58a41be8321e98713f0f5cc68edcb60d4db3badbb7cf0155f817d3d050c1d39d

Sharing

Copy URL

Twitter E-mail

General

Target

58a41be8321e98713f0f5cc68edcb60d4db3badbb7cf0155f817d3d050c1d39d
Size

5.7MB
MD5

cca930cf6d1dcc6e7643a14ec3d25efb
SHA1

af5ddca32940dc3742f2b0315650cf327df15932
SHA256

58a41be8321e98713f0f5cc68edcb60d4db3badbb7cf0155f817d3d050c1d39d
SHA512

769c7d3d1c269d1445a424e42ca0e1b5e29e702278826878bdd0d656d3053342c7b952378e3bf2b23848988ef5152799be0c3b889cb4b8fcc31156a00b1b6c5c
SSDEEP

98304:97bD8bsEF+Egz9iQkoll2mH29q3W13NQ9qRNJGQRsLFspiAGT1qbRq7NZlY9zKr:VdS+viQndH29Z3+9qRNJvRsOGT1qClYk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58a41be8321e98713f0f5cc68edcb60d4db3badbb7cf0155f817d3d050c1d39d

Files

58a41be8321e98713f0f5cc68edcb60d4db3badbb7cf0155f817d3d050c1d39d
.exe windows x86

f288aa0b3f69b33281c0e7e5bd086499

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wldap32

ord127
ord27
ord26
ord117
ord41
ord167
ord145
ord208
ord216
ord14
ord46
ord219
ord79
ord133
ord147
ord301
ord142

kernel32

InitializeCriticalSectionEx
InitializeSListHead
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
UnhandledExceptionFilter
ResetEvent
GetUserDefaultLCID
SearchPathW
GetProfileIntW
GetTempFileNameW
GetWindowsDirectoryW
FindResourceExW
CreateTimerQueue
UnregisterWaitEx
QueryDepthSList
InterlockedPopEntrySList
VirtualFree
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetThreadPriority
SwitchToThread
SignalObjectAndWait
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
FindFirstFileExW
GetTimeZoneInformation
EnumSystemLocalesW
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetConsoleCP
ReadConsoleW
WriteConsoleW
SetConsoleMode
ReadConsoleInputA
GetConsoleMode
SetFilePointerEx
QueryPerformanceFrequency
SetStdHandle
VirtualQuery
GetCurrentDirectoryW
GetCommandLineW
GetCommandLineA
HeapQueryInformation
SetConsoleCtrlHandler
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
RtlUnwind
InterlockedFlushSList
InterlockedPushEntrySList
DosDateTimeToFileTime
GetLocalTime
ExitProcess
GetACP
CreateMutexW
GetVersionExA
SetEnvironmentVariableA
FormatMessageA
CreateWaitableTimerA
GetLogicalProcessorInformation
OpenEventA
GetSystemTime
GlobalMemoryStatus
FlushConsoleInputBuffer
GetCPInfo
LCMapStringW
GetStringTypeW
TryEnterCriticalSection
PeekNamedPipe
GetFileType
GetStdHandle
GetEnvironmentVariableA
VerSetConditionMask
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
VirtualProtect
CompareFileTime
GetDriveTypeW
MoveFileExW
DecodePointer
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
InterlockedExchangeAdd
InterlockedCompareExchange
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
OpenProcess
GetCurrentProcessId
TerminateProcess
RaiseException
TerminateThread
GetLastError
SetLastError
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
QueueUserAPC
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ReleaseSemaphore
WaitForSingleObject
WaitForMultipleObjects
Sleep
CloseHandle
GetSystemTimeAsFileTime
TlsAlloc
VirtualAlloc
TlsGetValue
TlsSetValue
TlsFree
SleepEx
WaitForSingleObjectEx
WaitForMultipleObjectsEx
GetCurrentThread
GlobalFlags
GetUserDefaultUILanguage
GetLocaleInfoW
CompareStringW
lstrcmpiW
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
GlobalFindAtomW
GlobalAddAtomW
LoadLibraryA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
EncodePointer
SystemTimeToFileTime
FileTimeToSystemTime
GlobalGetAtomNameW
lstrcmpA
ResumeThread
SetThreadPriority
FormatMessageW
MulDiv
GlobalSize
LockResource
LocalFree
LocalReAlloc
LocalAlloc
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalAlloc
OutputDebugStringA
GetCurrentThreadId
SetUnhandledExceptionFilter
WriteFile
GetVersionExW
CreateThread
OutputDebugStringW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
MoveFileW
GetSystemDirectoryW
GetModuleHandleA
GetSystemInfo
GetCurrentProcess
GetModuleHandleW
lstrcpyW
CreateFileW
CopyFileW
FindNextFileW
FindFirstFileW
GetFileAttributesW
SetFileAttributesW
FindClose
FindResourceW
SizeofResource
LoadResource
FreeResource
CreateMutexA
ReleaseMutex
GetTickCount
DeleteFileW
CreateDirectoryW
GetTempPathW
InitializeCriticalSection
WideCharToMultiByte
CreateFileA
WritePrivateProfileStringA
GetEnvironmentVariableW
CreateProcessW
LoadLibraryW
DeviceIoControl
GetProcAddress
FreeLibrary
MultiByteToWideChar
VerifyVersionInfoW
GetPrivateProfileStringA
GetModuleFileNameW
SetWaitableTimer
CreateWaitableTimerW
CreateSemaphoreA
CreateEventW
CreateEventA
OpenMutexA

