8933face59569274eab8d007f210044f3272f1f734cd736c313c71d6ac7dca24

Sharing

Copy URL Twitter E-mail

General

Target

8933face59569274eab8d007f210044f3272f1f734cd736c313c71d6ac7dca24
Size

1.0MB
MD5

07476f5c47b0e1b4eaacebf41a5d1df3
SHA1

f811167287c6fb47ff1a016850a579ab373a84dc
SHA256

8933face59569274eab8d007f210044f3272f1f734cd736c313c71d6ac7dca24
SHA512

67740c351fd87d60e0cc9d6f9d80dcdd2708b9e75530b96f03c63aa8ebf3f2672c30fa018a45d773812fd15e4e1b5372bb707fa0bab5c937bffd9d16f6d4eb41
SSDEEP

12288:krhjFelxXTd8A4QivHBtUsgOySAVdlhG8onW9U0zVF57iuk/HPfFzIJ+qql23ZG9:kneXdVs6dsW3zVv7i9fF7MsBj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8933face59569274eab8d007f210044f3272f1f734cd736c313c71d6ac7dca24

Files

8933face59569274eab8d007f210044f3272f1f734cd736c313c71d6ac7dca24
.exe windows x86

90cb8c62ecca49f0b958f6f5fc2c6db0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

kernel32

LocalAlloc
SetFilePointer
FlushFileBuffers
LocalFree
CreateFileA
WaitForSingleObject
SetEvent
RaiseException
WaitForMultipleObjects
GetModuleFileNameA
GetCurrentThreadId
SetEndOfFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetWindowsDirectoryW
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
GetFileSizeEx
SetLastError
GetLocalTime
ReleaseMutex
GetCurrentProcessId
TerminateThread
CreateThread
InterlockedDecrement
OutputDebugStringW
InterlockedIncrement
GetCurrentProcess
FlushInstructionCache
GetTempPathW
CreateProcessW
GetDriveTypeW
GetDiskFreeSpaceExW
GetCommandLineW
GetLogicalDrives
DeviceIoControl
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
FormatMessageA
ExpandEnvironmentStringsA
SleepEx
SetEnvironmentVariableA
CompareStringW
CompareStringA
WriteConsoleW
GetConsoleOutputCP
GetTickCount
SetStdHandle
GetLocaleInfoW
GetConsoleMode
GetVersionExW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
QueryPerformanceCounter
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetDateFormatA
GetTimeFormatA
GetStartupInfoA
GetFileType
SetHandleCount
GetTimeZoneInformation
GetStdHandle
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCPInfo
RtlUnwind
GetStartupInfoW
ExitProcess
GetModuleHandleA
GetSystemTimeAsFileTime
ExitThread
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetThreadLocale
GetLocaleInfoA
GetACP
GetVersionExA
GetSystemDirectoryW
GetModuleFileNameW
CloseHandle
GetProcAddress
FreeLibrary
LoadLibraryW
GetModuleHandleW
FindFirstFileA
GetFullPathNameA
GetCurrentDirectoryA
WritePrivateProfileStringW
lstrlenW
WriteFile
FindClose
CreateDirectoryW
DeleteFileW
GetFileAttributesW
CreateMutexW
Sleep
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
WideCharToMultiByte
GlobalAlloc
GlobalLock
GlobalUnlock
lstrlenA
MultiByteToWideChar
GetPrivateProfileIntW
InterlockedExchange
CreateEventW
FreeResource
CreateFileW
GetFileSize
ReadFile
GlobalFree
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
ProcessIdToSessionId
OpenProcess
GetPrivateProfileStringW
GetConsoleCP
GetLastError
WriteConsoleA

user32

GetWindowLongW
SetWindowLongW
MonitorFromWindow
SetWindowPos
UpdateLayeredWindow
ScreenToClient
GetNextDlgTabItem
UnregisterClassA
GetDC
GetDesktopWindow
GetWindowRect
CopyRect
SetFocus
GetMonitorInfoW
wsprintfW
IsRectEmpty
ReleaseDC
LoadCursorW
InflateRect
LoadImageW
RegisterWindowMessageW
FindWindowW
LoadBitmapW
DefWindowProcW
RegisterClassExW
CreateWindowExW
DispatchMessageW
PostThreadMessageW
PeekMessageW
TranslateMessage
GetMessageW
PostMessageW
SetRect
SetCapture
ReleaseCapture
PtInRect
SetCursor
DrawTextW
SendMessageW
GetParent
LoadIconW
DestroyIcon
IsWindow
SetTimer
KillTimer
SetRectEmpty
UnionRect
MoveWindow
IntersectRect
DestroyWindow
GetCursorPos
SetActiveWindow
BringWindowToTop
EnumDisplaySettingsW
EnumDisplayDevicesW
PostQuitMessage
DrawFrameControl
CallWindowProcW
GetClassInfoExW
ClientToScreen
EndPaint
BeginPaint
GetFocus
IsChild
IsDialogMessageW
IsIconic
SetWindowRgn
OffsetRect
DrawIconEx
IsWindowVisible
EqualRect
ShowWindow
GetDlgCtrlID
GetDlgItem
GetSystemMetrics
InvalidateRect
MapWindowPoints
GetClientRect
GetWindow
SystemParametersInfoW

