f8ebd35c272b06f6d472aaa215f20425296aa13db475667b55919ed688b39f69

Sharing

Copy URL Twitter E-mail

General

Target

f8ebd35c272b06f6d472aaa215f20425296aa13db475667b55919ed688b39f69
Size

2.9MB
MD5

d8a21314c189773f72e969cee1e524c0
SHA1

c40dcfd4f06373a2da3603d3810efe535c40f388
SHA256

f8ebd35c272b06f6d472aaa215f20425296aa13db475667b55919ed688b39f69
SHA512

7aa2f540abdab580480719e346c04fb27900f5db817b47019dba2b299262080de6645cd92434f8600779085913fee32070f6fe93e36acc89a446b94305acf1bb
SSDEEP

49152:Na+lJza70xVqsMvFvQHqrczfouIDamJYiWHOcGblPPsnJN2aPczQVrxAb/Gg/G:hlJza7EqsMtvOMczAuIamJdWHOcGx8JK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8ebd35c272b06f6d472aaa215f20425296aa13db475667b55919ed688b39f69

Files

f8ebd35c272b06f6d472aaa215f20425296aa13db475667b55919ed688b39f69
.exe windows x86

08cd5595f59ce7caed7281e6185c5216

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileStringA
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
GetPrivateProfileStringA
SetFilePointer
FindClose
FindFirstFileA
GetSystemInfo
CloseHandle
GetLastError
CreateFileA
GetCurrentDirectoryA
SystemTimeToFileTime
ReadFile
GetFileInformationByHandle
GetDriveTypeA
lstrcpyA
lstrlenW
GlobalUnlock
GlobalLock
GlobalSize
CopyFileA
FreeResource
FindResourceA
lstrcmpW
LoadLibraryW
CompareStringA
FreeLibrary
GetVersionExA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
CreateActCtxW
ReleaseActCtx
GetModuleFileNameW
SetThreadPriority
ResumeThread
WaitForSingleObject
lstrcmpA
GetCurrentProcessId
GetModuleHandleW
InterlockedExchange
GetLocaleInfoA
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetCurrentThread
FindNextFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetPrivateProfileIntA
GetThreadLocale
InterlockedIncrement
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GlobalFlags
GetACP
GetCPInfo
GetOEMCP
lstrcmpiA
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
GetFullPathNameA
GetFileAttributesExA
GetFileSizeEx
GetFileTime
GetWindowsDirectoryA
GetNumberFormatA
SetErrorMode
GetTempFileNameA
InitializeCriticalSectionAndSpinCount
GetProfileIntA
SearchPathA
VirtualProtect
FindResourceExW
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
EncodePointer
DecodePointer
ExitThread
ExitProcess
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapReAlloc
RtlUnwind
RaiseException
VirtualAlloc
VirtualQuery
SetStdHandle
GetFileType
HeapQueryInformation
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetConsoleCP
GetConsoleMode
IsProcessorFeaturePresent
IsValidCodePage
GetTimeZoneInformation
HeapCreate
GetStdHandle
GetStringTypeW
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetDriveTypeW
CompareStringW
WriteConsoleW
GetCurrentDirectoryW
GetProcessHeap
CreateFileW
SetEnvironmentVariableA
SleepEx
VerifyVersionInfoA
VerSetConditionMask
GetSystemDirectoryA
PeekNamedPipe
WaitForMultipleObjects
ExpandEnvironmentStringsA
lstrlenA
lstrcatA
LocalFileTimeToFileTime
GetFileAttributesA
CreateDirectoryA
WriteFile
SetFileTime
CreateThread
Sleep
ActivateActCtx
GetProcAddress
GetModuleHandleA
LoadLibraryA
DeactivateActCtx
SetLastError
FormatMessageA
LocalAlloc
LeaveCriticalSection
EnterCriticalSection
MultiByteToWideChar
LocalFree
InterlockedDecrement
GetModuleFileNameA
GetTickCount
GetTempPathA
InitializeCriticalSection
DeleteFileA
GlobalFree
GetCurrentThreadId
MulDiv
GlobalAlloc
FindFirstFileExA

user32

PostQuitMessage
MapDialogRect
SetWindowContextHelpId
GetKeyNameTextA
MapVirtualKeyA
ShowOwnedPopups
GetSysColorBrush
RealChildWindowFromPoint
UnregisterClassA
SetRectEmpty
InvalidateRect
IntersectRect
WindowFromPoint
LoadCursorW
WaitMessage
DeleteMenu
EnumDisplayMonitors
SetLayeredWindowAttributes
CharNextA
OffsetRect
CopyAcceleratorTableA
IsRectEmpty
SetRect
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
CharUpperA
DestroyIcon
GetMenuDefaultItem
CreatePopupMenu
GetAsyncKeyState
InvertRect
DrawFocusRect
HideCaret
EnableScrollBar
NotifyWinEvent
GetIconInfo
CopyImage
LoadImageA
DrawIconEx
TranslateAcceleratorA
BringWindowToTop
InsertMenuItemA
LoadAcceleratorsA
LoadMenuA
ReuseDDElParam
UnpackDDElParam
IsZoomed
SetWindowRgn
SetParent
DestroyAcceleratorTable
SetClassLongA
DrawStateA
DrawEdge
DrawFrameControl
ToAsciiEx
GetKeyboardLayout
GetKeyboardState
LoadAcceleratorsW
CreateAcceleratorTableA
SetCursorPos
LockWindowUpdate
RegisterClipboardFormatA
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
LoadImageW
IsCharLowerA
MapVirtualKeyExA
UnionRect
UpdateLayeredWindow
MonitorFromPoint
IsMenu
PostThreadMessageA
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
CreateMenu
FrameRect
GetUpdateRect
EndPaint
CharUpperBuffA
GetDoubleClickTime
SubtractRect
DrawTextA
DestroyCursor
GetWindowRgn
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
PtInRect
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
GetWindow
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetMenuState
GetMenuStringA
InsertMenuA
GetMenuItemCount
RemoveMenu
TabbedTextOutA
FillRect
GetWindowThreadProcessId
GetMessageA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
TranslateMessage
ValidateRect
SystemParametersInfoA
DestroyMenu
GetMenuItemInfoA
InflateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
CheckDlgButton
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
BeginPaint
GetWindowDC
ReleaseDC
GetDC
GrayStringA
CopyIcon
DrawTextExA
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
IsWindowVisible
UpdateWindow
CreateWindowExA
ModifyMenuA
CheckMenuItem
LoadBitmapW
MessageBoxA
EnableMenuItem
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
IsWindow
AppendMenuA
GetSystemMenu
ReleaseCapture
SetCapture
RedrawWindow
GetParent
GetWindowRect
ClientToScreen
ScreenToClient
LoadCursorA
SetCursor
wsprintfA
SendMessageA
GetMenuItemID
PostMessageA
TrackPopupMenu
SetForegroundWindow
GetCursorPos
SetMenuDefaultItem
GetSubMenu
LoadMenuW
KillTimer
SetTimer
LoadIconW
LoadIconA
EnableWindow
IsClipboardFormatAvailable
GetClassInfoExA

