b865e5d6ab5889ff0f3e54218b916a9ce1cfa1f5d0c7b131dc5428945aba721e

Sharing

Copy URL Twitter E-mail

General

Target

b865e5d6ab5889ff0f3e54218b916a9ce1cfa1f5d0c7b131dc5428945aba721e
Size

1.8MB
MD5

1fb74bf0481c4e482ce4bae163806bee
SHA1

d7c5763f07f61fc20a4e6080db58f63d25c1eb05
SHA256

b865e5d6ab5889ff0f3e54218b916a9ce1cfa1f5d0c7b131dc5428945aba721e
SHA512

7fc5b732d6f498048fcd79899c97feb61a6faeb8247525668082c66248797023b80779ab6456c01ff6a7ad1e7efe09dea793c545d00afc97080064eefe698b17
SSDEEP

49152:A1o0RmK16wD0l3YWXUkQnTKymdcybHt7P:A1o0R16wD0pYWRQzybHF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b865e5d6ab5889ff0f3e54218b916a9ce1cfa1f5d0c7b131dc5428945aba721e

Files

b865e5d6ab5889ff0f3e54218b916a9ce1cfa1f5d0c7b131dc5428945aba721e
.exe windows x86

e2dcdd5aa81b3d875951648f16a4b261

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventW
WaitForMultipleObjects
InitializeCriticalSection
DeviceIoControl
WriteFile
GetDriveTypeW
GetDiskFreeSpaceExW
GetCurrentProcessId
MoveFileExW
OpenProcess
CreateFileW
WaitForSingleObject
TerminateProcess
CreateDirectoryW
SetLastError
WideCharToMultiByte
FindResourceExW
Process32FirstW
SetEvent
MultiByteToWideChar
CreateToolhelp32Snapshot
FindClose
WriteConsoleW
GetConsoleCP
FlushFileBuffers
SetStdHandle
FindNextFileA
LoadLibraryExW
GetSystemWindowsDirectoryW
FreeLibrary
Process32NextW
GetModuleHandleW
CreateProcessW
GetProcAddress
FindResourceW
LoadResource
LoadLibraryW
LockResource
Sleep
FreeResource
GetSystemDirectoryW
GetVersionExW
LeaveCriticalSection
GetModuleFileNameW
InterlockedCompareExchange
GetCurrentProcess
EnterCriticalSection
SizeofResource
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExA
DeleteCriticalSection
HeapDestroy
DecodePointer
HeapAlloc
RaiseException
CloseHandle
HeapReAlloc
GetLastError
GetConsoleMode
LCMapStringW
GetStringTypeW
GetACP
GetStdHandle
GetModuleFileNameA
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
HeapSize
CreateMutexW
InitializeCriticalSectionAndSpinCount
ExitThread
CreateThread
EncodePointer
HeapFree
RtlUnwind
InitializeSListHead
QueryPerformanceCounter
GetStartupInfoW
IsProcessorFeaturePresent
GetCommandLineW
ResetEvent
GetTickCount
MulDiv
GetFileSize
ReadFile
GetFileType
SetFilePointer
SetFileTime
DuplicateHandle
SystemTimeToFileTime
DosDateTimeToFileTime
GetCurrentDirectoryW
IsDebuggerPresent
OutputDebugStringW
GetSystemTimeAsFileTime
LocalFileTimeToFileTime
CreateFileA
GetFileSizeEx
SetFilePointerEx
HeapLock
HeapUnlock
HeapWalk
GetCurrentThreadId
OpenThread
ReleaseMutex
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter

