3c63ecccc2a1decaaeab3475d4e0b91526f442804bf065640f2e0442749c714f

Sharing

Copy URL Twitter E-mail

General

Target

3c63ecccc2a1decaaeab3475d4e0b91526f442804bf065640f2e0442749c714f
Size

472KB
MD5

aad5439e84b7918d37c257ef095aa177
SHA1

bd1766959773ac3491185a4b9cf38ff5c9f78964
SHA256

3c63ecccc2a1decaaeab3475d4e0b91526f442804bf065640f2e0442749c714f
SHA512

e7d65e22a382f9da54b2b9b3cfe664a6b30d3637c54dab5865ae33ec6c1cea38451ab8046897c48bf407a320f8fc256d0f08241a711ada2326e8e8455f79fe8d
SSDEEP

12288:1yJSE+MUOJp+GGnOj/Q6eOEDhxFVP0Jhyc:sJf+rchQ6eOEDhxFVP0JIc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c63ecccc2a1decaaeab3475d4e0b91526f442804bf065640f2e0442749c714f

Files

3c63ecccc2a1decaaeab3475d4e0b91526f442804bf065640f2e0442749c714f
.exe windows x86

81cb74301a6358cc18fbfce406b4eee8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeW
FreeResource
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
MultiByteToWideChar
lstrlenA
GetLastError
WideCharToMultiByte
lstrlenW
GetPrivateProfileIntW
SetFileAttributesW
GetPrivateProfileStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetLocalTime
InterlockedIncrement
InterlockedDecrement
MulDiv
DuplicateHandle
GetFileType
GetCurrentProcess
SystemTimeToFileTime
SetFilePointer
DosDateTimeToFileTime
CloseHandle
ReadFile
GetFileSize
FindFirstFileW
CreateFileW
GetTickCount
GetModuleHandleW
GetProcAddress
WaitForSingleObject
FindNextFileW
CopyFileW
GetStartupInfoA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
ExitProcess
LoadLibraryW
GetModuleFileNameW
GetCurrentDirectoryW

user32

SetPropW
GetPropW
AdjustWindowRectEx
GetMenu
IntersectRect
CharNextW
CreateCaret
ShowCaret
HideCaret
SetCaretPos
ClientToScreen
GetSysColor
GetCaretPos
FillRect
DrawTextW
SetRect
CharPrevW
SetWindowTextW
GetWindowTextLengthW
GetWindowTextW
InvalidateRgn
CreateAcceleratorTableW
MoveWindow
SetTimer
GetFocus
DispatchMessageW
TranslateMessage
GetMessageW
GetCursorPos
CreateWindowExW
CallWindowProcW
InvalidateRect
IsRectEmpty
EndPaint
BeginPaint
GetUpdateRect
SetFocus
GetWindow
GetDC
ReleaseDC
DestroyWindow
GetKeyState
SendMessageW
MessageBoxW
SetWindowLongW
GetWindowLongW
SetWindowRgn
GetWindowRect
GetClientRect
ScreenToClient
MonitorFromWindow
GetMonitorInfoW
IsZoomed
IsIconic
LoadCursorW
InflateRect
OffsetRect
PostQuitMessage
RegisterClassExW
GetClassInfoExW
RegisterClassW
ShowWindow
SetWindowPos
EnableWindow
DefWindowProcW
GetParent
PtInRect
PostMessageW
ReleaseCapture
SetCapture
KillTimer
MapWindowPoints
IsWindow
SetCursor

advapi32

RegCloseKey
RegOpenKeyW
RegQueryValueExW

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteExW

shlwapi

PathFileExistsW
StrToIntW

msvcr90

_controlfp_s
_invoke_watson
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_except_handler4_common
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_gmtime64
iswalnum
wcsncmp
wcstol
isdigit
__CxxFrameHandler3
toupper
wcscpy_s
_wtoi
_vsnwprintf
wcsrchr
_wcslwr
wcsncpy
memmove
realloc
memset
_wcsicmp
wcstoul
malloc
??2@YAPAXI@Z
vswprintf_s
_vscwprintf
calloc
_recalloc
free
wcsnlen
wcschr
wcsstr
??_V@YAXPAX@Z
swprintf_s
memmove_s
memcpy_s
_purecall
??3@YAXPAX@Z
_CxxThrowException
memcpy

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

gdi32

RoundRect
LineTo
MoveToEx
CreatePenIndirect
CreateSolidBrush
ExtTextOutW
SetBkColor
SetStretchBltMode
StretchBlt
SetBkMode
CombineRgn
ExtSelectClipRgn
CreateRectRgnIndirect
DeleteObject
GetObjectW
GetClipBox
SelectClipRgn
SetTextColor
GetCharABCWidthsW
GetObjectA
GetDeviceCaps
GetTextMetricsW
TextOutW
CreateDIBSection
CreateRoundRectRgn
GetStockObject
CreateFontIndirectW
CreatePen
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
SaveDC
BitBlt
RestoreDC
Rectangle
SetWindowOrgEx
GetTextExtentPoint32W

ole32

CLSIDFromProgID
CoCreateInstance
OleLockRunning
CLSIDFromString

oleaut32

SysFreeString
VariantClear
VariantInit
SysAllocString

comctl32

ord17
_TrackMouseEvent

gdiplus

GdipDeleteGraphics
GdipSetTextRenderingHint
GdipCreateStringFormat
GdipDeleteStringFormat
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipCreateFromHDC
GdipDeleteBrush
GdipFree
GdipAlloc
GdipCloneBrush
GdipDrawString
GdiplusStartup
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipCreateLineBrushI
GdiplusShutdown

imm32

ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext

Sections

.text
Size: 288KB - Virtual size: 288KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

81cb74301a6358cc18fbfce406b4eee8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

shlwapi

msvcr90

version

gdi32

ole32

oleaut32

comctl32

gdiplus

imm32

Sections

.text Size: 288KB - Virtual size: 288KB

.rdata Size: 56KB - Virtual size: 56KB

.data Size: 9KB - Virtual size: 9KB

.rsrc Size: 97KB - Virtual size: 97KB

.reloc Size: 20KB - Virtual size: 19KB

.text
Size: 288KB - Virtual size: 288KB

.rdata
Size: 56KB - Virtual size: 56KB

.data
Size: 9KB - Virtual size: 9KB

.rsrc
Size: 97KB - Virtual size: 97KB

.reloc
Size: 20KB - Virtual size: 19KB