368cbbd323d2c5bc00f0c072b116333f75339fc0742e238d3e5e6ff17abe1409

Sharing

Copy URL

Twitter E-mail

General

Target

368cbbd323d2c5bc00f0c072b116333f75339fc0742e238d3e5e6ff17abe1409
Size

3.2MB
MD5

6b0ec5c5a72d242c18a2b47d4a27defe
SHA1

f8a2aaae8fc3c325336b07b3924066aca0e76556
SHA256

368cbbd323d2c5bc00f0c072b116333f75339fc0742e238d3e5e6ff17abe1409
SHA512

133bdada683181e1569cee15fec9aad0d6d026b7facda33dbd86633e325ef21abf298d7dd0ebce7fd5d3f0b609e6164002bfcdfdbab0e3930b19537cf1540b03
SSDEEP

49152:kxsmOaHjPJIEoxhtwvv+x4E38qaUWMmf1hV9PV:HpaHgev+xV3raiq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
368cbbd323d2c5bc00f0c072b116333f75339fc0742e238d3e5e6ff17abe1409

Files

368cbbd323d2c5bc00f0c072b116333f75339fc0742e238d3e5e6ff17abe1409
.exe windows x86

cd504ed3e2b0c811baed9fa07fb1dc99

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundA

imm32

ImmGetContext
ImmSetCompositionWindow
ImmReleaseContext

kernel32

VirtualFree
VirtualAlloc
IsBadWritePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadCodePtr
SetConsoleCtrlHandler
GetLocaleInfoW
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapCreate
HeapDestroy
LCMapStringW
LCMapStringA
GetTickCount
DeviceIoControl
DeleteFileA
GetLastError
GetSystemTime
CreateFileA
Sleep
CopyFileA
GetCurrentDirectoryA
GetFileAttributesA
GetSystemDirectoryA
GetVersion
CloseHandle
CreateProcessA
GlobalUnlock
GlobalLock
GlobalAlloc
SizeofResource
LockResource
LoadResource
FindResourceA
FindClose
FindNextFileA
FindFirstFileA
CreateDirectoryA
SetThreadContext
GetThreadContext
WriteProcessMemory
GetTempFileNameA
HeapSize
GetACP
GetLocalTime
OpenMutexA
GetOverlappedResult
GetCurrentProcessId
GlobalMemoryStatus
QueryPerformanceCounter
FlushConsoleInputBuffer
GetProfileStringA
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
CreateFileW
GetTimeZoneInformation
ExitThread
CreateThread
RaiseException
GetCommandLineA
GetStartupInfoA
ExitProcess
RtlUnwind
SetErrorMode
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GlobalFlags
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetProfileIntA
GetPrivateProfileStringA
GetPrivateProfileIntA
ReleaseMutex
CreateMutexA
GetCurrentThread
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetDiskFreeSpaceA
GetFileTime
SetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
SetLastError
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
GetVolumeInformationA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
lstrcpynA
lstrcmpiA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
FormatMessageA
LocalFree
InterlockedDecrement
InterlockedIncrement
WaitForMultipleObjects
WideCharToMultiByte
FreeLibrary
MultiByteToWideChar
GetCurrentThreadId
HeapFree
HeapReAlloc
GetProcessHeap
HeapAlloc
UnmapViewOfFile
OpenFileMappingA
MapViewOfFile
GlobalGetAtomNameA
lstrcatA
lstrlenA
WinExec
lstrcpyA
ResetEvent
MoveFileA
WritePrivateProfileStringA
WaitForSingleObject
GetTempPathA
GetWindowsDirectoryA
lstrcmpA
GlobalAddAtomA
DeleteAtom
GetModuleFileNameA
GetPrivateProfileSectionA
GetComputerNameA
IsBadReadPtr
GlobalReAlloc
MulDiv
GetProcAddress
TerminateProcess
SetCurrentDirectoryA
OpenProcess
ContinueDebugEvent
WaitForDebugEvent
ReadProcessMemory
SetEvent
GlobalSize
GlobalFree
PulseEvent
BeginUpdateResourceA
UpdateResourceA
EndUpdateResourceA
GetVersionExA
LoadLibraryA

