6c90287cab549c6db5ec1f46d1e6292a4d658658c697edecea7dc50d8ee80db1

Sharing

Copy URL Twitter E-mail

General

Target

6c90287cab549c6db5ec1f46d1e6292a4d658658c697edecea7dc50d8ee80db1
Size

1.2MB
MD5

afbc11365c714f03e849ea0fa8f0e628
SHA1

6ec43381f842f0fe3594a84d4454c3974fec53e0
SHA256

6c90287cab549c6db5ec1f46d1e6292a4d658658c697edecea7dc50d8ee80db1
SHA512

bacacdb1913ff729f86af5424a12f2581913005714eefd5923a2dd629a5c258226cf3221aabf515d449fd460d1bcfe27878d79a79f3fef1b6c9882ac4b468c1f
SSDEEP

24576:u5KC3AHo1fjrlnByO4qYNHYzwEEkRuD/f:u5XXl+kRY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6c90287cab549c6db5ec1f46d1e6292a4d658658c697edecea7dc50d8ee80db1

Files

6c90287cab549c6db5ec1f46d1e6292a4d658658c697edecea7dc50d8ee80db1
.exe windows x86

0f0aadfc4a2b186b9c8a2b60990534cf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryW
FileTimeToLocalFileTime
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
SetEnvironmentVariableA
CreateFileA
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
IsValidCodePage
GetCPInfo
GetOEMCP
GetACP
HeapReAlloc
HeapSize
HeapAlloc
GetConsoleMode
GetConsoleCP
HeapFree
HeapCreate
HeapDestroy
GetStartupInfoA
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
QueryPerformanceCounter
OutputDebugStringW
GetFileType
WriteConsoleW
OutputDebugStringA
GetStdHandle
DebugBreak
VirtualQuery
GetSystemInfo
GetModuleFileNameA
ExitProcess
RaiseException
RtlUnwind
HeapValidate
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetStartupInfoW
GetFileSizeEx
GetTickCount
GetFileTime
GetFileAttributesW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileW
GetCurrentProcess
DuplicateHandle
GetThreadLocale
FileTimeToSystemTime
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedIncrement
VirtualProtect
lstrlenA
InterlockedDecrement
GetAtomNameW
SetErrorMode
GlobalFlags
GetModuleHandleA
SetEvent
CloseHandle
WritePrivateProfileStringW
CompareStringA
InterlockedExchange
lstrcmpA
GetCurrentThread
GetLocaleInfoW
ConvertDefaultLocale
EnumResourceLanguagesW
MulDiv
GlobalAlloc
FormatMessageW
LocalFree
WideCharToMultiByte
CompareStringW
GetVersionExW
lstrcmpW
GetCurrentThreadId
GlobalGetAtomNameW
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
MultiByteToWideChar
GetVersionExA
GetModuleHandleW
SetLastError
GetCurrentProcessId
GetModuleFileNameW
lstrlenW
GlobalLock
GetLastError
GlobalUnlock
GlobalFree
FreeResource
FindResourceW
LoadResource
LockResource
SizeofResource
FreeLibrary
Sleep
GetLocalTime
LoadLibraryA
IsBadReadPtr
VirtualFree
VirtualAlloc
GetProcessHeap
LoadLibraryW
GetProcAddress
OpenEventA