user32

PostMessageW
ShowWindow
FindWindowW
CallWindowProcW
AllowSetForegroundWindow
GetWindowThreadProcessId
GetWindowRect
DestroyWindow
IsWindowVisible
MoveWindow
IsZoomed
GetParent
IsIconic
CreateWindowExW
UpdateLayeredWindow
GetKeyState
GetCapture
SetCapture
ReleaseCapture
SetTimer
KillTimer
GetDC
ReleaseDC
BeginPaint
EndPaint
GetUpdateRect
InvalidateRect
GetCursorPos
MapWindowPoints
IsRectEmpty
PtInRect
DefWindowProcW
EnableWindow
RegisterClassW
RegisterClassExW
GetClassInfoExW
GetSystemMetrics
SetPropW
GetPropW
RemovePropW
SetCursor
OffsetRect
LoadCursorW
LoadImageW
SystemParametersInfoW
MonitorFromWindow
GetMonitorInfoW
CharNextW
CharPrevW
DrawTextW
FillRect
SetRect
IntersectRect
GetWindowDC
GetWindowTextW
GetWindowTextLengthW
CopyRect
EqualRect
CreateAcceleratorTableW
InvalidateRgn
CreateCaret
HideCaret
ShowCaret
SetCaretPos
ClientToScreen
GetSysColor
GetWindowRgn
SendMessageW
LoadStringW
SetForegroundWindow
GetWindowLongW
GetMessageW
GetWindow
SetWindowPos
ScreenToClient
SetWindowTextW
IsWindow
DispatchMessageW
SetFocus
TranslateMessage
SetWindowLongW
GetClientRect
PostQuitMessage

gdi32

SetStretchBltMode
TextOutW
GetTextColor
SetViewportOrgEx
SetTextColor
MoveToEx
SelectObject
CreateDIBSection
CreateCompatibleDC
CreateRectRgn
DeleteDC
PtInRegion
DeleteObject
BitBlt
CreateCompatibleBitmap
CreateFontIndirectW
CreatePen
GetStockObject
Rectangle
RestoreDC
SaveDC
GetTextMetricsW
GetObjectW
SetWindowOrgEx
GetDeviceCaps
CombineRgn
CreateRectRgnIndirect
CreateRoundRectRgn
CreateSolidBrush
GetCharABCWidthsW
GetClipBox
GetTextExtentPoint32W
LineTo
RoundRect
SelectClipRgn
ExtSelectClipRgn
SetBkColor
SetBkMode
StretchBlt

advapi32

RegQueryValueExW
RegOpenKeyExW
OpenProcessToken
RegCloseKey
AdjustTokenPrivileges
LookupPrivilegeValueW
RegQueryValueExA
RegEnumKeyExW
RegSetValueExW
RegCreateKeyExW

shell32

SHGetSpecialFolderPathW
ord165
SHGetPathFromIDListW
SHBrowseForFolderW

ole32

OleInitialize
CoInitialize
CoTaskMemFree
CoCreateInstance
CoInitializeEx
OleLockRunning
CoUninitialize
OleUninitialize
CLSIDFromString
CLSIDFromProgID

shlwapi

PathRemoveBackslashW
PathCombineW
StrCmpIW
PathAppendW
PathFileExistsW
SHGetValueW
StrStrIW
PathRemoveFileSpecW
StrCmpNIW

comctl32

_TrackMouseEvent
ord17

msimg32

AlphaBlend

psapi

GetModuleFileNameExW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

Sections

.text
Size: 499KB - Virtual size: 498KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21.2MB - Virtual size: 21.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e2dcdd5aa81b3d875951648f16a4b261

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

shlwapi

comctl32

msimg32

psapi

version

Sections

.text Size: 499KB - Virtual size: 498KB

.rdata Size: 115KB - Virtual size: 114KB

.data Size: 10KB - Virtual size: 15KB

.rsrc Size: 21.2MB - Virtual size: 21.2MB

.reloc Size: 24KB - Virtual size: 23KB

.text
Size: 499KB - Virtual size: 498KB

.rdata
Size: 115KB - Virtual size: 114KB

.data
Size: 10KB - Virtual size: 15KB

.rsrc
Size: 21.2MB - Virtual size: 21.2MB

.reloc
Size: 24KB - Virtual size: 23KB