171e2265eccac2b86caeea6182414843c29571c585a8377d8e1fb50d8d6736b7

Sharing

Copy URL Twitter E-mail

General

Target

171e2265eccac2b86caeea6182414843c29571c585a8377d8e1fb50d8d6736b7
Size

732KB
MD5

2f21d09256615de48eff5ceb5fc81a15
SHA1

ebb541e393779f40e4a916a72ba7618ff2c77b5d
SHA256

171e2265eccac2b86caeea6182414843c29571c585a8377d8e1fb50d8d6736b7
SHA512

d8460e595cce18605f2e872ddb337a8ac2ce45af128ab870fb74e0d9ae5f8c26bdc9a70b2731b7f39f2d42a6dccc1e85a91ef3c9b5847566cc90a156064049d5
SSDEEP

12288:Rv0dQLg7E3TBZhMbhuDqUeeFmW4ckwE36EnMOurVJE5aeu7o9sEW9HgBduSnp1Oa:RvLLgKBZhguDbeeuw466MZ8U9HgBdTOa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
171e2265eccac2b86caeea6182414843c29571c585a8377d8e1fb50d8d6736b7

Files

171e2265eccac2b86caeea6182414843c29571c585a8377d8e1fb50d8d6736b7
.exe windows x86

2988e399ab99494b940f1cd15dd388b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
SetEvent
WaitForSingleObject
TerminateThread
OpenMutexW
FindNextFileW
FindClose
FlushFileBuffers
GetConsoleOutputCP
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetFileSizeEx
GetConsoleMode
SetFilePointerEx
GetFileType
CreateProcessW
SetConsoleCtrlHandler
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
GetFileAttributesExW
RtlUnwind
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLocaleInfoW
LCMapStringW
CompareStringW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetStringTypeW
LoadLibraryExA
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
FlushInstructionCache
GetCurrentProcess
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
EncodePointer
IsDebuggerPresent
GetSystemTimeAsFileTime
Module32FirstW
CreateToolhelp32Snapshot
OpenProcess
GetLocalTime
OutputDebugStringW
SetLastError
lstrlenW
GetVersionExW
VerSetConditionMask
VerifyVersionInfoW
GetWindowsDirectoryW
InitializeCriticalSection
GetCurrentThreadId
CreateMutexW
HeapDestroy
CreateEventW
LoadLibraryExW
lstrcmpiW
Sleep
FreeResource
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
EnterCriticalSection
LeaveCriticalSection
GetPrivateProfileStringW
GetModuleHandleW
GetPrivateProfileIntW
GetModuleFileNameW
LoadLibraryW
GetProcAddress
FreeLibrary
WideCharToMultiByte
DeleteCriticalSection
GetFileSize
DecodePointer
RaiseException
CloseHandle
GetLastError
MultiByteToWideChar
CreateFileW
InitializeCriticalSectionEx
WriteFile
ReadFile
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetStdHandle
WriteConsoleW

user32

UnregisterClassW
GetClipboardData
CloseClipboard
RegisterClassExW
LoadCursorW
DefWindowProcW
FindWindowW
IntersectRect
SetForegroundWindow
SetClipboardViewer
ChangeClipboardChain
PostQuitMessage
SetTimer
MessageBoxW
EnumWindows
GetWindowThreadProcessId
GetForegroundWindow
GetDesktopWindow
OpenClipboard
KillTimer
GetClassInfoExW
MoveWindow
PostMessageW
CreateWindowExW
ReleaseDC
GetDC
InflateRect
LoadImageW
RegisterWindowMessageW
DestroyWindow
LoadBitmapW
CharNextW
SendMessageW
GetDlgItem
PtInRect
SetRect
GetClientRect
GetWindowLongW
ScreenToClient
CallWindowProcW
GetDlgCtrlID
DrawTextW
GetParent
InvalidateRect
IsWindow
CopyRect
SystemParametersInfoW
GetMonitorInfoW
MonitorFromWindow
SetWindowPos
SetWindowLongW
GetWindowRect
GetNextDlgTabItem
SetFocus
SetCursor
ReleaseCapture
SetCapture
GetCursorPos
ShowWindow
UpdateLayeredWindow
EndPaint
BeginPaint
MapWindowPoints
GetWindow
DispatchMessageW
TranslateMessage
IsDialogMessageW
IsChild
GetFocus
GetMessageW
PeekMessageW
SetRectEmpty
DrawIconEx
DestroyIcon
OffsetRect
LoadIconW
IsWindowVisible
IsRectEmpty
EqualRect
ClientToScreen

