6261119f0e4bca70b9d09d555d35ae0bf1a77ed526f2a84e21846de58f866d2f

Sharing

Copy URL Twitter E-mail

General

Target

6261119f0e4bca70b9d09d555d35ae0bf1a77ed526f2a84e21846de58f866d2f
Size

15.5MB
MD5

b771bd27cfeeba9b6b8975d368ab71e5
SHA1

d1ab3e47c1f74e815b5ca459902f69b96c97853c
SHA256

6261119f0e4bca70b9d09d555d35ae0bf1a77ed526f2a84e21846de58f866d2f
SHA512

c79f9fcf704730976fe3cee4a83a89b02fac2871a524fee918f0b2eeefa705a1527385c75d9a88ecb31c1cb97c59f3c2f60d1c1544b693107c37f42bc503037e
SSDEEP

393216:KCI7SOtFVV63SHK1ziv30YFlhMYU01qUMb9:KCblCsw30YnWWqr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6261119f0e4bca70b9d09d555d35ae0bf1a77ed526f2a84e21846de58f866d2f

Files

6261119f0e4bca70b9d09d555d35ae0bf1a77ed526f2a84e21846de58f866d2f
.exe windows x86

481dbcf688154f8230e0dedcd131a9cb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetSetStatusCallback
InternetGetLastResponseInfoA
InternetQueryOptionA
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetSetFilePointer
InternetWriteFile
DeleteUrlCacheEntry
FindNextUrlCacheEntryA
FindFirstUrlCacheEntryA
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetSetOptionA
InternetReadFile
InternetOpenUrlA
InternetConnectA
InternetCloseHandle
InternetOpenA
InternetQueryDataAvailable

kernel32

GetModuleHandleExW
AreFileApisANSI
ExitThread
GetCommandLineA
GetSystemInfo
VirtualAlloc
VirtualQuery
SetStdHandle
GetFileType
HeapQueryInformation
IsValidCodePage
GetTimeZoneInformation
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetStdHandle
GetFileAttributesExW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetDriveTypeW
GetStringTypeW
LCMapStringW
OutputDebugStringW
SetEnvironmentVariableA
WriteConsoleW
IsProcessorFeaturePresent
CreateFileW
IsDebuggerPresent
GetSystemTimeAsFileTime
RtlUnwind
GetLastError
LockResource
SizeofResource
WideCharToMultiByte
GetCurrentDirectoryA
MultiByteToWideChar
DeleteFileA
Sleep
TerminateProcess
OpenProcess
GetModuleFileNameA
lstrlenA
GetTempPathA
MoveFileExA
SetCurrentDirectoryA
CreateDirectoryA
CreateFileA
GetDriveTypeA
GetFileAttributesA
GetFileSize
GetLogicalDrives
ReadFile
RemoveDirectoryA
SetFileAttributesA
CloseHandle
CreateMutexA
GetCurrentProcessId
VirtualProtect
SearchPathA
GetProfileIntA
VerifyVersionInfoA
VerSetConditionMask
lstrcpyA
GetTickCount
GetWindowsDirectoryA
SetErrorMode
GetFileSizeEx
GetFileAttributesExA
GetTempFileNameA
GetFileTime
GetACP
GetCPInfo
CreateThread
CreateProcessA
FreeLibrary
GetProcAddress
WinExec
LoadLibraryA
GetPrivateProfileStringA
CopyFileA
GetOEMCP
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GlobalFlags
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
FindNextFileA
WritePrivateProfileStringA
GetPrivateProfileIntA
lstrcmpA
ExitProcess
GetCurrentThread
FileTimeToSystemTime
LocalAlloc
FileTimeToLocalFileTime
ResumeThread
SuspendThread
SetThreadPriority
CreateEventA
WaitForSingleObject
SetEvent
GetThreadLocale
GetVolumeInformationA
lstrcmpiA
GetCurrentProcess
DuplicateHandle
UnlockFile
SetEndOfFile
LockFile
GetFullPathNameA
FlushFileBuffers
FindFirstFileA
FindClose
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
LoadLibraryW
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
FreeResource
GetSystemDirectoryW
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
EncodePointer
OutputDebugStringA
FormatMessageA
MulDiv
LocalFree
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
SetLastError
MoveFileA
SystemTimeToFileTime
WriteFile
SetFileTime
SetFilePointer
LocalFileTimeToFileTime
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
RaiseException
DecodePointer
Process32Next
Process32First
CreateToolhelp32Snapshot
GetCurrentDirectoryW
GetVersionExA
VirtualQuery
GetSystemTimeAsFileTime
GetModuleHandleA
CreateEventA
GetModuleFileNameW
LoadLibraryA
TerminateProcess
GetCurrentProcess
CreateToolhelp32Snapshot
Thread32First
GetCurrentProcessId
GetCurrentThreadId
OpenThread
Thread32Next
CloseHandle
SuspendThread
ResumeThread
WriteProcessMemory
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
GetProcessAffinityMask
SetProcessAffinityMask
GetCurrentThread
SetThreadAffinityMask
Sleep
FreeLibrary
GetTickCount
SystemTimeToFileTime
FileTimeToSystemTime
GlobalFree
LocalAlloc
LocalFree
GetProcAddress
ExitProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleW
LoadResource
MultiByteToWideChar
FindResourceExW
FindResourceExA
WideCharToMultiByte
GetThreadLocale
GetUserDefaultLCID
GetSystemDefaultLCID
EnumResourceNamesA
EnumResourceNamesW
EnumResourceLanguagesA
EnumResourceLanguagesW
EnumResourceTypesA
EnumResourceTypesW
CreateFileW
LoadLibraryW
GetLastError
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetCommandLineA
RaiseException
RtlUnwind
HeapFree
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
HeapReAlloc
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
WriteFile
SetFilePointer
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
SetStdHandle

