ee2d5493690d26cb213f9cebca336680ac8215fdf1f33baa6fa6d8ed9803a40f

Sharing

Copy URL

Twitter E-mail

General

Target

ee2d5493690d26cb213f9cebca336680ac8215fdf1f33baa6fa6d8ed9803a40f
Size

3.2MB
MD5

f4fc2ffcae1f7ca991858761fffad316
SHA1

99f492df73367244d37fbcf00fe66dc3f8723347
SHA256

ee2d5493690d26cb213f9cebca336680ac8215fdf1f33baa6fa6d8ed9803a40f
SHA512

9854abfc5c7319f1d48088fc819e2a0239c497825d37de8ecd3619e9dc0a10a60b135e5cf6643079878d4e47db7302e7af8fe86ffced2bc451ec8e7360e2e4ae
SSDEEP

49152:Z4vRsZXxdwzKUCamJg14AjJ/txzJgVKTU+ATbOEJa9YEYjIlKpk887iwvq3Y:Z4vm9zswaL14AjJrlrwO9eXwEY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee2d5493690d26cb213f9cebca336680ac8215fdf1f33baa6fa6d8ed9803a40f

Files

ee2d5493690d26cb213f9cebca336680ac8215fdf1f33baa6fa6d8ed9803a40f
.exe windows x86

0be8dbae4f490c4ecbf60a52d10fb656

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

_TrackMouseEvent
InitCommonControlsEx

kernel32

SetEvent
OpenFileMappingW
OpenEventW
InitializeCriticalSection
LeaveCriticalSection
ExpandEnvironmentStringsW
EnterCriticalSection
SetLastError
GlobalReAlloc
FreeResource
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetCurrentThreadId
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
lstrcpynW
UnmapViewOfFile
MapViewOfFile
GetFileInformationByHandle
SystemTimeToFileTime
GetLocalTime
FileTimeToSystemTime
DecodePointer
RaiseException
FormatMessageW
GetACP
GetTempPathW
CopyFileW
CreateDirectoryW
CreateMutexW
FreeLibrary
GetVersionExW
GetUserDefaultUILanguage
GetLocaleInfoW
GetFileSize
LoadLibraryExW
OutputDebugStringW
LoadLibraryW
GlobalMemoryStatusEx
GetSystemInfo
GetDiskFreeSpaceExW
GetDriveTypeW
GetLogicalDrives
GetCurrentDirectoryW
GetFullPathNameW
FindClose
FindNextFileW
FindFirstFileW
GetFileAttributesExW
GetCurrentProcess
MultiByteToWideChar
WideCharToMultiByte
ReadFile
SetFilePointer
WriteFile
GetTickCount
CloseHandle
DeviceIoControl
CreateFileW
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
Sleep
DeleteFileW
GetFileAttributesW
GetModuleHandleW
GetProcAddress
GetPrivateProfileSectionW
GetPrivateProfileIntW
GetPrivateProfileStringW
GetCommandLineW
GetModuleFileNameW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetCurrentProcessId
CreateTimerQueue
UnregisterWaitEx
QueryDepthSList
InterlockedPopEntrySList
ReleaseSemaphore
VirtualFree
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SwitchToThread
SignalObjectAndWait
WriteConsoleW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
FindFirstFileExW
GetTimeZoneInformation
GetConsoleCP
ReadConsoleW
GetConsoleMode
SetFilePointerEx
GetStdHandle
ExitProcess
GetFileType
SetStdHandle
VirtualQuery
VirtualAlloc
GetCommandLineA
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
HeapQueryInformation
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
GetCPInfo
GetStringTypeW
LCMapStringW
QueryPerformanceFrequency
TryEnterCriticalSection
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
SearchPathW
GetProfileIntW
GetTempFileNameW
VerifyVersionInfoW
VerSetConditionMask
GetWindowsDirectoryW
lstrcpyW
VirtualProtect
GlobalFindAtomW
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
FileTimeToLocalFileTime
lstrcmpiW
GetLastError
GlobalDeleteAtom
GetCurrentThread
ResumeThread
GlobalSize
LocalFree
MulDiv
OutputDebugStringA
GetModuleHandleA
GlobalHandle
LocalAlloc
LocalReAlloc
lstrcmpA
GlobalGetAtomNameW
GlobalAddAtomW
FlushFileBuffers
GetVolumeInformationW
LockFile
SetEndOfFile
UnlockFile
DuplicateHandle
LoadLibraryA
EncodePointer
GetSystemDirectoryW
CompareStringW
GlobalFlags
lstrcmpW
WaitForSingleObject
CreateEventW
SetThreadPriority

