790f0d61e1388f82cad126ca965fed072e8c4b41b1104a4b1e2ab4f2e9d0e8fe

Sharing

Copy URL Twitter E-mail

General

Target

790f0d61e1388f82cad126ca965fed072e8c4b41b1104a4b1e2ab4f2e9d0e8fe
Size

2.6MB
MD5

ff08d5e01e4e17e9b4197ed9ba7df37f
SHA1

6e331dc53aab5d11dcb3750a2fe23162c804baf3
SHA256

790f0d61e1388f82cad126ca965fed072e8c4b41b1104a4b1e2ab4f2e9d0e8fe
SHA512

3565dc20a9f8243795462a71b2ac5a2c5e373523438467d6441d84d48481003a68389ef385ce0483ce7836c87d537ba0a2948bd094d5da4a252028f6f96d0ace
SSDEEP

49152:GnaaerUC7DGugzaIwQRo+glC8ph9qQi4d2lGTSpWFrRXanXTQqBX0k:aGR7Kug2I3o+0bpbqnlgSkFrRXanXTQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
790f0d61e1388f82cad126ca965fed072e8c4b41b1104a4b1e2ab4f2e9d0e8fe

Files

790f0d61e1388f82cad126ca965fed072e8c4b41b1104a4b1e2ab4f2e9d0e8fe
.exe windows x86

d31e6e9e1ab37192d027b5141666acaf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

UuidToStringA
RpcStringFreeA

kernel32

CreateEventW
TerminateProcess
GetStartupInfoW
CreateSemaphoreW
CreateDirectoryW
GetTimeZoneInformation
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringW
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetDriveTypeW
GetConsoleCP
LCMapStringW
IsValidLocale
EnumSystemLocalesW
GetCurrentDirectoryW
CreateFileW
SetEnvironmentVariableA
HeapQueryInformation
SetStdHandle
SetUnhandledExceptionFilter
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
VirtualFree
GetVersionExW
FreeLibraryAndExitThread
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SwitchToThread
SignalObjectAndWait
WaitForSingleObjectEx
CreateTimerQueue
UnhandledExceptionFilter
GetStringTypeW
ExitThread
CreateThread
VirtualQuery
VirtualAlloc
GetSystemInfo
IsProcessorFeaturePresent
IsDebuggerPresent
WriteConsoleW
GetStdHandle
GetCommandLineA
GetSystemTimeAsFileTime
AreFileApisANSI
GetModuleHandleExW
ExitProcess
RtlUnwind
SearchPathA
GetProfileIntA
GetTempPathA
GetUserDefaultLCID
VerifyVersionInfoA
VerSetConditionMask
GetTickCount
lstrcpyA
FindResourceExW
GetCPInfo
GetOEMCP
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GlobalFlags
SetErrorMode
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GetFileTime
GetFileSizeEx
GetFileAttributesExA
CreateMutexA
ReleaseMutex
ReleaseSemaphore
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetVersionExA
GetCurrentThread
ResumeThread
SetThreadPriority
WaitForSingleObject
SetEvent
FileTimeToSystemTime
FindNextFileA
FileTimeToLocalFileTime
VirtualProtect
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
FindResourceA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
FreeResource
GetSystemDirectoryW
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
EncodePointer
GetCurrentProcessId
GetThreadLocale
GetVolumeInformationA
LoadLibraryW
lstrcmpiA
GetModuleHandleW
GetModuleFileNameW
UnlockFile
SetEndOfFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
lstrcmpA
MulDiv
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
SetLastError
CloseHandle
DuplicateHandle
GetFileType
ReadFile
WriteFile
GetCurrentProcess
SystemTimeToFileTime
SetFilePointer
CreateFileA
DosDateTimeToFileTime
OutputDebugStringA
GetFileAttributesA
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
RaiseException
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
DecodePointer
GetCurrentDirectoryA
SetCurrentDirectoryA
LoadLibraryA
FreeLibrary
InterlockedDecrement
InterlockedIncrement
GetTempFileNameA
Sleep
GetSystemDefaultLangID
GetACP
FindFirstFileA
CreateDirectoryA
GetDriveTypeA
FindClose
CopyFileA
GetWindowsDirectoryA
GetSystemDirectoryA
ExpandEnvironmentStringsA
GetModuleFileNameA
GetLastError
lstrlenA
FormatMessageA
LocalFree
LocalAlloc
MultiByteToWideChar
WideCharToMultiByte
DeleteFileA
SetFileAttributesA
RemoveDirectoryA
FindResourceW
GetModuleHandleA
SizeofResource
LoadResource
GetProcAddress
LockResource
IsValidCodePage