user32

SetMenuDefaultItem
ModifyMenuA
CharUpperBuffA
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
IsClipboardFormatAvailable
GetUpdateRect
SubtractRect
CreateMenu
GetWindowRgn
PostThreadMessageA
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
GetAsyncKeyState
DrawIconEx
SetParent
UnionRect
LoadAcceleratorsW
RegisterClipboardFormatA
GetMenuDefaultItem
MessageBeep
GetNextDlgGroupItem
WaitMessage
DeleteMenu
ReuseDDElParam
UnpackDDElParam
InsertMenuItemA
CreatePopupMenu
TranslateAcceleratorA
LoadAcceleratorsA
BringWindowToTop
CharNextA
SetRectEmpty
SetRect
InvalidateRgn
CopyAcceleratorTableA
CopyImage
RealChildWindowFromPoint
LoadCursorA
GetSysColorBrush
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
PostQuitMessage
LoadCursorW
IsRectEmpty
KillTimer
SetTimer
ReleaseCapture
SetCapture
TranslateMessage
GetMessageA
SystemParametersInfoA
GetMenuItemInfoA
CharUpperA
MapVirtualKeyA
GetKeyNameTextA
EndDialog
CreateDialogIndirectParamA
IntersectRect
IsDialogMessageA
SetWindowTextA
IsWindowEnabled
SendDlgItemMessageA
CheckDlgButton
SetDlgItemTextA
ShowWindow
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
CopyIcon
GetLastActivePopup
GetTopWindow
GetClassLongA
SetWindowLongA
PtInRect
EqualRect
MapWindowPoints
GetWindowTextLengthA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
SetFocus
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
PeekMessageA
DispatchMessageA
RegisterWindowMessageA
LoadBitmapW
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
ScreenToClient
EndPaint
BeginPaint
RemoveMenu
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMenuStringA
UnregisterClassA
LoadIconA
GetClassNameA
EnumChildWindows
GetDesktopWindow
GetCursorPos
MessageBoxA
GetWindowTextA
SetForegroundWindow
LoadMenuW
GetFocus
GetDlgCtrlID
IsWindowVisible
SetWindowPos
MoveWindow
wsprintfA
LoadIconW
GetWindowThreadProcessId
FindWindowA
DrawIcon
AppendMenuA
GetSystemMenu
GetSystemMetrics
IsIconic
RedrawWindow
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
AdjustWindowRectEx
IsWindow
GetDoubleClickTime
SetClassLongA
SetCursorPos
DestroyAcceleratorTable
CreateAcceleratorTableA
ToAsciiEx
LockWindowUpdate
MapVirtualKeyExA
IsCharLowerA
GetKeyboardLayout
IsZoomed
GetComboBoxInfo
TrackMouseEvent
MonitorFromPoint
UpdateLayeredWindow
IsMenu
GetIconInfo
DrawFrameControl
DrawEdge
LoadImageW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
GetWindow
SetLayeredWindowAttributes
DestroyIcon
DestroyCursor
GetParent
GetWindowLongA
OffsetRect
InflateRect
CopyRect
FrameRect
FillRect
DrawFocusRect
GetSysColor
WindowFromPoint
ClientToScreen
GetDC
DrawStateA
TrackPopupMenuEx
GetSubMenu
DestroyMenu
LoadMenuA
GetActiveWindow
GetNextDlgTabItem
SendMessageA
LoadImageA
GetWindowRect
GetClientRect
InvalidateRect
SetWindowRgn
ReleaseDC
GetWindowDC
PostMessageA
SetCursor
EnableWindow
GetMonitorInfoA
GetKeyboardState
GetProcessWindowStation
GetUserObjectInformationW
CharUpperBuffW
MessageBoxW

