f89ffbbe70ad2bc9fb7f5cebe529895ea5873646fe6767c200cb61a3c56ae2d3

Sharing

Copy URL Twitter E-mail

General

Target

f89ffbbe70ad2bc9fb7f5cebe529895ea5873646fe6767c200cb61a3c56ae2d3
Size

1.8MB
MD5

863f8a0a6529be2678943c00d9fc8780
SHA1

ae2389a790bd4cf10afdc455c8a5af2e4df74056
SHA256

f89ffbbe70ad2bc9fb7f5cebe529895ea5873646fe6767c200cb61a3c56ae2d3
SHA512

b906e6077c654237269d061246872d70ec5fa28539d3dbbeb09e3cca616ec0106c6fbed367a3a2a2066941b053f6f22141cb57851c1406d1957000523b79a4cc
SSDEEP

24576:qAN/ekMQ9/SOy+oAQoxtPyz+9ldm+RBfyFzk2+USGhR//aq0fP5SwQX/1hxBR+0+:hBkUCUlQ+/mzp3SIB3XRHGoXQL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f89ffbbe70ad2bc9fb7f5cebe529895ea5873646fe6767c200cb61a3c56ae2d3

Files

f89ffbbe70ad2bc9fb7f5cebe529895ea5873646fe6767c200cb61a3c56ae2d3
.exe windows x86

af1949c978972c758ce728696977fcdd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
CreateMutexW
lstrlenW
MoveFileW
DeleteFileW
GetFileAttributesW
CloseHandle
SetFilePointer
LoadLibraryA
GetProcAddress
GetLastError
FormatMessageA
FreeLibrary
LoadLibraryW
GetLocalTime
GetTempPathW
FindClose
FindNextFileW
FindFirstFileW
GlobalSize
GlobalFree
GlobalAlloc
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
DecodePointer
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
GlobalUnlock
GlobalLock
GetFileSizeEx
CreateDirectoryW
CreateFileW
ReadFile
WriteFile

user32

DestroyWindow
MessageBoxW
MessageBeep
GetSysColor
GetCursorPos
DefMDIChildProcW
GetKeyState
DefFrameProcW
PostQuitMessage
GetMenuStringW
GetFocus
GetMenuItemID
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
TranslateMDISysAccel
GetMessageW
LoadAcceleratorsW
SetForegroundWindow
FindWindowW
GetMenu
CreateMenu
RegisterClassExW
LoadCursorW
InsertMenuW
DeleteMenu
GetSubMenu
SetMenuItemInfoW
BringWindowToTop
GetSysColorBrush
AdjustWindowRect
ReleaseCapture
SetCapture
ValidateRect
DefWindowProcW
SetFocus
LoadImageW
DestroyMenu
TrackPopupMenuEx
KillTimer
GetForegroundWindow
AppendMenuW
RemoveMenu
GetMenuItemCount
CheckMenuItem
EnableMenuItem
ModifyMenuW
AdjustWindowRectEx
GetSystemMetrics
IsWindowEnabled
ClientToScreen
GetActiveWindow
GetDesktopWindow
LoadBitmapW
IsWindowVisible
GetWindowTextW
FillRect
GetDlgCtrlID
GetParent
SetWindowPos
LoadIconW
SetClassLongW
SetCursor
UpdateWindow
SetActiveWindow
CreateWindowExW
GetClientRect
CheckRadioButton
EnableWindow
CreateDialogParamW
CallWindowProcW
SendMessageW
SetWindowTextA
SetWindowTextW
SetTimer
ShowWindow
GetDlgItem
SetDlgItemTextW
SetDlgItemTextA
GetDlgItemTextW
GetDlgItemTextA
GetWindowTextA
GetWindowTextLengthW
IsDlgButtonChecked
CheckDlgButton
GetDlgItemInt
MessageBoxA
CreatePopupMenu
PostMessageW
SetDlgItemInt
EndDialog
GetWindowRect
ScreenToClient
MoveWindow
InvalidateRect
SetWindowLongW
GetWindowLongW
DialogBoxParamW
GetClipboardData
wsprintfW
EmptyClipboard
EnumClipboardFormats
IsClipboardFormatAvailable
RegisterClipboardFormatW
CloseClipboard
SetClipboardData
OpenClipboard

