2d18ef92c50fbac8156e949f3dd2de94919d63814a10c41d592e2a017221bd9f

Sharing

Copy URL Twitter E-mail

General

Target

2d18ef92c50fbac8156e949f3dd2de94919d63814a10c41d592e2a017221bd9f
Size

2.0MB
MD5

adf59f2768d7910d7f11c22bcf9b68b3
SHA1

950a3fc76a7b5b4de37ee69cd41c3a6ce3badf72
SHA256

2d18ef92c50fbac8156e949f3dd2de94919d63814a10c41d592e2a017221bd9f
SHA512

7c4653abd6f67d6225024fae1857e86a1cf4a929fe056234bccfaeb60da96619389d0c824ce243303a063335e1b95bf933be4c2cd377e20c29d7c54a7d1e4575
SSDEEP

49152:u+r84V9QgGkdgV3QKuZb8BEfaCnC+JOs+F1muxgY/vt6nALsBJqWsaFKOg+c60Cj:u+r8W9IkO5QKuZbIEf/CGOLFlgY/vt6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d18ef92c50fbac8156e949f3dd2de94919d63814a10c41d592e2a017221bd9f

Files

2d18ef92c50fbac8156e949f3dd2de94919d63814a10c41d592e2a017221bd9f
.exe windows x86

5d741923024de265f6a60abf977bb70d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceFrequency
VirtualQuery
VirtualAlloc
HeapQueryInformation
GetModuleHandleExW
GetFileType
GetTimeFormatW
GetCommandLineA
RtlUnwind
RaiseException
SetStdHandle
GetStdHandle
ExitProcess
FreeLibraryAndExitThread
LCMapStringW
GetTimeZoneInformation
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetConsoleOutputCP
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStringTypeW
WriteConsoleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SearchPathW
GetProfileIntW
GetTickCount64
VerifyVersionInfoW
VerSetConditionMask
FindResourceExW
lstrcpyW
GetCurrentDirectoryW
SetErrorMode
VirtualProtect
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetDateFormatW
GetLocaleInfoW
GlobalGetAtomNameW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
WritePrivateProfileStringW
GetPrivateProfileIntW
ResumeThread
SetThreadPriority
CreateEventW
lstrcmpA
GetCurrentThread
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
MoveFileW
lstrcmpiW
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryA
LoadLibraryExW
GetModuleHandleA
EncodePointer
OutputDebugStringA
CopyFileW
FormatMessageW
MulDiv
GlobalSize
GetCommandLineW
SetDllDirectoryW
MultiByteToWideChar
GetDiskFreeSpaceExW
CreateThread
WaitForSingleObject
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
HeapReAlloc
HeapSize
InitializeCriticalSectionEx
HeapFree
RemoveDirectoryW
DeviceIoControl
GetProcessId
GetSystemWindowsDirectoryW
SetCurrentDirectoryW
FindClose
QueryPerformanceCounter
GetSystemInfo
GetCurrentThreadId
FindNextFileW
GetFileAttributesW
FindFirstFileW
CreateDirectoryW
GetWindowsDirectoryW
GetSystemTimeAsFileTime
GetVersionExW
GetModuleHandleW
GetModuleFileNameW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
ReadFile
Sleep
GetSystemDirectoryW
OpenProcess
CreateProcessW
GetExitCodeProcess
SetLastError
TerminateProcess
GetCurrentProcess
LocalFree
GetLastError
CreateMutexW
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
DeleteFileW
WriteFile
CreateFileW
GetTempFileNameW
GetTempPathW
WideCharToMultiByte
GetCurrentProcessId
ProcessIdToSessionId
SizeofResource
OutputDebugStringW
FreeLibrary
GetProcAddress
LoadLibraryW
CloseHandle
GetPrivateProfileStringW
FindResourceW
LoadResource
LockResource
ExitThread
LoadLibraryExA

