ea0ee1e5e67165a4ae9d4177b9cd167ff72171feb433f16b59fad8c54336527c

Sharing

Copy URL Twitter E-mail

General

Target

ea0ee1e5e67165a4ae9d4177b9cd167ff72171feb433f16b59fad8c54336527c
Size

1.0MB
MD5

f54fcb38816441624335b02672d6de0c
SHA1

52c1a2b94cf2518ac8c6b17afdf4ab5b7a55d23c
SHA256

ea0ee1e5e67165a4ae9d4177b9cd167ff72171feb433f16b59fad8c54336527c
SHA512

914cf3305ece9c7613b285b73d49dd3e25eec243d8c5d6fc66512474a878cecaec319b8011bd62286a8e40edffaa4b1d571f2833dd3d7393fb17b0cb2acdc047
SSDEEP

24576:ZMIMNE3W49Wfxpqu8CXYHmgvkWdYfpdhihMMMMMMv7nH:2cF9E/LXZCkOYf/kMMMMMM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea0ee1e5e67165a4ae9d4177b9cd167ff72171feb433f16b59fad8c54336527c

Files

ea0ee1e5e67165a4ae9d4177b9cd167ff72171feb433f16b59fad8c54336527c
.exe windows x86

9589f35d5267fdeb172812b945c85d50

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx
ImageList_ReplaceIcon
ord8
CreateStatusWindowW
ImageList_Destroy
ImageList_Create
ImageList_Remove
ImageList_AddMasked
ImageList_Add
PropertySheetW

shlwapi

SHAutoComplete

kernel32

GetStdHandle
WriteFile
GetDriveTypeA
GetDiskFreeSpaceA
GetVolumeInformationA
GetFileAttributesA
SetFileAttributesA
SetFileAttributesW
MoveFileA
DeleteFileW
DeleteFileA
RemoveDirectoryA
RemoveDirectoryW
DeviceIoControl
CreateDirectoryA
CreateDirectoryW
GetCurrentDirectoryA
ExpandEnvironmentStringsW
FindNextFileA
FindFirstFileA
GetDiskFreeSpaceW
Sleep
GetVersionExW
CompareFileTime
FindCloseChangeNotification
FindFirstChangeNotificationW
GetLocaleInfoW
GetNumberFormatW
CreateThread
ExitThread
GetProcessAffinityMask
SetEvent
ResetEvent
WaitForMultipleObjects
CreateEventW
GetFullPathNameA
GetFullPathNameW
GetModuleFileNameA
GetCompressedFileSizeW
FindResourceW
SizeofResource
LoadResource
LoadLibraryExW
UpdateResourceW
EnumResourceLanguagesW
EndUpdateResourceW
EnumResourceNamesW
BeginUpdateResourceW
CompareStringA
SetThreadPriority
GetCurrentThread
SetPriorityClass
SetCurrentDirectoryA
WideCharToMultiByte
CompareStringW
IsDBCSLeadByte
GetCPInfo
GlobalMemoryStatus
GetVolumeInformationW
GetLogicalDrives
ReadFile
ResumeThread
SuspendThread
GetSystemTimeAsFileTime
GetDateFormatA
GetTimeFormatA
GetLocalTime
GetThreadPriority
GetPriorityClass
SetErrorMode
GetCommandLineW
GetCurrentProcessId
MulDiv
FindNextChangeNotification
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LoadLibraryA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
InitializeCriticalSectionAndSpinCount
GetVersion
HeapSize
GetConsoleMode
GetConsoleCP
SetHandleCount
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
ExitProcess
GetModuleHandleA
HeapCreate
VirtualAlloc
VirtualFree
DeleteCriticalSection
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoA
GetCommandLineA
LeaveCriticalSection
EnterCriticalSection
SetStdHandle
RaiseException
RtlUnwind
HeapReAlloc
HeapFree
HeapAlloc
CreateFileA
GetFileType
GetFileTime
SetFilePointer
FlushFileBuffers
SetEndOfFile
SetFileTime
BackupSeek
BackupRead
CreateFileW
GetCurrentProcess
GetCurrentDirectoryW
FormatMessageW
LocalFree
CreateMutexW
ReleaseMutex
GetLastError
GlobalSize
GetProcessHeap
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
MultiByteToWideChar
GetVersionExA
GetTickCount
GetSystemTime
SystemTimeToFileTime
CreateFileMappingW
WaitForSingleObject
OpenFileMappingW
MapViewOfFile
CloseHandle
UnmapViewOfFile
GetTempPathW
GetModuleFileNameW
FindNextFileW
LoadLibraryW
MoveFileW
CopyFileW
GetCurrentThreadId
FreeLibrary
LocalFileTimeToFileTime
GetTempPathA
ExpandEnvironmentStringsA
GetDriveTypeW
FileTimeToDosDateTime
SetLastError
FindFirstFileW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetTimeFormatW
GetDateFormatW
FindClose
DosDateTimeToFileTime
GetFileAttributesW
GetModuleHandleW
GetProcAddress
SetEnvironmentVariableA
SetCurrentDirectoryW

