add484a332d10fb1d3e117164fcccfa0a87959464fabca7bb1ec7e424c1f7bde

Sharing

Copy URL Twitter E-mail

General

Target

add484a332d10fb1d3e117164fcccfa0a87959464fabca7bb1ec7e424c1f7bde
Size

3.6MB
MD5

65f8401ef33f835ec88fff350594e002
SHA1

6a211fe348d2270f2e3165836bae1b361d5d8655
SHA256

add484a332d10fb1d3e117164fcccfa0a87959464fabca7bb1ec7e424c1f7bde
SHA512

85aee738037f21663abb43175c6958ddc633719165193f2f2c00d5b4f7dab2984191ef7294bc523d829d1b47c52ba892e10aaca765890f7611fb7b7d0e6bee02
SSDEEP

98304:zuGMUdr3UWEQ+xz3SSUrsvwAl3ScTRlaO20KSi394MY4:zuGwQ+xwsvwAlpTR8zN4i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
add484a332d10fb1d3e117164fcccfa0a87959464fabca7bb1ec7e424c1f7bde

Files

add484a332d10fb1d3e117164fcccfa0a87959464fabca7bb1ec7e424c1f7bde
.exe windows x86

318d0710b46290ed2cbc474e0c34fc4f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

_TrackMouseEvent
InitCommonControlsEx

kernel32

SetEvent
OpenFileMappingW
OpenEventW
InitializeCriticalSection
LeaveCriticalSection
ExpandEnvironmentStringsW
EnterCriticalSection
SetLastError
GlobalReAlloc
FreeResource
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetCurrentThreadId
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
lstrcpynW
GetTickCount
UnmapViewOfFile
MapViewOfFile
GetFileInformationByHandle
SetFilePointer
SystemTimeToFileTime
GetLocalTime
FileTimeToSystemTime
DecodePointer
RaiseException
FormatMessageW
GetACP
WriteFile
WideCharToMultiByte
GetTempPathW
FindClose
FindNextFileW
CopyFileW
FindFirstFileW
CreateDirectoryW
DeleteFileW
CreateMutexW
FreeLibrary
GetCurrentProcess
GetVersionExW
GetUserDefaultUILanguage
GetLocaleInfoW
GetFileAttributesW
GetFileSize
ReadFile
CreateFileW
CloseHandle
MultiByteToWideChar
OutputDebugStringW
LoadLibraryW
GlobalMemoryStatusEx
GetSystemInfo
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
Sleep
InterlockedExchange
InterlockedCompareExchange
GetModuleHandleW
GetProcAddress
GetPrivateProfileSectionW
GetPrivateProfileIntW
GetPrivateProfileStringW
GetCommandLineW
GetModuleFileNameW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
CreateTimerQueue
GetCurrentProcessId
QueryDepthSList
InterlockedPopEntrySList
ReleaseSemaphore
VirtualFree
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SwitchToThread
SignalObjectAndWait
WriteConsoleW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
FindFirstFileExW
GetTimeZoneInformation
GetConsoleCP
ReadConsoleW
GetConsoleMode
SetFilePointerEx
GetStdHandle
ExitProcess
GetFileType
SetStdHandle
VirtualQuery
VirtualAlloc
GetCommandLineA
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
HeapQueryInformation
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
GetCPInfo
LCMapStringW
GetStringTypeW
QueryPerformanceFrequency
TryEnterCriticalSection
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
SearchPathW
GetProfileIntW
GetTempFileNameW
VerifyVersionInfoW
VerSetConditionMask
GetWindowsDirectoryW
lstrcpyW
VirtualProtect
GetCurrentDirectoryW
GlobalFindAtomW
SystemTimeToTzSpecificLocalTime
lstrcmpiW
UnregisterWaitEx
GetFileTime
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
GlobalSize
LocalFree
MulDiv
OutputDebugStringA
GetModuleHandleA
GlobalHandle
LocalAlloc
LocalReAlloc
lstrcmpA
GlobalGetAtomNameW
GlobalAddAtomW
FlushFileBuffers
GetFullPathNameW
GetVolumeInformationW
LockFile
SetEndOfFile
UnlockFile
DuplicateHandle
LoadLibraryExW
LoadLibraryA
EncodePointer
GetSystemDirectoryW
CompareStringW
GlobalFlags
lstrcmpW
WaitForSingleObject
CreateEventW
SetThreadPriority
ResumeThread
GetCurrentThread
GlobalDeleteAtom