user32

WindowFromPoint
ReleaseCapture
SetCapture
WaitMessage
IntersectRect
MapDialogRect
GetAsyncKeyState
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
RealChildWindowFromPoint
OffsetRect
SetRectEmpty
SendDlgItemMessageA
CopyImage
InflateRect
GetMenuItemInfoW
DestroyMenu
GetSysColorBrush
ShowOwnedPopups
GetActiveWindow
TranslateMessage
GetMessageW
PostQuitMessage
CharUpperW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
IsDialogMessageW
SetWindowTextW
CheckDlgButton
MoveWindow
IsWindowEnabled
FillRect
ClientToScreen
GetWindowDC
GetDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetParent
GetClassLongW
SetWindowLongW
GetWindowLongW
EqualRect
CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowTextLengthW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
EndPaint
BeginPaint
SetActiveWindow
UpdateWindow
TrackPopupMenu
InvalidateRect
DestroyIcon
TrackMouseEvent
SetMenu
GetMenu
GetCapture
GetKeyState
GetFocus
SetFocus
GetDlgCtrlID
GetDlgItem
IsIconic
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPos
DestroyWindow
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
UnhookWindowsHookEx
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
SwitchToThisWindow
IsWindow
FindWindowW
MessageBoxW
UnregisterClassW
EnableWindow
GetCursorPos
SetLayeredWindowAttributes
RedrawWindow
ReleaseDC
BringWindowToTop
LoadAcceleratorsW
TranslateAcceleratorW
LoadMenuW
CreatePopupMenu
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
GetNextDlgGroupItem
DrawFocusRect
IsRectEmpty
DrawIconEx
GetIconInfo
MessageBeep
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
GetMenuDefaultItem
MapVirtualKeyW
GetKeyNameTextW
EnumDisplayMonitors
OpenClipboard
CloseClipboard
SetClipboardData
DeleteMenu
DestroyAcceleratorTable
LoadImageW
SetRect
GetClientRect
GetWindowThreadProcessId
GetDesktopWindow
GetWindowTextW
IsWindowVisible
GetClassNameW
ShowWindow
GetForegroundWindow
AttachThreadInput
SetCursor
LoadCursorW
GetWindow
GetWindowPlacement
GetWindowRect
PtInRect
SetWindowPlacement
SetForegroundWindow
GetSystemMetrics
CreateAcceleratorTableW
SystemParametersInfoW
LoadIconW
SendMessageW
DisableProcessWindowsGhosting
KillTimer
PostMessageW
SetTimer
SetWindowRgn
CopyAcceleratorTableW
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
IsClipboardFormatAvailable
GetUpdateRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SubtractRect
CreateMenu
GetWindowRgn
DestroyCursor
GetKeyboardState
ToUnicodeEx
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
PostThreadMessageW
GetComboBoxInfo
MonitorFromPoint
UpdateLayeredWindow
UnionRect
DrawIcon
FrameRect
CopyIcon
SetCursorPos
GetSystemMenu
IsZoomed
DrawFrameControl
DrawEdge
SetParent
SetClassLongW
DrawStateW
EmptyClipboard

gdi32

SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectW
GetTextExtentPoint32W
CombineRgn
CreateRectRgnIndirect
PatBlt
SetRectRgn
DPtoLP
GetTextMetricsW
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
GetLayout
EnumFontFamiliesW
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
LPtoDP
Rectangle
GetRgnBox
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceW
SetLayout
SetMapMode
SetBkMode
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
SetTextColor
SetBkColor
GetDeviceCaps
CreateDCW
CopyMetaFileW
GetObjectW
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBitmap
CreateBitmap
CreateRoundRectRgn

msimg32

TransparentBlt
AlphaBlend

advapi32

RegQueryValueW
CreateWellKnownSid
OpenProcessToken
DuplicateTokenEx
DuplicateToken
CheckTokenMembership
GetTokenInformation
RegSetValueExW
RegEnumValueW
RegEnumKeyW
RegQueryValueExW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExW
RegDeleteKeyW
RegFlushKey
RegCreateKeyExW
RegCloseKey
RegOpenCurrentUser
RevertToSelf
ImpersonateLoggedOnUser

shell32

SHGetFolderPathW
ShellExecuteW
SHCreateDirectoryExW
ShellExecuteExW
SHFileOperationW
SHGetFileInfoW
SHAppBarMessage
SHBrowseForFolderW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW
DragFinish
DragQueryFileW

shlwapi

PathAppendW
PathFileExistsW
PathIsUNCW
PathStripToRootW
PathFindExtensionW
PathFindFileNameW
StrFormatKBSizeW
PathRemoveFileSpecW

uxtheme

DrawThemeBackground
GetThemeColor
DrawThemeText
GetCurrentThemeName
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
IsAppThemed
GetWindowTheme
GetThemeSysColor
DrawThemeParentBackground
CloseThemeData
OpenThemeData

ole32

OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CoInitializeEx
CoDisconnectObject
CoInitialize
CoCreateGuid
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CreateStreamOnHGlobal

oleaut32

VarBstrFromDate
VariantCopy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocString
VariantChangeType
SysAllocStringLen
VariantClear
SysFreeString
VariantInit
LoadTypeLi

gdiplus

GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipDrawImageI
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipCreateBitmapFromHBITMAP
GdiplusShutdown
GdiplusStartup
GdipDeleteFontFamily
GdipDeleteGraphics
GdipCreateFromHDC
GdipGetImageWidth
GdipGetImageHeight
GdipLoadImageFromStream
GdipDisposeImage
GdipSetInterpolationMode
GdipGetImageGraphicsContext
GdipCreateBitmapFromStream
GdipFree
GdipAlloc
GdipCloneImage
GdipDrawImageRectI

oleacc

LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 324KB - Virtual size: 323KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 203KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5d741923024de265f6a60abf977bb70d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

advapi32

shell32

shlwapi

uxtheme

ole32

oleaut32

gdiplus

oleacc

imm32

winmm

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 324KB - Virtual size: 323KB

.data Size: 21KB - Virtual size: 39KB

.rsrc Size: 203KB - Virtual size: 202KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 324KB - Virtual size: 323KB

.data
Size: 21KB - Virtual size: 39KB

.rsrc
Size: 203KB - Virtual size: 202KB