gdi32

RectInRegion
CreateFontIndirectW
GetCurrentObject
GetTextColor
RoundRect
GetClipRgn
GetTextExtentPoint32W
TextOutW
CreateRoundRectRgn
OffsetRgn
GetViewportOrgEx
ExtSelectClipRgn
SetViewportOrgEx
SetBkMode
LineTo
MoveToEx
BitBlt
SelectClipRgn
CreateRectRgnIndirect
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
GetDeviceCaps
GetStockObject
GetObjectW
Rectangle
ExtTextOutW
SetBkColor
SetTextColor
SetStretchBltMode
StretchBlt
CreateBitmap
SaveDC
RestoreDC
CreateDIBSection
SelectObject
CreatePen
DeleteObject
CreateRectRgn
CombineRgn

advapi32

RegOpenCurrentUser
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
OpenProcessToken
RevertToSelf
ImpersonateLoggedOnUser
RegOpenKeyW
RegCloseKey

shell32

SHCreateDirectoryExW
ord680
ShellExecuteW
SHGetSpecialFolderPathW

ole32

CoSetProxyBlanket
CoCreateInstance
CoUninitialize
CoInitializeSecurity
CoInitializeEx
CreateStreamOnHGlobal
CoInitialize

oleaut32

SafeArrayDestroy
VarBstrFromCy
SafeArrayGetElement
SafeArrayGetUBound
SafeArrayGetLBound
VarUdateFromDate
VariantChangeType
VariantClear
VariantInit
SysAllocString
SysFreeString

shlwapi

PathAddBackslashW
PathGetDriveNumberW
StrToIntW
StrToIntA
PathFindFileNameW
PathBuildRootW
PathFileExistsW
PathAppendW
PathRemoveFileSpecW

comctl32

_TrackMouseEvent

msimg32

AlphaBlend

gdiplus

GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipFillRectangleI
GdipNewPrivateFontCollection
GdipDeletePrivateFontCollection
GdipPrivateAddFontFile
GdipGetFontCollectionFamilyCount
GdipGetFontCollectionFamilyList
GdipCloneFontFamily
GdipCreateFont
GdipDeleteFont
GdipCreateFontFromLogfontW
GdipCreateStringFormat
GdipDeleteStringFormat
GdipSetStringFormatFlags
GdipSetStringFormatLineAlign
GdipSetStringFormatTrimming
GdipSetTextRenderingHint
GdipDrawString
GdipMeasureString
GdipCreatePath
GdipDeletePath
GdipAddPathPieI
GdipClosePathFigure
GdipAddPathRectangleI
GdipSetSmoothingMode
GdipSetClipPath
GdipTranslateWorldTransform
GdipRotateWorldTransform
GdipResetWorldTransform
GdipFillRectangle
GdipDeletePen
GdipDrawLinesI
GdipCreatePen1
GdipAddPathArcI
GdipFillPath
GdipDrawPath
GdipSetCompositingQuality
GdipSetPixelOffsetMode
GdipGetFamily
GdipAddPathStringI
GdipGetFontSize
GdipDrawImageI
GdipSetPenDashStyle
GdipSetPenEndCap
GdipSetPenStartCap
GdipSetPenMode
GdipDrawLine
GdipDrawRectangleI
GdipCreateLineBrushFromRectWithAngleI
GdipDeleteGraphics
GdipCreateFromHDC
GdipFree
GdipAlloc
GdiplusShutdown
GdiplusStartup
GdipDeleteFontFamily
GdipCloneImage
GdipDisposeImage
GdipCreateBitmapFromStream
GdipCreateHBITMAPFromBitmap
GdipGetImageWidth
GdipGetImageHeight
GdipSetInterpolationMode
GdipCreateBitmapFromScan0
GdipGetImagePixelFormat
GdipGetImageGraphicsContext
GdipGraphicsClear
GdipDrawImageRectI
GdipCloneBitmapArea
GdipDrawImageRectRectI
GdipImageRotateFlip
GdipDrawImageRectRect
GdipDrawImagePointsRectI
GdipLoadImageFromStream
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipLoadImageFromFile
GdipSetStringFormatAlign

ws2_32

WSAGetLastError
ioctlsocket
select
__WSAFDIsSet
getaddrinfo
freeaddrinfo
WSASetLastError
socket
connect
setsockopt
getpeername
getsockopt
htons
bind
ntohs
WSACleanup
WSAStartup
closesocket
recv
send
getsockname

Sections

.text
Size: 676KB - Virtual size: 674KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 180KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

90cb8c62ecca49f0b958f6f5fc2c6db0

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

msimg32

gdiplus

ws2_32

Sections

.text Size: 676KB - Virtual size: 674KB

.rdata Size: 140KB - Virtual size: 136KB

.data Size: 16KB - Virtual size: 26KB

.rsrc Size: 180KB - Virtual size: 177KB

.text Size: 8KB - Virtual size: 4KB

.text
Size: 676KB - Virtual size: 674KB

.rdata
Size: 140KB - Virtual size: 136KB

.data
Size: 16KB - Virtual size: 26KB

.rsrc
Size: 180KB - Virtual size: 177KB

.text
Size: 8KB - Virtual size: 4KB