35a33c7e233c94eaad4b3ef6d3ef6e324b1709835538dfdb7703a70cafe4e429

Sharing

Copy URL

Twitter E-mail

General

Target

35a33c7e233c94eaad4b3ef6d3ef6e324b1709835538dfdb7703a70cafe4e429
Size

4.2MB
MD5

46da5faa92d8521293788dfbd180f349
SHA1

2c82c0daaec98101beaac4e3a9e356bd610a0084
SHA256

35a33c7e233c94eaad4b3ef6d3ef6e324b1709835538dfdb7703a70cafe4e429
SHA512

41acf74f55f936a9fee0e203fbb62545af57643cc60311242f7d9ebb34692c97aaa1751b284e6227e4678faf65073c87840d9e2dbddc71443daa41cab6a5c71e
SSDEEP

49152:3FBpwz5V0V9EUT3gobUKTQURr8cnqrcvLDd4gf1TV0qgsHDh8Tu2Emkp+cI9cRxy:3FE0VRoKTQynd5OZsHD1mgI9cR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35a33c7e233c94eaad4b3ef6d3ef6e324b1709835538dfdb7703a70cafe4e429

Files

35a33c7e233c94eaad4b3ef6d3ef6e324b1709835538dfdb7703a70cafe4e429
.exe windows x86

7400cf4f037d5f3659de57bca92e78f4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
VirtualQuery
OutputDebugStringW
RtlUnwind
GetModuleHandleExW
HeapValidate
GetSystemInfo
VirtualAlloc
CreateThread
ExitThread
FreeLibraryAndExitThread
HeapQueryInformation
GetCommandLineA
GetCommandLineW
GetStdHandle
GetFileType
WriteConsoleW
QueryPerformanceFrequency
SetStdHandle
ExitProcess
CompareStringW
LCMapStringW
GetTimeZoneInformation
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
CreateFileW
Sleep
SearchPathA
GetTickCount
GetTempPathA
GetTempFileNameA
VerifyVersionInfoA
VerSetConditionMask
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesA
FileTimeToLocalFileTime
GetWindowsDirectoryA
GetCurrentDirectoryA
GetVolumeInformationA
GetCurrentProcess
GetHandleInformation
DuplicateHandle
UnlockFile
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
FindFirstFileA
FindClose
FindResourceExW
GetACP
GetCPInfo
GetOEMCP
GetUserDefaultUILanguage
GlobalFlags
WaitForSingleObject
FileTimeToSystemTime
VirtualProtect
GetProfileIntA
GetVersionExA
ResumeThread
SetThreadPriority
CompareStringA
GlobalFindAtomA
GlobalAddAtomA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
FreeResource
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
LoadLibraryA
lstrcmpA
CopyFileA
FormatMessageA
MulDiv
GlobalSize
GetModuleFileNameA
GetCurrentProcessId
LocalFree
LocalReAlloc
LocalAlloc
GlobalUnlock
GlobalHandle
GlobalLock
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetAtomNameA
GlobalGetAtomNameA
WideCharToMultiByte
FindResourceW
MultiByteToWideChar
LoadLibraryW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
HeapSize
HeapReAlloc
GetLastError
RaiseException
DecodePointer
OutputDebugStringA
SetFilePointer
CreateProcessA
lstrcmpiA
GetProcessHeap
HeapAlloc
LoadResource
CloseHandle
GlobalFree
lstrcpyA
GlobalAlloc
LockResource
CreateFileA
lstrlenA
FindResourceA
InitializeCriticalSectionEx
WriteFile
SetLastError
HeapFree
GetFileAttributesExA
SizeofResource

user32

LoadAcceleratorsA
TranslateAcceleratorA
DestroyMenu
IntersectRect
DestroyIcon
LoadImageA
UnpackDDElParam
ReuseDDElParam
GetKeyNameTextA
MapVirtualKeyA
SystemParametersInfoA
TranslateMessage
RealChildWindowFromPoint
CopyImage
GetClipboardFormatNameA
IsRectEmpty
UnionRect
CharUpperA
TrackMouseEvent
LoadImageW
LoadAcceleratorsW
DrawIconEx
GetIconInfo
MessageBeep
SetLayeredWindowAttributes
EnumDisplayMonitors
SetClassLongA
CloseClipboard
SetClipboardData
EmptyClipboard
SetCursorPos
CopyIcon
UpdateLayeredWindow
MonitorFromPoint
GetComboBoxInfo
WaitMessage
GetKeyboardLayout
IsCharLowerA
MapVirtualKeyExA
GetKeyboardState
ToAsciiEx
CreateAcceleratorTableA
DestroyAcceleratorTable
CopyAcceleratorTableA
GetDoubleClickTime
RegisterClipboardFormatA
CharUpperBuffA
IsClipboardFormatAvailable
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
SubtractRect
DestroyCursor
ShowWindow
NotifyWinEvent
LoadCursorW
LoadCursorA
SetParent
GetDesktopWindow
WindowFromPoint
HideCaret
EnableScrollBar
ShowScrollBar
LockWindowUpdate
RedrawWindow
ValidateRect
InvalidateRect
GetWindowRgn
SetWindowRgn
GetUpdateRect
SetForegroundWindow
GetForegroundWindow
UpdateWindow
GetSystemMenu
DrawMenuBar
KillTimer
SetTimer
SetCapture
GetActiveWindow
OpenClipboard
GetNextDlgTabItem
GetNextDlgGroupItem
IsZoomed
BringWindowToTop
IsIconic
IsWindowVisible
ShowOwnedPopups
PostThreadMessageA
GetMonitorInfoA
MonitorFromWindow
GetAsyncKeyState
GetScrollInfo
SetScrollInfo
LoadIconW
LoadIconA
CallNextHookEx
SetWindowsHookExA
GetWindow
GetTopWindow
GetClassNameA
GetClassLongA
SetWindowLongA
PtInRect
EqualRect
MapWindowPoints
AdjustWindowRectEx
GetWindowRect
GetClientRect
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
SetFocus
GetDlgCtrlID
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
DispatchMessageA
RegisterWindowMessageA
GetMenuCheckMarkDimensions
GetFocus
CopyRect
GetSysColor
ScreenToClient
ClientToScreen
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
GetDC
LoadBitmapW
InvertRect
FrameRect
FillRect
DrawFocusRect
GetSysColorBrush
DrawStateA
GrayStringA
DrawTextExA
DrawTextA
DrawIcon
SetMenuDefaultItem
GetMenuDefaultItem
SetMenuItemInfoA
GetMenuItemInfoA
InsertMenuItemA
SetMenuItemBitmaps
DeleteMenu
ModifyMenuA
EnableMenuItem
CheckMenuItem
CreatePopupMenu
CreateMenu
LoadMenuW
LoadMenuA
DrawFrameControl
DrawEdge
RemoveMenu
AppendMenuA
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringA
IsMenu
GetLastActivePopup
GetWindowThreadProcessId
GetParent
GetWindowLongA
MessageBoxA
IsWindowEnabled
EnableWindow
UnhookWindowsHookEx
MapDialogRect
TabbedTextOutA
IsWindow
PostMessageA
SendMessageA
PostQuitMessage
PeekMessageA
EndDialog
InflateRect
SetCursor
ReleaseCapture
GetMessageA
SetRectEmpty
GetSystemMetrics
OffsetRect
GetCursorPos
SetRect
CreateDialogIndirectParamA
IsDialogMessageA
SetWindowTextA
SendDlgItemMessageA
CheckDlgButton
WinHelpA
MoveWindow