gdi32

DeleteObject
CreateSolidBrush
Rectangle
CreatePen
GetStockObject
SelectObject

comdlg32

ChooseColorW
PageSetupDlgW
CommDlgExtendedError
PrintDlgW
ChooseFontW

advapi32

RegQueryValueExW
RegCloseKey
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegDeleteValueW

shell32

DragAcceptFiles
DragQueryPoint
DragQueryFileW
ShellExecuteW

ole32

CreateStreamOnHGlobal
CoUninitialize
CoInitializeEx
CoCreateInstance
CoTaskMemFree

msvcr110

_invoke_watson
__crtSetUnhandledExceptionFilter
?terminate@@YAXXZ
_controlfp_s
_commode
_fmode
_wcmdln
_initterm
_initterm_e
_except_handler4_common
_configthreadlocale
_cexit
_exit
__set_app_type
__wgetmainargs
_amsg_exit
__crtGetShowWindowMode
_XcptFilter
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
signal
abort
rewind
putc
freopen
perror
_CIpow
floor
memcpy
memset
_CIlog
_CIsqrt
strcoll
isxdigit
strpbrk
islower
isupper
tolower
ispunct
memchr
_time64
_difftime64
_localtime64
setlocale
strftime
clock
remove
system
tmpnam
_gmtime64
_mktime64
rename
strcspn
strncat
getenv
_HUGE
frexp
srand
rand
ldexp
modf
ceil
_access
printf
_CIatan2
_CIcosh
_CIfmod
_CIsinh
_CItanh
__CxxFrameHandler3
_libm_sse2_acos_precise
_libm_sse2_asin_precise
_libm_sse2_atan_precise
_libm_sse2_cos_precise
_libm_sse2_exp_precise
_libm_sse2_log10_precise
_libm_sse2_log_precise
_libm_sse2_pow_precise
_libm_sse2_sin_precise
_libm_sse2_sqrt_precise
_libm_sse2_tan_precise
__setusermatherr
iscntrl
isdigit
isalpha
isalnum
localeconv
clearerr
fseek
ftell
fwrite
setvbuf
_popen
calloc
malloc
free
sprintf
strncmp
??3@YAXPAX@Z
memmove
wcsrchr
atof
strspn
realloc
??2@YAPAXI@Z
strstr
atoi
strchr
sscanf
strncpy
strtod
qsort
wcsncpy
wcschr
wcsncmp
wcsstr
strrchr
toupper
feof
strerror
ungetc
__iob_func
_errno
fopen
fread
fprintf
ferror
fclose
getc
isspace
strtoul
fputs
fgets
longjmp
exit
fscanf
tmpfile
_pclose
fflush
_setjmp3

iphlpapi

GetAdaptersInfo

wininet

InternetSetStatusCallbackW
InternetReadFile
InternetCloseHandle
InternetOpenW
InternetOpenUrlW
InternetQueryDataAvailable

msvcp110

?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z

shlwapi

ord12

comctl32

ImageList_Create

d3d11

D3D11CreateDeviceAndSwapChain

prntvpt

ord9
ord2
ord4

d2d1

ord1
ord2

dwrite

DWriteCreateFactory

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 544KB - Virtual size: 544KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

af1949c978972c758ce728696977fcdd

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

msvcr110

iphlpapi

wininet

msvcp110

shlwapi

comctl32

d3d11

prntvpt

d2d1

dwrite

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 90KB - Virtual size: 90KB

.data Size: 2KB - Virtual size: 14KB

.rsrc Size: 544KB - Virtual size: 544KB

.reloc Size: 58KB - Virtual size: 57KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 90KB - Virtual size: 90KB

.data
Size: 2KB - Virtual size: 14KB

.rsrc
Size: 544KB - Virtual size: 544KB

.reloc
Size: 58KB - Virtual size: 57KB