a83447fe831e0a1bd37d2d3e67c09158aad611e9f869ead9ccc22dd5f3aa2cbc

Sharing

Copy URL Twitter E-mail

General

Target

a83447fe831e0a1bd37d2d3e67c09158aad611e9f869ead9ccc22dd5f3aa2cbc
Size

3.4MB
MD5

7dfd8b79b11e20fd1b8bf400fd95e993
SHA1

9edb4ea1ab7529922b6d96dd6e8b83bc25e837a9
SHA256

a83447fe831e0a1bd37d2d3e67c09158aad611e9f869ead9ccc22dd5f3aa2cbc
SHA512

91a0d955a19e58011ca2725450a6cc80a1610d0d246ee2a7e2c57ee4d796678967be18122645a2ed326053536cd57912eee9fcdec92cd74a7eaaeaa0c4c8a4a8
SSDEEP

98304:0GyiBhkiHnJOKrcMYixzPVqT1VHGkYFkjahzpo1gjagb9APuaQVRwX1cFLOAkGk+:0ecdVHGkYFkjahzpo1gjagb9APuaQVRV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a83447fe831e0a1bd37d2d3e67c09158aad611e9f869ead9ccc22dd5f3aa2cbc

Files

a83447fe831e0a1bd37d2d3e67c09158aad611e9f869ead9ccc22dd5f3aa2cbc
.exe windows x86

08053fbccbb3809f5f38ccd8ab018f73

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
GetDriveTypeW
LCMapStringW
GetStringTypeW
GetACP
ExitProcess
GetStdHandle
HeapQueryInformation
ReadConsoleW
VirtualAlloc
GetSystemInfo
GetCommandLineW
GetCommandLineA
GetFileType
SetStdHandle
QueryPerformanceFrequency
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
RtlUnwind
SetFilePointerEx
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
SetEnvironmentVariableA
FreeEnvironmentStringsW
WriteConsoleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
GetWindowsDirectoryW
FindResourceExW
GetProfileIntW
SearchPathW
SetErrorMode
VirtualProtect
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
ReplaceFileW
GetTempFileNameW
GetDiskFreeSpaceW
GetTickCount
GetPrivateProfileIntW
CompareStringA
GetCurrentThread
CreateMutexW
ReleaseMutex
VerifyVersionInfoW
VerSetConditionMask
GetVersionExW
GlobalGetAtomNameW
GetCurrentDirectoryW
lstrcpyW
SystemTimeToFileTime
SetFileTime
LocalFileTimeToFileTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
GetThreadLocale
GetStringTypeExW
MoveFileW
lstrcmpiW
GetCurrentProcess
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetShortPathNameW
GetFullPathNameW
GetFileSize
FlushFileBuffers
lstrcmpA
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindNextFileW
FindFirstFileW
FindClose
FileTimeToLocalFileTime
GetCurrentProcessId
InitializeCriticalSectionAndSpinCount
ResumeThread
SetThreadPriority
CreateEventW
WaitForSingleObject
SetEvent
GlobalFindAtomW
GlobalAddAtomW
LoadLibraryW
LoadLibraryA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
FreeResource
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
OutputDebugStringA
SetLastError
CopyFileW
FormatMessageW
MulDiv
LocalFree
GlobalSize
GlobalUnlock
GlobalLock
GetModuleFileNameW
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
SizeofResource
HeapSize
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
HeapFree
OutputDebugStringW
GetLocalTime
GetPrivateProfileSectionW
GetLastError
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
Sleep
MultiByteToWideChar
GlobalFree
CloseHandle
WriteFile
CreateFileW
DeleteFileW
GetTempPathW
GlobalAlloc
FindResourceW
LoadResource
LockResource
VirtualQuery

user32

EnableScrollBar
UpdateLayeredWindow
GetIconInfo
CopyImage
DestroyIcon
DrawFrameControl
LoadCursorW
IntersectRect
WindowFromPoint
SetCursor
MessageBeep
DeleteMenu
GetSystemMenu
KillTimer
GetAsyncKeyState
IsZoomed
TrackMouseEvent
NotifyWinEvent
SetWindowRgn
DestroyAcceleratorTable
IsRectEmpty
RegisterClipboardFormatW
CharUpperW
OffsetRect
SetRectEmpty
SendDlgItemMessageA
ReleaseDC
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
GetWindowThreadProcessId
GetDesktopWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
LoadMenuW
LoadBitmapW
DrawStateW
GetCursorPos
GetActiveWindow
TranslateMessage
GetMessageW
SystemParametersInfoW
InflateRect
GetMenuItemInfoW
DestroyMenu
GetSystemMetrics
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
UnionRect
LoadIconW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
MessageBoxW
AdjustWindowRectEx
GetWindowRect
RemovePropW
GetPropW
SetPropW
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
EnumDisplayMonitors
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
PostQuitMessage
WaitMessage
SetWindowContextHelpId
MapDialogRect
GetWindow
GetMenuItemCount
GetSubMenu
GetKeyState
IsIconic
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
MonitorFromPoint
BringWindowToTop
CreatePopupMenu
LockWindowUpdate
SetParent
CharUpperBuffW
DrawEdge
GetSysColorBrush
DrawFocusRect
DrawIconEx
SetRect
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
DefWindowProcW
GetMessageTime
LoadImageW
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
SetClassLongW
SetScrollInfo
SetLayeredWindowAttributes
GetMenuItemID
ModifyMenuW
EnableWindow
SendMessageW
FillRect
SetTimer
RedrawWindow
InvalidateRect
ShowScrollBar
AppendMenuW
IsChild
GetFocus
GetParent
PtInRect
PostMessageW
GetDC
UnregisterClassW
UpdateWindow
EqualRect
GetClientRect
ClientToScreen
SetCapture
ReleaseCapture
GetMenuStringW
GetMenuState
SetCursorPos
InsertMenuW
RemoveMenu
IsWindow
ShowWindow
MoveWindow
SetWindowPos
GetDlgItem
SetDlgItemTextW
CheckDlgButton
GetDlgCtrlID
SetFocus
IsWindowEnabled
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
GetWindowLongW
PostThreadMessageW
ShowOwnedPopups
RealChildWindowFromPoint
GetKeyNameTextW
SetWindowLongW
IsDialogMessageW
RegisterWindowMessageW
DispatchMessageW
PeekMessageW
GetMessagePos
MapVirtualKeyW
GetMenuDefaultItem
SetMenuDefaultItem
IsClipboardFormatAvailable
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableW
CopyAcceleratorTableW
GetTabbedTextExtentW
GetWindowRgn
CreateMenu
MapVirtualKeyExW
IsCharLowerW
InvertRect
HideCaret
DrawIcon
InvalidateRgn
CharNextW
GetDoubleClickTime
DestroyCursor
GetNextDlgGroupItem
GetUpdateRect
SubtractRect
EnumChildWindows
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
FrameRect
CopyIcon
EndPaint