user32

CharToOemBuffA
IsChild
GetLastActivePopup
GetClipboardData
GetMenuItemID
PostQuitMessage
InsertMenuW
LoadMenuW
RegisterClassW
LoadAcceleratorsW
FindWindowW
GetMenuState
CreateIconIndirect
TranslateAcceleratorW
IsDialogMessageW
SetPropW
RegisterWindowMessageW
FindWindowExW
SetMenu
EnumWindows
CreateIcon
GetDlgItemTextA
SetDlgItemTextA
FlashWindow
ValidateRect
GetSysColor
CopyImage
FillRect
ExitWindowsEx
DrawIconEx
LoadStringW
GetWindow
SetMenuItemInfoW
RedrawWindow
GetComboBoxInfo
PostThreadMessageW
IsCharAlphaW
CharLowerW
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
MessageBeep
PeekMessageW
CharUpperW
GetFocus
SetForegroundWindow
EnableMenuItem
MoveWindow
CheckMenuItem
LoadBitmapW
InsertMenuItemW
LoadImageW
BeginPaint
EndPaint
SetTimer
KillTimer
UpdateWindow
IsWindow
SetWindowTextA
SetWindowTextW
GetWindowTextLengthW
AppendMenuW
DrawMenuBar
GetMenu
GetSubMenu
DeleteMenu
GetMenuItemCount
GetMenuItemInfoW
CharToOemBuffW
ScreenToClient
ClientToScreen
CreateDialogParamW
SetScrollPos
ScrollWindowEx
PtInRect
LoadIconW
SetScrollRange
GetDialogBaseUnits
CreateDialogIndirectParamW
GetPropW
RemovePropW
GetForegroundWindow
GetSystemMenu
BringWindowToTop
SetWindowPlacement
GetMessageW
TranslateMessage
DispatchMessageW
IsCharUpperW
GetIconInfo
SendMessageW
SetFocus
CreateWindowExW
DestroyWindow
GetWindowTextW
DefWindowProcW
SetDlgItemTextW
CreatePopupMenu
SetWindowLongW
TrackPopupMenu
DestroyMenu
CallWindowProcW
RegisterClipboardFormatW
GetKeyState
LoadCursorW
SetCursor
WindowFromPoint
GetWindowThreadProcessId
GetDC
ReleaseDC
GetDesktopWindow
GetCursorPos
GetMonitorInfoW
GetWindowLongW
ShowWindow
EnableWindow
IntersectRect
IsIconic
GetWindowPlacement
GetSystemMetrics
IsWindowEnabled
SetDlgItemInt
GetDlgItemInt
IsDlgButtonChecked
EnumChildWindows
GetClassNameW
GetWindowRect
MapWindowPoints
SetWindowPos
InvalidateRect
GetParent
CheckDlgButton
PostMessageW
MessageBoxW
IsWindowVisible
OemToCharBuffA
CharToOemA
DialogBoxParamW
SendDlgItemMessageW
DestroyIcon
GetDlgItem
OemToCharA
EndDialog
GetDlgItemTextW
GetClientRect

gdi32

DPtoLP
GetDeviceCaps
LineTo
MoveToEx
GetTextExtentPoint32W
SetPixel
CreatePatternBrush
TextOutA
GetMapMode
SetMapMode
CreateCompatibleBitmap
Rectangle
StretchBlt
SetBkColor
ExtTextOutW
BitBlt
GetObjectW
CreateCompatibleDC
GetPixel
DeleteDC
CreatePen
CreateSolidBrush
SetTextColor
TextOutW
Polygon
Polyline
SelectObject
GetTextFaceW
GetTextMetricsW
CreateFontW
CreateBitmap
DeleteObject

comdlg32

GetOpenFileNameW
GetSaveFileNameW
CommDlgExtendedError
ChooseFontW

advapi32

LookupPrivilegeValueW
OpenProcessToken
SetFileSecurityA
SetFileSecurityW
GetSecurityDescriptorLength
GetFileSecurityA
GetFileSecurityW
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegEnumValueW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegEnumKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
AdjustTokenPrivileges

shell32

SHFileOperationW
FindExecutableW
DragFinish
DragQueryFileW
DragAcceptFiles
Shell_NotifyIconW
ShellExecuteW
SHGetPathFromIDListA
SHGetFileInfoW
ShellExecuteExW
SHGetMalloc
SHBrowseForFolderW
SHChangeNotify
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW

ole32

OleUninitialize
OleInitialize
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
OleSetClipboard
DoDragDrop
CoInitializeEx

Sections

.text
Size: 729KB - Virtual size: 729KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 347KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9589f35d5267fdeb172812b945c85d50

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

shlwapi

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

Sections

.text Size: 729KB - Virtual size: 729KB

.rdata Size: 63KB - Virtual size: 63KB

.data Size: 13KB - Virtual size: 347KB

.rsrc Size: 177KB - Virtual size: 177KB

.reloc Size: 47KB - Virtual size: 47KB

.text
Size: 729KB - Virtual size: 729KB

.rdata
Size: 63KB - Virtual size: 63KB

.data
Size: 13KB - Virtual size: 347KB

.rsrc
Size: 177KB - Virtual size: 177KB

.reloc
Size: 47KB - Virtual size: 47KB