user32

GetClassInfoExW
UpdateWindow
SetRect
LoadImageW
SendMessageW
PostQuitMessage
MessageBoxW
GetDesktopWindow
GetWindowLongW
GetMenuStringW
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
AppendMenuW
RemoveMenu
GetSysColor
GetSysColorBrush
IsWindowEnabled
GetLastActivePopup
GetWindowTextLengthW
DestroyIcon
GetDlgCtrlID
GetFocus
SetWindowTextW
RealChildWindowFromPoint
ValidateRect
SetScrollPos
GetScrollPos
MoveWindow
CheckDlgButton
IsDialogMessageW
IsIconic
SetForegroundWindow
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadBitmapW
GetMessagePos
GetMessageTime
RegisterClassW
IsMenu
IsChild
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetMenu
SetMenu
TrackPopupMenu
SetActiveWindow
GetForegroundWindow
ScrollWindow
SetScrollRange
GetScrollRange
ShowScrollBar
SetPropW
GetPropW
RemovePropW
AdjustWindowRectEx
GetClassLongW
GetTopWindow
LoadIconW
SetScrollInfo
GetScrollInfo
WinHelpW
DrawTextExW
GrayStringW
TabbedTextOutW
GetWindowDC
CopyImage
ShowOwnedPopups
DeleteMenu
CreateDialogIndirectParamW
EndDialog
GetNextDlgTabItem
DestroyMenu
GetMenuItemInfoW
SendDlgItemMessageA
SetRectEmpty
GetAsyncKeyState
MapDialogRect
TrackMouseEvent
CreatePopupMenu
GetMenuDefaultItem
GetNextDlgGroupItem
GetIconInfo
MessageBeep
EnableScrollBar
InvertRect
NotifyWinEvent
MapVirtualKeyW
GetKeyNameTextW
LoadMenuW
SetLayeredWindowAttributes
EnumDisplayMonitors
SetClassLongW
SetParent
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
DrawEdge
DrawFrameControl
BringWindowToTop
SetCursorPos
CopyIcon
FrameRect
DrawIcon
MonitorFromPoint
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
PostThreadMessageW
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
IsClipboardFormatAvailable
GetUpdateRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SubtractRect
CreateMenu
GetWindowRgn
DestroyCursor
CallWindowProcW
IsWindow
CallNextHookEx
wsprintfW
GetDC
ReleaseDC
DestroyWindow
DefWindowProcW
RegisterClassExA
CreateWindowExA
EnumDisplaySettingsW
MonitorFromWindow
GetMonitorInfoW
GetMessageW
TranslateMessage
DispatchMessageW
GetWindowThreadProcessId
CharUpperW
FindWindowA
DrawTextW
FillRect
MapWindowPoints
GetWindow
PeekMessageW
InflateRect
DrawFocusRect
GetParent
SetWindowPos
PostMessageW
EnableWindow
SystemParametersInfoW
IsZoomed
SetWindowRgn
GetActiveWindow
RedrawWindow
GetWindowTextW
GetSystemMenu
GetMenuState
DrawIconEx
GetSystemMetrics
GetClassInfoW
GetClassNameW
GetCursorPos
ScreenToClient
WindowFromPoint
ClientToScreen
SetFocus
SendMessageTimeoutW
SetCursor
HideCaret
EndPaint
GetWindowRect
IsWindowVisible
FindWindowExW
UpdateLayeredWindow
BeginPaint
IsRectEmpty
InvalidateRect
UnionRect
RegisterWindowMessageW
EqualRect
CopyRect
GetClientRect
KillTimer
SetTimer
GetKeyState
GetCapture
ReleaseCapture
SetCapture
IntersectRect
OffsetRect
PtInRect
RegisterClassExW
LoadCursorW
GetDlgItem
SetWindowLongW
UnhookWindowsHookEx
CreateWindowExW
SetWindowsHookExW
ShowWindow

