9d6ccf4ec07691b16c5256ca5cc16653048bf8e38a73251d3fbee8c18d982eb8

Sharing

Copy URL Twitter E-mail

General

Target

9d6ccf4ec07691b16c5256ca5cc16653048bf8e38a73251d3fbee8c18d982eb8
Size

7.0MB
MD5

a3531e31efda68d9799c212c9a3204c2
SHA1

99c45ea2d31290eb35a486ce017efdfba2fdfb2c
SHA256

9d6ccf4ec07691b16c5256ca5cc16653048bf8e38a73251d3fbee8c18d982eb8
SHA512

f97815d16dce78024a1ee57dfe5e2fba641da4af80525ece7b9516c4fcd77f19940c5a47b9f95925fa70bd28ffba9a54f72c6b8af229c2c20e865f2c5acf3d99
SSDEEP

98304:V1tts15tWzqs2fj20fg3Jek0eAdmckoTNnW9w7ec7AD:V1s1KZMvVt5W9w77c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9d6ccf4ec07691b16c5256ca5cc16653048bf8e38a73251d3fbee8c18d982eb8

Files

9d6ccf4ec07691b16c5256ca5cc16653048bf8e38a73251d3fbee8c18d982eb8
.exe windows x86

e285d6b6d0d0ccac12e3601f127bcabb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

skinppwtl

ord3
ord39
ord2

kernel32

GetStringTypeW
GetConsoleCP
GetConsoleMode
GetACP
LCMapStringW
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
SetEnvironmentVariableA
GetTimeZoneInformation
IsValidCodePage
GetLocaleInfoA
GetOEMCP
GetCPInfo
TerminateProcess
IsDebuggerPresent
UnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
HeapQueryInformation
HeapSize
ExitProcess
GetFileType
SetStdHandle
HeapReAlloc
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapFree
HeapAlloc
EncodePointer
InterlockedCompareExchange
DecodePointer
RtlUnwind
RaiseException
GetStartupInfoW
HeapSetInformation
GetCommandLineW
FindResourceExW
GetUserDefaultLCID
VirtualProtect
SearchPathW
GetTickCount
InitializeCriticalSectionAndSpinCount
GetTempPathW
GetTempFileNameW
GetNumberFormatW
GetWindowsDirectoryW
GetCurrentDirectoryW
lstrcpyW
SetErrorMode
GetFileTime
GetFileSizeEx
GetFileAttributesW
FileTimeToLocalFileTime
GetFileAttributesExW
FileTimeToSystemTime
GlobalGetAtomNameW
GlobalFlags
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GetPrivateProfileIntW
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
lstrlenA
lstrcmpA
GetProfileIntW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
DeleteFileW
lstrcmpiW
GetThreadLocale
SetThreadPriority
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
CompareStringW
lstrcmpW
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
GetCurrentProcessId
WideCharToMultiByte
GlobalFree
CopyFileW
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
lstrlenW
GetCurrentProcess
ActivateActCtx
DeactivateActCtx
SetLastError
GetModuleHandleW
CreateThread
WaitCommEvent
WaitForMultipleObjects
GetCommMask
ExitThread
Sleep
CreateEventW
InitializeCriticalSection
CreateFileW
SetCommTimeouts
SetCommMask
GetCommState
SetCommState
CloseHandle
SetEvent
WaitForSingleObject
ClearCommError
ReadFile
ResetEvent
PurgeComm
WriteFile
GetOverlappedResult
GetLastError
FormatMessageW
LocalFree
SuspendThread
ResumeThread
LoadLibraryW
GetProcAddress
FreeLibrary
MulDiv
GetModuleFileNameW
CreateProcessW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetLocalTime
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
InterlockedExchange
FindResourceW
LoadResource
LockResource
SizeofResource

user32

GetWindowRgn
DestroyCursor
SubtractRect
GetDoubleClickTime
GetUpdateRect
IsClipboardFormatAvailable
CreateMenu
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
MapVirtualKeyExW
IsCharLowerW
PostThreadMessageW
CharUpperBuffW
CopyIcon
UnpackDDElParam
ReuseDDElParam
InsertMenuItemW
TranslateAcceleratorW
FrameRect
RegisterClipboardFormatW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
LockWindowUpdate
BringWindowToTop
SetCursorPos
CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
DrawFrameControl
SetClassLongW
DestroyAcceleratorTable
SetParent
DrawIconEx
CopyImage
GetIconInfo
HideCaret
DrawFocusRect
InvertRect
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableW
CharNextW
DestroyIcon
GetMenuDefaultItem
SetMenuDefaultItem
CreatePopupMenu
IsMenu
MonitorFromPoint
UpdateLayeredWindow
EnableScrollBar
UnionRect
IsZoomed
GetAsyncKeyState
NotifyWinEvent
MessageBeep
WindowFromPoint
SetWindowRgn
DeleteMenu
SetLayeredWindowAttributes
EnumDisplayMonitors
UnregisterClassW
RealChildWindowFromPoint
GetSysColorBrush
SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
PostQuitMessage
DrawStateW
GetDCEx
CharUpperW
MapVirtualKeyW
GetKeyNameTextW
GetMessageW
GetCursorPos
ValidateRect
WaitMessage
LoadMenuW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
RegisterWindowMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
SetForegroundWindow
ShowScrollBar
PtInRect
GetWindowRect
InflateRect
OffsetRect
FillRect
IsWindowVisible
CreateWindowExW
GetClassInfoExW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
CallWindowProcW
GetMenu
UnhookWindowsHookEx
IntersectRect
GetWindowThreadProcessId
GetLastActivePopup
EndPaint
BeginPaint
GetWindowDC
GetDC
ClientToScreen
ScreenToClient
GetWindowTextLengthW
GetWindowTextW
GetFocus
SetFocus
SetWindowPos
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowLongW
GetDlgCtrlID
IsWindow
SetWindowTextW
GetWindowLongW
IsDialogMessageW
SetDlgItemTextW
SendDlgItemMessageW
GetDlgItem
CheckDlgButton
GetWindow
GetMenuState
GetMenuStringW
GetMenuItemID
InsertMenuW
GetMenuItemCount
SetRect
InvalidateRect
SetCursor
CopyRect
IsRectEmpty
DrawEdge
GetClientRect
ReleaseDC
UpdateWindow
SetCapture
ChildWindowFromPoint
EnableWindow
RegisterClassW
DefWindowProcW
GetClassInfoW
ReleaseCapture
LoadCursorW
GetSysColor
SetRectEmpty
GetScrollPos
SetScrollPos
GetScrollRange
SetTimer
LoadBitmapW
RedrawWindow
KillTimer
GetParent
SendMessageW
PostMessageW
SetActiveWindow
LoadImageW
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
MessageBoxW
DispatchMessageW
TranslateMessage
PeekMessageW
GetSystemMetrics
DrawIcon
AppendMenuW
GetSystemMenu
IsIconic
LoadIconW
RemoveMenu
GetSubMenu
DefFrameProcW

