f72bd6fffdf8b72b7fd395adb310d99c1d6ad3fa08cd6c42b802034141c3e423

Sharing

Copy URL Twitter E-mail

General

Target

f72bd6fffdf8b72b7fd395adb310d99c1d6ad3fa08cd6c42b802034141c3e423
Size

740KB
MD5

0b2aee41b99dc281882aa9712fa0cfb8
SHA1

b666d38968e647023fb5ed71e6677ebc8f2bf823
SHA256

f72bd6fffdf8b72b7fd395adb310d99c1d6ad3fa08cd6c42b802034141c3e423
SHA512

d93b84215b6e022f8e9f5f87cfbd7a3d879ee4f8d5dffddf6d28bb272477def097ffec48eb92dda0e0997619bddf5f32dba32921bf66bbd0cc6fe1cc2b752bf1
SSDEEP

12288:cbo3iOCNu82Cvc8EClUmeNfKp+/1VdMHZRub:I/5bDUmeNP4Rub

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f72bd6fffdf8b72b7fd395adb310d99c1d6ad3fa08cd6c42b802034141c3e423

Files

f72bd6fffdf8b72b7fd395adb310d99c1d6ad3fa08cd6c42b802034141c3e423
.exe windows x86

f5693e7e4dc1afcd81769184a814cade

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
lstrcmpiA
SetFileAttributesA
SetErrorMode
OpenEventA
GetSystemInfo
GlobalMemoryStatus
LoadLibraryW
FreeLibrary
WaitForMultipleObjects
TerminateProcess
DisconnectNamedPipe
GetTickCount
GlobalSize
GlobalLock
GlobalUnlock
GlobalFree
GetProcessHeap
HeapAlloc
HeapFree
GetLocalTime
GetSystemDirectoryA
CreateToolhelp32Snapshot
Process32First
Process32Next
GetCurrentProcess
SetLastError
GetModuleFileNameA
WriteFile
SetFilePointer
ReadFile
CreateFileA
GetFileSize
RemoveDirectoryA
LocalAlloc
FindFirstFileA
LocalReAlloc
FindNextFileA
LocalFree
FindClose
GetLogicalDriveStringsA
GetVolumeInformationA
GetDiskFreeSpaceExA
CreateProcessA
GetFileAttributesA
CreateDirectoryA
GetLastError
DeleteFileA
GetVersionExA
GetPrivateProfileStringA
lstrcmpA
WideCharToMultiByte
MultiByteToWideChar
GetWindowsDirectoryA
lstrcatA
GetPrivateProfileSectionNamesA
lstrlenA
lstrcpyA
CancelIo
InterlockedExchange
ResetEvent
Sleep
EnterCriticalSection
LeaveCriticalSection
LoadLibraryA
GetProcAddress
DeleteCriticalSection
InitializeCriticalSection
CreateThread
ResumeThread
CreateEventA
SetEvent
WaitForSingleObject
GetProfileStringA
GetLocaleInfoW
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetStdHandle
SetConsoleCtrlHandler
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetExitCodeProcess
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
TerminateThread
CloseHandle
HeapDestroy
GetEnvironmentVariableA
SetUnhandledExceptionFilter
FatalAppExitA
GetSystemTime
GetTimeZoneInformation
GetACP
HeapSize
HeapReAlloc
GetCommandLineA
GetStartupInfoA
GetCurrentThread
GlobalDeleteAtom
GlobalAlloc
SetThreadPriority
SuspendThread
LoadResource
FindResourceA
LockResource
GetModuleHandleA
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetVersion
InterlockedIncrement
InterlockedDecrement
MulDiv
lstrcpynA
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
TlsGetValue
GlobalFlags
GetPrivateProfileIntA
WritePrivateProfileStringA
GetCurrentDirectoryA
GetProcessVersion
SizeofResource
GetThreadLocale
GetCPInfo
GetOEMCP
DuplicateHandle
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
MoveFileA
GetFullPathNameA
GetStringTypeExA
GetShortPathNameA
lstrlenW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
FormatMessageA
CopyFileA
RtlUnwind
RaiseException
ExitProcess
ExitThread

