dbae2328ee4a005079b1996832363696598f1eef56502e6d2dcbdb5a0fd24f9e

Sharing

Copy URL Twitter E-mail

General

Target

dbae2328ee4a005079b1996832363696598f1eef56502e6d2dcbdb5a0fd24f9e
Size

5.1MB
MD5

c3c642e0337716c2827fc0fd61fedf5f
SHA1

2ff59eaf38f3ad0e93fd27c13d74b03d5f5257c3
SHA256

dbae2328ee4a005079b1996832363696598f1eef56502e6d2dcbdb5a0fd24f9e
SHA512

5099e7ca06bbc8524f128005793b31c443dca85a99d99aac7941fb2f7525506b9f8eeb32fc7fc358fbc7afa98fcd23fe3bd90527fba669fc9a231cdcf4d50995
SSDEEP

98304:3TyZMAcQeqkNKaHOAu2sDLhd8A6ewtccbTX9yvNNwm7:3TIcJ0gOAuZDLhuFjccbpyh7

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbae2328ee4a005079b1996832363696598f1eef56502e6d2dcbdb5a0fd24f9e

Files

dbae2328ee4a005079b1996832363696598f1eef56502e6d2dcbdb5a0fd24f9e
.exe windows x86

3437244aa09df8fdfecd2851539d0e44

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CopyFileA
MoveFileA
GetCommandLineA
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
LCMapStringA
lstrlenA
HeapFree
InterlockedDecrement
InterlockedIncrement
GetProcessHeap
SetFilePointer
GetWindowsDirectoryA
GetSystemDirectoryA
GetTempPathA
DeleteCriticalSection
CreateThread
RtlMoveMemory
LocalSize
CloseHandle
HeapAlloc
HeapCreate
QueryDosDeviceW
MultiByteToWideChar
DeleteFileA
WriteFile
GetTickCount
GetFileSize
ReadFile
IsBadReadPtr
HeapReAlloc
ExitProcess
GetModuleHandleA
GetModuleFileNameW
GetCommandLineW
GetModuleHandleW
GlobalUnlock
GlobalLock
GlobalAlloc
RtlZeroMemory
GetAtomNameW
WideCharToMultiByte
DeviceIoControl
CreateFileA
HeapDestroy
lstrcpynA
lstrcatW
lstrlenW
lstrcmpA

user32

IsDialogMessageW
TranslateAcceleratorW
TranslateMDISysAccel
IsChild
GetMessageW
DrawIconEx
LoadIconW
LoadImageW
CreateIconFromResourceEx
PeekMessageA
GetMessageA
DispatchMessageA
wsprintfA
MessageBoxA
SetMenuDefaultItem
BeginPaint
SetMenuItemInfoW
CheckMenuItem
RemoveMenu
MenuItemFromPoint
GetMenuDefaultItem
GetMenuState
GetMenuItemRect
EndPaint
TrackMouseEvent
GetMenuStringW
TrackPopupMenu
UpdateLayeredWindow
WindowFromDC
RegisterWindowMessageW
DrawMenuBar
SetMenu
GetMenu
GetSystemMetrics
IsZoomed
IsIconic
SetRect
SetWindowRgn
SystemParametersInfoW
EnumPropsExW
RemovePropA
RemovePropW
GetPropA
GetPropW
SetForegroundWindow
SetPropW
SetTimer
MessageBoxW
SetWindowTextW
UpdateWindow
GetDlgItem
GetParent
SetWindowLongW
GetAsyncKeyState
IsWindow
FindWindowExW
GetWindowTextLengthW
GetWindowTextW
GetWindowLongW
SendMessageW
DestroyCursor
SetCursor
GetClientRect
SetCapture
ReleaseCapture
CheckMenuRadioItem
GetMenuItemID
GetSubMenu
SetMenuInfo
InsertMenuW
AppendMenuW
GetMenuItemInfoW
GetMenuItemCount
DestroyMenu
GetMenuInfo
LoadMenuW
GetSystemMenu
CreatePopupMenu
CreateMenu
PostQuitMessage
LoadCursorW
DestroyIcon
DestroyAcceleratorTable
GetSysColor
IsWindowEnabled
IsWindowVisible
EnableWindow
SetWindowPos
GetWindowRect
GetIconInfo
KillTimer
FillRect
GetAncestor
GetNextDlgTabItem
SetFocus
CallWindowProcW
GetDC
ReleaseDC
InvalidateRect
CreateWindowExW
GetClassInfoExW
RegisterClassExW
CreateDialogIndirectParamW
GetClassLongW
SetClassLongW
SetParent
DestroyWindow
DialogBoxIndirectParamW
EndDialog
CreateDialogParamW
DialogBoxParamW
CreateMDIWindowW
DefWindowProcW
ShowWindow
PostMessageW
GetClassNameW
MoveWindow
DispatchMessageW
SetPropA
TranslateMessage
CopyIcon
GetFocus
ScreenToClient
ValidateRect

