980fab001d5195f7b8c6494c1b5ad3cd800c4adf6698002479cc7314651d2633

Sharing

Copy URL

Twitter E-mail

General

Target

980fab001d5195f7b8c6494c1b5ad3cd800c4adf6698002479cc7314651d2633
Size

2.7MB
MD5

02d787506df1a357e770fac0bdd7086a
SHA1

02ef13cfa8385d6665188d6be704032c8246f0a3
SHA256

980fab001d5195f7b8c6494c1b5ad3cd800c4adf6698002479cc7314651d2633
SHA512

f3e53bc68c8a445ecc5f317f21423811f5af3c45f58f5d7ac75d5b2d945573ee9a5b460c1552d90430bd68b99d87e1faa3387f30b698ac03250bd18895294c3a
SSDEEP

24576:n1clvdP+v/jk/LmWv/bDLYnYqQahdvsGx3BUtCwW/UOgiLSUSzaT2PEYVcEA4V+U:n1cxLmzqIcZ7MYFA4VO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
980fab001d5195f7b8c6494c1b5ad3cd800c4adf6698002479cc7314651d2633

Files

980fab001d5195f7b8c6494c1b5ad3cd800c4adf6698002479cc7314651d2633
.exe windows x86

e528f199366e3dc9a53b8daf5e3502e3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
OpenEventA
FileTimeToLocalFileTime
OpenFileMappingA
CreateFileW
SetEnvironmentVariableA
CompareStringW
GetProcessHeap
GetTimeZoneInformation
GetLocaleInfoW
LCMapStringW
LCMapStringA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetDateFormatA
GetTimeFormatA
GetConsoleOutputCP
WriteConsoleA
CreateProcessA
GetExitCodeProcess
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
IsValidCodePage
GetACP
HeapReAlloc
HeapSize
HeapAlloc
HeapFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetConsoleMode
GetConsoleCP
LoadLibraryW
SetConsoleCtrlHandler
FatalAppExitA
SetHandleCount
OutputDebugStringW
WriteConsoleW
OutputDebugStringA
GetStdHandle
DebugBreak
VirtualQuery
GetSystemInfo
GetFileType
SetStdHandle
ExitThread
CreateThread
ExitProcess
IsBadReadPtr
HeapValidate
GetStartupInfoA
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RaiseException
RtlUnwind
GetTickCount
FindResourceExA
FileTimeToSystemTime
GetModuleHandleW
GetOEMCP
GetCPInfo
SetFileAttributesA
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSizeEx
GetProfileIntA
VirtualProtect
GetAtomNameA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GlobalFlags
SetErrorMode
InterlockedIncrement
GetCurrentDirectoryA
InterlockedDecrement
GetModuleFileNameW
GetShortPathNameA
lstrcmpiA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
GetHandleInformation
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
MulDiv
lstrlenW
CopyFileA
GlobalSize
FormatMessageA
LocalFree
MultiByteToWideChar
lstrcmpW
GlobalGetAtomNameA
GlobalFindAtomA
GetVersionExA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
FreeResource
ResumeThread
GetThreadPriority
SetThreadPriority
lstrlenA
GetCurrentProcessId
GlobalAddAtomA
CreateEventA
SuspendThread
SetEvent
WaitForSingleObject
SetLastError
CompareStringA
InterlockedExchange
GlobalDeleteAtom
lstrcmpA
GetCurrentThread
GetCurrentThreadId
GetLocaleInfoA
GetModuleHandleA
ConvertDefaultLocale
EnumResourceLanguagesA
GetModuleFileNameA
GlobalAlloc
UnmapViewOfFile
CloseHandle
GlobalUnlock
GlobalFree
CreateFileA
GetFileSize
CreateFileMappingA
GetLastError
MapViewOfFile
GlobalLock
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceA
Sleep
FreeLibrary
VirtualFree
VirtualAlloc
GetLocalTime
LoadLibraryA
InterlockedCompareExchange

