0f375e51bf046752ac859e5b2200fa2a8514b1250a29a0421ef999bc5599de23

Sharing

Copy URL Twitter E-mail

General

Target

0f375e51bf046752ac859e5b2200fa2a8514b1250a29a0421ef999bc5599de23
Size

616KB
MD5

1ff1db3d74df334e8a06cd36f726248a
SHA1

fae7d90246d7e94000653912b3198c7597cee6eb
SHA256

0f375e51bf046752ac859e5b2200fa2a8514b1250a29a0421ef999bc5599de23
SHA512

38b143f34b298383508141900675df3014cc9b89b27276e3db6f968b9fc9124cb89ab5b8017b4db1f0c79bba2e85667f15f80a1a8fbc85d7609b0714256b3f02
SSDEEP

12288:V5BrkRLiS4o1K7ZGIbuYtOatZElHwcYhvdYhvLzD:+iC1K7ZAarElQcuVuj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f375e51bf046752ac859e5b2200fa2a8514b1250a29a0421ef999bc5599de23

Files

0f375e51bf046752ac859e5b2200fa2a8514b1250a29a0421ef999bc5599de23
.exe windows x86

3417eb04efc2ad472335c5a8bdff4420

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsW
SHDeleteKeyW
PathIsRelativeW

kernel32

DosDateTimeToFileTime
SystemTimeToFileTime
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
FindClose
SetFilePointerEx
GetConsoleCP
FlushFileBuffers
ReadConsoleW
GetConsoleMode
GetStdHandle
GetModuleFileNameA
GetModuleHandleExW
GetCommandLineW
GetCommandLineA
LoadLibraryExW
GetFileType
DuplicateHandle
OutputDebugStringW
GetCPInfo
GetStringTypeW
LCMapStringW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
EncodePointer
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
MulDiv
ReadFile
GetFileSize
WriteFile
SetFileTime
RtlUnwind
SetFilePointer
CreateFileW
FreeResource
GetACP
LoadLibraryW
GetTickCount
CopyFileW
CreateThread
GetModuleHandleW
ExitProcess
GetProcAddress
GetCurrentDirectoryW
FindResourceW
LoadResource
FindResourceExW
LockResource
GetCurrentThread
MultiByteToWideChar
SetThreadPriority
TerminateProcess
GetCurrentProcess
SetPriorityClass
SizeofResource
CreateDirectoryW
SetEndOfFile
WideCharToMultiByte
GetLocalTime
GetTempPathW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetProcessHeap
DeleteCriticalSection
HeapDestroy
DecodePointer
HeapAlloc
RaiseException
CloseHandle
HeapReAlloc
GetLastError
HeapSize
CreateMutexW
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
HeapFree
SetStdHandle
WriteConsoleW
FreeLibrary

user32

HideCaret
SetRect
FillRect
ShowCaret
CharPrevW
GetWindowRgn
MoveWindow
SetWindowRgn
GetCaretPos
ClientToScreen
GetSysColor
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
CreateAcceleratorTableW
InvalidateRgn
DrawTextW
MessageBoxW
IsZoomed
GetMonitorInfoW
MonitorFromWindow
GetPropW
SetPropW
PostQuitMessage
KillTimer
SetTimer
ShowWindow
GetMessageW
TranslateMessage
DispatchMessageW
SendMessageW
PostMessageW
CreateWindowExW
IsWindow
DestroyWindow
UpdateLayeredWindow
SetWindowPos
IsIconic
SetFocus
GetFocus
GetKeyState
SetCapture
ReleaseCapture
GetDC
ReleaseDC
BeginPaint
EndPaint
GetUpdateRect
EnableWindow
GetClassInfoExW
RegisterClassExW
RegisterClassW
CallWindowProcW
DefWindowProcW
LoadCursorW
OffsetRect
SetCursor
CharNextW
GetWindow
GetParent
SetWindowLongW
GetWindowLongW
PtInRect
IsRectEmpty
UnionRect
IntersectRect
ScreenToClient
SetCaretPos
GetCaretBlinkTime
CreateCaret
GetCursorPos
GetWindowRect
GetClientRect
InvalidateRect

gdi32

CombineRgn
PtInRegion
CreateRectRgn
CreateRoundRectRgn
GetObjectW
CreateDIBSection
GetTextMetricsW
SelectObject
CreatePenIndirect
GetStockObject
DeleteObject
DeleteDC
CreatePen
CreateFontIndirectW
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
CreateRectRgnIndirect
CreateSolidBrush
GetCharABCWidthsW
GetClipBox
GetTextExtentPoint32W
LineTo
Rectangle
RoundRect
SelectClipRgn
ExtSelectClipRgn
SetBkColor
SetBkMode
StretchBlt
SetStretchBltMode
SetTextColor
MoveToEx
TextOutW
RestoreDC
SaveDC
GetDeviceCaps

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExW

shell32

SHGetSpecialFolderPathW
ShellExecuteW
SHFileOperationW
SHChangeNotify
ShellExecuteExW

ole32

CoUninitialize
CoInitialize
CLSIDFromProgID
OleLockRunning
CoCreateInstance
CLSIDFromString

imm32

ImmGetContext
ImmSetCompositionWindow
ImmReleaseContext

comctl32

ord17
_TrackMouseEvent

gdiplus

GdipSetStringFormatFlags
GdipCloneStringFormat
GdipDeleteStringFormat
GdipStringFormatGetGenericTypographic
GdipMeasureString
GdipDrawString
GdipDeleteFont
GdipCreateFontFromDC
GdipFillRectangleI
GdipSetInterpolationMode
GdipSetStringFormatAlign
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipFree
GdipAlloc
GdiplusShutdown
GdiplusStartup
GdipSetStringFormatLineAlign
GdipSetStringFormatTrimming
GdipSetTextRenderingHint

Sections

.text
Size: 330KB - Virtual size: 329KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3417eb04efc2ad472335c5a8bdff4420

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

user32

gdi32

advapi32

shell32

ole32

imm32

comctl32

gdiplus

Sections

.text Size: 330KB - Virtual size: 329KB

.rdata Size: 96KB - Virtual size: 95KB

.data Size: 6KB - Virtual size: 11KB

.tls Size: 512B - Virtual size: 9B

.gfids Size: 512B - Virtual size: 344B

.rsrc Size: 163KB - Virtual size: 162KB

.reloc Size: 19KB - Virtual size: 18KB

.text
Size: 330KB - Virtual size: 329KB

.rdata
Size: 96KB - Virtual size: 95KB

.data
Size: 6KB - Virtual size: 11KB

.tls
Size: 512B - Virtual size: 9B

.gfids
Size: 512B - Virtual size: 344B

.rsrc
Size: 163KB - Virtual size: 162KB

.reloc
Size: 19KB - Virtual size: 18KB