user32

GetClipboardFormatNameA
SetRectEmpty
UnpackDDElParam
ReuseDDElParam
ReleaseCapture
TranslateAcceleratorW
LoadAcceleratorsW
SystemParametersInfoW
DestroyMenu
SetCursor
GetCursorPos
GetMessageW
TranslateMessage
PostQuitMessage
GetMenuCheckMarkDimensions
RegisterWindowMessageW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
SendDlgItemMessageA
GetSysColor
PeekMessageW
DispatchMessageW
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
WinHelpW
TrackPopupMenu
GetKeyState
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
UnhookWindowsHookEx
GetPropW
CallWindowProcW
RemovePropW
DefWindowProcW
SetMenu
GetMenu
GetMessageTime
GetMessagePos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
LoadMenuW
SetMenuItemBitmaps
ModifyMenuW
InsertMenuItemW
GetSubMenu
GetMenuItemInfoW
GetMenuState
GetMenuItemID
GetMenuItemCount
EnableMenuItem
CheckMenuItem
AppendMenuW
IsMenu
CreatePopupMenu
GetClipboardFormatNameW
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
DrawIcon
FillRect
LoadBitmapW
GetSysColorBrush
MessageBoxW
GetWindowThreadProcessId
ShowWindow
SetWindowPos
MoveWindow
SetWindowLongW
GetDlgCtrlID
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
SendDlgItemMessageW
GetDlgItemTextW
GetWindowTextW
SetFocus
LoadIconW
LoadCursorW
PostThreadMessageW
MapDialogRect
SetWindowContextHelpId
GetForegroundWindow
SetForegroundWindow
GetSystemMetrics
IsWindowEnabled
GetDlgItem
GetWindowLongW
DestroyWindow
GetParent
IsChild
GetLastActivePopup
GetWindow
GetTopWindow
GetNextDlgTabItem
GetNextDlgGroupItem
CharNextW
MessageBeep
CharUpperW
UnregisterClassW
RegisterClipboardFormatW
IsRectEmpty
CreateDialogIndirectParamW
EnableWindow
InflateRect
SetRect
PtInRect
IsWindow
SetActiveWindow
GetActiveWindow
GetDesktopWindow
EndDialog
SendMessageW
PostMessageW
GetSystemMenu
IsIconic
BringWindowToTop
GetWindowRect
GetClientRect
MapWindowPoints
ClientToScreen
ScreenToClient
BeginPaint
EndPaint
GetDC
GetWindowDC
ReleaseDC
UpdateWindow
InvalidateRect
InvalidateRgn
ValidateRect
IsWindowVisible
ShowOwnedPopups
GetCapture
SetCapture
GetFocus
CopyAcceleratorTableW

gdi32

GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
BitBlt
GetPixel
TextOutW
ExtTextOutW
GetTextExtentPoint32W
Escape
GetClipBox
SetTextColor
SetBkColor
DeleteDC
SaveDC
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteObject
ExtSelectClipRgn
GetMapMode
GetTextColor
GetBkColor
SelectObject
GetDeviceCaps
CreateCompatibleDC
GetRgnBox
CreateRectRgnIndirect
CreateCompatibleBitmap
CreateBitmap
CreateFontIndirectW
CreatePatternBrush
CreateSolidBrush
GetObjectType
GetStockObject
GetObjectW

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegEnumKeyW
SetThreadToken
RevertToSelf
OpenThreadToken
RegOpenKeyW
RegCloseKey
RegQueryValueW
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW

shell32

DragFinish
DragQueryFileW

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameW
PathIsUNCW
PathFindExtensionW
PathStripToRootW

oledlg

OleUIBusyW

ole32

OleIsCurrentClipboard
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoRevokeClassObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
StringFromGUID2
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
StringFromCLSID
CoTaskMemFree
OleFlushClipboard

oleaut32

SystemTimeToVariantTime
VariantClear
VariantChangeType
SysAllocStringLen
SysStringLen
SysFreeString
VariantCopy
SafeArrayDestroy
OleCreateFontIndirect
SysAllocString
VariantTimeToSystemTime
VariantInit

Sections

.text
Size: 634KB - Virtual size: 634KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 281KB - Virtual size: 297KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 141KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0f0aadfc4a2b186b9c8a2b60990534cf

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 634KB - Virtual size: 634KB

.rdata Size: 160KB - Virtual size: 160KB

.data Size: 281KB - Virtual size: 297KB

.rsrc Size: 141KB - Virtual size: 144KB

.text
Size: 634KB - Virtual size: 634KB

.rdata
Size: 160KB - Virtual size: 160KB

.data
Size: 281KB - Virtual size: 297KB

.rsrc
Size: 141KB - Virtual size: 144KB