user32

GetAsyncKeyState
SetRectEmpty
DefMDIChildProcA
TranslateMDISysAccel
DefFrameProcA
CheckMenuRadioItem
GetMenuContextHelpId
SetMenuContextHelpId
LoadMenuIndirectA
ModifyMenuA
InsertMenuItemA
SetMenuItemInfoA
GetMenuItemInfoA
GetMenuDefaultItem
SetMenuDefaultItem
EnableMenuItem
CheckMenuItem
DeleteMenu
CreatePopupMenu
CreateMenu
ScrollDC
GrayStringA
GetTabbedTextExtentA
DrawTextExA
DrawTextA
DrawFocusRect
DrawFrameControl
DrawEdge
DrawStateA
DrawIcon
InvertRect
FrameRect
ExcludeUpdateRgn
WindowFromDC
GetSysColorBrush
FillRect
DestroyCursor
GetMenuBarInfo
UnpackDDElParam
ReuseDDElParam
ReleaseCapture
TranslateAcceleratorA
CharUpperA
RemoveMenu
IsMenu
GetMenuItemCount
GetSubMenu
GetMenuState
GetMenuStringA
AppendMenuA
InsertMenuA
GetMenuItemID
RegisterWindowMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
WinHelpA
TrackPopupMenuEx
TrackPopupMenu
SetWindowPlacement
GetClassLongA
GetClassNameA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
SetMenu
GetMenu
GetMessageTime
GetMessagePos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetSystemMetrics
GetClipboardFormatNameA
CreateDialogIndirectParamA
DestroyWindow
DestroyMenu
LoadMenuA
LoadAcceleratorsA
SetFocus
ShowWindow
SetWindowPos
MoveWindow
SetWindowLongA
GetDlgCtrlID
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
IsDialogMessageA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
SendDlgItemMessageA
GetDlgItemTextA
GetDlgItemInt
GetDlgItem
CheckRadioButton
CheckDlgButton
OpenIcon
CloseWindow
LoadIconA
LoadCursorA
PostThreadMessageA
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
GetWindowContextHelpId
SetWindowContextHelpId
SendNotifyMessageA
GetForegroundWindow
SetForegroundWindow
ShowCaret
HideCaret
SetCaretPos
GetCaretPos
CreateCaret
GetClipboardViewer
GetClipboardOwner
GetOpenClipboardWindow
OpenClipboard
SetClipboardViewer
ChangeClipboardChain
FlashWindow
WindowFromPoint
SetParent
IsChild
GetWindow
GetTopWindow
FindWindowExA
FindWindowA
ChildWindowFromPointEx
ChildWindowFromPoint
ShowScrollBar
GetNextDlgTabItem
GetNextDlgGroupItem
DlgDirSelectComboBoxExA
DlgDirSelectExA
DlgDirListComboBoxA
DlgDirListA
GetDesktopWindow
MessageBoxA
ReleaseDC
GetDC
IsRectEmpty
PostQuitMessage
SetCapture
GetCapture
SetActiveWindow
GetActiveWindow
KillTimer
SetTimer
DrawCaption
DrawAnimatedRects
EnableScrollBar
RedrawWindow
LockWindowUpdate
GetDCEx
ShowOwnedPopups
IsWindowVisible
ValidateRgn
DestroyIcon
CopyAcceleratorTableA
MessageBeep
GetDialogBaseUnits
GetKeyNameTextA
MapVirtualKeyA
PtInRect
InSendMessage
UnregisterClassA
RegisterClipboardFormatA
IsClipboardFormatAvailable
WaitMessage
EndDialog
MapDialogRect
IsWindow
MsgWaitForMultipleObjects
IsWindowUnicode
GetMessageW
DispatchMessageW
SubtractRect
UnionRect
InflateRect
SetRect
SendMessageA
PostMessageA
TabbedTextOutA
GetFocus
SetMenuItemBitmaps
LoadBitmapA
GetMenuCheckMarkDimensions
DispatchMessageA
TranslateMessage
GetMessageA
ValidateRect
SetWindowsHookExA
GetCursorPos
PeekMessageA
CallNextHookEx
GetKeyState
SetCursor
GetWindowThreadProcessId
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetParent
GetWindowLongA
DragDetect
DrawMenuBar
GetSystemMenu
HiliteMenuItem
IsIconic
IsZoomed
ArrangeIconicWindows
SetWindowRgn
GetWindowRgn
BringWindowToTop
GetWindowRect
GetClientRect
MapWindowPoints
ClientToScreen
ScreenToClient
BeginPaint
EndPaint
GetWindowDC
UpdateWindow
GetUpdateRect
GetUpdateRgn
InvalidateRect
InvalidateRgn
CharNextA

