0e626827732c35f4873ef37175809346fde4aab8e2e3c4176f24a6662821434d

Sharing

Copy URL Twitter E-mail

General

Target

0e626827732c35f4873ef37175809346fde4aab8e2e3c4176f24a6662821434d
Size

6.9MB
MD5

af2a087dbcea8869beec1a2af6d560c9
SHA1

e9499a4499620925a66dfe2d08f9af34b5ac6bfd
SHA256

0e626827732c35f4873ef37175809346fde4aab8e2e3c4176f24a6662821434d
SHA512

ce728c75fcc57479ae59966ab675a932f8cf68983a762db329a1fc5179f906a95f552002497d34cdcf89664e965b3a4bf0306f30ded9fb9e211b51a2df7cad0d
SSDEEP

196608:pIPgBFwfTStjso41Z3N0ZIbcZERzxPg8TXVPKIO7hHrTy8JwfifJVgesX:fwbShso4bN0ZlZERztPQFHrTafiTsX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e626827732c35f4873ef37175809346fde4aab8e2e3c4176f24a6662821434d

Files

0e626827732c35f4873ef37175809346fde4aab8e2e3c4176f24a6662821434d
.exe windows x86

ee88f7c0f2e4c343639afd7b3809c1b8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsDialogMessageA
SendDlgItemMessageA
GrayStringA
DrawTextA
TabbedTextOutA
GetMenuItemCount
GetWindowTextA
SetWindowTextA
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetClassNameA
UnhookWindowsHookEx
RegisterClipboardFormatA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
EnableWindow
SetCursor
SendMessageA
PostMessageA
PostQuitMessage
EndDialog
SetWindowLongA
PeekMessageA
GetMessageA
TranslateMessage
wsprintfA
MessageBoxA
ReleaseDC
GetForegroundWindow
GetDlgItem
FindWindowA
RegisterWindowMessageA
GetAncestor
EnumWindows
SetCursorPos
GetDC
UpdateWindow
LoadIconA
LoadCursorA
GetSysColorBrush
CreateDialogIndirectParamA
SetWindowPos
ShowWindow
SetFocus
GetSystemMetrics
GetWindowPlacement
IsIconic
SystemParametersInfoA
SetForegroundWindow
GetMessagePos
GetMessageTime
DefWindowProcA
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
CreateWindowExA
DestroyWindow
GetMenuItemID
GetSubMenu
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
UnregisterClassA
CopyRect
GetClientRect
AdjustWindowRectEx
IsWindow
SetActiveWindow
GetSysColor
MapWindowPoints
LoadStringA
PostThreadMessageA
DispatchMessageA
DestroyMenu
GetKeyboardType
LoadStringA
CharNextA
CallWindowProcA
wvsprintfA
PostThreadMessageA
GetNextDlgGroupItem
GetSysColorBrush
MapDialogRect
SetWindowContextHelpId
GetMenuCheckMarkDimensions
GetMenuState
SetMenuItemBitmaps
CheckMenuItem
MoveWindow
IsDialogMessageA
ScrollWindowEx
SendDlgItemMessageA
ShowScrollBar
GetScrollPos
RegisterClassA
GetMenuItemCount
GetMenuItemID
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
RemovePropA
GetLastActivePopup
RegisterWindowMessageA
GetWindowPlacement
EndDialog
CreateDialogIndirectParamA
GetWindowDC
CharUpperA
GetWindowTextLengthA
AdjustWindowRectEx
DrawTextW
MapWindowPoints
SetWindowTextA
DestroyWindow
HideCaret
DestroyCaret
CreateCaret
ShowCaret
UnregisterClassA
RegisterClassExA
GetScrollInfo
SetScrollInfo
SetCaretPos
ScrollWindow
GetMessageTime
BeginPaint
EndPaint
UnregisterHotKey
RegisterHotKey
WaitForInputIdle
wsprintfA
CloseClipboard
GetClipboardData
OpenClipboard
SetClipboardData
EmptyClipboard
IsClipboardFormatAvailable
GetSystemMetrics
GetCursorPos
MessageBoxA
MessageBeep
SetWindowPos
SendMessageA
DestroyCursor
SetParent
IsWindow
PostMessageA
GetTopWindow
GetParent
GetFocus
GetClientRect
InvalidateRect
ValidateRect
UpdateWindow
EqualRect
GetWindowRect
SetForegroundWindow
DestroyMenu
TrackPopupMenu
IsChild
ReleaseDC
IsRectEmpty
InvertRect
FillRect
GetDC
SetCursor
LoadCursorA
SetCursorPos
SetActiveWindow
GetSysColor
SetWindowLongA
GetWindowLongA
RedrawWindow
EnableWindow
IsWindowVisible
OffsetRect
PtInRect
DestroyIcon
IntersectRect
InflateRect
SetRect
SetScrollPos
SetScrollRange
GetScrollRange
SetCapture
GetCapture
ReleaseCapture
SetTimer
KillTimer
WinHelpA
LoadBitmapA
CopyRect
ChildWindowFromPointEx
ScreenToClient
GetMessagePos
SetWindowRgn
DestroyAcceleratorTable
GetWindow
GetActiveWindow
SetFocus
IsIconic
PeekMessageA
SetMenu
GetMenu
DeleteMenu
GetSystemMenu
DefWindowProcA
GetClassInfoA
IsZoomed
PostQuitMessage
CopyAcceleratorTableA
GetKeyState
TranslateAcceleratorA
IsWindowEnabled
ShowWindow
SystemParametersInfoA
LoadImageA
EnumDisplaySettingsA
ClientToScreen
EnableMenuItem
GetSubMenu
GetDlgCtrlID
CreateAcceleratorTableA
CreateMenu
ModifyMenuA
AppendMenuA
CreatePopupMenu
DrawIconEx
CreateIconFromResource
CreateIconFromResourceEx
RegisterClipboardFormatA
SetRectEmpty
DispatchMessageA
GetMessageA
WindowFromPoint
DrawFocusRect
DrawEdge
DrawFrameControl
TranslateMessage
LoadIconA
GetNextDlgTabItem
FrameRect
DrawStateA
MsgWaitForMultipleObjects
CharToOemA
TabbedTextOutA
DrawTextA
GrayStringA
ClipCursor
GetCursor
GetDoubleClickTime
GetKeyboardLayout
GetDesktopWindow
GetClassNameA
GetDlgItem
GetWindowTextA
GetForegroundWindow
CreateWindowExA

