b4ccadb5302556a4e42242600b2a9bc21756d303f3d3837881d82181cfd4bb96

Sharing

Copy URL Twitter E-mail

General

Target

b4ccadb5302556a4e42242600b2a9bc21756d303f3d3837881d82181cfd4bb96
Size

4.0MB
MD5

95aba7a23d11f64b8ca6b7ea2f34fe99
SHA1

600f71bdbc2c74d1314696e755ca4860b8ebecbc
SHA256

b4ccadb5302556a4e42242600b2a9bc21756d303f3d3837881d82181cfd4bb96
SHA512

ad76a5b4559cabb073cf46b909859e3360005993466c500ff169aacef2f10a3377c922facf10e787518db685e43d6ed30236a40269861273b5e9ef1ad0a5adf1
SSDEEP

98304:LoM4c53LBD5xqfgeFdYxtGCjwXg4JejeT:LoM4c53LXxqrdYTOd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4ccadb5302556a4e42242600b2a9bc21756d303f3d3837881d82181cfd4bb96

Files

b4ccadb5302556a4e42242600b2a9bc21756d303f3d3837881d82181cfd4bb96
.exe windows x86

4a817c5ba8849967d0053368515cf3b6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAStartup
accept
closesocket
recv
send
socket
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
gethostname
ioctlsocket
htonl
freeaddrinfo
getaddrinfo
sendto
recvfrom
listen
ntohl
inet_pton
WSAIoctl
setsockopt
htons
getsockopt
getsockname
getpeername
connect
bind
WSASetLastError
select
__WSAFDIsSet
WSAGetLastError
WSAWaitForMultipleEvents
WSASetEvent
ntohs
WSACleanup
WSAResetEvent

kernel32

GetModuleHandleA
LoadLibraryA
FindResourceW
SizeofResource
LockResource
LoadResource
FreeResource
GetFullPathNameW
FindFirstFileW
HeapSize
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
HeapReAlloc
GetTimeZoneInformation
DeleteFileW
PeekConsoleInputA
ReadConsoleInputW
GetNumberOfConsoleInputEvents
SetConsoleMode
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetCurrentThread
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
ExitProcess
SetStdHandle
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetDriveTypeW
GetConsoleCP
FreeLibraryAndExitThread
ExitThread
CreateThread
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InterlockedFlushSList
InterlockedPushEntrySList
RaiseException
RtlUnwind
InitializeSListHead
GetStartupInfoW
ResetEvent
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
TerminateProcess
FindClose
UnhandledExceptionFilter
GlobalLock
GlobalUnlock
GlobalAlloc
GetCPInfo
CompareStringEx
GetStringTypeW
GetLocaleInfoEx
CloseThreadpoolWait
SetThreadpoolWait
CreateThreadpoolWait
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
GetVersionExA
FreeLibrary
SubmitThreadpoolWork
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
GetTickCount64
GetSystemTimeAsFileTime
GetCurrentProcessorNumber
FlushProcessWriteBuffers
CreateEventExW
SleepConditionVariableSRW
SleepConditionVariableCS
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
InitOnceExecuteOnce
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
LCMapStringEx
DecodePointer
EncodePointer
GetNativeSystemInfo
GetExitCodeThread
SwitchToThread
TryEnterCriticalSection
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
CreateSymbolicLinkW
GetFileInformationByHandleEx
CreateHardLinkW
MoveFileExW
CopyFileW
GetFileAttributesW
FlushInstructionCache
GetCurrentProcess
HeapDestroy
HeapCreate
DebugBreak
GetModuleHandleW
GetProcessHeap
GetCurrentProcessId
CreateMutexExW
GetProcAddress
HeapAlloc
OpenSemaphoreW
WaitForSingleObjectEx
ReleaseMutex
GetModuleHandleExW
HeapFree
CreateSemaphoreExW
GetModuleFileNameA
SetCurrentDirectoryW
OutputDebugStringA
GetVersionExW
CreateDirectoryExW
DeviceIoControl
AreFileApisANSI
GetTempPathW
SetFileTime
SetFilePointerEx
SetFileInformationByHandle
SetFileAttributesW
SetEndOfFile
GetFinalPathNameByHandleW
GetFileInformationByHandle
UnmapViewOfFile
GetStdHandle
WriteConsoleW
GenerateConsoleCtrlEvent
SetConsoleCtrlHandler
GetConsoleWindow
GetFileAttributesExW
GetDiskFreeSpaceExW
lstrlenA
FindNextFileW
FindFirstFileExW
GetLocalTime
CreateThreadpoolTimer
LoadLibraryW
GetCurrentDirectoryW
LocalFree
FormatMessageA
GetTickCount
IsBadReadPtr
CloseThreadpoolWork
MulDiv
OpenEventW
OpenFileMappingW
SetEvent
ResumeThread
AssignProcessToJobObject
SetInformationJobObject
CreateJobObjectW
GetFileSizeEx
SetErrorMode
OpenThread
OpenProcess
WaitForMultipleObjects
GetModuleFileNameW
CreateEventW
MapViewOfFile
CreateFileMappingW
AllocConsole
SetHandleInformation
CreatePipe
WriteFile
ReadFile
CreateProcessW
Sleep
GetProcessTimes
GetExitCodeProcess
MultiByteToWideChar
WideCharToMultiByte
CreateFileA
VerifyVersionInfoW
VerSetConditionMask
ReleaseSemaphore
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
CreateSemaphoreW
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
CreateDirectoryW
IsDebuggerPresent
FormatMessageW
GetCurrentThreadId
OutputDebugStringW
CreateFileW
GetLastError
SetLastError
SetUnhandledExceptionFilter
PeekNamedPipe
GetFileType
MoveFileExA
GetEnvironmentVariableA
GetSystemDirectoryA
QueryPerformanceFrequency
SleepEx
InitializeCriticalSectionEx
QueryPerformanceCounter

