a2057d0c7268f403a0da07da05ad6c40fc081f4ef498f33744cac1134a000b4b

Sharing

Copy URL Twitter E-mail

General

Target

a2057d0c7268f403a0da07da05ad6c40fc081f4ef498f33744cac1134a000b4b
Size

2.0MB
MD5

6cdeaa19056624a2e7d17ff8066dac35
SHA1

6eeacf225a9b0e37741eb0d4648c0e94a160934d
SHA256

a2057d0c7268f403a0da07da05ad6c40fc081f4ef498f33744cac1134a000b4b
SHA512

ce47b77f7a6fc6750bf381aff6c1cf2f96ebf137db2e0af2f7cf2e1f38c018caad77ee36113840d2a2767a5dd11e60e8359a6565950a4006e12387d11111e9d8
SSDEEP

49152:Ib/42v4FEqvVG0/yiqvsBJlzozOn3Y1QMwDlSesSOEKU9wcqsvhsnNqsk:kApEqvVG0/dqvmlzozOnKPwDlSesSOEz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2057d0c7268f403a0da07da05ad6c40fc081f4ef498f33744cac1134a000b4b

Files

a2057d0c7268f403a0da07da05ad6c40fc081f4ef498f33744cac1134a000b4b
.exe windows x86

3adfab1d22cfaac29b88d1aae3520bbc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
SetFilePointer
GetCurrentThreadId
GetSystemInfo
DeleteFileA
CreateFileA
GetDriveTypeW
SystemTimeToFileTime
FindFirstFileExA
GetDriveTypeA
GetFileInformationByHandle
ExpandEnvironmentStringsA
WaitForMultipleObjects
PeekNamedPipe
GetSystemDirectoryA
CreateFileW
VerifyVersionInfoA
SleepEx
SetEnvironmentVariableA
GetCurrentDirectoryW
GetProcessHeap
WriteConsoleW
CompareStringW
GetTimeZoneInformation
GetStringTypeW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapCreate
GetStartupInfoW
SetHandleCount
UnmapViewOfFile
CloseHandle
FindFirstFileA
FindClose
GetLastError
FreeConsole
GetTempPathA
GetTickCount
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
GetConsoleMode
GetConsoleCP
LCMapStringW
IsValidCodePage
GetStdHandle
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetFileType
SetStdHandle
HeapSize
HeapQueryInformation
CreateThread
ExitThread
HeapReAlloc
VirtualQuery
VirtualAlloc
HeapSetInformation
GetCommandLineA
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
RaiseException
ExitProcess
DecodePointer
EncodePointer
RtlUnwind
FindResourceExW
SearchPathA
VirtualProtect
Sleep
InitializeCriticalSectionAndSpinCount
GetNumberFormatA
GetWindowsDirectoryA
GetACP
GetOEMCP
GetCPInfo
GlobalFlags
GetFileSizeEx
GetFileAttributesExA
FileTimeToLocalFileTime
FileTimeToSystemTime
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
WaitForSingleObject
ResumeThread
SetThreadPriority
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
InterlockedExchange
lstrcmpA
GetModuleHandleW
GetCurrentProcessId
GetModuleFileNameW
ReleaseActCtx
FindResourceA
FreeResource
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
FreeLibrary
CompareStringA
LoadLibraryW
lstrcmpW
GetShortPathNameA
GetModuleFileNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
lstrcmpiA
GetThreadLocale
GetStringTypeExA
GetDiskFreeSpaceA
GetFullPathNameA
GetFileTime
ReplaceFileA
GlobalFree
CopyFileA
GlobalSize
FormatMessageA
LocalFree
lstrlenW
MultiByteToWideChar
lstrcpynA
MulDiv
GlobalAlloc
ActivateActCtx
DeactivateActCtx
SetLastError
GetProcAddress
GetModuleHandleA
LoadLibraryA
GetTempFileNameA
MoveFileA
GlobalLock
GlobalUnlock
WriteFile
SetFileTime
GetCurrentDirectoryA
GetFileAttributesA
CreateDirectoryA
LocalFileTimeToFileTime
lstrcpyA
lstrlenA
VerSetConditionMask
lstrcatA
SizeofResource