gdi32

GetWindowExtEx
IntersectClipRect
PtVisible
RectVisible
RestoreDC
GetViewportExtEx
GetPixel
GetObjectType
Escape
CreatePatternBrush
SetTextColor
CreateSolidBrush
GetObjectA
CombineRgn
ExtCreateRegion
StretchBlt
GetObjectW
Rectangle
LineTo
MoveToEx
ExtTextOutW
SetBkColor
CreateRectRgn
ExcludeClipRect
BitBlt
CreateCompatibleBitmap
GetClipBox
RoundRect
CreatePen
GetTextExtentPoint32W
CreateHatchBrush
GetStockObject
DeleteDC
SelectObject
CreateDIBSection
CreateCompatibleDC
DeleteObject
CreateFontIndirectW
GetDeviceCaps
SetPixelFormat
ChoosePixelFormat
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
TextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
CreateBitmap
CreateDCW
CopyMetaFileW
SetBkMode
GetTextFaceW
GetViewportOrgEx
GetWindowOrgEx
SetPixelV
SetPaletteEntries
ExtFloodFill
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
OffsetRgn
GetRgnBox
LPtoDP
CreateRoundRectRgn
Polyline
Polygon
CreatePolygonRgn
GetTextColor
Ellipse
CreateEllipticRgn
SetDIBColorTable
SetPixel
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
GetBkColor
RealizePalette
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
EnumFontFamiliesExW
GetTextMetricsW
DPtoLP
SetRectRgn
PatBlt

advapi32

RegSetValueExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shell32

CommandLineToArgvW
SHGetFolderPathW
SHGetFileInfoW
DragFinish
SHAppBarMessage
ShellExecuteW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHBrowseForFolderW
DragQueryFileW

ole32

OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CoInitializeEx
CoInitialize
CoUninitialize
CoCreateInstance
CoDisconnectObject
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CreateStreamOnHGlobal
OleTranslateAccelerator

msimg32

TransparentBlt
AlphaBlend

shlwapi

StrFormatByteSizeW
PathFileExistsW
PathRemoveFileSpecW
PathCombineW
PathAppendW
PathFindFileNameW
PathIsUNCW
PathStripToRootW
PathFindExtensionW
StrFormatKBSizeW

uxtheme

GetThemePartSize
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
IsAppThemed
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
GetWindowTheme

opengl32

wglMakeCurrent
glGetString
wglDeleteContext
wglGetProcAddress
wglCreateContext

netapi32

NetApiBufferFree
NetWkstaGetInfo

gdiplus

GdipFree
GdiplusShutdown
GdiplusStartup
GdipAlloc
GdipGetImageWidth
GdipGetImageHeight
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageRectI
GdipDrawImageRectRectI
GdipCloneImage
GdipGetImagePixelFormat
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipDisposeImage
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipGetImagePaletteSize
GdipGetImagePalette
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipMeasureString
GdipDrawString
GdipSetTextRenderingHint
GdipSetStringFormatTrimming
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipDeleteStringFormat
GdipCreateStringFormat
GdipCreateSolidFill
GdipDeleteBrush
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCloneBitmapAreaI
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromScan0
GdipCreateFromHDC

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

oleaut32

VarBstrFromDate
VariantChangeType
VariantCopy
VariantClear
SysAllocString
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocStringLen
LoadTypeLi
SysFreeString
VariantInit

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 412KB - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.giats
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 692KB - Virtual size: 691KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 700KB - Virtual size: 704KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

318d0710b46290ed2cbc474e0c34fc4f

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

advapi32

shell32

ole32

msimg32

shlwapi

uxtheme

opengl32

netapi32

gdiplus

oleacc

imm32

winmm

winspool.drv

oleaut32

Sections

.text Size: 1.7MB - Virtual size: 1.7MB

.rdata Size: 412KB - Virtual size: 412KB

.data Size: 28KB - Virtual size: 57KB

.gfids Size: 106KB - Virtual size: 106KB

.giats Size: 512B - Virtual size: 16B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 692KB - Virtual size: 691KB

.reloc Size: 700KB - Virtual size: 704KB

.text
Size: 1.7MB - Virtual size: 1.7MB

.rdata
Size: 412KB - Virtual size: 412KB

.data
Size: 28KB - Virtual size: 57KB

.gfids
Size: 106KB - Virtual size: 106KB

.giats
Size: 512B - Virtual size: 16B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 692KB - Virtual size: 691KB

.reloc
Size: 700KB - Virtual size: 704KB