bfe45519add239446fde886d00631184913a6d49fd14740f021f5a1c950908e8

Sharing

Copy URL

Twitter E-mail

General

Target

bfe45519add239446fde886d00631184913a6d49fd14740f021f5a1c950908e8
Size

2.9MB
MD5

feadaa1c1f86d7d3762e3ed6824b089e
SHA1

2fa47497a41c4f5c0eb3c0cb1e6503e3ce56c2ac
SHA256

bfe45519add239446fde886d00631184913a6d49fd14740f021f5a1c950908e8
SHA512

0b3dc9aaf811ca4f01109002ccb231fcd0716482c81deb5172dea5020acd61fac652ea865b5bc3fe1dab8d4a188de9d39a349e7d60794fe6290d02bf64ecb06b
SSDEEP

49152:wlMHK3YHu33LwKtxEyJwPigo7hHQXAJAcq0nsJ4Nfsi5x+r84V9QgGkdgV3QKuZR:wlMHuYOnMKtq8cigo7iXAJAcq0nsJ4N4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfe45519add239446fde886d00631184913a6d49fd14740f021f5a1c950908e8

Files

bfe45519add239446fde886d00631184913a6d49fd14740f021f5a1c950908e8
.exe windows x86

f98ff17500d11b9e3f4bdbdf5d47a1d2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileType
SetStdHandle
VirtualQuery
VirtualAlloc
HeapQueryInformation
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
FreeLibraryAndExitThread
GetTimeZoneInformation
RtlUnwind
GetCPInfo
GetConsoleOutputCP
ExitProcess
LCMapStringEx
QueryPerformanceFrequency
GetStringTypeW
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
RaiseException
GetDateFormatW
GetTimeFormatW
LCMapStringW
GetStdHandle
SetFilePointerEx
GetConsoleMode
IsValidLocale
EnumSystemLocalesW
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
IsProcessorFeaturePresent
UnhandledExceptionFilter
WaitForSingleObjectEx
GetUserDefaultLCID
GetProfileIntW
GetTickCount64
SearchPathW
VerifyVersionInfoW
VerSetConditionMask
SetErrorMode
GlobalFlags
GetSystemDefaultUILanguage
GetLocaleInfoW
GlobalGetAtomNameW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
WritePrivateProfileStringW
GetPrivateProfileIntW
GetThreadLocale
lstrcmpiW
DuplicateHandle
UnlockFile
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
ReadConsoleW
GetFileSize
FlushFileBuffers
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
CompareStringA
lstrcmpA
GetCurrentThread
VirtualProtect
ResumeThread
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
GlobalDeleteAtom
LoadLibraryA
GetModuleHandleA
EncodePointer
FormatMessageW
GlobalSize
SetFilePointer
EndUpdateResourceW
UpdateResourceW
BeginUpdateResourceW
FindResourceExW
LoadLibraryExW
DecodePointer
HeapReAlloc
HeapSize
InitializeCriticalSectionEx
lstrcpyW
CopyFileW
SetThreadExecutionState
GetCurrentDirectoryA
SetThreadUILanguage
GetUserDefaultUILanguage
SetProcessShutdownParameters
lstrcmpW
GetLocalTime
GetSystemTime
MulDiv
GetCurrentDirectoryW
GetProcessId
GetSystemWindowsDirectoryW
SetCurrentDirectoryW
GetComputerNameExW
QueryPerformanceCounter
GetSystemInfo
GetFileAttributesW
CreateDirectoryW
GetWindowsDirectoryW
GetSystemTimeAsFileTime
GetVersionExW
GetModuleHandleW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetSystemDirectoryW
OpenProcess
CreateProcessW
GetExitCodeProcess
SetLastError
TerminateProcess
LocalFree
CreateMutexW
lstrcpynW
DeleteFileW
GetTempFileNameW
GetTempPathW
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
lstrlenW
OutputDebugStringW
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
GetCurrentProcess
OutputDebugStringA
SetNamedPipeHandleState
FindClose
FindNextFileW
FindFirstFileW
WideCharToMultiByte
WriteFileEx
ReadFileEx
HeapFree
DisconnectNamedPipe
GetExitCodeThread
ExitThread
GetProcessHeap
HeapAlloc
GetOverlappedResult
WaitForMultipleObjectsEx
ConnectNamedPipe
CreateNamedPipeW
ReadFile
WriteFile
ProcessIdToSessionId
ResetEvent
WaitNamedPipeW
CreateFileW
CreateEventW
SetEvent
GetCurrentProcessId
MultiByteToWideChar
GetTickCount
GetLastError
FindResourceW
LoadResource
LockResource
SizeofResource
GetPrivateProfileStringW
CreateThread
SetThreadPriority
TerminateThread
CloseHandle
WaitForSingleObject
GetCurrentThreadId
FreeLibrary
GetProcAddress
LoadLibraryW
Sleep
GetModuleFileNameW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
WriteConsoleW