user32

TranslateMessage
ValidateRect
PostQuitMessage
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
UnpackDDElParam
ReuseDDElParam
LoadMenuA
LoadImageA
DestroyIcon
GetWindowThreadProcessId
InsertMenuItemA
CreatePopupMenu
IntersectRect
GetDesktopWindow
RedrawWindow
TranslateMDISysAccel
BringWindowToTop
GetActiveWindow
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
LoadCursorW
DestroyCursor
DestroyMenu
GetMenuItemInfoA
RegisterWindowMessageA
LoadIconW
LoadIconA
WinHelpA
GetCapture
GetClassLongA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
PeekMessageA
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
PostMessageA
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
PtInRect
SetWindowPlacement
GetWindowPlacement
DefWindowProcA
GetMenu
IsIconic
GetMessageA
CharUpperA
GetWindowTextLengthA
SetFocus
SetWindowPos
IsWindowEnabled
ShowWindow
MoveWindow
GetDlgCtrlID
SetWindowRgn
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
CheckDlgButton
GetWindow
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuA
EnableMenuItem
CheckMenuItem
DestroyWindow
IsChild
SetRectEmpty
GetFocus
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
RemoveMenu
GetClipboardData
EmptyClipboard
SetClipboardData
CopyAcceleratorTableA
CloseClipboard
GetKeyState
GetSubMenu
LoadMenuW
ClientToScreen
GetParent
EnableWindow
OpenClipboard
SetCapture
SetTimer
IsClipboardFormatAvailable
ReleaseCapture
GetCursorPos
LoadCursorA
SetCursor
IsWindow
EnableScrollBar
KillTimer
ScreenToClient
TranslateAcceleratorA
LoadAcceleratorsA
GetDlgItem
CreateCaret
ShowOwnedPopups
LoadAcceleratorsW
MapDialogRect
SetWindowContextHelpId
IsZoomed
GetKeyNameTextA
MapVirtualKeyA
IsRectEmpty
DeleteMenu
GetSystemMenu
SetParent
WindowFromPoint
EndDialog
GetNextDlgTabItem
GetAsyncKeyState
ShowCaret
HideCaret
SetCaretPos
UpdateWindow
DrawFocusRect
GetWindowTextA
InvalidateRect
FillRect
SetRect
CopyRect
CreateDialogIndirectParamA
SetCursorPos
GetSysColorBrush
RealChildWindowFromPoint
AdjustWindowRectEx
DrawIcon
wsprintfA
GetSystemMetrics
SystemParametersInfoA
ReleaseDC
GetDC
InflateRect
OffsetRect
IsWindowVisible
GetWindowRect
RemovePropA
SetWindowLongA
GetPropA
UnhookWindowsHookEx
CallWindowProcA
CallNextHookEx
SetPropA
GetWindowLongA
GetClassNameA
SetWindowsHookExA
GetSysColor
GetClientRect
CreateMenu
GetWindowRgn
FrameRect
SendMessageA
DrawStateA
SubtractRect
CharUpperBuffA
GetUpdateRect
GetDoubleClickTime
CopyIcon
SetMenuDefaultItem
MapVirtualKeyExA
IsCharLowerA
LoadImageW
RegisterClipboardFormatA
CreateAcceleratorTableA
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
DestroyAcceleratorTable
SetClassLongA
IsMenu
UpdateLayeredWindow
MonitorFromPoint
DrawFrameControl
DrawEdge
WaitMessage
DrawIconEx
CopyImage
GetIconInfo
NotifyWinEvent
InvertRect
GetMenuDefaultItem
LockWindowUpdate
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CharNextA
UnionRect
SetLayeredWindowAttributes
EnumDisplayMonitors
GetTabbedTextExtentW
SetWindowTextA
PostThreadMessageA

gdi32

CreateBitmap
SetTextColor
SetBkColor
ExtTextOutA
DPtoLP
StartDocA
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
GetViewportOrgEx
Rectangle
PatBlt
GetStockObject
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
DeleteObject
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
CreateDCA
CreatePatternBrush
SelectPalette
GetObjectType
CreateHatchBrush
GetTextMetricsA
GetCharWidthA
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
GetBkColor
CreateEllipticRgn
LPtoDP
Ellipse
CreateDIBSection
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextColor
GetTextAlign
GetTextFaceA
GetTextExtentPointA
GetTextExtentPoint32W
GetWindowOrgEx
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetRgnBox
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreatePolygonRgn
Polyline
Polygon
CreateRoundRectRgn
SetDIBColorTable
StretchBlt
OffsetRgn
EnumFontFamiliesExA
ExtFloodFill
SetPaletteEntries
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
SetPixelV
CopyMetaFileA
GetDeviceCaps
GetObjectA
CreateFontIndirectA
GetTextExtentPoint32A
RoundRect
CreateSolidBrush
CreatePen
SetPixel
GetPixel
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
ExtSelectClipRgn
DeleteDC
BitBlt

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA
GetJobA

advapi32

CryptImportKey
RegCloseKey
RegSetValueA
SetFileSecurityA
GetFileSecurityA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyExW
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegEnumValueA
RegEnumKeyExA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptGetHashParam
CryptDestroyKey
CryptEncrypt

shell32

SHAppBarMessage
SHGetFileInfoA
DragFinish
DragQueryFileA
SHAddToRecentDocs
ExtractIconA
SHBrowseForFolderA
ShellExecuteA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetDesktopFolder

comctl32

ImageList_GetIconSize
_TrackMouseEvent

shlwapi

PathIsUNCA
PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathRemoveFileSpecW

ole32

OleUninitialize
CoFreeUnusedLibraries
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleInitialize
OleLockRunning
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoInitialize
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
CoInitializeEx
CoUninitialize
CreateStreamOnHGlobal
CoCreateInstance
OleGetClipboard
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
CoRegisterMessageFilter
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
StringFromCLSID
CoTaskMemFree
CoRevokeClassObject

oleaut32

VariantCopy
SysStringLen
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
OleCreateFontIndirect
SysAllocString
SysAllocStringLen
VariantInit
VariantClear
VariantChangeType
SysFreeString
SysAllocStringByteLen

oledlg

ord8

wldap32

ord46
ord27
ord301
ord33
ord79
ord35
ord32
ord200
ord30
ord26
ord50
ord60
ord143
ord211
ord22
ord41

ws2_32

bind
ntohs
htons
setsockopt
WSAIoctl
send
recv
select
WSAGetLastError
__WSAFDIsSet
WSASetLastError
WSAStartup
WSACleanup
getsockopt
getpeername
closesocket
socket
connect
freeaddrinfo
getaddrinfo
sendto
recvfrom
accept
listen
ioctlsocket
gethostname
htonl
ntohl
getsockname

crypt32

CertFreeCertificateContext

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

gdiplus

GdipAlloc
GdipDrawImageI
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipFree
GdiplusShutdown

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 356KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3adfab1d22cfaac29b88d1aae3520bbc

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

wldap32

ws2_32

crypt32

oleacc

gdiplus

imm32

winmm

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 356KB - Virtual size: 356KB

.data Size: 27KB - Virtual size: 66KB

.rsrc Size: 126KB - Virtual size: 126KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 356KB - Virtual size: 356KB

.data
Size: 27KB - Virtual size: 66KB

.rsrc
Size: 126KB - Virtual size: 126KB