e5389bf470d67363daf9c65c8fb1199dae9b0b4bc2a92970a638b77321410e37

Sharing

Copy URL Twitter E-mail

General

Target

e5389bf470d67363daf9c65c8fb1199dae9b0b4bc2a92970a638b77321410e37
Size

668KB
MD5

d74fc9902996a7865b1e15f36f0194ba
SHA1

c05f110c54c83b7aa1e27dd4f2b09fc9d988a749
SHA256

e5389bf470d67363daf9c65c8fb1199dae9b0b4bc2a92970a638b77321410e37
SHA512

b393b7eabb15e6c15aeb34d5a92c90acfd68546a06a0ae1751261a33627423da613565b866a28b7d1baec7836b96c446bd93e0c044edb199ec7bab1f84bd3797
SSDEEP

12288:7zN0sQotpgyLEDNky82TIegsI/tBPr6n59bbbYkpuX+3Bx+i+wOe5S3j:7zN0sQotGyLEDNky8wIeboP6nzYaHMwK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e5389bf470d67363daf9c65c8fb1199dae9b0b4bc2a92970a638b77321410e37

Files

e5389bf470d67363daf9c65c8fb1199dae9b0b4bc2a92970a638b77321410e37
.exe windows x86

16f8793c7112b1745ee065723f5ba704

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind
TerminateProcess
RaiseException
HeapSize
GetACP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadCodePtr
SetStdHandle
LCMapStringA
LoadLibraryA
GetProcAddress
FreeLibrary
FormatMessageA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetUserDefaultLCID
WideCharToMultiByte
IsBadReadPtr
HeapFree
HeapReAlloc
HeapAlloc
ExitProcess
GetProcessHeap
lstrcpyn
RtlMoveMemory
GetExitCodeThread
CreateRemoteThread
VirtualFreeEx
VirtualAllocEx
GetCommandLineA
GetStartupInfoA
CloseHandle
LocalFree
LocalAlloc
GetCurrentProcess
GetModuleHandleA
MultiByteToWideChar
GetTimeFormatA
GetDateFormatA
GetLocaleInfoA
IsWow64Process
GetSystemInfo
GetVersionExA
OpenProcess
GetCurrentProcessId
GetLocalTime
GetCurrentThreadId
GetCurrentThread
lstrcmpiA
lstrcmpA
GlobalDeleteAtom
GetModuleFileNameA
GetTickCount
lstrlenA
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
GlobalReAlloc
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
lstrcpynA
MulDiv
GlobalFlags
InterlockedDecrement
WritePrivateProfileStringA
lstrcatA
lstrcpyA
InterlockedIncrement
SetLastError
GetLastError
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetVersion
LockResource
LoadResource
FindResourceA
GetProcessVersion
SetErrorMode
WriteFile
SetFilePointer
FlushFileBuffers
GetCPInfo
GetOEMCP

oleaut32

VarR8FromCy
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantClear
SysAllocString
SafeArrayCreate
VariantCopy
RegisterTypeLi
LHashValOfNameSys
VarR8FromBool
VariantChangeType
LoadTypeLi

user32

GetParent
TranslateAcceleratorA
IsDialogMessageA
TranslateMessage
DispatchMessageA
GetClassNameA
MessageBoxA
wsprintfA
GetSysColor
MapWindowPoints
UpdateWindow
GetMessageA
LoadCursorA
GetSysColorBrush
LoadStringA
UnregisterClassA
PostThreadMessageA
DestroyMenu
CreateDialogIndirectParamA
EndDialog
GetSystemMetrics
GetWindowThreadProcessId
LoadIconA
IsWindow
PostQuitMessage
PostMessageA
SendMessageA
SetCursor
EnableWindow
GetWindowLongA
IsWindowEnabled
GetLastActivePopup
SetWindowsHookExA
GetCursorPos
PeekMessageA
IsWindowVisible
ValidateRect
CallNextHookEx
GetKeyState
GetActiveWindow
GetNextDlgTabItem
GetFocus
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
RegisterClipboardFormatA
PtInRect
GetWindowRect
GetDlgCtrlID
GetWindow
ClientToScreen
SetWindowTextA
GetWindowTextA
UnhookWindowsHookEx
GetMenuItemCount
SetActiveWindow
GetDC
ReleaseDC
TabbedTextOutA
DrawTextA
GrayStringA
GetDlgItem
SendDlgItemMessageA
SetWindowLongA
SetWindowPos
ShowWindow
SetFocus
GetWindowPlacement
IsIconic
SystemParametersInfoA
RegisterWindowMessageA
SetForegroundWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
DefWindowProcA
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
CreateWindowExA
DestroyWindow
GetMenuItemID
GetSubMenu
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
CopyRect
GetClientRect
AdjustWindowRectEx

ole32

CLSIDFromProgID
CoCreateInstance
OleRun
CoUninitialize
CLSIDFromString
CoInitialize
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

atl

ord42
ord47

gdi32

GetObjectA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetDeviceCaps
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetTextColor
SetBkColor
CreateBitmap
DeleteObject
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegQueryValueExA
RegOpenKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

comctl32

ord17

oledlg

ord8

Sections

.text
Size: 132KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 508KB - Virtual size: 567KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

16f8793c7112b1745ee065723f5ba704

Headers

File Characteristics

Imports

kernel32

oleaut32

user32

ole32

atl

gdi32

winspool.drv

advapi32

comctl32

oledlg

Sections

.text Size: 132KB - Virtual size: 129KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 508KB - Virtual size: 567KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 132KB - Virtual size: 129KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 508KB - Virtual size: 567KB

.rsrc
Size: 4KB - Virtual size: 2KB