b111f79ce39e044ba1245cb5721c1aaa9d029b6662c26b6f9161a97c7fe9b56d

Sharing

Copy URL Twitter E-mail

General

Target

b111f79ce39e044ba1245cb5721c1aaa9d029b6662c26b6f9161a97c7fe9b56d
Size

2.2MB
MD5

e2e14dd74fadc5c29fb147abbe141369
SHA1

5563d2c3a2017827cb1c9c74b334f4fa362b033d
SHA256

b111f79ce39e044ba1245cb5721c1aaa9d029b6662c26b6f9161a97c7fe9b56d
SHA512

9d7cec1a1cd7e0e2f047b4e3188220509643e46b3707418a1db9dc4d165d67e3e11de6aa6f0b3c8474555ebfba867977670df677313544bc263ddf487a2db464
SSDEEP

49152:DZJPc9LPE6YAwdRDmEkAk7xXnhVMYHOsU2K4enr/IJV/K7m4uBN+VGvC4Z:nuQ6YfqEBkFXHHOsXK4m/YV/X4u/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b111f79ce39e044ba1245cb5721c1aaa9d029b6662c26b6f9161a97c7fe9b56d

Files

b111f79ce39e044ba1245cb5721c1aaa9d029b6662c26b6f9161a97c7fe9b56d
.exe windows x86

a10aafebfe8c0226a9faa762fecc7b22

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileW
WriteFile
ReadFile
SetFilePointer
GetFileSize
CreateFileW
GetPrivateProfileStringA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetModuleFileNameA
lstrlenW
GetFileSizeEx
SetFilePointerEx
GetSystemTimeAsFileTime
MulDiv
LocalFree
FormatMessageW
GlobalSize
CopyFileW
SetLastError
GetVersionExA
GetModuleHandleW
lstrcmpW
CompareStringW
LoadLibraryW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
FreeResource
InterlockedIncrement
GetThreadLocale
InterlockedExchange
CompareStringA
GetLocaleInfoW
lstrcmpA
EnumResourceLanguagesW
ConvertDefaultLocale
GetCurrentThread
GetPrivateProfileIntW
WritePrivateProfileStringW
SetThreadPriority
ResumeThread
InterlockedDecrement
GetTickCount
FindClose
FindNextFileW
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileW
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalGetAtomNameW
lstrlenA
GlobalFlags
GetCurrentDirectoryW
lstrcpyW
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetCurrentProcess
GetVolumeInformationW
GetFullPathNameW
SetErrorMode
GetTempFileNameW
GetTempPathW
SearchPathW
GetProfileIntW
GetFileTime
VirtualProtect
FindResourceExW
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitThread
CreateThread
HeapFree
ExitProcess
HeapAlloc
DeleteFileA
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
HeapReAlloc
GetDriveTypeA
FindFirstFileA
RtlUnwind
RaiseException
HeapSize
VirtualAlloc
GetSystemInfo
VirtualQuery
SetStdHandle
GetFileType
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
LCMapStringW
GetTimeFormatA
GetDateFormatA
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetFullPathNameA
GetCurrentDirectoryA
LCMapStringA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetProcessHeap
SetEnvironmentVariableA
OutputDebugStringA
WaitForSingleObject
GetLastError
Sleep
GetVersionExW
ReleaseSemaphore
GetCurrentProcessId
CreateSemaphoreW
GetCurrentThreadId
OpenSemaphoreW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
TerminateProcess
OpenProcess
CloseHandle
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetModuleFileNameW
WideCharToMultiByte
MultiByteToWideChar
CreateDirectoryW
GetFileAttributesW
FindResourceW
LoadResource
LockResource
SizeofResource

user32

GetActiveWindow
TranslateMessage
GetMessageW
SetCursor
ShowOwnedPopups
GetWindowThreadProcessId
RegisterClipboardFormatW
GetSysColorBrush
ReleaseDC
GetDC
InflateRect
GetMenuItemInfoW
DestroyMenu
ClientToScreen
FillRect
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
GetWindowDC
BeginPaint
EndPaint
IsRectEmpty
CopyAcceleratorTableW
InvalidateRect
InvalidateRgn
SetCapture
ReleaseCapture
WaitMessage
DeleteMenu
SetRectEmpty
LoadMenuW
PostThreadMessageW
ToUnicodeEx
MapVirtualKeyW
GetKeyboardLayout
GetKeyboardState
CharUpperW
GetAsyncKeyState
DestroyAcceleratorTable
LoadAcceleratorsW
CreateAcceleratorTableW
SetWindowRgn
NotifyWinEvent
CreatePopupMenu
SetParent
SetClassLongW
GetSystemMenu
IsMenu
SetTimer
KillTimer
BringWindowToTop
LockWindowUpdate
EnumChildWindows
DrawStateW
OpenClipboard
CopyImage
DestroyIcon
LoadImageW
SetClipboardData
CloseClipboard
EmptyClipboard
GetNextDlgGroupItem
GetNextDlgTabItem
UnregisterClassW
TranslateAcceleratorW
InsertMenuItemW
ReuseDDElParam
UnpackDDElParam
DrawIconEx
DrawEdge
DrawFrameControl
DrawFocusRect
SetCursorPos
UnionRect
EnableScrollBar
UpdateLayeredWindow
SetMenuDefaultItem
SetWindowTextW
IsCharLowerW
GetKeyNameTextW
MapVirtualKeyExW
ValidateRect
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
FrameRect
GetUpdateRect
EndDialog
CreateDialogIndirectParamW
CharUpperBuffW
CopyIcon
SubtractRect
GetIconInfo
GetDoubleClickTime
CreateMenu
GetWindowRgn
DestroyCursor
DrawIcon
RegisterClassW
GetSysColor
AdjustWindowRectEx
GetParent
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetDlgCtrlID
SendMessageW
DefWindowProcW
CallWindowProcW
CopyRect
PtInRect
GetMenu
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetMenuState
GetMenuStringW
AppendMenuW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
EnableWindow
GetSystemMetrics
SetProcessDPIAware
GetClientRect
LoadCursorW
LoadIconW
SetRect
GetWindowLongW
GetWindowRect
IsDialogMessageW
CheckDlgButton
CharNextW
SendDlgItemMessageW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
GetClassInfoW
SendDlgItemMessageA
WinHelpW
SetWindowContextHelpId
MapDialogRect
SystemParametersInfoW
MessageBeep
RedrawWindow
IsZoomed
PostQuitMessage
IsClipboardFormatAvailable
IsWindowEnabled
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetFocus
IsWindow
GetWindowTextLengthW
GetWindowTextW
GetLastActivePopup
SetActiveWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
MoveWindow
SetFocus
ShowWindow
PostMessageW
UpdateWindow
SetWindowPos
SetWindowLongW
GetCursorPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
WindowFromPoint
GetClassNameW
GetDesktopWindow
MessageBoxW
CreateWindowExW
GetMenuDefaultItem
GetClassInfoExW
SwitchToThisWindow
GetForegroundWindow
GetWindowTextA
GetWindow

