2a0f892cdaa9f3956cb586486ccf9ad47b2e6b724422304fc31bf406b4ff5579

Sharing

Copy URL

Twitter E-mail

General

Target

2a0f892cdaa9f3956cb586486ccf9ad47b2e6b724422304fc31bf406b4ff5579
Size

5.9MB
MD5

0cf260b6ca8a737596c2f23d76fad953
SHA1

445299c726c645cd4013035e4821679c1636158c
SHA256

2a0f892cdaa9f3956cb586486ccf9ad47b2e6b724422304fc31bf406b4ff5579
SHA512

85cb6e2b4f38fa1c6480a1266557df3e0cc4e0dd3c4a25ad675ec8d5584644f2c581a776c8ddfd1ff365f98ab2c30b6c5f2850795cef5dee1f761e6f6ba56d1f
SSDEEP

98304:rIh0G6rVFyk6YMIMK2pNau692c0qWGMSVt8GCjaryXFLOAkGkzdnEVomFHKnPc:EyZdHBMSVt8GC22XFLOyomFHKnPc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a0f892cdaa9f3956cb586486ccf9ad47b2e6b724422304fc31bf406b4ff5579

Files

2a0f892cdaa9f3956cb586486ccf9ad47b2e6b724422304fc31bf406b4ff5579
.exe windows x86

effb89001e75101f77b1299ec6f1270b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimeAsFileTime
GetLocalTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetExitCodeProcess
GenerateConsoleCtrlEvent
VirtualQuery
CopyFileW
CreateProcessW
SetCurrentDirectoryW
GetCurrentDirectoryW
GlobalFlags
GetFileAttributesExW
OpenProcess
GetVersionExW
GetFileAttributesW
FindClose
PeekNamedPipe
CreatePipe
GetModuleFileNameW
TerminateProcess
GetCurrentProcess
FindNextFileW
GetCommandLineW
FindFirstFileW
CreateDirectoryW
FreeLibrary
LoadLibraryW
ExitProcess
FreeResource
GlobalReAlloc
MulDiv
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
GlobalSize
MapViewOfFileEx
CreateFileMappingW
GetModuleHandleW
GetProcAddress
MultiByteToWideChar
UnmapViewOfFile
ResetEvent
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SizeofResource
Sleep
SwitchToThread
GetCurrentProcessId
GetCurrentThreadId
SetLastError
HeapCreate
SetWaitableTimer
CreateWaitableTimerW
WriteFile
ReadFile
GetFileSize
MoveFileW
CreateFileW
IsDebuggerPresent
ResumeThread
GetVolumeInformationW
GetTempPathW
GetSystemDirectoryW
GetWindowsDirectoryW
GetTickCount
ReleaseSemaphore
PostQueuedCompletionStatus
CreateEventW
CreateIoCompletionPort
GetSystemInfo
CreateThread
GetQueuedCompletionStatus
SetEvent
SetThreadPriority
WaitForSingleObject
CloseHandle
CreateSemaphoreW
DeleteFileW
TryEnterCriticalSection
InitializeCriticalSection
GetProcessHeap
DeleteCriticalSection
WriteConsoleW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetConsoleCP
SetFilePointerEx
GetStringTypeW
LCMapStringW
SetStdHandle
QueryPerformanceFrequency
VirtualAlloc
HeapQueryInformation
GetFileInformationByHandle
SetConsoleCtrlHandler
FreeLibraryAndExitThread
ExitThread
GetTimeZoneInformation
GetModuleHandleExW
GetCommandLineA
RtlUnwind
OutputDebugStringW
GetStartupInfoW
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
HeapDestroy
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetTempFileNameW
SetErrorMode
GetFileTime
GetFileSizeEx
SystemTimeToTzSpecificLocalTime
GetProfileIntW
SearchPathW
FindResourceExW
lstrcmpiW
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetFullPathNameW
FlushFileBuffers
VerifyVersionInfoW
VerSetConditionMask
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalGetAtomNameW
lstrcpyW
GetThreadLocale
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
CompareStringA
lstrcmpA
GetCurrentThread
LocalFree
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryA
LoadLibraryExW
GetModuleHandleA
EncodePointer
OutputDebugStringA
SystemTimeToFileTime
GetSystemTime
ReadConsoleW
ReadConsoleA
SetConsoleMode
GetConsoleMode
GetEnvironmentVariableW
ConvertFiberToThread
QueryPerformanceCounter
DeleteFiber
GetFileType
GetStdHandle
FormatMessageW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetLastError
HeapSize
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
GetDriveTypeW
EnterCriticalSection
HeapFree