user32

CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
GetDlgItem
DestroyWindow
CreateDialogIndirectParamA
SetActiveWindow
EndDialog
SetWindowContextHelpId
GetWindow
SetWindowPos
MapDialogRect
GetWindowRect
GetWindowPlacement
IntersectRect
OffsetRect
RegisterWindowMessageA
SetWindowLongA
SetForegroundWindow
GetMessagePos
GetMessageTime
DefWindowProcA
RemovePropA
CallWindowProcA
GetPropA
UnhookWindowsHookEx
SetPropA
GetClassLongA
GetDlgCtrlID
GetWindowTextLengthA
SetWindowPlacement
TrackPopupMenu
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
IsChild
GetTopWindow
GetWindowLongA
GetScrollPos
SetScrollRange
GetScrollRange
SetCursor
SetScrollInfo
GetScrollInfo
ScrollWindow
EndDeferWindowPos
CopyRect
BeginDeferWindowPos
DeferWindowPos
EqualRect
ScreenToClient
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
LoadIconA
CheckDlgButton
EnableMenuItem
GetDlgItemInt
GetDlgItemTextA
SetDlgItemInt
SetDlgItemTextA
IsDlgButtonChecked
ScrollWindowEx
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
CharToOemA
OemToCharA
LoadStringA
DestroyMenu
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
ReleaseCapture
WaitMessage
GetClassNameA
PtInRect
InsertMenuA
DeleteMenu
GetMenuStringA
GetSysColorBrush
GetDialogBaseUnits
CopyAcceleratorTableA
GetNextDlgGroupItem
MessageBeep
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
InvalidateRect
BringWindowToTop
CharUpperA
InflateRect
RegisterClipboardFormatA
RemoveMenu
UnregisterClassA
PostThreadMessageA
DestroyIcon
IsWindowUnicode
DefDlgProcA
DrawFocusRect
ExcludeUpdateRgn
ShowCaret
HideCaret
GetActiveWindow
CallNextHookEx
ValidateRect
DispatchMessageA
TranslateMessage
GetMessageA
wsprintfA
CharNextA
MessageBoxA
GetWindowTextA
EnumWindows
GetForegroundWindow
GetAsyncKeyState
GetNextDlgTabItem
GetFocus
PeekMessageA
SetWindowsHookExA
GetParent
ShowOwnedPopups
PostQuitMessage
GetLastActivePopup
CheckRadioButton
IsWindowEnabled
ShowScrollBar
SetScrollPos
wvsprintfA
IsWindow
CloseWindow
CreateWindowExA
PostMessageA
OpenDesktopA
GetThreadDesktop
GetUserObjectInformationA
OpenInputDesktop
SetThreadDesktop
CloseDesktop
IsWindowVisible
GetWindowThreadProcessId
ExitWindowsEx
GetProcessWindowStation
OpenWindowStationA
SetProcessWindowStation
GetCursorInfo
GetCursorPos
SetRect
GetDesktopWindow
GetDC
ReleaseDC
SystemParametersInfoA
DestroyCursor
LoadCursorA
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SetCursorPos
WindowFromPoint
SetCapture
mouse_event
MapVirtualKeyA
GetClientRect
IsIconic
DrawIcon
GetSystemMetrics
SendMessageA
GetSystemMenu
AppendMenuA
EnableWindow
GetKeyState

gdi32

SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SelectPalette
GetStockObject
RestoreDC
SaveDC
StartDocA
GetObjectA
SetBkColor
SetTextColor
SetViewportOrgEx
GetDCOrgEx
CreateBitmap
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
DeleteDC
CreateCompatibleDC
GetClipBox
OffsetViewportOrgEx
CreateDIBitmap
GetTextExtentPointA
CreateDCA
CopyMetaFileA
CreateRectRgnIndirect
CombineRgn
SetRectRgn
PatBlt
GetMapMode
LPtoDP
DPtoLP
GetBkColor
GetTextColor
CreateFontIndirectA
GetTextMetricsA
GetTextExtentPoint32A
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateDIBPatternBrushPt
CreatePatternBrush
CreateHatchBrush
CreateSolidBrush
ExtCreatePen
CreatePen
GetWindowExtEx
GetViewportExtEx
GetDeviceCaps
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
ExtSelectClipRgn
SelectClipPath
CreateRectRgn
GetClipRgn
PolyBezierTo
SetColorAdjustment
PolylineTo
PolyDraw
SetArcDirection
ArcTo
GetCurrentPositionEx
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
LineTo
MoveToEx
OffsetClipRgn
IntersectClipRect
DeleteObject
GetDIBits
CreateCompatibleBitmap
BitBlt
SelectObject
CreateDIBSection