user32

SendMessageW
PostQuitMessage
MessageBoxW
GetDesktopWindow
GetWindowLongW
CallWindowProcW
LoadImageW
SetRect
UpdateWindow
ShowWindow
GetMenuStringW
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
AppendMenuW
RemoveMenu
GetSysColor
GetSysColorBrush
IsWindowEnabled
GetLastActivePopup
GetWindowTextLengthW
DestroyIcon
GetDlgCtrlID
GetFocus
SetWindowTextW
RealChildWindowFromPoint
ValidateRect
SetScrollPos
GetScrollPos
MoveWindow
CheckDlgButton
IsDialogMessageW
IsIconic
SetForegroundWindow
CheckMenuItem
EnableMenuItem
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadBitmapW
GetMessagePos
GetMessageTime
RegisterClassW
IsMenu
IsChild
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetMenu
SetMenu
TrackPopupMenu
SetActiveWindow
GetForegroundWindow
ScrollWindow
SetScrollRange
GetScrollRange
ShowScrollBar
SetPropW
GetPropW
RemovePropW
AdjustWindowRectEx
GetClassLongW
GetTopWindow
LoadIconW
SetScrollInfo
GetScrollInfo
WinHelpW
DispatchMessageW
GrayStringW
TabbedTextOutW
GetWindowDC
CopyImage
ShowOwnedPopups
DeleteMenu
CreateDialogIndirectParamW
EndDialog
GetNextDlgTabItem
DestroyMenu
GetMenuItemInfoW
SendDlgItemMessageA
SetRectEmpty
GetAsyncKeyState
MapDialogRect
TrackMouseEvent
CreatePopupMenu
GetMenuDefaultItem
GetNextDlgGroupItem
GetIconInfo
MessageBeep
EnableScrollBar
InvertRect
NotifyWinEvent
MapVirtualKeyW
GetKeyNameTextW
LoadMenuW
SetLayeredWindowAttributes
EnumDisplayMonitors
SetClassLongW
SetParent
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
DrawEdge
DrawFrameControl
BringWindowToTop
SetCursorPos
CopyIcon
FrameRect
DrawIcon
MonitorFromPoint
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
PostThreadMessageW
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
IsClipboardFormatAvailable
GetUpdateRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SubtractRect
CreateMenu
GetWindowRgn
DestroyCursor
TranslateMessage
GetMessageW
EnumDisplaySettingsW
MonitorFromWindow
DrawTextExW
GetMonitorInfoW
CreateWindowExA
RegisterClassExA
DefWindowProcW
IsWindow
CallNextHookEx
GetClassInfoW
DestroyWindow
ReleaseDC
GetDC
wsprintfW
SetMenuItemBitmaps
GetWindowThreadProcessId
CharUpperW
FindWindowA
DrawTextW
FillRect
MapWindowPoints
GetWindow
PeekMessageW
InflateRect
DrawFocusRect
GetParent
SetWindowPos
PostMessageW
EnableWindow
SystemParametersInfoW
IsZoomed
SetWindowRgn
GetActiveWindow
RedrawWindow
GetWindowTextW
GetSystemMenu
GetMenuState
DrawIconEx
GetSystemMetrics
GetClassInfoExW
GetClassNameW
GetCursorPos
ScreenToClient
WindowFromPoint
ClientToScreen
SetFocus
SendMessageTimeoutW
SetCursor
HideCaret
EndPaint
GetWindowRect
IsWindowVisible
FindWindowExW
UpdateLayeredWindow
BeginPaint
IsRectEmpty
InvalidateRect
UnionRect
RegisterWindowMessageW
EqualRect
CopyRect
GetClientRect
KillTimer
SetTimer
GetKeyState
GetCapture
ReleaseCapture
SetCapture
IntersectRect
OffsetRect
PtInRect
RegisterClassExW
LoadCursorW
GetDlgItem
SetWindowLongW
UnhookWindowsHookEx
CreateWindowExW
SetWindowsHookExW