kernel32

CloseHandle
CreateToolhelp32Snapshot
Process32First
Process32Next
OpenProcess
VirtualQueryEx
CreateFileA
RtlMoveMemory
RtlFillMemory
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
GetTickCount
GetModuleFileNameA
WriteFile
GlobalAddAtomA
Sleep
ReadFile
GetFileSize
LCMapStringA
GetDiskFreeSpaceExA
GetCurrentDirectoryA
GetLocalTime
GetUserDefaultLCID
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
DeleteFileA
SetFilePointer
WritePrivateProfileStringA
LoadLibraryA
IsWow64Process
GetLastError
SetLastError
InterlockedIncrement
LoadResource
LockResource
GlobalGetAtomNameA
GetCurrentThreadId
GetCurrentThread
lstrcmpiA
lstrcmpA
GlobalDeleteAtom
lstrlenA
LocalAlloc
LocalFree
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
GlobalReAlloc
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
InterlockedDecrement
SetErrorMode
lstrcatA
lstrcpyA
lstrcpynA
GetVersion
GlobalFlags
GetACP
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
ReadProcessMemory
GlobalFindAtomA
WriteProcessMemory
RaiseException
FreeEnvironmentStringsW
LocalSize
HeapSize
GetEnvironmentStrings
TerminateProcess
FindResourceA
RtlUnwind
GetCommandLineA
GetOEMCP
GetCPInfo
FlushFileBuffers
GetCurrentProcess
GetProcessVersion
GetEnvironmentStringsW
ResumeThread
GetWindowsDirectoryA
DeviceIoControl
lstrcpyn
GetModuleHandleA
FreeLibrary
LoadLibraryExA
GetProcAddress
MulDiv
SetStdHandle
IsBadCodePtr
GetStringTypeW
GetStringTypeA
SetUnhandledExceptionFilter
LCMapStringW
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
IsBadReadPtr
CompareStringW
GetStringTypeW
GetStringTypeA
SetUnhandledExceptionFilter
IsBadWritePtr
LCMapStringW
LCMapStringA
HeapCreate
HeapDestroy
GetEnvironmentVariableA
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
SetStdHandle
HeapSize
GetSystemTimeAsFileTime
GetSystemTime
GetOEMCP
GetProcessVersion
SetErrorMode
GetProfileIntA
GlobalFlags
GetCurrentThread
IsBadCodePtr
LocalReAlloc
lstrcmpA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpiA
UnlockFile
LockFile
FlushFileBuffers
DuplicateHandle
FileTimeToSystemTime
SuspendThread
ReleaseMutex
CreateMutexA
IsDBCSLeadByteEx
IsValidCodePage
CompareStringA
EnumCalendarInfoA
FileTimeToDosDateTime
FileTimeToLocalFileTime
FormatMessageA
GetACP
GetCPInfo
GetDateFormatA
GetLocalTime
GetStringTypeExA
GlobalHandle
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
GetFileType
GetStdHandle
RaiseException
RtlUnwind
SetEndOfFile
UnhandledExceptionFilter
GetFileTime
InterlockedExchange
GetStartupInfoA
GetThreadLocale
SetEnvironmentVariableA
lstrcpynA
VirtualQuery
InterlockedIncrement
InterlockedDecrement
LocalAlloc
LocalFree
VirtualAlloc
VirtualFree
GetVersion
GetLocaleInfoA
GetTimeZoneInformation
SetLastError
GetSystemDirectoryA
LoadLibraryExA
GetWindowsDirectoryA
TerminateProcess
GetCurrentProcess
GetFileSize
SetFilePointer
TerminateThread
GetTempFileNameA
CreateSemaphoreA
ResumeThread
ReleaseSemaphore
EnterCriticalSection
LeaveCriticalSection
GetProfileStringA
WriteFile
WaitForMultipleObjects
CreateFileA
DeviceIoControl
SetEvent
FindResourceA
LoadResource
LockResource
ReadFile
lstrlenW
GetModuleFileNameA
WideCharToMultiByte
MultiByteToWideChar
GetCurrentThreadId
ExitProcess
GlobalSize
CloseHandle
WaitForSingleObject
CreateProcessA
GetTickCount
GetCommandLineA
MulDiv
GetDiskFreeSpaceA
GetProcAddress
GetModuleHandleA
GetVolumeInformationA
SetCurrentDirectoryA
GetCurrentDirectoryA
CreateDirectoryA
CopyFileA
DeleteFileA
GetFileAttributesA
SetFileAttributesA
FindClose
FindFirstFileA
GetTempPathA
GlobalUnlock
GlobalLock
GlobalAlloc
ExpandEnvironmentStringsA
Sleep
ResetEvent
CreateEventA
CreateThread
GetPrivateProfileStringA
WritePrivateProfileStringA
GetVersionExA
GetLastError
LoadLibraryA
FreeLibrary
GetFullPathNameA
GetUserDefaultLCID
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
GlobalReAlloc
FindNextFileA
lstrcpyA
WinExec
lstrlenA
lstrcatA
InitializeCriticalSection
DeleteCriticalSection
GlobalFree

