6e98b6984a54b0ff6480e32439697629521b1e6492ec342818f317e0ecc1838c

Sharing

Copy URL Twitter E-mail

General

Target

6e98b6984a54b0ff6480e32439697629521b1e6492ec342818f317e0ecc1838c
Size

7.1MB
MD5

69e1874f938d085ca890be9adbe3f027
SHA1

31547be0490814de6be60afa654887a50aa3c625
SHA256

6e98b6984a54b0ff6480e32439697629521b1e6492ec342818f317e0ecc1838c
SHA512

86a99df86785c5f42696bbf748bae09d7b2531fbce842719e70265edbda129ffb8f8ec1919a058143df0f96dfaebdc4e16d400d55bd5aa464c50ea606ba9b1dc
SSDEEP

98304:DkPXUjkivQGe8G95bjpG2TkezymiLnbD9L3YNTYaIjxc8uHG/Og2A4OiZrq1DfP2:DOkIdwWtGhxc8uHG/OfA4O7NADtV6v+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6e98b6984a54b0ff6480e32439697629521b1e6492ec342818f317e0ecc1838c

Files

6e98b6984a54b0ff6480e32439697629521b1e6492ec342818f317e0ecc1838c
.exe windows x86

c84706d64d0684a242c7e2a563f1bf14

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimeAsFileTime
GetLocalTime
FileTimeToLocalFileTime
FileTimeToSystemTime
VirtualQuery
CopyFileW
SetCurrentDirectoryW
GetCurrentDirectoryW
GlobalFlags
GetFileAttributesExW
GetSystemDirectoryW
GetFileAttributesW
PeekNamedPipe
GetCommandLineW
ReadFile
FreeLibrary
LoadLibraryW
GetUserDefaultLCID
FreeResource
GlobalReAlloc
MulDiv
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
WaitForMultipleObjects
MapViewOfFileEx
CreateFileMappingW
GetModuleHandleW
GetFileSize
GetProcAddress
ResumeThread
SetThreadPriority
UnmapViewOfFile
CreateIoCompletionPort
ResetEvent
GetSystemInfo
TerminateThread
SetEvent
GetExitCodeThread
PostQueuedCompletionStatus
GetQueuedCompletionStatus
CreateEventW
GetNativeSystemInfo
CreateSemaphoreW
SwitchToThread
ReleaseSemaphore
GetCurrentThreadId
SetLastError
HeapCreate
QueryDosDeviceW
GetCurrentProcessId
CreateThread
GetCurrentProcess
WaitForSingleObject
CreateProcessW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
TerminateProcess
IsDebuggerPresent
GetModuleFileNameW
GetVersionExW
GetPrivateProfileStringW
GetTickCount
FindResourceW
LoadResource
LockResource
SizeofResource
SetFilePointer
WriteFile
CreateFileW
ReadProcessMemory
VirtualQueryEx
OpenProcess
CloseHandle
SetWaitableTimer
CreateWaitableTimerW
DeleteFileW
GetVolumeInformationW
FindFirstFileW
FindNextFileW
FindClose
Sleep
ExitProcess
MultiByteToWideChar
WideCharToMultiByte
TryEnterCriticalSection
InitializeCriticalSection
GetProcessHeap
DeleteCriticalSection
HeapDestroy
DecodePointer
HeapAlloc
WriteConsoleW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetConsoleOutputCP
SetFilePointerEx
GetTimeZoneInformation
EnumSystemLocalesW
IsValidLocale
LCMapStringW
SetStdHandle
QueryPerformanceFrequency
VirtualAlloc
HeapQueryInformation
GetFileInformationByHandle
SetConsoleCtrlHandler
FreeLibraryAndExitThread
ExitThread
GetModuleHandleExW
GetCommandLineA
RtlUnwind
GetCPInfo
GetStringTypeW
LCMapStringEx
InitializeCriticalSectionEx
OutputDebugStringW
GetStartupInfoW
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
RaiseException
HeapReAlloc
GetLastError
HeapSize
LeaveCriticalSection
GetTempFileNameW
GetDriveTypeW
GlobalFree
GetWindowsDirectoryW
GetProfileIntW
GetTempPathW
SearchPathW
FindResourceExW
SetErrorMode
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
VerifyVersionInfoW
VerSetConditionMask
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalGetAtomNameW
lstrcpyW
GetThreadLocale
lstrcmpiW
DuplicateHandle
UnlockFile
SetEndOfFile
LockFile
GetFullPathNameW
FlushFileBuffers
WritePrivateProfileStringW
GetPrivateProfileIntW
CompareStringA
lstrcmpA
GetCurrentThread
LocalFree
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryA
LoadLibraryExW
GetModuleHandleA
EncodePointer
OutputDebugStringA
SystemTimeToFileTime
GetSystemTime
ReadConsoleW
ReadConsoleA
SetConsoleMode
GetConsoleMode
GetEnvironmentVariableW
ConvertFiberToThread
QueryPerformanceCounter
DeleteFiber
GetFileType
GetStdHandle
FormatMessageW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
HeapFree