gdi32

GetTextColor
GetRgnBox
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreatePolygonRgn
CreateEllipticRgn
OffsetRgn
SetDIBColorTable
SetPixel
EnumFontFamiliesExW
ExtFloodFill
SetPaletteEntries
CreateRoundRectRgn
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
SetPixelV
EnumFontFamiliesW
GetTextFaceW
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetPixel
GetWindowOrgEx
GetTextCharsetInfo
CreateDIBitmap
PatBlt
CombineRgn
SetRectRgn
CreateRectRgnIndirect
GetObjectType
SelectPalette
CreateBitmap
CreatePatternBrush
ExtSelectClipRgn
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
MoveToEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
EndPage
AbortDoc
EndDoc
DeleteDC
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
CopyMetaFileW
Arc
Escape
TextOutW
RectVisible
PtVisible
GetTextMetricsW
StretchBlt
LPtoDP
DPtoLP
GetMapMode
GetBkColor
CreateFontIndirectW
CreateDCW
CreateHatchBrush
Polygon
Ellipse
PolyBezier
Polyline
ExtCreatePen
CreateDIBSection
GetStockObject
GetObjectW
SelectObject
GetTextExtentPoint32W
ExtTextOutW
DeleteObject
CreatePen
CreateSolidBrush
Rectangle
CreateFontW
CreateCompatibleBitmap
CreateCompatibleDC
GetDeviceCaps
BitBlt
StartDocW
StartPage
ScaleViewportExtEx

msimg32

AlphaBlend
TransparentBlt
GradientFill

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

RegQueryValueW
RegEnumValueW
RegQueryInfoKeyW
RegCloseKey
RegOpenKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegCreateKeyExW
RegEnumKeyExW
RegQueryValueExW
RegEnumKeyW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW

shell32

DragAcceptFiles
DragFinish
DragQueryFileW
SHGetFileInfoW
SHGetDesktopFolder
SHBrowseForFolderW
SHAppBarMessage
ShellExecuteW
SHGetSpecialFolderLocation
SHGetPathFromIDListW

comctl32

InitCommonControlsEx
ImageList_GetIconSize

shlwapi

PathFindExtensionW
PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathRemoveFileSpecW

ole32

CLSIDFromString
CLSIDFromProgID
CoCreateGuid
OleDuplicateData
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
CoInitializeEx
CoInitialize
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
OleGetClipboard
RegisterDragDrop
CoTaskMemFree
CoRegisterMessageFilter
CoRevokeClassObject
RevokeDragDrop
ReleaseStgMedium
CoLockObjectExternal

oleaut32

OleCreateFontIndirect
VarBstrFromDate
SysStringLen
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysFreeString
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SysAllocString
VariantCopy

oledlg

OleUIBusyW

gdiplus

GdipCreateBitmapFromScan0
GdipDrawImageI
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipDeleteGraphics
GdipCloneImage
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipAlloc
GdipFree

ws2_32

WSAStartup
WSACleanup
gethostbyname
closesocket
htonl
htons
accept
socket
select
bind
WSAGetLastError
WSASetLastError
connect
sendto
recvfrom
WSAAsyncSelect
send
recv
inet_addr
ntohl

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 361KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.8MB - Virtual size: 4.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 201KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e285d6b6d0d0ccac12e3601f127bcabb

Headers

DLL Characteristics

File Characteristics

Imports

skinppwtl

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

ws2_32

oleacc

imm32

winmm

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 361KB - Virtual size: 360KB

.data Size: 28KB - Virtual size: 58KB

.rsrc Size: 4.8MB - Virtual size: 4.8MB

.reloc Size: 201KB - Virtual size: 201KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 361KB - Virtual size: 360KB

.data
Size: 28KB - Virtual size: 58KB

.rsrc
Size: 4.8MB - Virtual size: 4.8MB

.reloc
Size: 201KB - Virtual size: 201KB