advapi32

OpenSCManagerA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
OpenServiceA
CreateServiceA

shell32

Shell_NotifyIconW
DragQueryFileW
DragFinish
SHGetSpecialFolderPathA
DragAcceptFiles
CommandLineToArgvW

ole32

CoUninitialize
CreateStreamOnHGlobal
CLSIDFromString
GetHGlobalFromStream
StringFromGUID2
CoInitialize

psapi

GetProcessImageFileNameW

gdi32

GetDIBits
CreatePatternBrush
CreateFontIndirectW
CreateSolidBrush
GetObjectW
StretchBlt
SetStretchBltMode
GetStretchBltMode
CreateDIBSection
CreateCompatibleDC
BitBlt
CreateRoundRectRgn
GetTextMetricsA
GetStockObject
SetBkColor
SetBkMode
SetTextColor
DeleteDC
SelectObject
DeleteObject

gdiplus

GdipGetClip
GdipGetClipBounds
GdipGetVisibleClipBounds
GdipIsClipEmpty
GdipIsVisibleClipEmpty
GdipIsVisiblePoint
GdipIsVisibleRect
GdipSaveGraphics
GdipRestoreGraphics
GdipBeginContainer
GdipBeginContainer2
GdipEndContainer
GdipLoadImageFromFile
GdipLoadImageFromStream
GdipCloneImage
GdipGetImageRawFormat
GdipGetImagePixelFormat
GdipSaveImageToStream
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipGetImageDimension
GdipGetImageBounds
GdipGetImageWidth
GdipGetImageHeight
GdipGetImageHorizontalResolution
GdipGetImageVerticalResolution
GdipGetImageThumbnail
GdipImageGetFrameCount
GdipImageSelectActiveFrame
GdipCreateHICONFromBitmap
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdiplusStartup
GdipCreateFromHWND
GdipSetClipRect
GdipCreateFont
GdipCreateFontFromLogfontW
GdipDeletePrivateFontCollection
GdipDeleteFontFamily
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipCloneFont
GdipGetLogFontW
GdipGetLogFontA
GdipGetFamily
GdipGetFontStyle
GdipGetFontSize
GdipGetFontUnit
GdipGetFontHeight
GdipGetFontHeightGivenDPI
GdipCreatePath
GdipCreatePath2
GdipClonePath
GdipResetPath
GdipGetPathFillMode
GdipSetPathFillMode
GdipGetPointCount
GdipGetPathData
GdipStartPathFigure
GdipClosePathFigure
GdipClosePathFigures
GdipSetPathMarker
GdipClearPathMarkers
GdipReversePath
GdipGetPathLastPoint
GdipAddPathLine
GdipAddPathArc
GdipAddPathBezier
GdipAddPathCurve
GdipAddPathCurve2
GdipAddPathClosedCurve
GdipAddPathClosedCurve2
GdipAddPathRectangle
GdipAddPathEllipse
GdipAddPathPie
GdipAddPathPolygon
GdipAddPathPath
GdipAddPathString
GdipTransformPath
GdipGetPathWorldBounds
GdipFlattenPath
GdipWidenPath
GdipWindingModeOutline
GdipWarpPath
GdipIsVisiblePathPoint
GdipIsOutlineVisiblePathPoint
GdipCreateRegionRect
GdipCreateRegionPath
GdipCreateRegionHrgn
GdipCreateRegionRgnData
GdipCloneRegion
GdipSetInfinite
GdipSetEmpty
GdipCombineRegionRect
GdipCombineRegionRegion
GdipCombineRegionPath
GdipTranslateRegion
GdipTransformRegion
GdipGetRegionBounds
GdipGetRegionDataSize
GdipTranslateClip
GdipGetRegionHRgn
GdipIsEmptyRegion
GdipIsInfiniteRegion
GdipIsEqualRegion
GdipIsVisibleRegionPoint
GdipIsVisibleRegionRect
GdipGetRegionScansCount
GdipGetRegionScans
GdipCreateMatrix
GdipCreateMatrix2
GdipCreateMatrix3
GdipCloneMatrix
GdipSetMatrixElements
GdipGetMatrixElements
GdipMultiplyMatrix
GdipTranslateMatrix
GdipRotateMatrix
GdipInvertMatrix
GdipScaleMatrix
GdipShearMatrix
GdipTransformMatrixPoints
GdipVectorTransformMatrixPoints
GdipIsMatrixInvertible
GdipIsMatrixIdentity
GdipIsMatrixEqual
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipCreateBitmapFromGraphics
GdipCreateBitmapFromGdiDib
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromHICON
GdipCreateBitmapFromResource
GdipCloneBitmapArea
GdipBitmapSetResolution
GdipCreateSolidFill
GdipNewInstalledFontCollection
GdipNewPrivateFontCollection
GdipPrivateAddFontFile
GdipPrivateAddMemoryFont
GdipGetFontCollectionFamilyCount
GdipGetFontCollectionFamilyList
GdipCloneFontFamily
GdipCreateFontFamilyFromName
GdipGetGenericFontFamilySansSerif
GdipGetGenericFontFamilySerif
GdipGetGenericFontFamilyMonospace
GdipGetFamilyName
GdipIsStyleAvailable
GdipGetEmHeight
GdipGetCellAscent
GdipGetCellDescent
GdipGetLineSpacing
GdipSetClipPath
GdipSetClipGraphics
GdipDrawImagePointsRect
GdipDrawImagePointRect
GdipDrawImagePoints
GdipDrawImageRect
GdipDrawImageRectRect
GdipDrawImage
GdipDrawDriverString
GdipMeasureCharacterRanges
GdipCreateRegion
GdipMeasureString
GdipDrawString
GdipFillRegion
GdipFillClosedCurve2
GdipFillClosedCurve
GdipFillPath
GdipFillPie
GdipFillEllipse
GdipFillPolygon
GdipGraphicsClear
GdipDrawClosedCurve2
GdipDrawClosedCurve
GdipDrawCurve2
GdipDrawPath
GdipDrawPolygon
GdipDrawPie
GdipDrawEllipse
GdipDrawRectangle
GdipDrawBezier
GdipDrawArc
GdipDrawLine
GdipGetNearestColor
GdipTransformPointsI
GdipTransformPoints
GdipGetDpiY
GdipGetDpiX
GdipGetPageScale
GdipSetPageScale
GdipGetPageUnit
GdipSetPageUnit
GdipRotateWorldTransform
GdipScaleWorldTransform
GdipTranslateWorldTransform
GdipResetWorldTransform
GdipDeleteMatrix
GdipGetWorldTransform
GdipSetWorldTransform
GdipGetPixelOffsetMode
GdipSetPixelOffsetMode
GdipResetClip
GdipSetClipHrgn
GdipGetRegionData
GdipSetClipRegion
GdipGetSmoothingMode
GdipSetSmoothingMode
GdipGetInterpolationMode
GdipSetInterpolationMode
GdipGetTextRenderingHint
GdipSetTextRenderingHint
GdipReleaseDC
GdipGetDC
GdipFlush
GdipCreateFromHDC
GdipCreateHBITMAPFromBitmap
GdipSetImageAttributesColorMatrix
GdipGetImageAttributesAdjustedPalette
GdipSetImageAttributesWrapMode
GdipSetImageAttributesRemapTable
GdipSetImageAttributesOutputChannelColorProfile
GdipSetImageAttributesOutputChannel
GdipSetImageAttributesColorKeys
GdipSetImageAttributesGamma
GdipSetImageAttributesNoOp
GdipSetImageAttributesThreshold
GdipResetImageAttributes
GdipSetImageAttributesToIdentity
GdipCloneImageAttributes
GdipCreateImageAttributes
GdipDeleteRegion
GdipDeletePath
GdipDeleteFont
GdipDisposeImage
GdipDeleteGraphics
GdipDisposeImageAttributes
GdipDeleteBrush
GdipFillRectangle
GdipCreateTexture
GdipGetImageGraphicsContext
GdipDrawCurve