gdi32

EqualRgn
OffsetRgn
GetRgnBox
PtInRegion
RectInRegion
CreateICA
GetBrushOrgEx
SetBrushOrgEx
EnumObjects
GetNearestColor
UpdateColors
GetBkColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextColor
GetMapMode
GetGraphicsMode
GetWorldTransform
GetViewportOrgEx
GetViewportExtEx
GetWindowOrgEx
GetWindowExtEx
DPtoLP
LPtoDP
FillRgn
FrameRgn
InvertRgn
PaintRgn
PtVisible
RectVisible
GetCurrentPositionEx
Arc
Polyline
Chord
Ellipse
Pie
Polygon
PolyPolygon
Rectangle
RoundRect
PatBlt
StretchBlt
GetPixel
SetPixel
FloodFill
ExtFloodFill
TextOutA
GetTextExtentPoint32A
GetTextAlign
GetTextFaceA
GetTextMetricsA
GetTextCharacterExtra
GetCharWidthA
GetFontLanguageInfo
GetCharacterPlacementA
GetAspectRatioFilterEx
Escape
SetBoundsRect
GetBoundsRect
ResetDCA
GetOutlineTextMetricsA
GetCharABCWidthsA
GetFontData
GetKerningPairsA
GetGlyphOutlineA
StartDocA
StartPage
EndPage
SetAbortProc
CombineRgn
EndDoc
GetRegionData
PlgBlt
SetPixelV
AngleArc
GetArcDirection
PolyPolyline
GetColorAdjustment
GetCurrentObject
PolyBezier
DrawEscape
ExtEscape
GetCharABCWidthsFloatA
GetCharWidthFloatA
AbortPath
BeginPath
CloseFigure
EndPath
FillPath
FlattenPath
GetMiterLimit
GetPath
SetMiterLimit
StrokeAndFillPath
StrokePath
WidenPath
GdiComment
PlayEnhMetaFile
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
GetClipRgn
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
EnumMetaFile
PlayMetaFile
GetTextExtentPointA
EnumFontFamiliesExA
DeleteMetaFile
AbortDoc
SetRectRgn
ExtCreateRegion
PathToRegion
CreateRoundRectRgn
CreatePolyPolygonRgn
CreatePolygonRgn
CreateEllipticRgnIndirect
CreateEllipticRgn
CreateRectRgnIndirect
CreateRectRgn
ResizePalette
GetBitmapBits
GetNearestPaletteIndex
CreateBrushIndirect
CreateHatchBrush
CreateSolidBrush
ExtCreatePen
AnimatePalette
SetPaletteEntries
CreateDiscardableBitmap
GetBitmapDimensionEx
MaskBlt
CreatePatternBrush
SetBitmapBits
CreateBitmapIndirect
CreatePenIndirect
CreatePen
GetObjectType
UnrealizeObject
GetStockObject
CopyMetaFileA
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
CreateBitmap
ExtTextOutA
CloseEnhMetaFile
CreateEnhMetaFileA
CloseMetaFile
CreateMetaFileA
CreateDCA
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteDC
GetPaletteEntries
GetDeviceCaps
GetSystemPaletteEntries
GetObjectA
GetDIBits
CreateDIBitmap
CreateHalftonePalette
DeleteObject
CreatePalette
CreateDIBSection
StretchDIBits
SelectPalette
RealizePalette
CreateDIBPatternBrushPt
CreateFontIndirectA
CreateFontA
SetBitmapDimensionEx