gdi32

LineTo
MoveToEx
SetTextAlign
SelectClipRgn
CreateRectRgn
IntersectClipRect
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
ExcludeClipRect
SetPixelV
GetTextFaceW
CreateSolidBrush
RestoreDC
EnumFontFamiliesExW
GetSystemPaletteEntries
GetNearestPaletteIndex
SetPaletteEntries
ExtFloodFill
LPtoDP
GetViewportOrgEx
GetBoundsRect
FrameRgn
SaveDC
DeleteObject
GetTextExtentPoint32W
ExtTextOutW
BitBlt
CreateCompatibleDC
CreateFontIndirectW
GetTextColor
FillRgn
PtInRegion
GetWindowOrgEx
GetPaletteEntries
CreatePalette
RoundRect
Rectangle
Polygon
Ellipse
Polyline
CreatePolygonRgn
CreateEllipticRgn
DPtoLP
GetMapMode
SetRectRgn
CreateDIBSection
SetPixel
StretchBlt
CombineRgn
RealizePalette
GetDIBits
PatBlt
SetDIBColorTable
CreateRoundRectRgn
GetTextCharsetInfo
EnumFontFamiliesW
GetTextMetricsW
CreateCompatibleBitmap
CreateDIBitmap
OffsetRgn
GetRgnBox
CreateRectRgnIndirect
CreateHatchBrush
CreatePen
RectVisible
TextOutW
Escape
GetObjectType
GetBkColor
GetStockObject
CreateBitmap
GetObjectW
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
CopyMetaFileW
SelectPalette
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
GetDeviceCaps

shell32

ShellExecuteW
DragQueryFileW
DragFinish
SHGetFileInfoW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFolderPathA
SHGetFolderPathW
SHAppBarMessage

ole32

IsAccelerator
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoInitializeEx
CoUninitialize
OleGetClipboard
DoDragDrop
OleLockRunning
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
CLSIDFromProgID
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CoCreateGuid
CoCreateInstance

oleaut32

VariantInit
SysAllocStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
SysStringLen
SysFreeString
VariantClear
VariantChangeType
OleCreateFontIndirect
SysAllocString
VariantCopy

advapi32

RegEnumKeyExW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyW
RegQueryValueExW
RegDeleteValueW
RegCloseKey

ws2_32

getsockname
ntohs
getpeername
WSAGetLastError
bind
htons
setsockopt
select
ioctlsocket
getprotobyname
WSAIoctl
gethostbyname
inet_addr
WSAEventSelect
getaddrinfo
recv
recvfrom
send
sendto
WSAStartup
WSACreateEvent
WSACloseEvent
WSAAddressToStringW
WSACleanup
closesocket
shutdown
listen
socket
gethostname
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
WSASetEvent
connect
accept
freeaddrinfo
getsockopt

iphlpapi

GetTcpTable

msimg32

AlphaBlend
TransparentBlt

comctl32

ImageList_GetIconSize
InitCommonControlsEx

shlwapi

PathRemoveFileSpecW
PathFileExistsA
PathFileExistsW
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW
SHDeleteKeyW

oledlg

OleUIBusyW

gdiplus

GdipFree
GdipAlloc
GdipDeleteGraphics
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipBitmapLockBits
GdipBitmapUnlockBits
GdiplusStartup
GdiplusShutdown
GdipGetImageGraphicsContext
GdipDrawImageI
GdipCloneImage
GdipCreateBitmapFromScan0
GdipGetImagePalette

version

VerQueryValueW
GetFileVersionInfoA
GetFileVersionInfoSizeA

imm32

ImmGetOpenStatus
ImmGetContext
ImmReleaseContext

winmm

PlaySoundW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

comdlg32

GetFileTitleW

Exports

Exports

OPENSSL_Applink

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 365KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a10aafebfe8c0226a9faa762fecc7b22

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

oleaut32

advapi32

ws2_32

iphlpapi

msimg32

comctl32

shlwapi

oledlg

gdiplus

version

imm32

winmm

winspool.drv

comdlg32

Exports

Exports

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 365KB - Virtual size: 364KB

.data Size: 27KB - Virtual size: 58KB

.rsrc Size: 103KB - Virtual size: 102KB

.reloc Size: 154KB - Virtual size: 153KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 365KB - Virtual size: 364KB

.data
Size: 27KB - Virtual size: 58KB

.rsrc
Size: 103KB - Virtual size: 102KB

.reloc
Size: 154KB - Virtual size: 153KB