user32

PostQuitMessage
SetCursorPos
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
CharUpperA
TranslateMessage
ValidateRect
GetMenuCheckMarkDimensions
GetMenuState
SetMenuItemBitmaps
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsA
DefMDIChildProcA
TranslateAcceleratorA
TranslateMDISysAccel
DefFrameProcA
BringWindowToTop
MapWindowPoints
DeferWindowPos
WinHelpA
RegisterClassA
TrackPopupMenu
CreateWindowExA
SetPropA
GetPropA
RemovePropA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
IsIconic
GetWindowTextLengthA
IsDialogMessageA
ScrollWindowEx
SendDlgItemMessageA
LoadStringA
GetNextDlgTabItem
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
GetWindowLongA
WindowFromPoint
SetWindowLongA
CallWindowProcA
GetWindowThreadProcessId
ShowOwnedPopups
CreateIconFromResourceEx
CreateIconFromResource
AdjustWindowRectEx
ModifyMenuA
SetCaretPos
DestroyCaret
ShowCaret
CreateCaret
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
IsClipboardFormatAvailable
GetDlgItem
SetWindowPos
MoveWindow
EqualRect
UnionRect
DestroyWindow
GetClassLongA
TrackPopupMenuEx
GetDesktopWindow
GetMenuItemID
InsertMenuA
CheckMenuItem
GetMessageA
DispatchMessageA
GetSystemMenu
EnableMenuItem
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
UnregisterClassA
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
GetProcessWindowStation
GetMenu
BeginDeferWindowPos
GetTopWindow
GetDlgCtrlID
GetWindow
EndDeferWindowPos
GetFocus
ScreenToClient
AppendMenuA
RemoveMenu
GetMenuItemCount
DrawMenuBar
IsZoomed
UnregisterHotKey
RegisterHotKey
DestroyCursor
MessageBeep
GetKeyState
FindWindowA
RegisterClipboardFormatA
DestroyMenu
SetMenu
DeleteMenu
InvertRect
CharNextA
SetWindowContextHelpId
AttachThreadInput
MapDialogRect
GetClassNameA
SendMessageTimeoutA
EnumWindows
RegisterWindowMessageA
GetWindowTextA
SetWindowTextA
IsChild
GetClipboardData
LoadIconA
SetFocus
IntersectRect
DrawIcon
DrawIconEx
CopyIcon
DestroyIcon
MessageBoxA
LoadMenuA
GetSubMenu
GetDC
KillTimer
GetUserObjectInformationW
SetTimer
GetClassInfoA
DefWindowProcA
GetDCEx
ReleaseDC
LockWindowUpdate
ClientToScreen
IsRectEmpty
SetCursor
LoadCursorA
SetParent
SetRectEmpty
EnumThreadWindows
IsWindowEnabled
GetSysColorBrush
IsWindowVisible
SetForegroundWindow
GetMenuStringA
CopyAcceleratorTableA
ShowWindow
SetActiveWindow
GetNextDlgGroupItem
PeekMessageA
GetMessagePos
GetClientRect
SystemParametersInfoA
SetRect
IsWindow
RedrawWindow
FillRect
GetSystemMetrics
DrawFrameControl
DrawEdge
InflateRect
DrawFocusRect
UpdateWindow
GetCapture
GetMenuItemInfoA
PostThreadMessageA
ReleaseCapture
SetCapture
GetCursorPos
GetWindowRect
PtInRect
CopyRect
GetSysColor
OffsetRect
LoadBitmapA
EnableWindow
InvalidateRect
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
wsprintfA
GetParent
PostMessageA
SendMessageA
HideCaret
GetWindowPlacement

