047497d9af5ff44b1a00ba2166b394de1eb5afcc495d7f7dad
Size

7.3MB
MD5

6d7ee161c64d115a17baca5f6578db86
SHA1

b8de0a2862cdf23f8f3f6c4025b647630f9e131e
SHA256

4d820244fba56c047497d9af5ff44b1a00ba2166b394de1eb5afcc495d7f7dad
SHA512

4954c165ad38074b5c6b5f7ce034758cf13f19d7ca6686275ad0a204fbebbb78b22fe9fbfe60ffda760641f752bf1242f66f942a3aa248c6bf03c23a6150e8a1
SSDEEP

196608:01M/seMDAI+FLOyomFHKnPqUwp4vwpdc7NuJZvmvZpm2A:R3I+Fcwp4Ypm72Zvmvrq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d820244fba56c047497d9af5ff44b1a00ba2166b394de1eb5afcc495d7f7dad

Files

4d820244fba56c047497d9af5ff44b1a00ba2166b394de1eb5afcc495d7f7dad
.exe windows x86

89ee65ace6910d630af590d4e5e13bee

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
ExitProcess
GetStdHandle
QueryPerformanceFrequency
GetFileType
SetStdHandle
HeapQueryInformation
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
GetConsoleOutputCP
ExitThread
CreateThread
VirtualQuery
VirtualAlloc
RtlUnwind
GetCPInfo
GetStringTypeW
GetConsoleMode
SetFilePointerEx
ReadConsoleW
GetDriveTypeW
GetTimeZoneInformation
FindFirstFileExW
IsValidCodePage
GetACP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
WriteConsoleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
GetTempFileNameW
SearchPathW
GetProfileIntW
GetTickCount
GetWindowsDirectoryW
GetOEMCP
FindResourceExW
GetTempPathW
SetErrorMode
VirtualProtect
GetSystemDefaultUILanguage
GetLocaleInfoW
GlobalFlags
GetFileTime
GetFileSizeEx
GetFileAttributesW
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GlobalGetAtomNameW
VerifyVersionInfoW
VerSetConditionMask
lstrcpyW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcmpA
GetCurrentThread
GetThreadLocale
lstrcmpiW
DuplicateHandle
UnlockFile
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
GetCurrentProcessId
LocalAlloc
InitializeCriticalSectionAndSpinCount
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindNextFileW
FindFirstFileW
FileTimeToLocalFileTime
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryA
LoadLibraryExW
GetModuleHandleA
GetSystemDirectoryW
EncodePointer
OutputDebugStringA
ResumeThread
SuspendThread
SetThreadPriority
GetCurrentThreadId
SetEvent
FreeLibrary
MulDiv
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalAlloc
SetLastError
CreateEventW
SetCommState
SetCommTimeouts
GetCommState
GetCommTimeouts
SizeofResource
PurgeComm
CreateMutexW
GetModuleHandleW
GetProcAddress
GetLocalTime
LoadLibraryW
GetSystemInfo
GetNativeSystemInfo
GetVersionExW
WaitForSingleObject
GetCurrentProcess
FindClose
CreateFileA
WriteFile
WideCharToMultiByte
CopyFileW
LocalFree
GetCurrentDirectoryW
CloseHandle
DeleteFileW
GetFileAttributesExW
FormatMessageW
Sleep
MultiByteToWideChar
SetFileAttributesW
CreateFileW
SetFilePointer
GetUserDefaultUILanguage
GetModuleFileNameW
RemoveDirectoryW
ReadFile
CreateDirectoryW
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
FindResourceW
LoadResource
RaiseException
HeapReAlloc
LockResource
OutputDebugStringW
GetLastError
HeapSize
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
HeapFree
FreeLibraryAndExitThread