user32

CreateAcceleratorTableA
LoadAcceleratorsW
ToAsciiEx
GetKeyboardState
MapVirtualKeyExA
IsCharLowerA
GetKeyboardLayout
PostThreadMessageA
IsZoomed
GetComboBoxInfo
LoadMenuW
TrackMouseEvent
MonitorFromPoint
UpdateLayeredWindow
IsMenu
SetWindowRgn
DrawFrameControl
DrawEdge
LoadImageW
DrawStateA
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
LockWindowUpdate
RegisterClipboardFormatA
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
GetIconInfo
DrawIconEx
DrawFocusRect
GetMenuDefaultItem
SetParent
GetSystemMenu
UnionRect
GetNextDlgGroupItem
IsRectEmpty
InvalidateRgn
CopyAcceleratorTableA
CharNextA
LoadCursorW
WindowFromPoint
SetCapture
WaitMessage
KillTimer
SetTimer
DeleteMenu
SetRect
MessageBeep
IsClipboardFormatAvailable
CopyImage
SystemParametersInfoA
GetMenuItemInfoA
RealChildWindowFromPoint
InflateRect
GetSysColorBrush
ReuseDDElParam
UnpackDDElParam
DestroyIcon
OffsetRect
IntersectRect
SetRectEmpty
DestroyAcceleratorTable
DestroyMenu
CreatePopupMenu
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
ReleaseCapture
BringWindowToTop
IsIconic
MapVirtualKeyA
GetKeyNameTextA
SetWindowContextHelpId
SetCursor
ShowOwnedPopups
PostQuitMessage
GetCursorPos
GetMessageA
GetDesktopWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
MapDialogRect
GetAsyncKeyState
GetActiveWindow
IsDialogMessageA
SendDlgItemMessageA
CheckDlgButton
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
DrawTextA
DrawTextExA
GrayStringA
TabbedTextOutA
GetClientRect
LoadIconA
CallNextHookEx
SetWindowsHookExA
GetWindow
GetTopWindow
GetClassNameA
GetClassLongA
SetWindowLongA
PtInRect
EqualRect
CopyRect
MapWindowPoints
AdjustWindowRectEx
GetWindowRect
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
SetCursorPos
SetClassLongA
GetDoubleClickTime
CopyIcon
ModifyMenuA
CharUpperBuffA
FrameRect
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
GetUpdateRect
SubtractRect
CreateMenu
DestroyCursor
GetWindowRgn
DrawIcon
InsertMenuItemA
LoadImageA
EnableWindow
InvalidateRect
FillRect
LoadCursorA
SendMessageA
PostMessageA
SetMenuDefaultItem
GetParent
SetWindowTextA
UpdateWindow
MessageBoxA
TranslateMessage
DispatchMessageA
PeekMessageA
CloseWindow
LoadIconW
UnregisterClassA
GetMenuStringA
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuA
AppendMenuA
RemoveMenu
CharUpperA
GetSystemMetrics
UnhookWindowsHookEx
GetDC
GetWindowDC
ReleaseDC
BeginPaint
EndPaint
ClientToScreen
ScreenToClient
GetSysColor
IsWindowEnabled
GetWindowLongA
GetWindowThreadProcessId
GetLastActivePopup
GetFocus
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoA
LoadBitmapW
RegisterWindowMessageA
GetMessagePos
GetMessageTime
DefWindowProcA
CallWindowProcA
RegisterClassA
GetClassInfoA
GetClassInfoExA
CreateWindowExA
IsWindow
IsChild
DestroyWindow
SetWindowPos
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsWindowVisible
GetDlgItem
GetDlgCtrlID
SetFocus
GetKeyState
GetCapture
GetMenu
SetMenu
TrackPopupMenu
SetActiveWindow
GetForegroundWindow
SetForegroundWindow