user32

GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
WindowFromPoint
IntersectRect
InflateRect
GetWindowDC
GrayStringW
DrawTextExW
DrawTextW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
IsDialogMessageW
SetWindowTextW
IsWindowEnabled
CheckDlgButton
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassLongW
SetWindowLongW
GetWindowLongW
EqualRect
TranslateAcceleratorW
CreatePopupMenu
UnpackDDElParam
PostMessageW
EnableWindow
MapWindowPoints
MessageBoxW
GetWindowTextLengthW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
GetMessageW
ScrollWindow
ValidateRect
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetFocus
SetFocus
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPos
DestroyWindow
IsChild
IsMenu
IsWindow
CreateWindowExW
GetClassInfoExW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
PeekMessageW
DispatchMessageW
ReuseDDElParam
AppendMenuW
InsertMenuW
GetMenuItemID
GetMenuState
GetMenuStringW
SetWindowContextHelpId
LockWorkStation
GetKeyState
GetClassInfoW
FindWindowW
GetKeyboardLayout
GetGUIThreadInfo
EnableMenuItem
DrawEdge
DrawStateW
GetSysColorBrush
DrawIconEx
ShowOwnedPopups
CopyImage
RealChildWindowFromPoint
IsClipboardFormatAvailable
DestroyIcon
DeleteMenu
WaitMessage
LoadAcceleratorsW
SetCapture
ReleaseCapture
TranslateMessage
CheckMenuItem
GetMenuItemCount
GetAsyncKeyState
MapDialogRect
GetKeyNameTextW
MapVirtualKeyW
SendDlgItemMessageA
PostQuitMessage
DestroyMenu
GetMenuItemInfoW
CharUpperW
IsZoomed
SetScrollPos
MessageBeep
SendMessageW
GetDC
ReleaseDC
SetRectEmpty
GetSysColor
CopyRect
DrawFocusRect
GetClientRect
GetWindowRect
FillRect
DrawFrameControl
OffsetRect
SetRect
TabbedTextOutW
PtInRect
TrackMouseEvent
InvalidateRect
GetCursorPos
ScreenToClient
SetCursor
LoadCursorW
GetMessagePos
GetParent
SetWindowRgn
PrintWindow
IsRectEmpty
BringWindowToTop
KillTimer
SetTimer
LoadIconW
RedrawWindow
LoadImageW
WindowFromDC
BeginPaint
EndPaint
ClientToScreen
AdjustWindowRectEx
MoveWindow
GetWindow
GetDlgCtrlID
GetWindowThreadProcessId
GetDesktopWindow
GetWindowTextW
IsWindowVisible
GetClassNameW
ShowWindow
GetForegroundWindow
GetWindowRgn
AttachThreadInput
GetWindowPlacement
SetWindowPlacement
SetForegroundWindow
GetSystemMetrics
SystemParametersInfoW
IsIconic
DrawIcon
UpdateWindow
ModifyMenuW
LoadMenuW
GetSubMenu
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SwitchToThisWindow
InsertMenuItemW
RemoveMenu
SetParent
MonitorFromPoint
SetLayeredWindowAttributes
EnumDisplayMonitors
GetSystemMenu
NotifyWinEvent
PostThreadMessageW
UnregisterClassW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
EnumChildWindows
RegisterClipboardFormatW
LockWindowUpdate
SetClassLongW
CharNextW
InvalidateRgn
GetNextDlgGroupItem
SetCursorPos
UnionRect
EnableScrollBar
GetDoubleClickTime
GetIconInfo
CopyIcon
GetMenuDefaultItem
SetMenuDefaultItem
GetUpdateRect
HideCaret
InvertRect
FrameRect
CharUpperBuffW
UpdateLayeredWindow
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsCharLowerW
MapVirtualKeyExW
SubtractRect
GetComboBoxInfo
CreateMenu
DestroyCursor
RegisterWindowMessageW

gdi32

MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectW
CreateRectRgnIndirect
GetMapMode
PatBlt
SetRectRgn
DPtoLP
CreateEllipticRgn
Ellipse
GetBkColor
GetTextColor
CreatePolygonRgn
Polygon
Polyline
EnumFontFamiliesExW
CreateDIBitmap
SetTextAlign
GetTextCharsetInfo
GetDIBits
RealizePalette
SetPixel
CreateDIBSection
SetDIBColorTable
CreateRoundRectRgn
GetRgnBox
OffsetRgn
Rectangle
RoundRect
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
LPtoDP
ExtFloodFill
SetPaletteEntries
GetViewportOrgEx
GetWindowOrgEx
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
SetPixelV
GetTextFaceW
SetStretchBltMode
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
CreateSolidBrush
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateBitmap
SetTextColor
SetBkColor
CreateDCW
GetStockObject
GetObjectW
GetDeviceCaps
GetTextExtentPoint32W
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
CreateRectRgn
CombineRgn
StretchBlt
SelectObject
GetTextMetricsA
GetTextExtentPointA
CreateFontW
GetTextMetricsW
EnumFontFamiliesW
SetROP2
CopyMetaFileW