msvfw32

ICSeqCompressFrame
ICSendMessage
ICOpen
ICClose
ICCompressorFree
ICSeqCompressFrameEnd
ICSeqCompressFrameStart

advapi32

OpenEventLogA
RegEnumKeyA
LsaClose
LsaRetrievePrivateData
LsaOpenPolicy
IsValidSid
LookupAccountNameA
LsaFreeMemory
RegCloseKey
RegQueryValueA
RegOpenKeyExA
CloseServiceHandle
DeleteService
ControlService
QueryServiceStatus
OpenServiceA
OpenSCManagerA
RegSetValueExA
RegCreateKeyA
RegQueryValueExA
GetTokenInformation
LookupAccountSidA
RegDeleteKeyA
RegEnumKeyExA
RegEnumValueA
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegSetKeySecurity
FreeSid
RegDeleteValueA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCreateKeyExA
RegSetValueA
ClearEventLogA
CloseEventLog
SetEntriesInAclA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetNamedSecurityInfoA
RegOpenKeyA

shell32

SHGetSpecialFolderPathA
SHGetFileInfoA
DragAcceptFiles
DragFinish
DragQueryFileA
ExtractIconA

shlwapi

SHDeleteKeyA

winmm

waveOutReset
waveInClose
waveInUnprepareHeader
waveInReset
waveInStop
waveOutUnprepareHeader
waveOutGetNumDevs
waveOutOpen
waveOutPrepareHeader
waveInGetNumDevs
waveInOpen
waveOutWrite
waveOutClose
waveInStart
waveInAddBuffer
waveInPrepareHeader

ws2_32

WSAGetLastError
ioctlsocket
gethostname
recvfrom
sendto
listen
accept
getpeername
bind
getsockname
ntohs
inet_addr
__WSAFDIsSet
send
closesocket
socket
gethostbyname
htons
connect
setsockopt
WSAIoctl
WSACleanup
inet_ntoa
select
recv
WSAStartup

comctl32

ord17

oledlg

ord8

olepro32

ord253

wininet

InternetGetConnectedState

psapi

GetModuleFileNameExA

wtsapi32

WTSQuerySessionInformationA
WTSFreeMemory

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

ole32

OleSetClipboard
CoRevokeClassObject
CoRegisterClassObject
CoRegisterMessageFilter
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateBindCtx
OleFlushClipboard
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoDisconnectObject
OleRun
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleIsCurrentClipboard
OleDuplicateData
CreateStreamOnHGlobal
ReleaseStgMedium

oleaut32

SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCopy
VarBstrFromDate
VarDateFromStr
VarBstrFromCy
VarCyFromStr
SysStringByteLen
SysAllocStringByteLen
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocString
SysReAllocStringLen
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString
LoadTypeLi
SysStringLen
SafeArrayDestroyDescriptor

Exports

Exports

Feer

Sections

.text
Size: 520KB - Virtual size: 517KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

AAA
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f5693e7e4dc1afcd81769184a814cade

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msvfw32

advapi32

shell32

shlwapi

winmm

ws2_32

comctl32

oledlg

olepro32

wininet

psapi

wtsapi32

winspool.drv

comdlg32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 520KB - Virtual size: 517KB

AAA Size: 12KB - Virtual size: 9KB

.rdata Size: 68KB - Virtual size: 66KB

.data Size: 44KB - Virtual size: 62KB

.idata Size: 20KB - Virtual size: 19KB

.rsrc Size: 40KB - Virtual size: 39KB

.reloc Size: 32KB - Virtual size: 30KB

.text
Size: 520KB - Virtual size: 517KB

AAA
Size: 12KB - Virtual size: 9KB

.rdata
Size: 68KB - Virtual size: 66KB

.data
Size: 44KB - Virtual size: 62KB

.idata
Size: 20KB - Virtual size: 19KB

.rsrc
Size: 40KB - Virtual size: 39KB

.reloc
Size: 32KB - Virtual size: 30KB