user32

DestroyIcon
PostMessageW
PtInRect
DefWindowProcW
CallWindowProcW
UnregisterClassW
RegisterClassExW
RegisterWindowMessageW
SetWindowPos
SetTimer
GetClientRect
GetWindowRect
MapWindowPoints
GetActiveWindow
GetForegroundWindow
MessageBoxW
GetWindowLongW
SetWindowLongW
GetParent
GetWindow
KillTimer
GetDlgItem
GetLastActivePopup
FindWindowW
FillRect
InvertRect
DrawIconEx
OffsetRect
IsWindowVisible
GetCursorPos
SetForegroundWindow
SendMessageW
DestroyWindow
ShowWindow
CreateWindowExW
LoadCursorW
UpdateLayeredWindow
MapVirtualKeyA
CharLowerBuffW
GetDesktopWindow
SetActiveWindow
EnableWindow
SystemParametersInfoA
DrawTextW
GetWindowPlacement
GetSystemMetrics
EnableMenuItem
ClientToScreen
MsgWaitForMultipleObjects
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
GetSysColor
SetMenuContextHelpId
GetMenuItemInfoW
SetMenuInfo
GetMenuInfo
TrackPopupMenu
DeleteMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
CheckMenuItem
DestroyMenu
CreatePopupMenu
IsWindowEnabled
IsMenu
GetIconInfo
CharNextW
LoadImageW
CreateIconFromResource
LoadBitmapW
GetKeyState
GetFocus
LoadIconW
DestroyCursor
EqualRect
SetRect
SetCursor
GetClassNameW
IsRectEmpty
UnionRect
IntersectRect
InflateRect
CopyRect
ScreenToClient
SetCaretPos
HideCaret
GetCaretBlinkTime
CreateCaret
SetWindowTextW
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
GetDC
UpdateWindow
ReleaseCapture
SetCapture
GetCapture
SetFocus
IsZoomed
IsIconic
SetLayeredWindowAttributes
AnimateWindow
IsWindow
PostQuitMessage
TrackMouseEvent
GetMonitorInfoW
MonitorFromWindow