gdi32

GetWindowExtEx
IntersectClipRect
PtVisible
RectVisible
RestoreDC
GetViewportExtEx
GetPixel
GetObjectType
Escape
CreatePatternBrush
SetTextColor
CreateSolidBrush
GetObjectA
CombineRgn
ExtCreateRegion
StretchBlt
GetObjectW
Rectangle
LineTo
MoveToEx
ExtTextOutW
SetBkColor
CreateRectRgn
ExcludeClipRect
BitBlt
CreateCompatibleBitmap
GetClipBox
RoundRect
CreatePen
GetTextExtentPoint32W
SetBkMode
GetStockObject
DeleteDC
SelectObject
CreateHatchBrush
CreateCompatibleDC
DeleteObject
CreateFontIndirectW
GetDeviceCaps
SetPixelFormat
ChoosePixelFormat
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
TextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
PatBlt
SetRectRgn
DPtoLP
GetTextMetricsW
EnumFontFamiliesExW
CreatePalette
CreateBitmap
CreateDCW
CopyMetaFileW
CreateDIBSection
GetTextFaceW
GetViewportOrgEx
GetWindowOrgEx
SetPixelV
SetPaletteEntries
ExtFloodFill
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
OffsetRgn
GetRgnBox
LPtoDP
CreateRoundRectRgn
Polyline
Polygon
CreatePolygonRgn
GetTextColor
Ellipse
CreateEllipticRgn
SetDIBColorTable
SetPixel
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
GetBkColor
RealizePalette
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex

advapi32

RegEnumKeyExW
RegSetValueExW
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shell32

SHCreateDirectoryExW
SHGetFolderPathW
SHGetPathFromIDListW
DragFinish
SHGetFileInfoW
CommandLineToArgvW
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHBrowseForFolderW
SHAppBarMessage
ShellExecuteW
DragQueryFileW

ole32

OleDestroyMenuDescriptor
OleTranslateAccelerator
OleCreateMenuDescriptor
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CoInitializeEx
CoInitialize
CoUninitialize
CoCreateInstance
CoDisconnectObject
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
IsAccelerator
CreateStreamOnHGlobal

msimg32

TransparentBlt
AlphaBlend

shlwapi

PathRemoveFileSpecW
StrFormatByteSizeW
PathCombineW
PathAppendW
PathFindFileNameW
PathIsUNCW
PathFileExistsW
PathStripToRootW
PathFindExtensionW
StrFormatKBSizeW

uxtheme

GetCurrentThemeName
GetThemePartSize
GetThemeSysColor
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
IsThemeBackgroundPartiallyTransparent
GetWindowTheme
IsAppThemed

opengl32

wglDeleteContext
wglGetProcAddress
glGetString
wglMakeCurrent
wglCreateContext

netapi32

NetApiBufferFree
NetWkstaGetInfo

gdiplus

GdipGetImageHeight
GdipDisposeImage
GdipCreateFromHDC
GdipGetImageWidth
GdipAlloc
GdipFree
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageRectI
GdipDrawImageRectRectI
GdipCloneImage
GdipGetImagePixelFormat
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipGetImagePaletteSize
GdipGetImagePalette
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipMeasureString
GdipDrawString
GdipSetTextRenderingHint
GdipSetStringFormatTrimming
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipDeleteStringFormat
GdipCreateStringFormat
GdipCreateSolidFill
GdipDeleteBrush
GdipBitmapUnlockBits
GdiplusStartup
GdipBitmapLockBits
GdipCloneBitmapAreaI
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromScan0
GdiplusShutdown

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

oleaut32

VarBstrFromDate
VariantChangeType
VariantCopy
VariantClear
SysAllocString
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocStringLen
LoadTypeLi
SysFreeString
VariantInit

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 412KB - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.giats
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 317KB - Virtual size: 317KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 700KB - Virtual size: 704KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0be8dbae4f490c4ecbf60a52d10fb656

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

advapi32

shell32

ole32

msimg32

shlwapi

uxtheme

opengl32

netapi32

gdiplus

oleacc

imm32

winmm

winspool.drv

oleaut32

Sections

.text Size: 1.7MB - Virtual size: 1.7MB

.rdata Size: 412KB - Virtual size: 412KB

.data Size: 28KB - Virtual size: 57KB

.gfids Size: 106KB - Virtual size: 105KB

.giats Size: 512B - Virtual size: 16B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 317KB - Virtual size: 317KB

.reloc Size: 700KB - Virtual size: 704KB

.text
Size: 1.7MB - Virtual size: 1.7MB

.rdata
Size: 412KB - Virtual size: 412KB

.data
Size: 28KB - Virtual size: 57KB

.gfids
Size: 106KB - Virtual size: 105KB

.giats
Size: 512B - Virtual size: 16B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 317KB - Virtual size: 317KB

.reloc
Size: 700KB - Virtual size: 704KB