gdi32

RectVisible
TextOutA
ExtTextOutA
CreateFontIndirectA
GetDeviceCaps
CopyMetaFileA
CreateDCA
CreateHatchBrush
CreatePen
CreatePatternBrush
ExcludeClipRect
GetClipBox
GetObjectType
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
PtVisible
CreateRectRgnIndirect
GetMapMode
PatBlt
SetRectRgn
DPtoLP
GetTextExtentPoint32A
CreateEllipticRgn
Ellipse
CreateDIBSection
LPtoDP
GetTextMetricsA
GetRgnBox
GetTextColor
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
SetDIBColorTable
CreatePolygonRgn
Polygon
Polyline
Rectangle
EnumFontFamiliesExA
OffsetRgn
CreateRoundRectRgn
RoundRect
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceA
Escape
CreateSolidBrush
SetTextColor
SetPixel
SetBkColor
GetStockObject
GetPixel
DeleteDC
CreateBitmap
GetObjectA
StretchBlt
SelectObject
GetDIBits
GetBkColor
DeleteObject
CreateRectRgn
CreateCompatibleDC
CreateCompatibleBitmap
CombineRgn
ScaleWindowExtEx
BitBlt

msimg32

TransparentBlt
AlphaBlend

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegEnumKeyExA
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegDeleteValueA
RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyA

shell32

ShellExecuteA
Shell_NotifyIconA
SHGetSpecialFolderPathA
SHGetFileInfoA
DragQueryFileA
DragFinish
SHAppBarMessage
SHBrowseForFolderA
ShellExecuteExA
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListA

comctl32

_TrackMouseEvent

shlwapi

StrStrIA
PathIsUNCA
PathStripToRootA
UrlUnescapeA
PathFindExtensionA
PathFindFileNameA
StrFormatKBSizeA
PathRemoveFileSpecW

uxtheme

DrawThemeText
DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
DrawThemeParentBackground
OpenThemeData
CloseThemeData
GetThemePartSize
IsAppThemed
GetThemeColor
GetCurrentThemeName
GetThemeSysColor
GetWindowTheme

ole32

OleLockRunning
DoDragDrop
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoInitializeEx
OleUninitialize
CoFreeUnusedLibraries
CreateILockBytesOnHGlobal
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
OleDraw
CreateStreamOnHGlobal
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
OleInitialize
CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

SafeArrayCreate
SafeArrayDestroy
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayUnaccessData
VarBstrFromDate
OleCreateFontIndirect
SysStringLen
SafeArrayAccessData
LoadTypeLi
VariantCopy
SysAllocString
SysAllocStringByteLen
VariantTimeToSystemTime
SystemTimeToVariantTime
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysFreeString

oledlg

ord8

urlmon

URLDownloadToFileA

winmm

PlaySoundA

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipDrawImageRectI
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown

imm32

ImmGetContext
ImmReleaseContext
ImmGetOpenStatus

wtsapi32

WTSSendMessageW

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 340KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.v0m0p0
Size: 6.2MB - Virtual size: 6.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.v0m0p1
Size: 7.5MB - Virtual size: 7.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.l1
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

481dbcf688154f8230e0dedcd131a9cb

Headers

DLL Characteristics

File Characteristics

Imports

wininet

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

urlmon

winmm

oleacc

gdiplus

imm32

wtsapi32

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 340KB - Virtual size: 340KB

.data Size: 80KB - Virtual size: 80KB

.v0m0p0 Size: 6.2MB - Virtual size: 6.2MB

.v0m0p1 Size: 7.5MB - Virtual size: 7.5MB

.rsrc Size: 12KB - Virtual size: 12KB

.l1 Size: 30KB - Virtual size: 30KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 340KB - Virtual size: 340KB

.data
Size: 80KB - Virtual size: 80KB

.v0m0p0
Size: 6.2MB - Virtual size: 6.2MB

.v0m0p1
Size: 7.5MB - Virtual size: 7.5MB

.rsrc
Size: 12KB - Virtual size: 12KB

.l1
Size: 30KB - Virtual size: 30KB