user32

CreateWindowExW
GetPropW
DestroyWindow
PostMessageW
RemovePropW
LoadStringW
GetActiveWindow
GetClassInfoW
SetTimer
RegisterClassW
SetPropW
LoadIconW
LoadCursorW
GetParent
LoadImageW
GetSystemMetrics
GetWindowDC
GetClientRect
GetWindowTextW
GetWindowTextLengthW
GetClassNameW
GetDesktopWindow
FindWindowExW
SetWindowPos
SetForegroundWindow
MoveWindow
GetWindowRect
EnumWindows
WaitForInputIdle
GetWindowThreadProcessId
AdjustWindowRectEx
ShowWindow
GetWindow
SetCursor
GetKeyState
SetFocus
IsWindow
MessageBoxW
GetFocus
InvalidateRect
GetSysColor
EnableWindow
SendMessageW
DestroyIcon
ReleaseDC
GetDC
DefWindowProcW
GetWindowLongW
CopyImage
SetClipboardData
EmptyClipboard
CloseClipboard
GetMonitorInfoW
OpenClipboard
GetIconInfo
TranslateMessage
DispatchMessageW
PeekMessageW
MsgWaitForMultipleObjects
UnregisterClassW
GetAncestor
GetProcessWindowStation
GetUserObjectInformationW
RegisterWindowMessageW
GetMessagePos
GetMessageTime
GetClassInfoExW
IsMenu
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetDlgItem
GetMenuItemID
GetForegroundWindow
BeginPaint
EndPaint
ValidateRect
ScrollWindow
ShowScrollBar
MapWindowPoints
EqualRect
GetClassLongW
GetLastActivePopup
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
SetScrollInfo
GetScrollInfo
GetMenuStringW
GetMenuState
RemoveMenu
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW
CheckDlgButton
SetWindowTextW
IsDialogMessageW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
GetKeyNameTextW
MapVirtualKeyW
SystemParametersInfoW
RegisterClipboardFormatW
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
GetMessageW
ShowOwnedPopups
CharUpperW
CharNextW
CreateDialogIndirectParamW
EndDialog
DrawFocusRect
NotifyWinEvent
LoadMenuW
SendDlgItemMessageA
SetRectEmpty
GetMenuItemInfoW
InflateRect
MonitorFromPoint
GetSysColorBrush
RealChildWindowFromPoint
GetAsyncKeyState
BringWindowToTop
LoadAcceleratorsW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
SetLayeredWindowAttributes
EnumDisplayMonitors
DrawStateW
TrackMouseEvent
PostThreadMessageW
WaitMessage
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
CopyAcceleratorTableW
EnumChildWindows
LockWindowUpdate
SetClassLongW
InvalidateRgn
GetNextDlgGroupItem
DrawEdge
DrawFrameControl
DrawIconEx
UnionRect
SetCursorPos
CharUpperBuffW
UpdateLayeredWindow
EnableScrollBar
GetMenuDefaultItem
SetMenuDefaultItem
CopyIcon
FrameRect
IsClipboardFormatAvailable
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsCharLowerW
MapVirtualKeyExW
SubtractRect
GetUpdateRect
HideCaret
InvertRect
GetDoubleClickTime
DestroyCursor
GetComboBoxInfo
GetWindowRgn
SetActiveWindow
IsZoomed
GetSystemMenu
CallWindowProcW
IsWindowVisible
SetWindowRgn
ScreenToClient
MessageBeep
WindowFromPoint
GetScrollPos
DrawIcon
OffsetRect
GetCapture
RedrawWindow
GetScrollRange
CopyRect
GetDlgCtrlID
ClientToScreen
IsChild
GetTopWindow
IsWindowEnabled
SetMenu
WinHelpW
LoadBitmapW
SetParent
SetCapture
SetScrollRange
SetWindowLongW
KillTimer
SetScrollPos
PtInRect
UpdateWindow
ReleaseCapture
IsIconic
GetNextDlgTabItem
FillRect
IsRectEmpty
IntersectRect
SetRect
wsprintfW
ModifyMenuW
GetMenu
GetMenuItemCount
DeleteMenu
CreatePopupMenu
TrackPopupMenu
GetSubMenu
DestroyAcceleratorTable
CreateAcceleratorTableW
DestroyMenu
TranslateAcceleratorW
InsertMenuW
CheckMenuItem
AppendMenuW
EnableMenuItem
CreateMenu
GetCursorPos
MonitorFromWindow