comdlg32

GetFileTitleA

winspool.drv

GetJobA
OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

GetFileSecurityA
SetThreadToken
RevertToSelf
OpenThreadToken
SetFileSecurityA
RegSetValueA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyA
RegEnumKeyA
RegQueryValueA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyA

shell32

DragAcceptFiles
SHGetFileInfoA
DragFinish
DragQueryFileA
ExtractIconA
SHGetSpecialFolderPathA

shlwapi

PathRemoveExtensionA
PathFindFileNameA
PathRemoveFileSpecW
PathIsUNCA
PathFindExtensionA
PathStripToRootA

oledlg

ord3
ord7
ord6
ord5
ord9
ord4
ord8

ole32

OleIsRunning
CreateFileMoniker
GetRunningObjectTable
CoLockObjectExternal
CoGetMalloc
StgCreateDocfile
StgOpenStorage
StgIsStorageFile
CreateOleAdviseHolder
CreateDataAdviseHolder
OleGetClipboard
CoRegisterMessageFilter
OleIsCurrentClipboard
OleSetClipboard
OleFlushClipboard
OleQueryCreateFromData
OleQueryLinkFromData
OleSetMenuDescriptor
DoDragDrop
GetClassFile
GetHGlobalFromILockBytes
StgIsStorageILockBytes
OleSave
OleLoad
OleCreate
OleCreateLinkToFile
OleCreateFromFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleSetContainedObject
OleLockRunning
CoRevokeClassObject
CoRegisterClassObject
CreateItemMoniker
OleUninitialize
OleInitialize
OleRun
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
OleRegGetMiscStatus
OleRegEnumVerbs
CoDisconnectObject
StringFromGUID2
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
ReleaseStgMedium
CoTaskMemAlloc
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateBindCtx
OleDuplicateData
CoTaskMemFree
CoUninitialize
CoInitializeEx
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
CreateGenericComposite
CreateStreamOnHGlobal
OleSaveToStream
WriteClassStm
CoUnmarshalInterface
CoMarshalInterface
CoReleaseMarshalData
CoFreeUnusedLibraries
OleGetIconOfClass

oleaut32

SystemTimeToVariantTime
SysFreeString
VariantClear
VariantChangeType
VariantInit
SysStringLen
SysAllocStringByteLen
SysStringByteLen
OleCreateFontIndirect
SafeArrayDestroy
SysAllocString
SafeArrayGetDim
SafeArrayGetElemsize
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayRedim
SafeArrayCreate
VariantCopy
SysReAllocStringLen
VarCyFromStr
VarBstrFromCy
SafeArrayCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VarBstrFromDec
VarDecFromStr
VarDateFromStr
VarBstrFromDate
DosDateTimeToVariantTime
VariantTimeToSystemTime
VarUdateFromDate
VarDateFromUdate
SysAllocStringLen

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 347KB - Virtual size: 346KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 367KB - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didat
Size: 1024B - Virtual size: 793B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e528f199366e3dc9a53b8daf5e3502e3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 2.0MB - Virtual size: 2.0MB

.rdata Size: 347KB - Virtual size: 346KB

.data Size: 367KB - Virtual size: 384KB

.idata Size: 23KB - Virtual size: 23KB

.didat Size: 1024B - Virtual size: 793B

.rsrc Size: 31KB - Virtual size: 30KB

.text
Size: 2.0MB - Virtual size: 2.0MB

.rdata
Size: 347KB - Virtual size: 346KB

.data
Size: 367KB - Virtual size: 384KB

.idata
Size: 23KB - Virtual size: 23KB

.didat
Size: 1024B - Virtual size: 793B

.rsrc
Size: 31KB - Virtual size: 30KB