msimg32

TransparentBlt
AlphaBlend

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RevertToSelf
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegOpenCurrentUser
RegQueryValueW
LsaClose
LsaStorePrivateData
LsaNtStatusToWinError
LsaOpenPolicy
CreateWellKnownSid
CreateProcessAsUserW
LogonUserW
OpenProcessToken
DuplicateTokenEx
DuplicateToken
CheckTokenMembership
GetTokenInformation
ImpersonateLoggedOnUser
RegSetValueExW
RegEnumValueW
RegEnumKeyW
RegQueryValueExW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExW
RegDeleteKeyW
RegFlushKey
RegCreateKeyExW
RegCloseKey

shell32

SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
SHAppBarMessage
DragFinish
DragQueryFileW
SHGetFileInfoW
SHFileOperationW
ShellExecuteExW
ShellExecuteW
SHGetFolderPathW
SHCreateDirectoryExW
SHBrowseForFolderW

comctl32

InitCommonControlsEx

shlwapi

PathStripToRootW
PathIsUNCW
PathRemoveFileSpecW
PathFindFileNameW
PathFindExtensionW
ord12
PathFileExistsW
StrFormatKBSizeW

uxtheme

OpenThemeData
GetThemeColor
GetCurrentThemeName
DrawThemeText
CloseThemeData
DrawThemeBackground
GetThemeSysColor
DrawThemeParentBackground
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
IsAppThemed
GetWindowTheme

ole32

IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
CoFreeUnusedLibraries
OleLockRunning
OleGetClipboard
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CLSIDFromProgID
CLSIDFromString
CoInitializeEx
CoCreateGuid
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoCreateInstance
CoUninitialize
CoInitialize
CoRevokeClassObject
CoRegisterMessageFilter

oleaut32

SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
VariantInit
SysAllocStringLen
VariantClear
SysAllocString
SysFreeString
VarBstrFromDate
OleCreateFontIndirect
LoadTypeLi
VariantCopy
VariantChangeType

oledlg

OleUIBusyW

gdiplus

GdipDeletePen
GdipGetFontHeight
GdipSetSolidFillColor
GdipMeasureString
GdipSetStringFormatTrimming
GdipBitmapGetPixel
GdipDrawImageRectI
GdipCreateBitmapFromHBITMAP
GdipDrawImageRectRect
GdipGetStringFormatFlags
GdipCreateBitmapFromHICON
GdipLoadImageFromFile
GdipCreateBitmapFromStream
GdipCreatePen2
GdipGetStringFormatLineAlign
GdipDrawImagePointRect
GdiplusStartup
GdiplusShutdown
GdipGetImageGraphicsContext
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDrawImageI
GdipSetInterpolationMode
GdipGetImageHeight
GdipCreateBitmapFromStreamICM
GdipCloneStringFormat
GdipDrawString
GdipCloneBrush
GdipDeleteBrush
GdipGetRegionBounds
GdipMeasureCharacterRanges
GdipSetStringFormatMeasurableCharacterRanges
GdipCreateRegion
GdipCreateSolidFill
GdipDeleteFont
GdipGetImageWidth
GdipCreateFromHDC
GdipCreateFont
GdipSetStringFormatFlags
GdipDeleteGraphics
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipDeleteStringFormat
GdipCreateStringFormat
GdipLoadImageFromStream
GdipCloneImage
GdipAlloc
GdipDrawImageRectRectI
GdipFree
GdipDisposeImage
GdipDeleteRegion

dbghelp

MiniDumpWriteDump

userenv

DestroyEnvironmentBlock
CreateEnvironmentBlock

wtsapi32

WTSQueryUserToken

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

netapi32

DsRoleFreeMemory
DsRoleGetPrimaryDomainInformation

winmm

mixerGetDevCapsW
mixerGetNumDevs
waveInGetNumDevs
mixerSetControlDetails
mixerClose
mixerGetControlDetailsW
mixerGetLineControlsW
mixerOpen
waveInGetDevCapsW
PlaySoundW
mixerGetLineInfoW

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

crypt32

CryptProtectData

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 430KB - Virtual size: 429KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f98ff17500d11b9e3f4bdbdf5d47a1d2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

dbghelp

userenv

wtsapi32

version

netapi32

winmm

oleacc

imm32

crypt32

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 430KB - Virtual size: 429KB

.data Size: 27KB - Virtual size: 51KB

.rsrc Size: 2.6MB - Virtual size: 2.6MB

.reloc Size: 164KB - Virtual size: 164KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 430KB - Virtual size: 429KB

.data
Size: 27KB - Virtual size: 51KB

.rsrc
Size: 2.6MB - Virtual size: 2.6MB

.reloc
Size: 164KB - Virtual size: 164KB