93a9ed3a860947cd5b59e1eff50e94a28d72988a41621d1bb98917f13d84944f

Sharing

Copy URL

Twitter E-mail

General

Target

93a9ed3a860947cd5b59e1eff50e94a28d72988a41621d1bb98917f13d84944f
Size

1.8MB
MD5

36f3777dd4b3da971987cff082b2b73a
SHA1

359afe4c853b737f7b63258714f6829b792b5f23
SHA256

93a9ed3a860947cd5b59e1eff50e94a28d72988a41621d1bb98917f13d84944f
SHA512

dcd417826f00c512259cecf0d66989a40bb5d429430810f5411f98d395c987323c878193f2808615fd60322da63f015508807c0be76bfc6058608e69f8668060
SSDEEP

24576:gf4eQyP78I3AE3Cps6vgT8tPWlos35pLeMaVVCY/sEXy8R5PyuJVHcThu:NE8R948cloq5wMiCYEAnR5LJV8k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93a9ed3a860947cd5b59e1eff50e94a28d72988a41621d1bb98917f13d84944f

Files

93a9ed3a860947cd5b59e1eff50e94a28d72988a41621d1bb98917f13d84944f
.exe windows x86

7961114998e61e9f1233ea58216ee28f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
WaitForMultipleObjects
GetOverlappedResult
SetNamedPipeHandleState
CreateEventW
ReleaseMutex
ResetEvent
SetEvent
GetStartupInfoW
CreateProcessW
CreateMutexW
GetCommandLineW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GlobalLock
GlobalUnlock
UnmapViewOfFile
OpenFileMappingW
CreateFileMappingW
GetSystemDirectoryW
GetCurrentThread
Sleep
OutputDebugStringW
WriteFile
SetEndOfFile
ReadFile
GetFileSize
WriteConsoleW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
ReadConsoleW
SetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
DeleteFileW
CreateFileW
WideCharToMultiByte
lstrlenW
lstrcpynW
FreeLibrary
GetCurrentProcess
MultiByteToWideChar
LoadLibraryW
IsBadReadPtr
GetProcAddress
GetModuleHandleW
VirtualProtect
GetCurrentThreadId
GetCurrentProcessId
WaitForSingleObject
SetUnhandledExceptionFilter
CloseHandle
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
FindResourceW
SizeofResource
LockResource
LoadResource
GetModuleFileNameW
FindResourceExW
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetStdHandle
GetTimeZoneInformation
GetConsoleMode
GetConsoleCP
SetFilePointerEx
GetFileType
GetModuleHandleExW
ExitThread
GetFileAttributesExW
RtlUnwind
CreateTimerQueue
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
ReleaseSemaphore
DuplicateHandle
GetModuleHandleA
FreeLibraryAndExitThread
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
CreateThread
SignalObjectAndWait
GetSystemWindowsDirectoryW
InterlockedCompareExchange
InitializeCriticalSection
GetProcessHeap
CreateFileA
lstrcmpiA
lstrcmpA
DeviceIoControl
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
UnhandledExceptionFilter
WaitForSingleObjectEx
GetLocalTime
ResumeThread
GetTempFileNameW
RaiseException
DecodePointer
GlobalFree
GlobalAlloc
GetVersion
lstrcmpW
FreeResource
ExitProcess
MulDiv
GetACP
FlushFileBuffers
GetTempPathW
FindNextFileW
FindClose
InterlockedDecrement
InterlockedIncrement
LocalFree
SetFilePointer
GetFileSizeEx
MapViewOfFile
GetVersionExW
LoadLibraryExW
GetCPInfo
GetLocaleInfoW
LCMapStringW
CompareStringW
QueryPerformanceFrequency
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SwitchToThread
InitializeCriticalSectionAndSpinCount
SetLastError
TryEnterCriticalSection
FormatMessageW
GetStringTypeW
LoadLibraryExA
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
FlushInstructionCache
IsDebuggerPresent
EncodePointer
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList

