164e3e0783918e05662693a5cef1225b87062b3b6db4e7491ce3ae9dfab6b40d

Sharing

Copy URL Twitter E-mail

General

Target

164e3e0783918e05662693a5cef1225b87062b3b6db4e7491ce3ae9dfab6b40d
Size

1.6MB
MD5

d91917a086573dc815fc872d1086a2ec
SHA1

e821ba82dfcbde98a8d15117c20d6ad3926f647d
SHA256

164e3e0783918e05662693a5cef1225b87062b3b6db4e7491ce3ae9dfab6b40d
SHA512

722d63b2746e6748331a058231fe2074a499bb5062bc5bc250936738c15fa07cc5157ff08be73167c5e73841179ec800e588105d38b7f3937d72fd9e920788cf
SSDEEP

24576:lueozEY0j1RTs2d4U4caTYJspLmrc/7mOsKrZFsC9TTRtJnIUe3IYehgU5rsbD:JRddqcahpmazH9TNtFIUcIY8giM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
164e3e0783918e05662693a5cef1225b87062b3b6db4e7491ce3ae9dfab6b40d

Files

164e3e0783918e05662693a5cef1225b87062b3b6db4e7491ce3ae9dfab6b40d
.exe windows x86

fe27e958f5450b8f4fd3dad627920bd4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
GetTickCount
FindFirstFileW
FindNextFileW
FindClose
ReleaseMutex
DeleteFileW
CreateEventW
CreateMutexW
lstrcmpW
MulDiv
GetLocaleInfoW
CreateFileA
SetEnvironmentVariableA
CompareStringA
SetStdHandle
GetOEMCP
IsBadCodePtr
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetStringTypeW
GetStringTypeA
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
UnhandledExceptionFilter
HeapSize
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
SetUnhandledExceptionFilter
HeapCreate
HeapDestroy
CompareStringW
GetCurrentProcessId
QueryPerformanceCounter
VirtualProtect
GetCPInfo
TerminateProcess
GetStartupInfoW
GetModuleHandleA
CreateThread
ExitThread
HeapReAlloc
RtlUnwind
ExitProcess
InterlockedCompareExchange
LoadLibraryA
LCMapStringW
LCMapStringA
GetUserDefaultLCID
GetVersionExA
GetSystemTime
LoadLibraryW
GetProcAddress
Sleep
VirtualFree
VirtualAlloc
CreateFileMappingW
UnmapViewOfFile
MapViewOfFile
VirtualQuery
IsBadWritePtr
FlushFileBuffers
SetFilePointer
SetEndOfFile
FlushViewOfFile
WriteFile
GetFileSizeEx
GetSystemInfo
ReadFile
GetFileSize
GetTempFileNameW
GetTempPathW
GetSystemTimeAsFileTime
SetFileTime
CreateFileW
IsBadReadPtr
WideCharToMultiByte
GetStringTypeExW
ReleaseSemaphore
CreateSemaphoreW
SetEvent
ResetEvent
LockResource
GetFullPathNameW
SetErrorMode
GetFileAttributesW
ResumeThread
GetExitCodeThread
CloseHandle
WaitForSingleObject
lstrcatW
lstrcpynA
HeapFree
GetCurrentDirectoryW
lstrlenA
lstrcpynW
lstrcmpiW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
GetLastError
GetModuleFileNameW
GetModuleHandleW
lstrcpyW
InterlockedIncrement
GetCurrentThreadId
lstrlenW
InterlockedDecrement
GetProcessHeap
HeapAlloc
InterlockedExchange
GetCurrentProcess
FlushInstructionCache
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
GetModuleFileNameA