gdi32

RoundRect
SaveDC
ExtSelectClipRgn
SetRectRgn
SetROP2
SetTextColor
GetWorldTransform
SetWorldTransform
CreateDIBSection
ExtCreatePen
Polyline
GetCurrentObject
GetViewportOrgEx
RestoreDC
PtInRegion
Pie
OffsetRgn
IntersectClipRect
GetTextExtentPoint32W
GetTextColor
Ellipse
ExcludeClipRect
GetClipRgn
RectInRegion
SetViewportOrgEx
CreateCompatibleBitmap
GetDCOrgEx
SetBkMode
Rectangle
GetStockObject
GetClipBox
CreateSolidBrush
CreateFontIndirectW
SetGraphicsMode
GetDeviceCaps
CreateBitmap
EnumFontsW
GetObjectW
StretchBlt
SelectObject
DeleteDC
CreateCompatibleDC
DeleteObject
CreateRoundRectRgn
BitBlt
GetRgnBox
Arc
CombineRgn
CreateEllipticRgnIndirect
CreatePen
CreatePatternBrush
CreateRectRgn
CreateRectRgnIndirect

shell32

ShellExecuteW
GetCurrentProcessExplicitAppUserModelID
SetCurrentProcessExplicitAppUserModelID
Shell_NotifyIconW
SHGetKnownFolderPath

ole32

CoCreateInstance
CLSIDFromProgID
CLSIDFromString
OleLockRunning
CreateStreamOnHGlobal
OleUninitialize
OleInitialize
StringFromGUID2
CoCreateGuid
CoTaskMemFree
CreateBindCtx

oleaut32

CreateErrorInfo
SysFreeString
SysAllocString
SetErrorInfo
VariantChangeType
VariantClear
VariantInit
GetErrorInfo

shlwapi

StrToIntExW

iphlpapi

GetTcpTable
GetUdpTable

wininet

InternetQueryOptionW
InternetSetOptionW

imm32

ImmGetContext
ImmReleaseContext
ImmAssociateContext

gdiplus

GdipGetImageEncoders
GdipGetImageEncodersSize
GdipDrawImageRectI
GdipGraphicsClear
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipGetImageHeight
GdipGetImageWidth
GdipSaveImageToFile
GdipGetImageGraphicsContext
GdipCloneImage
GdiplusShutdown
GdiplusStartup
GdipFree
GdipAlloc
GdipDisposeImage

msimg32

AlphaBlend
GradientFill

crypt32

CertAddCertificateContextToStore
CryptDecodeObjectEx
PFXImportCertStore
CertFindExtension
CertFreeCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore
CertGetNameStringA
CryptQueryObject
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChain
CryptStringToBinaryA

advapi32

CryptAcquireContextA
CryptEncrypt
CryptImportKey
CryptDestroyKey
CryptReleaseContext
CryptGetHashParam
CryptGenRandom
CryptCreateHash
CryptHashData
CryptDestroyHash

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 502KB - Virtual size: 501KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 801KB - Virtual size: 801KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4a817c5ba8849967d0053368515cf3b6

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

kernel32

user32

gdi32

shell32

ole32

oleaut32

shlwapi

iphlpapi

wininet

imm32

gdiplus

msimg32

crypt32

advapi32

Sections

.text Size: 2.5MB - Virtual size: 2.5MB

.rdata Size: 502KB - Virtual size: 501KB

.data Size: 37KB - Virtual size: 110KB

.rsrc Size: 801KB - Virtual size: 801KB

.reloc Size: 136KB - Virtual size: 136KB

.text
Size: 2.5MB - Virtual size: 2.5MB

.rdata
Size: 502KB - Virtual size: 501KB

.data
Size: 37KB - Virtual size: 110KB

.rsrc
Size: 801KB - Virtual size: 801KB

.reloc
Size: 136KB - Virtual size: 136KB