user32

GetKeyboardState
ToUnicodeEx
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
WaitMessage
PostThreadMessageW
GetComboBoxInfo
ReuseDDElParam
UnpackDDElParam
InsertMenuItemW
TranslateAcceleratorW
LoadAcceleratorsW
MonitorFromPoint
UpdateLayeredWindow
UnionRect
DrawIcon
FrameRect
PtInRect
EqualRect
CopyRect
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyIcon
SetCursorPos
BringWindowToTop
GetSystemMenu
IsZoomed
DrawFrameControl
DrawEdge
DrawStateW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
SetParent
SetWindowRgn
SetClassLongW
EnumDisplayMonitors
SetLayeredWindowAttributes
LoadMenuW
GetKeyNameTextW
MapVirtualKeyW
GetMenuDefaultItem
NotifyWinEvent
CopyAcceleratorTableW
SetRect
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
IsClipboardFormatAvailable
GetUpdateRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SubtractRect
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowRect
GetClientRect
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
EndPaint
wsprintfW
MoveWindow
GetWindowLongW
SetWindowLongW
SystemParametersInfoW
SendMessageW
PostMessageW
PostQuitMessage
KillTimer
CreatePopupMenu
DestroyMenu
AppendMenuW
TrackPopupMenu
UpdateWindow
SetForegroundWindow
MessageBoxW
GetCursorPos
FindWindowW
InvalidateRgn
GetCaretPos
ShowCaret
CharPrevW
CharNextW
RegisterClassExW
GetCaretBlinkTime
SetCaretPos
CreateCaret
MessageBoxA
GetUserObjectInformationW
GetProcessWindowStation
LoadIconW
UnhookWindowsHookEx
EnableWindow
IsWindowEnabled
GetParent
GetWindowThreadProcessId
GetLastActivePopup
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
RemoveMenu
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
IsWindowVisible
GetActiveWindow
GetKeyState
ValidateRect
SetWindowsHookExW
CallNextHookEx
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
InvertRect
HideCaret
EnableScrollBar
MessageBeep
GetIconInfo
DrawIconEx
IsRectEmpty
DrawFocusRect
WindowFromPoint
ReleaseCapture
SetCapture
GetNextDlgGroupItem
DeleteMenu
SetCursor
ShowOwnedPopups
LoadImageW
InvalidateRect
TrackMouseEvent
IntersectRect
MapDialogRect
GetAsyncKeyState
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
OffsetRect
SetRectEmpty
SendDlgItemMessageA
CopyImage
InflateRect
GetMenuItemInfoW
FillRect
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
RealChildWindowFromPoint
GetDesktopWindow
ClientToScreen
CharUpperW
DestroyIcon
IsDialogMessageW
SetWindowTextW
CheckDlgButton
ShowWindow
GetMonitorInfoW
MonitorFromWindow
CreateMenu
GetWindowRgn
DestroyCursor
SetTimer
LoadCursorW
GetWindowTextW
GetWindowTextLengthW
GetFocus
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadBitmapW
RegisterWindowMessageW
GetMessagePos
GetMessageTime
DefWindowProcW
CallWindowProcW
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
BeginPaint
IsWindow
IsMenu
IsChild
DestroyWindow
SetWindowPos
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsIconic
GetDlgItem
GetDlgCtrlID
SetFocus
GetCapture
GetMenu
SetMenu
SetActiveWindow
WinHelpW
GetScrollInfo
SetScrollInfo
GetWindow
GetTopWindow
GetClassNameW
GetForegroundWindow
GetClassLongW

gdi32

SetLayout
SetMapMode
SetBkMode
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
BitBlt
DeleteObject
GetObjectW
SetTextColor
SetBkColor
CreateBitmap
GetDeviceCaps
CreateDCW
CopyMetaFileW
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
GetLayout
LPtoDP
GetRgnBox
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceW
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectW
CombineRgn
CreateRectRgnIndirect
PatBlt
SetRectRgn
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextAlign
CreateRoundRectRgn
EnumFontFamiliesW
GetObjectA
GetCharABCWidthsW
Rectangle
DPtoLP
GetTextMetricsW
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateCompatibleBitmap
CreateDIBitmap
GetTextCharsetInfo
GetTextExtentPoint32W