gdi32

SetROP2
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetViewportExtEx
CreatePatternBrush
PtVisible
RectVisible
TextOutA
Escape
GetMapMode
SetRectRgn
DPtoLP
GetTextMetricsA
CreateDCA
StretchDIBits
GetCharWidthA
CreateFontA
GetTextColor
LPtoDP
SetBkMode
SelectPalette
RestoreDC
SaveDC
SetBkColor
CreateDIBitmap
GetTextExtentPointA
SetTextColor
GetClipBox
GetClipRgn
SelectClipRgn
SetPixelV
EnumFontFamiliesExA
GetWindowExtEx
StretchBlt
AbortDoc
ExtTextOutA
StartDocA
StartPage
EndPage
EndDoc
CreateRectRgn
DeleteDC
CreateSolidBrush
GetCurrentObject
CreateRectRgnIndirect
CombineRgn
GetBkColor
PaintRgn
PtInRegion
DeleteObject
CreateCompatibleBitmap
CreateBitmap
FillRgn
CreatePolygonRgn
CreateCompatibleDC
BitBlt
SelectObject
GetStockObject
GetDeviceCaps
RealizePalette
CreatePen
GetTextExtentPoint32A
CreateFontIndirectA
CreatePalette
Rectangle
GetObjectA
PatBlt

comdlg32

GetFileTitleA
GetOpenFileNameA
ChooseColorA
ChooseFontA
PrintDlgA
CommDlgExtendedError
GetSaveFileNameA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegEnumKeyA
ReportEventA
DeregisterEventSource
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
CloseServiceHandle
StartServiceA
OpenServiceA
CreateServiceA
DeleteService
ControlService
OpenSCManagerA
RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegSetValueA
RegCreateKeyA
RegQueryValueA
RegOpenKeyA
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegisterEventSourceA
GetFileSecurityA
SetFileSecurityA
RegQueryValueExA

shell32

SHGetFileInfoA
DragQueryFileA
DragFinish
DragAcceptFiles
ShellExecuteA
ExtractIconA

comctl32

_TrackMouseEvent
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_GetImageInfo
ImageList_GetImageCount
ImageList_Remove
ImageList_Duplicate
ImageList_Draw
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
ImageList_Read
ImageList_Write
ord17

oledlg

ord8

ole32

CoTaskMemFree
CoTaskMemAlloc
CoGetClassObject
CLSIDFromProgID
OleUninitialize
OleInitialize
CoCreateGuid
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoFreeUnusedLibraries
CoRegisterMessageFilter
OleDraw
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CLSIDFromString

olepro32

ord253

oleaut32

SysStringLen
VariantTimeToSystemTime
SysAllocStringLen
SysFreeString
VariantClear
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SysAllocString
SysAllocStringByteLen
VariantChangeType
VariantCopy

hid

HidD_GetHidGuid
HidD_GetAttributes
HidD_FlushQueue

setupapi

SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA

winscard

SCardTransmit
SCardDisconnect
SCardConnectA
g_rgSCardT1Pci
SCardReconnect
SCardListReadersA
SCardEstablishContext
SCardReleaseContext

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 328KB - Virtual size: 326KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 176KB - Virtual size: 278KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 744KB - Virtual size: 743KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cd504ed3e2b0c811baed9fa07fb1dc99

Headers

File Characteristics

Imports

winmm

imm32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

hid

setupapi

winscard

Sections

.text Size: 2.0MB - Virtual size: 2.0MB

.rdata Size: 328KB - Virtual size: 326KB

.data Size: 176KB - Virtual size: 278KB

.rsrc Size: 744KB - Virtual size: 743KB

.text
Size: 2.0MB - Virtual size: 2.0MB

.rdata
Size: 328KB - Virtual size: 326KB

.data
Size: 176KB - Virtual size: 278KB

.rsrc
Size: 744KB - Virtual size: 743KB