user32

ShowOwnedPopups
PostQuitMessage
DrawIconEx
IsRectEmpty
DrawFocusRect
GetSysColorBrush
SetWindowRgn
DrawStateW
DrawFrameControl
DrawEdge
CharUpperW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetWindowThreadProcessId
LoadMenuW
OffsetRect
SetRectEmpty
SendDlgItemMessageA
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
IsDialogMessageW
IsWindowEnabled
CheckDlgButton
MoveWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
UnhookWindowsHookEx
GetTopWindow
GetClassNameW
GetParent
GetClassLongW
SetWindowLongW
PtInRect
EqualRect
MapWindowPoints
MessageBoxW
AdjustWindowRectEx
GetWindowRect
RemovePropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
SetWindowContextHelpId
RedrawWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetFocus
GetDlgCtrlID
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
WindowFromPoint
LockWindowUpdate
EnableScrollBar
GetDoubleClickTime
GetIconInfo
CopyIcon
UnregisterClassW
KillTimer
PeekMessageW
SetTimer
EnableWindow
FindWindowW
LoadIconW
LoadBitmapW
SetWindowTextW
SendMessageW
FindWindowExW
PostMessageW
ReleaseDC
SetRect
DrawTextW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
GetWindowLongW
GetWindowTextLengthW
GetWindowTextW
GetScrollPos
SetScrollPos
SetFocus
MapDialogRect
SetLayeredWindowAttributes
SystemParametersInfoW
EnumDisplayMonitors
InvalidateRect
DestroyMenu
GetMenuItemInfoW
GetKeyNameTextW
MapVirtualKeyW
RealChildWindowFromPoint
CopyImage
GetAsyncKeyState
TrackMouseEvent
FillRect
GetSysColor
DestroyIcon
LoadImageW
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
SetParent
MonitorFromPoint
IsZoomed
SetCapture
ReleaseCapture
DeleteMenu
ScrollWindow
GetDC
IsIconic
SetForegroundWindow
GetDesktopWindow
IsWindow
ShowWindow
GetPropW
GetWindow
GetLastActivePopup
AppendMenuW
GetClientRect
DrawIcon
GetSystemMetrics
GetSystemMenu
SetCursor
LoadCursorW
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
RemoveMenu
DispatchMessageW
WaitMessage
GetMessageW
TranslateMessage
IsWindowVisible
GetActiveWindow
GetKeyState
GetMenuDefaultItem
SetMenuDefaultItem
ModifyMenuW
DestroyAcceleratorTable
ValidateRect
GetCursorPos
SetWindowsHookExW
CallNextHookEx
CopyRect
InflateRect
TranslateAcceleratorW
MessageBeep
NotifyWinEvent
SetCursorPos
UnionRect
CreatePopupMenu
IntersectRect
DrawTextExW
GrayStringW
TabbedTextOutW
GetWindowDC
BeginPaint
EndPaint
ClientToScreen
ScreenToClient
BringWindowToTop
SetClassLongW
GetUpdateRect
CharNextW
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
LoadAcceleratorsW
CreateAcceleratorTableW
UpdateLayeredWindow
HideCaret
InvertRect
FrameRect
SubtractRect
RegisterClipboardFormatW
CharUpperBuffW
GetWindowRgn
DestroyCursor
CreateMenu
GetComboBoxInfo
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
MapVirtualKeyExW
IsCharLowerW
PostThreadMessageW
IsClipboardFormatAvailable
ReuseDDElParam
UnpackDDElParam
InsertMenuItemW
IsMenu

gdi32

ExtTextOutW
DPtoLP
CreateHatchBrush
CreatePen
CreateSolidBrush
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
MoveToEx
TextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
PatBlt
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateEllipticRgn
Ellipse
GetBkColor
SetRectRgn
GetTextExtentPoint32W
CreatePolygonRgn
Polygon
Polyline
GetTextMetricsW
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
RealizePalette
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateRoundRectRgn
Rectangle
GetRgnBox
OffsetRgn
RoundRect
CreatePalette
GetPaletteEntries
EnumFontFamiliesExW
GetNearestPaletteIndex
GetSystemPaletteEntries
LPtoDP
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
SetPixelV
GetTextFaceW
GetMapMode
CreateRectRgnIndirect
CreateRectRgn
CreatePatternBrush
CreateFontIndirectW
CreateBitmap
CombineRgn
GetDeviceCaps
CopyMetaFileW
BitBlt
StartPage
EndDoc
StartDocW
EndPage
CreateCompatibleBitmap
GetTextColor
SetBkColor
SelectObject
CreateCompatibleDC
CreateDCW
GetPixel
GetObjectW
DeleteObject
CreateFontW
OffsetViewportOrgEx
GetLayout
DeleteDC