gdi32

CreateFontIndirectW
SetStretchBltMode
CreateCompatibleBitmap
CreateBitmap
StretchBlt
CreateDIBSection
BitBlt
CreateRectRgn
CreatePen
SaveDC
SelectClipRgn
SetBkMode
ExtTextOutW
Rectangle
SetTextColor
SetBkColor
DeleteDC
CreateCompatibleDC
GetObjectW
GetStockObject
DeleteObject
SelectObject
GetDeviceCaps
SetViewportOrgEx
GetTextColor
GetCurrentObject
CombineRgn
CreateRectRgnIndirect
CreateRoundRectRgn
RectInRegion
TextOutW
GetTextExtentPoint32W
LineTo
MoveToEx
GetClipRgn
RoundRect
OffsetRgn
ExtSelectClipRgn
RestoreDC
GetViewportOrgEx

advapi32

RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegDeleteKeyW
RegOpenKeyW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegDeleteValueW
RegSetValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegQueryValueExW

shell32

ShellExecuteW
SHCreateDirectoryExW

ole32

CoInitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CreateStreamOnHGlobal
CoUninitialize

oleaut32

VarUI4FromStr

psapi

GetModuleFileNameExW

shlwapi

PathRemoveFileSpecW
StrToIntA
PathFindFileNameW
PathAddBackslashW
StrToIntW
PathFileExistsW

comctl32

_TrackMouseEvent
InitCommonControlsEx

msimg32

AlphaBlend

gdiplus

GdipFillRectangleI
GdipCreateLineBrushFromRectWithAngleI
GdipResetWorldTransform
GdipRotateWorldTransform
GdipTranslateWorldTransform
GdipSetClipPath
GdipSetSmoothingMode
GdipClosePathFigure
GdipAddPathRectangleI
GdipAddPathPieI
GdipDeletePath
GdipCreatePath
GdipDrawLine
GdipSetPenDashStyle
GdipSetPenEndCap
GdipSetPenStartCap
GdipFillRectangle
GdipDrawPath
GdipAddPathArcI
GdipDrawRectangleI
GdipSetPenMode
GdipDrawImageI
GdipFillPath
GdipGetFontSize
GdipAddPathStringI
GdipGetFamily
GdipSetPixelOffsetMode
GdipSetCompositingQuality
GdipFree
GdipCreatePen1
GdipDeletePen
GdipDrawLinesI
GdipCloneBrush
GdipDeleteBrush
GdipSetStringFormatFlags
GdipSetStringFormatLineAlign
GdipSetStringFormatTrimming
GdipSetTextRenderingHint
GdipDrawString
GdipCreateStringFormat
GdipDeleteStringFormat
GdipNewPrivateFontCollection
GdipDeletePrivateFontCollection
GdipPrivateAddFontFile
GdipGetFontCollectionFamilyCount
GdipGetFontCollectionFamilyList
GdipCloneFontFamily
GdipCreateFont
GdipCreateFontFromLogfontW
GdipDeleteFont
GdipSetStringFormatAlign
GdipMeasureString
GdipCreateBitmapFromStream
GdipCreateHBITMAPFromBitmap
GdipDrawImagePointsRectI
GdipSetInterpolationMode
GdipCreateBitmapFromScan0
GdipGetImagePixelFormat
GdipGetImageGraphicsContext
GdipGraphicsClear
GdipDrawImageRectI
GdipCloneBitmapArea
GdiplusShutdown
GdipLoadImageFromStream
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipDrawImageRectRect
GdipLoadImageFromFile
GdipCloneImage
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipImageRotateFlip
GdipDrawImageRectRectI
GdipCreateFromHDC
GdipDeleteGraphics
GdiplusStartup
GdipDeleteFontFamily
GdipAlloc
GdipCreateSolidFill

Sections

.text
Size: 397KB - Virtual size: 397KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 98KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2988e399ab99494b940f1cd15dd388b7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

psapi

shlwapi

comctl32

msimg32

gdiplus

Sections

.text Size: 397KB - Virtual size: 397KB

.rdata Size: 112KB - Virtual size: 112KB

.data Size: 9KB - Virtual size: 13KB

.rsrc Size: 114KB - Virtual size: 113KB

.reloc Size: 98KB - Virtual size: 100KB

.text
Size: 397KB - Virtual size: 397KB

.rdata
Size: 112KB - Virtual size: 112KB

.data
Size: 9KB - Virtual size: 13KB

.rsrc
Size: 114KB - Virtual size: 113KB

.reloc
Size: 98KB - Virtual size: 100KB