wininet

HttpQueryInfoA
InternetOpenUrlA

msimg32

AlphaBlend

atl

ord42

comctl32

InitCommonControlsEx

shlwapi

PathFileExistsA
PathRemoveFileSpecW
PathFindFileNameW

msvcrt

strrchr
??2@YAPAXI@Z
??3@YAXPAX@Z
_ftol
sprintf
strncmp
tolower
_CIfmod
strncpy
_atoi64
floor
atof
srand
rand
toupper
strchr
modf
free
malloc
memmove
realloc
__CxxFrameHandler
calloc
_strnicmp
atoi

ws2_32

gethostname
WSACleanup
WSAStartup

Sections

.text
Size: 544KB - Virtual size: 544KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.6MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.UPX0
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3437244aa09df8fdfecd2851539d0e44

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

psapi

gdi32

gdiplus

wininet

msimg32

atl

comctl32

shlwapi

msvcrt

ws2_32

Sections

.text Size: 544KB - Virtual size: 544KB

.rdata Size: 18KB - Virtual size: 17KB

.data Size: 2.6MB - Virtual size: 2.7MB

.UPX0 Size: 1.9MB - Virtual size: 1.9MB

.reloc Size: 11KB - Virtual size: 11KB

.rsrc Size: 92KB - Virtual size: 91KB

.text
Size: 544KB - Virtual size: 544KB

.rdata
Size: 18KB - Virtual size: 17KB

.data
Size: 2.6MB - Virtual size: 2.7MB

.UPX0
Size: 1.9MB - Virtual size: 1.9MB

.reloc
Size: 11KB - Virtual size: 11KB

.rsrc
Size: 92KB - Virtual size: 91KB