msimg32

AlphaBlend
TransparentBlt

winspool.drv

EnumPrintersW
DocumentPropertiesW
OpenPrinterW
SetPrinterDataW
AddPrinterDriverW
ord204
AddPrinterW
ClosePrinter
GetPrinterDriverDirectoryW

advapi32

RegQueryValueW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegEnumValueW
RegEnumKeyW
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegDeleteValueW
RegDeleteKeyW

shell32

ShellExecuteExW
SHGetFileInfoW
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetDesktopFolder
SHAppBarMessage
DragQueryFileW
DragFinish
ShellExecuteW

comctl32

InitCommonControlsEx

shlwapi

PathFileExistsA
PathIsUNCW
PathStripToRootW
PathFindExtensionW
PathFindFileNameW
StrFormatKBSizeW
PathRemoveFileSpecW
PathFileExistsW

uxtheme

GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
GetWindowTheme
DrawThemeText
IsAppThemed
DrawThemeParentBackground
GetCurrentThemeName
GetThemeColor
DrawThemeBackground
CloseThemeData
OpenThemeData

ole32

CoFreeUnusedLibraries
CoInitializeEx
OleLockRunning
CLSIDFromProgID
CoDisconnectObject
CreateStreamOnHGlobal
CoGetClassObject
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
OleFlushClipboard
DoDragDrop
OleGetClipboard
OleIsCurrentClipboard
OleInitialize
OleUninitialize
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
CLSIDFromString
CoInitialize
CoCreateInstance
CoCreateGuid
OleTranslateAccelerator
IsAccelerator
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
RegisterDragDrop
CoRevokeClassObject
CoRegisterMessageFilter
RevokeDragDrop
CoLockObjectExternal

oleaut32

VariantChangeType
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
SysStringLen
VariantCopy
VarBstrFromDate
LoadTypeLi
OleCreateFontIndirect
SysAllocString
SysAllocStringByteLen
SysFreeString
SysAllocStringLen
VariantInit
VariantClear

oledlg

OleUIBusyW

gdiplus

GdipFree
GdipAlloc
GdiplusShutdown
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipDrawImageRectI
GdipSetInterpolationMode

ws2_32

send
select
closesocket
__WSAFDIsSet
WSAStartup
WSACleanup
htons
setsockopt
InetNtopW
accept
bind
inet_addr
inet_ntoa
ntohs
recvfrom
sendto
WSASetLastError
WSAGetLastError
WSAAsyncSelect
socket
connect
recv
ioctlsocket
InetPtonW
htonl

setupapi

SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList

dbghelp

MakeSureDirectoryPathExists

iphlpapi

IcmpSendEcho
FlushIpNetTable
IcmpCreateFile
GetAdaptersInfo
GetIpNetTable

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

wininet

InternetConnectW
InternetCloseHandle
InternetOpenW
InternetReadFile
InternetSetFilePointer
InternetWriteFile
InternetGetLastResponseInfoW
HttpQueryInfoW
InternetQueryDataAvailable
InternetSetStatusCallbackW
HttpSendRequestW
HttpOpenRequestW

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 388KB - Virtual size: 387KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

89ee65ace6910d630af590d4e5e13bee

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

ws2_32

setupapi

dbghelp

iphlpapi

oleacc

wininet

imm32

winmm

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 388KB - Virtual size: 387KB

.data Size: 24KB - Virtual size: 43KB

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.reloc Size: 146KB - Virtual size: 145KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 388KB - Virtual size: 387KB

.data
Size: 24KB - Virtual size: 43KB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

.reloc
Size: 146KB - Virtual size: 145KB