user32

IsWindow
MapVirtualKeyW
SetFocus
SetTimer
KillTimer
EnableWindow
EnumWindows
SendMessageW
DefWindowProcW
CallWindowProcW
CreateWindowExW
DestroyWindow
GetFocus
DrawTextW
GetWindowDC
BeginPaint
EndPaint
IsWindowEnabled
FindWindowExW
GetKeyNameTextW
EnumDisplayMonitors
SendMessageTimeoutW
GetMonitorInfoW
MonitorFromWindow
SystemParametersInfoW
GetWindow
GetWindowThreadProcessId
FindWindowW
GetParent
GetWindowLongW
PtInRect
IntersectRect
CopyRect
MapWindowPoints
ShowCursor
GetWindowRect
GetClientRect
GetWindowTextW
AttachThreadInput
ShowWindow
MoveWindow
SetForegroundWindow
GetForegroundWindow
GetSystemMetrics
BringWindowToTop
IsWindowVisible
SetWindowPos
PostMessageW
InvalidateRgn
ClientToScreen
EnumDisplaySettingsW
ScreenToClient
GetCursorPos
PostQuitMessage
SetWindowLongW
OffsetRect
FrameRect
FillRect
GetCaretPos
SetCaretPos
InvalidateRect
wsprintfW
wvsprintfW
SetCursor
InflateRect
UnionRect
LoadCursorW
GetMessageW
TranslateMessage
DispatchMessageW
IsChild
CreateAcceleratorTableW
IsZoomed
CharNextW
GetKeyState
SetCapture
ReleaseCapture
GetDC
ReleaseDC
GetUpdateRect
CreateCaret
GetCaretBlinkTime
IsRectEmpty
GetClassNameW
RegisterClassW
RegisterClassExW
GetClassInfoExW
SetPropW
GetPropW
LoadImageW
IsIconic
SetWindowRgn
MessageBoxW
RemovePropW
CharPrevW
SetRect
DestroyIcon
DrawIconEx
GetIconInfo
HideCaret
ShowCaret
GetSysColor
SetWindowTextW
GetWindowTextLengthW
UpdateLayeredWindow

gdi32

CreateRoundRectRgn
GetDeviceCaps
GetTextExtentPoint32W
CreateDIBSection
GetStockObject
CreateRectRgnIndirect
GetCharABCWidthsW
GetClipBox
SelectClipRgn
ExtSelectClipRgn
StretchBlt
SetWindowOrgEx
SetDIBColorTable
TextOutW
CreateDCW
GetDIBits
SetDIBitsToDevice
Rectangle
SelectObject
SetBkColor
SetBkMode
SetTextColor
ExtTextOutW
GetObjectW
GetTextMetricsW
SaveDC
RestoreDC
CreateFontIndirectW
DeleteObject
CreateCompatibleBitmap
BitBlt
CreatePen
CreateSolidBrush
SetStretchBltMode
DeleteDC
CreateCompatibleDC
CombineRgn

advapi32

RegCreateKeyExW
RegEnumKeyExW
RegCreateKeyW
RegSetValueExW
RegDeleteValueA
RegGetValueW
GetTokenInformation
OpenProcessToken
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA

shell32

ShellExecuteW
SHGetFolderPathW
ShellExecuteExW
SHGetSpecialFolderPathW
ord165

ole32

CoCreateGuid
OleLockRunning
CLSIDFromProgID
CLSIDFromString
CreateStreamOnHGlobal
CoUninitialize
CoCreateInstance
CoInitialize
OleInitialize
OleUninitialize

oleaut32

VariantClear
VariantInit
SafeArrayPutElement
SafeArrayCreate
SysAllocString

shlwapi

SHSetValueA
SHGetValueA
StrCmpNIW
StrTrimA
SHAutoComplete
StrStrIA
StrStrIW
PathAppendW
PathFileExistsW
PathRemoveFileSpecW
PathCombineW
wnsprintfW
PathFindFileNameW
PathIsDirectoryW
StrCmpIW

urlmon

URLDownloadToFileW
URLDownloadToCacheFileW

imm32

ImmAssociateContext

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

crypt32

CertGetNameStringW

wintrust

WTHelperProvDataFromStateData
WinVerifyTrust

wininet

InternetGetConnectedState

iphlpapi

GetAdaptersInfo

gdiplus

GdipAlloc
GdipFree
GdipCreatePath
GdipDeletePath
GdipAddPathLineI
GdipAddPathArcI
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipCreatePen1
GdipDeletePen
GdipSetPenMode
GdipSetPenDashStyle
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetSmoothingMode
GdipDrawLineI
GdipDrawRectangleI
GdipDrawPath
GdipFillEllipseI
GdipClosePathFigure
GdipCreateTexture
GdipCloneImage
GdipDisposeImage
GdipSaveImageToFile
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromStream
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipCreateHBITMAPFromBitmap
GdipCloneBitmapAreaI
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipSetInterpolationMode
GdipGraphicsClear
GdipFillPath
GdipDrawImagePointsI
GdipDrawImageRectRectI
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipDrawEllipseI
GdipLoadImageFromFile
GdipGetImagePixelFormat
GdipDrawImageRectI
GdipLoadImageFromStreamICM
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipImageSelectActiveFrame
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipAddPathArc

comctl32

InitCommonControlsEx
ord17
_TrackMouseEvent
ImageList_DrawEx

msimg32

AlphaBlend
GradientFill

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 267KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 229KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7961114998e61e9f1233ea58216ee28f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

urlmon

imm32

version

crypt32

wintrust

wininet

iphlpapi

gdiplus

comctl32

msimg32

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 267KB - Virtual size: 267KB

.data Size: 25KB - Virtual size: 48KB

.rsrc Size: 229KB - Virtual size: 228KB

.reloc Size: 73KB - Virtual size: 72KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 267KB - Virtual size: 267KB

.data
Size: 25KB - Virtual size: 48KB

.rsrc
Size: 229KB - Virtual size: 228KB

.reloc
Size: 73KB - Virtual size: 72KB