gdi32

SetViewportOrgEx
SetMapMode
SetViewportExtEx
SetBkColor
ScaleViewportExtEx
SetWindowExtEx
SetTextColor
ScaleWindowExtEx
GetClipBox
GetObjectA
DeleteDC
Escape
GetDeviceCaps
Rectangle
CreateFontIndirectA
SaveDC
SelectObject
TextOutA
DeleteObject
ExtTextOutA
PtVisible
SetBkMode
RectVisible
CreateBitmap
OffsetViewportOrgEx
RestoreDC
GetStockObject
GetDeviceCaps
GetTextExtentPoint32A
CopyMetaFileA
GetMapMode
GetViewportExtEx
ExtSelectClipRgn
ExcludeClipRect
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetROP2
SetPolyFillMode
RestoreDC
SaveDC
IntersectClipRect
GetTextExtentPoint32W
ExtTextOutW
LineTo
MoveToEx
GetNearestColor
SetTextAlign
TranslateCharsetInfo
SetBrushOrgEx
AbortDoc
Escape
GetTextMetricsA
ExtTextOutA
RectVisible
PtVisible
GetTextExtentExPointW
CreateFontA
GetTextExtentExPointA
SetDIBitsToDevice
SetTextColor
SetBkMode
TextOutA
SetBkColor
CreateRectRgnIndirect
CreateDIBSection
SetStretchBltMode
GetClipRgn
CreatePolygonRgn
SelectClipRgn
DeleteObject
CreateDIBitmap
GetSystemPaletteEntries
CreatePalette
StretchBlt
SelectPalette
RealizePalette
GetDIBits
GetWindowExtEx
GetViewportOrgEx
GetWindowOrgEx
BeginPath
EndPath
PathToRegion
CreateEllipticRgn
CreateRoundRectRgn
GetTextColor
GetBkMode
GetBkColor
GetROP2
GetStretchBltMode
GetPolyFillMode
CreateCompatibleBitmap
CreateDCA
CreateBitmap
CreatePatternBrush
SelectObject
CreatePen
PatBlt
CombineRgn
CreateRectRgn
FillRgn
CreateSolidBrush
CreateFontIndirectA
GetStockObject
GetObjectA
EndPage
EndDoc
DeleteDC
StartDocA
StartPage
BitBlt
GetPixel
CreateCompatibleDC
Ellipse
Rectangle
LPtoDP
DPtoLP
GetCurrentObject
RoundRect
Polygon