gdi32

OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
CombineRgn
CreateFontIndirectA
GetMapMode
SetRectRgn
GetTextExtentPoint32A
GetTextMetricsA
EnumFontFamiliesExA
GetBkColor
GetTextColor
GetRgnBox
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
SetPixel
SetDIBColorTable
CreateEllipticRgn
SetWindowOrgEx
Polygon
Polyline
Rectangle
OffsetRgn
CreateRoundRectRgn
RoundRect
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
GetWindowOrgEx
LPtoDP
GetViewportOrgEx
GetTextFaceA
GetLayout
SetLayout
SetMapMode
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
MoveToEx
SetTextAlign
SetTextColor
SetROP2
RealizePalette
StretchBlt
CreatePolygonRgn
SetBkMode
SetBkColor
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateBitmap
CopyMetaFileA
CreateDIBSection
DeleteObject
DeleteDC
CreateDCA
Ellipse
DPtoLP
ExtTextOutA
TextOutA
GetObjectA
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreatePalette
Escape
GetDeviceCaps
PatBlt
PtVisible
RectVisible
SetPolyFillMode

msimg32

TransparentBlt
AlphaBlend

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegDeleteValueA
QueryServiceStatus
OpenServiceA
OpenSCManagerA
DeleteService
CreateServiceA
ControlService
CloseServiceHandle
RegCreateKeyA
ReportEventA
RegisterEventSourceA
RegEnumKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetDesktopFolder
SHGetSpecialFolderPathA
SHChangeNotify
SHGetSpecialFolderLocation
SHAppBarMessage
SHGetMalloc
DragFinish
DragQueryFileA
SHGetFileInfoA
ShellExecuteA

shlwapi

PathStripToRootA
PathFindExtensionA
PathFindFileNameA
PathRemoveFileSpecW
PathIsUNCA
StrFormatKBSizeA

uxtheme

IsAppThemed
GetWindowTheme
GetThemeSysColor
GetCurrentThemeName
GetThemeColor
DrawThemeText
DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
DrawThemeParentBackground
OpenThemeData
CloseThemeData
GetThemePartSize

ole32

CreateStreamOnHGlobal
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoInitializeEx
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
DoDragDrop
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
CoDisconnectObject
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
OleRun
CoCreateInstance
CoInitialize

oleaut32

SysAllocString
VariantCopy
VarBstrCmp
LoadTypeLi
SysAllocStringByteLen
VariantChangeType
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantClear
VarBstrFromDate
OleCreateFontIndirect
VariantInit
SysFreeString
SysAllocStringLen
SafeArrayDestroy
GetErrorInfo

oledlg

ord8

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdiplusStartup
GdiplusShutdown
GdipCloneImage
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipAlloc
GdipFree

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundA

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 401KB - Virtual size: 401KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 425KB - Virtual size: 425KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d31e6e9e1ab37192d027b5141666acaf

Headers

DLL Characteristics

File Characteristics

Imports

rpcrt4

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

oleacc

imm32

winmm

Sections

.text Size: 1.7MB - Virtual size: 1.7MB

.rdata Size: 401KB - Virtual size: 401KB

.data Size: 38KB - Virtual size: 69KB

.rsrc Size: 425KB - Virtual size: 425KB

.reloc Size: 137KB - Virtual size: 136KB

.text
Size: 1.7MB - Virtual size: 1.7MB

.rdata
Size: 401KB - Virtual size: 401KB

.data
Size: 38KB - Virtual size: 69KB

.rsrc
Size: 425KB - Virtual size: 425KB

.reloc
Size: 137KB - Virtual size: 136KB