user32

PeekMessageW
SendMessageW
EnableWindow
GetCursorPos
GetWindowThreadProcessId
MonitorFromWindow
SetActiveWindow
WaitForInputIdle
OpenClipboard
GetMonitorInfoW
CloseClipboard
EmptyClipboard
MoveWindow
SetClipboardData
TranslateMessage
CopyImage
GetWindowLongW
DispatchMessageW
UnregisterClassW
DefWindowProcW
PostMessageW
DestroyWindow
GetPropW
CreateWindowExW
RemovePropW
LoadStringW
GetActiveWindow
GetClassInfoW
SetTimer
RegisterClassW
SetPropW
LoadIconW
LoadCursorW
GetDesktopWindow
GetParent
LoadImageW
GetWindowRect
GetDC
GetSystemMetrics
GetWindowDC
GetClientRect
ReleaseDC
MsgWaitForMultipleObjects
CreateMenu
GetMessageW
MessageBoxW
AdjustWindowRectEx
SetForegroundWindow
ShowWindow
GetWindow
GetProcessWindowStation
GetUserObjectInformationW
RegisterWindowMessageW
GetMessagePos
GetMessageTime
GetClassInfoExW
IsMenu
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetDlgItem
GetMenuItemID
GetForegroundWindow
BeginPaint
EndPaint
ValidateRect
ScrollWindow
ShowScrollBar
GetWindowTextW
GetWindowTextLengthW
MapWindowPoints
EqualRect
GetClassLongW
GetLastActivePopup
SetScrollInfo
GetScrollInfo
GetMenuStringW
GetMenuState
RemoveMenu
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW
CheckDlgButton
SetWindowTextW
IsDialogMessageW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadMenuW
GetKeyNameTextW
MapVirtualKeyW
SystemParametersInfoW
RegisterClipboardFormatW
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
ShowOwnedPopups
CharNextW
CreateDialogIndirectParamW
EndDialog
DrawFocusRect
NotifyWinEvent
SendDlgItemMessageA
SetRectEmpty
GetMenuItemInfoW
InflateRect
MonitorFromPoint
GetSysColorBrush
RealChildWindowFromPoint
GetAsyncKeyState
BringWindowToTop
LoadAcceleratorsW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
SetLayeredWindowAttributes
EnumDisplayMonitors
DrawStateW
TrackMouseEvent
CharUpperW
PostThreadMessageW
WaitMessage
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
CopyAcceleratorTableW
EnumChildWindows
LockWindowUpdate
SetClassLongW
InvalidateRgn
GetNextDlgGroupItem
DrawEdge
DrawFrameControl
DrawIconEx
UnionRect
GetIconInfo
SetCursorPos
CharUpperBuffW
UpdateLayeredWindow
EnableScrollBar
GetMenuDefaultItem
SetMenuDefaultItem
CopyIcon
FrameRect
IsClipboardFormatAvailable
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsCharLowerW
MapVirtualKeyExW
SubtractRect
GetUpdateRect
AppendMenuW
HideCaret
InvertRect
GetDoubleClickTime
DestroyCursor
GetComboBoxInfo
GetWindowRgn
SetCursor
GetKeyState
InvalidateRect
EnableMenuItem
CheckMenuItem
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
DestroyIcon
IsZoomed
SetRect
GetSystemMenu
CallWindowProcW
GetFocus
IsWindowVisible
SetWindowPos
SetWindowRgn
FillRect
ScreenToClient
MessageBeep
WindowFromPoint
GetScrollPos
DrawIcon
OffsetRect
GetCapture
RedrawWindow
GetScrollRange
CopyRect
GetDlgCtrlID
ClientToScreen
IsChild
GetTopWindow
GetSysColor
IsWindowEnabled
SetMenu
WinHelpW
LoadBitmapW
IsRectEmpty
IntersectRect
SetFocus
GetClassNameW
SetParent
SetCapture
SetScrollRange
SetWindowLongW
KillTimer
SetScrollPos
PtInRect
UpdateWindow
ReleaseCapture
IsIconic
GetNextDlgTabItem
IsWindow
wsprintfW
ModifyMenuW
GetMenu
GetMenuItemCount
DeleteMenu
CreatePopupMenu
TrackPopupMenu
GetSubMenu
DestroyAcceleratorTable
CreateAcceleratorTableW
DestroyMenu
TranslateAcceleratorW
InsertMenuW

gdi32

RoundRect
GetTextExtentPoint32W
CreateFontIndirectW
BitBlt
CreateCompatibleBitmap
SelectObject
CreateDIBSection
SetDIBColorTable
CreateCompatibleDC
GdiAlphaBlend
StretchBlt
RealizePalette
GetStockObject
GetDIBits
GetDeviceCaps
GetSystemPaletteEntries
SelectPalette
CreatePalette
GetObjectW
SetStretchBltMode
DeleteObject
DeleteDC
Escape
ExcludeClipRect
GetClipBox
CreatePatternBrush
GetObjectType
GetViewportExtEx
IntersectClipRect
LineTo
CreateSolidBrush
PtVisible
RectVisible
RestoreDC
SaveDC
GetViewportOrgEx
ExtSelectClipRgn
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
SetWindowExtEx
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
CreateEllipticRgn
Ellipse
Rectangle
CreatePen
GetTextMetricsW
CreateRoundRectRgn
PatBlt
GetWindowOrgEx
CreateHatchBrush
SetPixel
GetWindowExtEx
CreateRectRgnIndirect
CombineRgn
CreateDCW
CopyMetaFileW
SetTextColor
SetBkColor
CreateBitmap
CreateRectRgn
SelectClipRgn
GetPixel
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetPixelV
GetTextFaceW
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
SetPaletteEntries
ExtFloodFill
LPtoDP
GetPaletteEntries
GetNearestPaletteIndex
EnumFontFamiliesExW
Polyline
Polygon
CreatePolygonRgn
OffsetRgn
GetRgnBox
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
DPtoLP
SetRectRgn
GetMapMode
GetTextColor
GetBkColor