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

SystemFunction036
CryptSignHashA
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextA
ReportEventA
RegisterEventSourceA
DeregisterEventSource
RegSetValueExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegQueryValueW
RegOpenKeyExW
RegCloseKey
StartServiceW
OpenServiceW
OpenSCManagerW
DeleteService
CreateServiceW
CloseServiceHandle
CryptEnumProvidersA

shell32

SHGetSpecialFolderPathW
SHGetPathFromIDListW
SHGetFileInfoW
Shell_NotifyIconW
SHGetSpecialFolderLocation
SHAppBarMessage
SHBrowseForFolderW
DragFinish
DragQueryFileW
SHGetDesktopFolder
ShellExecuteW

ole32

OleCreateMenuDescriptor
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CreateStreamOnHGlobal
CoInitializeEx
CLSIDFromString
CoDisconnectObject
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
ReleaseStgMedium
CLSIDFromProgID
CoCreateGuid
CoTaskMemFree
OleDuplicateData
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
CoInitialize

oleaut32

VariantTimeToSystemTime
VariantClear
VariantCopy
VariantChangeType
VarBstrFromDate
VariantInit
SysAllocString
SystemTimeToVariantTime
SysStringLen
LoadTypeLi
SysFreeString
SysAllocStringLen

iphlpapi

GetExtendedTcpTable
GetAdaptersInfo

crypt32

CertDuplicateCertificateContext
CertFindCertificateInStore
CertOpenStore
CertOpenSystemStoreW
CertGetIntendedKeyUsage
CertGetEnhancedKeyUsage
CertFreeCertificateContext
CertEnumCertificatesInStore
CertCloseStore
CertGetCertificateContextProperty

shlwapi

StrFormatKBSizeW
wnsprintfW
PathFindFileNameW
PathIsUNCW
PathStripToRootW
PathFindExtensionW
PathRemoveFileSpecW

ws2_32

getaddrinfo
inet_addr
gethostbyname
bind
closesocket
ioctlsocket
htonl
htons
ntohl
ntohs
setsockopt
WSAStartup
WSACleanup
WSASetLastError
WSAGetLastError
WSASend
WSASocketW
select
shutdown
WSARecv
listen
freeaddrinfo
__WSAFDIsSet
accept
connect
getsockname
getsockopt
WSAIoctl
gethostname
sendto
recvfrom
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
WSACloseEvent
socket
getpeername
send
recv
getservbyname

mswsock

AcceptEx
GetAcceptExSockaddrs

msimg32

AlphaBlend
TransparentBlt

uxtheme

OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
GetWindowTheme
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
GetThemePartSize
DrawThemeText
DrawThemeParentBackground

gdiplus

GdipFree
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipAlloc
GdipLoadImageFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdiplusShutdown
GdipCreateBitmapFromStream
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipImageSelectActiveFrame
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipDrawPath
GdipAddPathArcI
GdipAddPathLineI
GdipDeletePath
GdipCreatePath
GdipDrawRectangleI
GdipSetPenMode
GdipDrawLineI
GdipSetPenDashStyle
GdipDeletePen
GdipCreatePen1
GdipFillRectangleI
GdipDrawString
GdipMeasureString
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipSetStringFormatTrimming
GdipDeleteStringFormat
GdipStringFormatGetGenericTypographic
GdipCloneStringFormat
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdiplusStartup

imm32

ImmGetOpenStatus
ImmSetCompositionWindow
ImmGetContext
ImmReleaseContext

dbghelp

MiniDumpWriteDump

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

winmm

PlaySoundW

comctl32

ord17
_TrackMouseEvent

Sections

.text
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 898KB - Virtual size: 897KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.giats
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 614KB - Virtual size: 614KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 234KB - Virtual size: 233KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f288aa0b3f69b33281c0e7e5bd086499

Headers

DLL Characteristics

File Characteristics

Imports

wldap32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

iphlpapi

crypt32

shlwapi

ws2_32

mswsock

msimg32

uxtheme

gdiplus

imm32

dbghelp

oleacc

winmm

comctl32

Sections

.text Size: 3.8MB - Virtual size: 3.8MB

.rdata Size: 898KB - Virtual size: 897KB

.data Size: 84KB - Virtual size: 128KB

.gfids Size: 106KB - Virtual size: 106KB

.giats Size: 512B - Virtual size: 16B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 614KB - Virtual size: 614KB

.reloc Size: 234KB - Virtual size: 233KB

.text
Size: 3.8MB - Virtual size: 3.8MB

.rdata
Size: 898KB - Virtual size: 897KB

.data
Size: 84KB - Virtual size: 128KB

.gfids
Size: 106KB - Virtual size: 106KB

.giats
Size: 512B - Virtual size: 16B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 614KB - Virtual size: 614KB

.reloc
Size: 234KB - Virtual size: 233KB