gdi32

CreateCompatibleBitmap
CreateFontW
GetTextExtentPoint32W
DPtoLP
CopyMetaFileW
CreateDCW
GetObjectW
CreateFontIndirectW
ExtTextOutW
GetStockObject
CreatePatternBrush
CreateRectRgn
Escape
ExcludeClipRect
GetClipBox
GetCurrentPositionEx
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
StartDocW
TextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
StretchBlt
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetTextColor
GetTextMetricsW
CreateRoundRectRgn
PatBlt
CreateDIBSection
CombineRgn
CreateEllipticRgn
CreateRectRgnIndirect
Ellipse
GetBkColor
CreatePolygonRgn
Polygon
Polyline
RoundRect
GetMapMode
SetRectRgn
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
GetDIBits
RealizePalette
SetPixel
SetDIBColorTable
GetRgnBox
OffsetRgn
CreatePalette
GetPaletteEntries
ExtFloodFill
SetPaletteEntries
GetCharWidthW
GetViewportOrgEx
LPtoDP
EnumFontFamiliesExW
GetNearestPaletteIndex
GetSystemPaletteEntries
GetWindowOrgEx
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetTextFaceW
SetStretchBltMode
SetTextColor
SetBkColor
BitBlt
DeleteDC
GetDeviceCaps
CreateBitmap
CreateCompatibleDC
Rectangle
DeleteObject
SetPixelV
LineTo
MoveToEx
SelectObject
CreatePen
UnrealizeObject
OffsetViewportOrgEx
CreateHatchBrush
CreateSolidBrush

msimg32

AlphaBlend
TransparentBlt

winspool.drv

GetJobW
ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegEnumKeyW
RegEnumValueW
SystemFunction036
RegEnumKeyExW
SetFileSecurityW
GetFileSecurityW
RegQueryValueW
RegCloseKey
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegSetValueW

shell32

SHAddToRecentDocs
SHGetFileInfoW
DragQueryFileW
DragFinish
SHAppBarMessage
SHGetMalloc
SHGetPathFromIDListW
ExtractIconW
ShellExecuteW
SHGetDesktopFolder
SHBrowseForFolderW
SHGetSpecialFolderLocation

comctl32

InitCommonControlsEx

shlwapi

PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW
PathIsUNCW
StrFormatKBSizeW

uxtheme

IsThemeBackgroundPartiallyTransparent
GetThemePartSize
DrawThemeText
IsAppThemed
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
GetThemeSysColor
GetWindowTheme
DrawThemeParentBackground

ole32

OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
CoRevokeClassObject
CoGetClassObject
DoDragDrop
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
OleLockRunning
CreateStreamOnHGlobal
OleIsCurrentClipboard
OleFlushClipboard
OleGetClipboard
CoDisconnectObject
CLSIDFromProgID
CLSIDFromString
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoInitialize
CoCreateGuid
CoCreateInstance
CoInitializeEx
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop

oleaut32

SysAllocString
SysStringLen
SysAllocStringByteLen
SysFreeString
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantChangeType
VariantCopy
VarBstrFromDate
OleCreateFontIndirect
SysAllocStringLen
VariantInit
VariantClear
LoadTypeLi

oledlg

OleUIBusyW

gdiplus

GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipSetInterpolationMode
GdipDrawImageRectI
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdipFree
GdipAlloc
GdiplusStartup
GdiplusShutdown
GdipDrawLinesI
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipDeletePen
GdipCreateBitmapFromStream
GdipCreatePen1

ws2_32

WSASetLastError
WSACleanup
WSAStartup

visa32

ord129
ord141
ord131
ord134
ord257
ord130
ord132
ord256

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundW

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 133KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

08053fbccbb3809f5f38ccd8ab018f73

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

ws2_32

visa32

oleacc

imm32

winmm

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 363KB - Virtual size: 363KB

.data Size: 25KB - Virtual size: 50KB

.gfids Size: 512B - Virtual size: 260B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.reloc Size: 133KB - Virtual size: 133KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 363KB - Virtual size: 363KB

.data
Size: 25KB - Virtual size: 50KB

.gfids
Size: 512B - Virtual size: 260B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

.reloc
Size: 133KB - Virtual size: 133KB