advapi32

DeregisterEventSource
ReportEventW
CryptAcquireContextW
CryptReleaseContext
CryptDestroyKey
CryptSetHashParam
CryptGetProvParam
CryptGetUserKey
CryptExportKey
CryptDecrypt
CryptCreateHash
CryptDestroyHash
CryptSignHashW
CryptEnumProvidersW
RegDeleteKeyW
RegCloseKey
RegQueryValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegDeleteValueW
RegEnumKeyW
RegEnumKeyExW
RegEnumValueW
RegisterEventSourceW

shell32

Shell_NotifyIconW
SHGetSpecialFolderPathW
DragFinish
DragQueryFileW
SHAppBarMessage
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetDesktopFolder
SHGetFileInfoW
SHGetMalloc
ShellExecuteW

ole32

OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleGetClipboard
CoInitialize
CoUninitialize
CreateStreamOnHGlobal
CoInitializeEx
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
CoSetProxyBlanket
CoTaskMemFree
DoDragDrop
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoGetClassObject
CoDisconnectObject
CoCreateGuid
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
ReleaseStgMedium
OleDuplicateData
CoTaskMemAlloc

oleaut32

VarBstrFromDate
SysStringLen
SysFreeString
VariantClear
VariantChangeType
VariantCopy
SysAllocString
OleCreateFontIndirect
LoadTypeLi
VariantInit
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayDestroy
SysAllocStringLen

comctl32

ImageList_AddMasked
InitCommonControlsEx
ImageList_Create
ImageList_Destroy

gdiplus

GdiplusStartup
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipGetImageHeight
GdipGetImagePaletteSize
GdipCloneImage
GdipBitmapUnlockBits
GdipCreateBitmapFromStream
GdipAlloc
GdipDrawImageRectI
GdipDisposeImage
GdipGetImagePixelFormat
GdipFree
GdipBitmapLockBits
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipGetImagePalette
GdipSetCompositingMode
GdipGetImageWidth
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdiplusShutdown

shlwapi

StrChrW
StrPBrkW
PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW
PathStripToRootW
PathIsUNCW
StrFormatKBSizeW

winmm

timeGetTime
timeEndPeriod
timeGetDevCaps
timeSetEvent
timeBeginPeriod
timeKillEvent
PlaySoundW

msimg32

TransparentBlt
AlphaBlend

uxtheme

GetThemePartSize
IsThemeBackgroundPartiallyTransparent
GetCurrentThemeName
GetThemeColor
DrawThemeParentBackground
DrawThemeText
GetWindowTheme
OpenThemeData
CloseThemeData
DrawThemeBackground
IsAppThemed
GetThemeSysColor

oledlg

OleUIBusyW

ws2_32

freeaddrinfo
setsockopt
htons
WSAStartup
WSAGetLastError
WSAAddressToStringW
send
getsockname
getaddrinfo
WSAStringToAddressW
WSASetLastError
shutdown
closesocket
WSAIoctl
connect
socket
ntohs
WSACloseEvent
WSACreateEvent
WSAEventSelect
WSAResetEvent
WSAWaitForMultipleEvents
recv
WSAEnumNetworkEvents
WSACleanup
bind

iphlpapi

GetAdaptersInfo

bcrypt

BCryptGenRandom

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

crypt32

CertOpenStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertDuplicateCertificateContext
CertFreeCertificateContext
CertGetCertificateContextProperty
CertCloseStore

Exports

Exports

?active_implementation@simdutf@@3V?$atomic_ptr@$$CBVimplementation@simdutf@@@internal@1@A
?available_implementations@simdutf@@3Vavailable_implementation_list@internal@1@B

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 227KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

effb89001e75101f77b1299ec6f1270b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

gdiplus

shlwapi

winmm

msimg32

uxtheme

oledlg

ws2_32

iphlpapi

bcrypt

oleacc

imm32

winspool.drv

crypt32

Exports

Exports

Sections

.text Size: 3.0MB - Virtual size: 3.0MB

.rdata Size: 1.3MB - Virtual size: 1.3MB

.data Size: 44KB - Virtual size: 75KB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.reloc Size: 227KB - Virtual size: 227KB

.text
Size: 3.0MB - Virtual size: 3.0MB

.rdata
Size: 1.3MB - Virtual size: 1.3MB

.data
Size: 44KB - Virtual size: 75KB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

.reloc
Size: 227KB - Virtual size: 227KB