gdi32

FillRgn
GetTextExtentPoint32W
BitBlt
CreateCompatibleBitmap
SelectObject
CreateDIBSection
SetDIBColorTable
CreateCompatibleDC
GdiAlphaBlend
StretchBlt
RealizePalette
GetStockObject
GetDeviceCaps
GetSystemPaletteEntries
SelectPalette
CreatePalette
GetObjectW
SetStretchBltMode
CreateFontIndirectW
DeleteObject
GetDIBits
DeleteDC
SetBkColor
SetTextColor
CreateDCW
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetViewportExtEx
IntersectClipRect
LineTo
CreateSolidBrush
PtVisible
RectVisible
CreatePen
SaveDC
SelectClipRgn
ExtSelectClipRgn
SetBkMode
SetMapMode
ScaleViewportExtEx
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
CombineRgn
CreateRectRgn
RoundRect
CreateEllipticRgn
Ellipse
Rectangle
GetPixel
CreatePatternBrush
GetWindowOrgEx
CreateHatchBrush
SetPixel
GetWindowExtEx
OffsetWindowOrgEx
GetTextMetricsW
CreateRoundRectRgn
PatBlt
GetViewportOrgEx
RestoreDC
CreateBitmap
OffsetViewportOrgEx
SetWindowOrgEx
CopyMetaFileW
SetLayout
SetPixelV
GetTextFaceW
PtInRegion
GetBoundsRect
FrameRgn
SetPaletteEntries
ExtFloodFill
LPtoDP
GetPaletteEntries
GetNearestPaletteIndex
EnumFontFamiliesExW
Polyline
Polygon
CreatePolygonRgn
OffsetRgn
GetRgnBox
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
DPtoLP
SetRectRgn
GetMapMode
GetTextColor
GetBkColor
CreateRectRgnIndirect
ScaleWindowExtEx
SetWindowExtEx

advapi32

DeregisterEventSource
ReportEventW
CryptAcquireContextW
CryptSetHashParam
CryptGetProvParam
CryptGetUserKey
CryptExportKey
CryptSignHashW
CryptEnumProvidersW
RegCloseKey
RegQueryValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
CryptReleaseContext
CryptDestroyKey
CryptDecrypt
CryptDestroyHash
CryptDeriveKey
CryptHashData
CryptCreateHash
CryptAcquireContextA
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyW
RegEnumKeyExW
RegEnumValueW
RegisterEventSourceW

shell32

SHGetDesktopFolder
SHBrowseForFolderW
ShellExecuteW
DragFinish
DragQueryFileW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
SHAppBarMessage
Shell_NotifyIconW
SHGetFileInfoW
ExtractIconExW

ole32

CreateILockBytesOnHGlobal
DoDragDrop
OleGetClipboard
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoGetClassObject
CoCreateGuid
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
StgOpenStorageOnILockBytes
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
OleRun
CreateStreamOnHGlobal
CoSetProxyBlanket
CoInitializeSecurity
CoCreateInstance
CLSIDFromProgID
CoInitialize
CoUninitialize
CoInitializeEx
CoDisconnectObject