advapi32

RegCreateKeyA
RegCloseKey
RegDeleteKeyA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA

shell32

DragFinish
SHGetFileInfoA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetDesktopFolder
ShellExecuteA
SHBrowseForFolderA
SHAppBarMessage
SHGetSpecialFolderPathA
DragQueryFileA

ole32

RegisterDragDrop
RevokeDragDrop
OleGetClipboard
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
DoDragDrop
CreateStreamOnHGlobal
CoDisconnectObject
CoCreateInstance
CoInitializeEx
ReleaseStgMedium
OleDuplicateData
CoLockObjectExternal
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CoInitialize
CoCreateGuid
CoUninitialize
OleLockRunning

msimg32

AlphaBlend
TransparentBlt

shlwapi

PathIsUNCA
PathRemoveFileSpecW
PathFindFileNameA
PathFindExtensionA
PathStripToRootA
StrFormatKBSizeA

uxtheme

GetWindowTheme
GetCurrentThemeName
GetThemeColor
DrawThemeText
DrawThemeParentBackground
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
DrawThemeBackground
CloseThemeData
OpenThemeData
IsAppThemed

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

gdiplus

GdipDrawImageI
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipSetInterpolationMode
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipDrawImageRectI
GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundA

gdi32

GetPixel
GetPaletteEntries
GetObjectType
GetNearestPaletteIndex
ExtTextOutA
CopyMetaFileA
GetDeviceCaps
BitBlt
CombineRgn
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateEllipticRgn
CreateFontIndirectA
CreateHatchBrush
CreatePalette
CreatePen
CreatePatternBrush
CreateRectRgn
CreateRectRgnIndirect
CreateRoundRectRgn
CreateSolidBrush
Ellipse
Escape
ExtFloodFill
FillRgn
FrameRgn
GetBkColor
GetBoundsRect
CreateDCA
SetDIBColorTable
CreateDIBSection
GetTextCharsetInfo
GetRgnBox
GetStockObject
EnumFontFamiliesA
CreateDIBitmap
GetSystemPaletteEntries
EnumFontFamiliesExA
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
GetTextColor
GetTextExtentPoint32A
GetViewportExtEx
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
OffsetRgn
PatBlt
PtInRegion
PtVisible
RectVisible
Rectangle
RealizePalette
RoundRect
SelectObject
SetPaletteEntries
SetPixel
SetPixelV
StretchBlt
SetRectRgn
GetTextMetricsA
GetObjectA
TextOutA
CreatePolygonRgn
DPtoLP
LPtoDP
Polygon
Polyline
GetTextFaceA
DeleteDC
DeleteObject
ExcludeClipRect
GetClipBox
IntersectClipRect
LineTo
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
MoveToEx
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

oleaut32

VariantChangeType
LoadTypeLi
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantInit
SysAllocStringLen
VariantClear
SysAllocStringByteLen
VariantCopy
VarBstrFromDate
SysAllocString
SysFreeString

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 412KB - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 569KB - Virtual size: 568KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7400cf4f037d5f3659de57bca92e78f4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

msimg32

shlwapi

uxtheme

oleacc

gdiplus

imm32

winmm

gdi32

winspool.drv

oleaut32

Sections

.text Size: 3.1MB - Virtual size: 3.1MB

.rdata Size: 412KB - Virtual size: 412KB

.data Size: 20KB - Virtual size: 47KB

.rsrc Size: 569KB - Virtual size: 568KB

.reloc Size: 177KB - Virtual size: 177KB

.text
Size: 3.1MB - Virtual size: 3.1MB

.rdata
Size: 412KB - Virtual size: 412KB

.data
Size: 20KB - Virtual size: 47KB

.rsrc
Size: 569KB - Virtual size: 568KB

.reloc
Size: 177KB - Virtual size: 177KB