user32

DestroyWindow
RegisterClassExW
LoadImageW
LoadCursorW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
LoadStringW
ShowWindow
SetWindowLongW
SetWindowsHookExW
wvsprintfW
UnregisterClassW
CallNextHookEx
GetDCEx
GetWindowDC
UnhookWindowsHookEx
LoadBitmapW
SetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
SetDlgItemInt
GetDlgItemInt
GetClassInfoExW
CreateWindowExW
LoadAcceleratorsW
LoadMenuW
MessageBoxA
ScrollDC
CharNextW
DefWindowProcW
MessageBoxW
TranslateAcceleratorW
GetWindowLongW
PostMessageW
SetWindowTextW
GetMenu
SetMenu
SetWindowPos
GetWindowRect
GetClientRect
GetWindowPlacement
AdjustWindowRectEx
CopyRect
IsRectEmpty
EqualRect
BringWindowToTop
IsIconic
RedrawWindow
GetCursorPos
GetClassNameW
CharUpperW
IsDlgButtonChecked
CheckDlgButton
GetAsyncKeyState
GetForegroundWindow
SendDlgItemMessageW
EndDialog
CreateDialogParamW
GetNextDlgTabItem
IsChild
SetDlgItemTextW
GetMessagePos
GetFocus
FillRect
SetRect
GetWindowTextLengthW
GetWindowTextW
GetSysColor
EnableMenuItem
GetDlgItem
GetKeyState
DrawTextW
FrameRect
GetDC
ReleaseDC
IntersectRect
ModifyMenuW
GetSubMenu
GetWindow
ValidateRect
CharLowerW
GetActiveWindow
SetCursor
EnableWindow
IsWindowEnabled
DrawEdge
GetSystemMetrics
InflateRect
DrawFocusRect
ReleaseCapture
SetCapture
GetParent
GetCapture
EndPaint
BeginPaint
SetRectEmpty
GetDlgCtrlID
UpdateWindow
ScreenToClient
ClientToScreen
wsprintfW
SetMenuDefaultItem
SetMenuItemInfoW
RemoveMenu
PtInRect
MonitorFromPoint
GetMonitorInfoW
MapWindowPoints
TrackPopupMenuEx
CreatePopupMenu
GetMenuItemCount
AppendMenuW
GetMenuItemInfoW
DestroyMenu
MessageBeep
LoadStringA
SetFocus
PostQuitMessage
SendMessageW
InvalidateRect
IsWindowVisible
DialogBoxParamW
CallWindowProcW
KillTimer
SetTimer
SystemParametersInfoW
IsWindow
UnionRect
OffsetRect

gdi32

CreateFontIndirectW
SetMapMode
SetTextCharacterExtra
GetObjectW
SetBkColor
ExtTextOutW
RectVisible
BitBlt
DeleteDC
CreateCompatibleBitmap
SetViewportOrgEx
SelectObject
CreateCompatibleDC
DeleteObject
GetStockObject
CreateSolidBrush
SetBkMode
SetTextColor
TextOutW
SelectClipRgn
IntersectClipRect
StretchBlt
SetStretchBltMode
ExcludeClipRect
GetTextExtentPoint32W
SetPixel
Ellipse
Rectangle
PatBlt
SetDIBColorTable
CreatePen
MoveToEx
LineTo
SetBrushOrgEx
CreateDIBSection
GdiFlush

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegCloseKey
RegOpenKeyExW
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW
RegQueryInfoKeyW
RegEnumKeyExW
RegSetValueExW
RegQueryValueExW

shell32

SHGetSpecialFolderLocation
SHGetFolderPathW
SHCreateDirectoryExW
ShellExecuteW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetDesktopFolder
DragFinish
SHBindToParent
SHGetFileInfoW
DragQueryFileW

ole32

ReleaseStgMedium
RegisterDragDrop
RevokeDragDrop
OleInitialize
OleUninitialize
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitialize
CreateBindCtx
StringFromCLSID

oleaut32

VarUI4FromStr

shlwapi

PathCanonicalizeW
PathIsDirectoryW
PathIsRelativeW
StrRetToStrW
PathFileExistsW
PathAddBackslashW
PathAppendW

comctl32

ImageList_GetIconSize
ImageList_Draw
_TrackMouseEvent
ImageList_Add
ImageList_Destroy
ImageList_Create
InitCommonControlsEx
ImageList_AddMasked
ImageList_LoadImageW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

libmpg123-0

mpg123_scan
mpg123_seek_frame
mpg123_info
mpg123_length
mpg123_new
mpg123_open
mpg123_close
mpg123_getformat
mpg123_exit
mpg123_init
mpg123_format
mpg123_format_none
mpg123_seek
mpg123_outblock
mpg123_read
mpg123_delete

wmvcore

WMCreateSyncReader

Sections

.text
Size: 780KB - Virtual size: 776KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 140KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 744KB - Virtual size: 741KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fe27e958f5450b8f4fd3dad627920bd4

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

version

libmpg123-0

wmvcore

Sections

.text Size: 780KB - Virtual size: 776KB

.rdata Size: 140KB - Virtual size: 138KB

.data Size: 16KB - Virtual size: 20KB

.rsrc Size: 744KB - Virtual size: 741KB

.text
Size: 780KB - Virtual size: 776KB

.rdata
Size: 140KB - Virtual size: 138KB

.data
Size: 16KB - Virtual size: 20KB

.rsrc
Size: 744KB - Virtual size: 741KB