ws2_32

ntohs
inet_addr
recv
select
send
setsockopt
WSAAsyncSelect
closesocket
WSACleanup
recv
getpeername
accept
ntohl
recvfrom
ioctlsocket
inet_ntoa

atl

ord42

advapi32

RegOpenKeyA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueA

ole32

RevokeDragDrop
OleInitialize
OleUninitialize
CLSIDFromString
CreateStreamOnHGlobal
DoDragDrop
CoTaskMemAlloc
RegisterDragDrop
CLSIDFromProgID
ReleaseStgMedium
CoTaskMemFree
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
OleGetClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
CoCreateInstance
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
OleRun
CoLockObjectExternal
CoFreeUnusedLibraries
OleUninitialize
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
OleRun
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
OleInitialize
OleDuplicateData

oleaut32

VarR8FromBool
VariantChangeType
VariantInit
SafeArrayDestroy
VariantClear
SysAllocString
SafeArrayCreate
RegisterTypeLi
LHashValOfNameSys
LoadTypeLi
VarR8FromCy
SafeArrayGetElemsize
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
VarDateFromStr
SysAllocStringByteLen
SafeArrayGetElemsize
SafeArrayPtrOfIndex
SysAllocStringLen
SysReAllocStringLen
UnRegisterTypeLi
OleCreateFontIndirect
OleCreatePictureIndirect
LoadTypeLi
LHashValOfNameSys
RegisterTypeLi
SafeArrayPutElement
SafeArrayCreate
SafeArrayDestroy
SysAllocString
VariantInit
VariantCopyInd
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
VariantChangeType
VariantClear
VariantCopy
SysStringLen
VariantTimeToSystemTime
SysFreeString
SafeArrayGetElement

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA
ClosePrinter
OpenPrinterA
DocumentPropertiesA

comctl32

ord17
ImageList_GetImageInfo
_TrackMouseEvent
ImageList_AddMasked
ImageList_Draw
ImageList_Add
ImageList_BeginDrag
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_EndDrag
ord17

oledlg

ord8
ord8

msvfw32

DrawDibDraw

avifil32

AVIStreamInfoA
AVIStreamGetFrame

winmm

midiStreamOut
midiOutPrepareHeader
midiStreamProperty
midiStreamOpen
midiOutUnprepareHeader
waveOutOpen
waveOutClose
waveOutReset
waveOutPause
waveOutWrite
waveOutPrepareHeader
waveOutUnprepareHeader
PlaySoundA
midiStreamStop
midiOutReset
midiStreamClose
midiStreamRestart
waveOutGetNumDevs
waveOutRestart

comdlg32

PrintDlgA
GetSaveFileNameA
GetFileTitleA
ChooseColorA
GetOpenFileNameA

shell32

DragFinish
DragQueryFileA
ShellExecuteA
SHGetSpecialFolderPathA
Shell_NotifyIconA
DragAcceptFiles

imm32

ImmReleaseContext
ImmSetCompositionWindow
ImmSetCompositionFontA
ImmNotifyIME
ImmGetContext
ImmGetCompositionStringW

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CODE
Size: 332KB - Virtual size: 330KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 376KB - Virtual size: 763KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 232KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 1002B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ee88f7c0f2e4c343639afd7b3809c1b8

Headers

File Characteristics

Imports

user32

kernel32

gdi32

ws2_32

atl

advapi32

ole32

oleaut32

winspool.drv

comctl32

oledlg

msvfw32

avifil32

winmm

comdlg32

shell32

imm32

Sections

.text Size: 3.7MB - Virtual size: 3.7MB

CODE Size: 332KB - Virtual size: 330KB

.rdata Size: 2.1MB - Virtual size: 2.1MB

.data Size: 376KB - Virtual size: 763KB

DATA Size: 68KB - Virtual size: 67KB

BSS Size: 28KB - Virtual size: 25KB

.rsrc Size: 40KB - Virtual size: 38KB

.data Size: 232KB - Virtual size: 229KB

.text Size: 4KB - Virtual size: 1002B

.text
Size: 3.7MB - Virtual size: 3.7MB

CODE
Size: 332KB - Virtual size: 330KB

.rdata
Size: 2.1MB - Virtual size: 2.1MB

.data
Size: 376KB - Virtual size: 763KB

DATA
Size: 68KB - Virtual size: 67KB

BSS
Size: 28KB - Virtual size: 25KB

.rsrc
Size: 40KB - Virtual size: 38KB

.data
Size: 232KB - Virtual size: 229KB

.text
Size: 4KB - Virtual size: 1002B