gdi32

SetTextColor
SetBkColor
GetObjectA
CreateBitmap
CreateFontIndirectA
CreateCompatibleDC
BitBlt
ExtTextOutA
GetTextExtentPoint32A
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
GetTextFaceA
SetPixelV
SetPaletteEntries
ExtFloodFill
GetBoundsRect
FrameRgn
FillRgn
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
LPtoDP
EnumFontFamiliesExA
OffsetRgn
Rectangle
SetPixel
StretchBlt
CreateSolidBrush
SetDIBColorTable
Polygon
Ellipse
Polyline
CreateEllipticRgn
CreatePolygonRgn
CreateRoundRectRgn
CreateDCA
GetSystemPaletteEntries
RealizePalette
GetNearestPaletteIndex
GetPaletteEntries
CreatePalette
GetRgnBox
GetTextColor
GetBkColor
GetTextCharsetInfo
EnumFontFamiliesA
CreateDIBitmap
DPtoLP
GetMapMode
MoveToEx
SetTextAlign
GetLayout
SetLayout
CopyMetaFileA
DeleteObject
CombineRgn
SetRectRgn
CreateCompatibleBitmap
GetTextMetricsA
PatBlt
CreateRectRgnIndirect
CreateHatchBrush
CreatePen
GetObjectType
SelectPalette
GetStockObject
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutA
RectVisible
PtVisible
GetPixel
GetWindowExtEx
CreateDIBSection
GetDeviceCaps
GetViewportExtEx
CreateRectRgn
SelectClipRgn

shell32

SHAppBarMessage
SHBrowseForFolderA
DragQueryFileA
DragFinish
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetDesktopFolder
SHGetFileInfoA
ShellExecuteA

ole32

OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CoRegisterMessageFilter
CoRevokeClassObject
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CreateStreamOnHGlobal
CoInitializeEx
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
OleInitialize
CoGetClassObject
CoInitialize
CoUninitialize
CoCreateGuid
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree

oleaut32

VariantTimeToSystemTime
SystemTimeToVariantTime
VariantClear
VariantInit
VariantCopy
SysAllocString
VariantChangeType
SysAllocStringByteLen
SysFreeString
VarBstrFromDate
SysStringLen
SafeArrayDestroy
SysAllocStringLen
OleCreateFontIndirect

msimg32

TransparentBlt
AlphaBlend

comctl32

ImageList_GetIconSize

shlwapi

PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW

oledlg

ord8

ws2_32

WSAIoctl
listen
bind
WSAStartup
getpeername
ntohs
closesocket
gethostname
ioctlsocket
accept
recvfrom
sendto
getaddrinfo
freeaddrinfo
connect
socket
getsockopt
getsockname
setsockopt
send
recv
select
__WSAFDIsSet
WSASetLastError
WSACleanup
htonl
htons
WSAGetLastError
ntohl

wldap32

ord200
ord32
ord35
ord79
ord33
ord301
ord27
ord41
ord46
ord26
ord50
ord60
ord143
ord211
ord22
ord30

crypt32

CertFreeCertificateContext

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

gdiplus

GdipDrawImageI
GdipGetImageGraphicsContext
GdipFree
GdipAlloc
GdipDeleteGraphics
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromStream
GdipBitmapUnlockBits
GdipCreateBitmapFromScan0
GdipBitmapLockBits

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

comdlg32

GetFileTitleA

advapi32

CryptGenRandom
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegEnumValueA
RegEnumKeyExA
CryptReleaseContext
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptGetHashParam
CryptDestroyKey
CryptEncrypt
CryptImportKey
RegCloseKey

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 319KB - Virtual size: 319KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

08cd5595f59ce7caed7281e6185c5216

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

oleaut32

msimg32

comctl32

shlwapi

oledlg

ws2_32

wldap32

crypt32

oleacc

gdiplus

imm32

winmm

winspool.drv

comdlg32

advapi32

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 319KB - Virtual size: 319KB

.data Size: 25KB - Virtual size: 55KB

.rsrc Size: 1.1MB - Virtual size: 1.1MB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 319KB - Virtual size: 319KB

.data
Size: 25KB - Virtual size: 55KB

.rsrc
Size: 1.1MB - Virtual size: 1.1MB