oleaut32

LoadTypeLi
SafeArrayGetLBound
SystemTimeToVariantTime
VariantClear
VarBstrFromDate
SafeArrayGetUBound
OleLoadPicture
SafeArrayDestroy
SysStringLen
SafeArrayGetDim
LHashValOfNameSys
VariantTimeToSystemTime
VariantChangeType
SysAllocStringLen
VariantCopyInd
OleCreateFontIndirect
RegisterTypeLi
VariantCopy
SafeArrayGetElemsize
SafeArrayUnaccessData
SafeArrayCreate
VarCmp
SysAllocString
VariantInit
SysFreeString
SafeArrayAccessData

comctl32

ImageList_AddMasked
InitCommonControlsEx
ImageList_Create
ImageList_Destroy

libcpuid

ord4
ord7

iphlpapi

GetExtendedTcpTable

psapi

EnumProcesses
GetModuleBaseNameW
GetModuleFileNameExW
EnumProcessModules
GetProcessImageFileNameW

shlwapi

PathFindExtensionW
PathFindFileNameW
PathIsUNCW
PathStripToRootW
PathRemoveFileSpecW
StrFormatKBSizeW
PathCombineW
StrPBrkW
StrChrW

ws2_32

getsockopt
WSARecv
WSAAddressToStringW
send
getsockname
getaddrinfo
WSAStringToAddressW
WSASetLastError
shutdown
WSASend
closesocket
WSAIoctl
freeaddrinfo
ioctlsocket
WSAGetOverlappedResult
connect
socket
bind
WSAStartup
recv
listen
inet_addr
setsockopt
htons
WSAGetLastError
ntohs
WSACleanup
inet_ntoa
gethostbyname

msimg32

TransparentBlt
AlphaBlend

uxtheme

GetCurrentThemeName
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
DrawThemeParentBackground
DrawThemeText
GetWindowTheme
IsAppThemed
GetThemePartSize
DrawThemeBackground
CloseThemeData
OpenThemeData
GetThemeColor

oledlg

OleUIBusyW

gdiplus

GdipDrawImageRectI
GdipAlloc
GdipCreateBitmapFromStream
GdipBitmapUnlockBits
GdipCloneImage
GdipGetImagePaletteSize
GdipGetImageHeight
GdiplusStartup
GdipDrawImageI
GdipCreateFromHDC
GdipSetInterpolationMode
GdipBitmapLockBits
GdipFree
GdipGetImagePixelFormat
GdipCreateBitmapFromScan0
GdipDisposeImage
GdiplusShutdown
GdipDeleteGraphics
GdipGetImagePalette
GdipCreateBitmapFromHBITMAP
GdipSetCompositingMode
GdipGetImageWidth
GdipCreateBitmapFromFile
GdipGetImageGraphicsContext

winmm

timeGetTime
timeBeginPeriod
PlaySoundW
timeEndPeriod
timeGetDevCaps

bcrypt

BCryptGenRandom

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

crypt32

CertOpenStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertDuplicateCertificateContext
CertFreeCertificateContext
CertGetCertificateContextProperty
CertCloseStore

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 252KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c84706d64d0684a242c7e2a563f1bf14

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

libcpuid

iphlpapi

psapi

shlwapi

ws2_32

msimg32

uxtheme

oledlg

gdiplus

winmm

bcrypt

oleacc

imm32

winspool.drv

crypt32

Sections

.text Size: 3.3MB - Virtual size: 3.3MB

.rdata Size: 1.3MB - Virtual size: 1.3MB

.data Size: 47KB - Virtual size: 79KB

.rsrc Size: 2.2MB - Virtual size: 2.2MB

.reloc Size: 252KB - Virtual size: 252KB

.text
Size: 3.3MB - Virtual size: 3.3MB

.rdata
Size: 1.3MB - Virtual size: 1.3MB

.data
Size: 47KB - Virtual size: 79KB

.rsrc
Size: 2.2MB - Virtual size: 2.2MB

.reloc
Size: 252KB - Virtual size: 252KB