8c3bad4f8aecb1ac848f2ea16c8776efddc924812d596a6e2c036c1e3923a136

Sharing

Copy URL

Twitter E-mail

General

Target

8c3bad4f8aecb1ac848f2ea16c8776efddc924812d596a6e2c036c1e3923a136
Size

9.3MB
MD5

97e4fb29e4d33241cd131a19ad7f33da
SHA1

9fb64afce72de0a2184a5ba4c42f616390e04813
SHA256

8c3bad4f8aecb1ac848f2ea16c8776efddc924812d596a6e2c036c1e3923a136
SHA512

347f083176abdafa2e8cfa2b719277540c6ca071d2bc5764f8edc261a7869ef591f7cfea76cd169bc9cfe5914f2c42a2ee75e389fb59b29807e4074ca384d5ce
SSDEEP

196608:DEelhojXoEdP9fvXfCYCeT2gXSlFLOyomFHKnPi:zeT95PFjXuF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c3bad4f8aecb1ac848f2ea16c8776efddc924812d596a6e2c036c1e3923a136

Files

8c3bad4f8aecb1ac848f2ea16c8776efddc924812d596a6e2c036c1e3923a136
.exe windows x86

0214ba5117db82de802d84b7ceffafc4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

libsmartyf

GWQ_pdfWriteImage

previewpdf

closePDF
openPDF

sqlite3

sqlite3_open
sqlite3_close
sqlite3_exec
sqlite3_get_table
sqlite3_free

kernel32

WritePrivateProfileStringA
CopyFileA
GetModuleHandleA
GetPrivateProfileStringA
OutputDebugStringW
RaiseException
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
QueryPerformanceFrequency
GetStringTypeW
GetDriveTypeA
DeviceIoControl
RtlUnwind
GetSystemInfo
VirtualAlloc
VirtualQuery
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetStdHandle
GetFileType
WriteConsoleW
GetCommandLineA
GetCommandLineW
HeapQueryInformation
SetStdHandle
ExitProcess
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CompareStringW
LCMapStringW
DeleteFileW
ReadConsoleW
GetTimeZoneInformation
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
CreateFileW
GetVersionExW
InterlockedIncrement
InterlockedDecrement
GetSystemDirectoryA
GetModuleFileNameA
CloseHandle
CreateFileA
WideCharToMultiByte
FindResourceW
SizeofResource
LockResource
LoadResource
WriteFile
FindResourceA
GetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
GetProcAddress
LoadLibraryA
SetEvent
ResetEvent
WaitForSingleObject
CreateEventA
ResumeThread
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
MulDiv
Sleep
CreateDirectoryA
FindClose
GetTempPathA
LocalAlloc
FindFirstFileA
OutputDebugStringA
FreeLibrary
DecodePointer
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
DeleteCriticalSection
SetLastError
CreateMutexA
TlsAlloc
TlsFree
LocalFree
FormatMessageA
FormatMessageW
lstrlenA
SetThreadUILanguage
VerSetConditionMask
DeleteFileA
FindNextFileA
RemoveDirectoryA
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
InitializeCriticalSectionAndSpinCount
SleepEx
CreateEventW
SetWaitableTimer
WaitForMultipleObjects
QueueUserAPC
TerminateThread
TlsGetValue
TlsSetValue
CreateProcessA
GetLocalTime
lstrcpyA
CreateWaitableTimerA
VerifyVersionInfoA
GetThreadUILanguage
InitializeCriticalSection
GetModuleFileNameW
GlobalSize
FlushFileBuffers
GetFileSize
GetFullPathNameA
LockFile
ReadFile
SetEndOfFile
SetFilePointer
UnlockFile
GetVolumeInformationA
DuplicateHandle
GetCurrentProcess
GetModuleHandleW
LoadLibraryW
lstrcmpiA
GetThreadLocale
EncodePointer
GetCurrentThreadId
GetSystemDirectoryW
LoadLibraryExW
GlobalDeleteAtom
lstrcmpW
GlobalAddAtomA
GlobalFindAtomA
GlobalGetAtomNameA
CompareStringA
GetCurrentProcessId
GetVersionExA
SetThreadPriority
SuspendThread
GetCurrentThread
lstrcmpA
GetPrivateProfileIntA
GlobalReAlloc
GlobalHandle
MultiByteToWideChar
LocalReAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileAttributesA
GetFileAttributesExA
GetFileSizeEx
GetFileTime
SystemTimeToTzSpecificLocalTime
SetErrorMode
GlobalFlags
GetACP
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
VirtualProtect
GetOEMCP
GetCPInfo
GetCurrentDirectoryA
GetWindowsDirectoryA
FindResourceExW
SearchPathA
GetTickCount64
GetProfileIntA
GetTempFileNameA
GetTickCount
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx

user32

CreatePopupMenu
NotifyWinEvent
MessageBeep
DeleteMenu
KillTimer
SetTimer
IsZoomed
GetAsyncKeyState
CopyImage
LoadImageW
DestroyIcon
TrackMouseEvent
RealChildWindowFromPoint
DrawIconEx
DrawFocusRect
SetWindowRgn
DrawFrameControl
DrawEdge
EnumDisplayMonitors
LoadCursorW
GetSysColorBrush
SetLayeredWindowAttributes
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
PostQuitMessage
TranslateMessage
GetMessageA
SystemParametersInfoA
GetMenuItemInfoA
DestroyMenu
IntersectRect
GetWindowThreadProcessId
GetDesktopWindow
GetActiveWindow
SetMenuDefaultItem
UpdateLayeredWindow
EnableScrollBar
UnionRect
MonitorFromPoint
MessageBoxExA
WaitMessage
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
IsDialogMessageA
SetWindowTextA
IsWindowEnabled
CheckDlgButton
GetDlgItemTextA
SetDlgItemTextA
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
CharNextA
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
GetKeyboardLayout
GetKeyboardState
ToAsciiEx
MapVirtualKeyA
LoadAcceleratorsW
CreateAcceleratorTableA
DestroyAcceleratorTable
SetCursorPos
SetParent
BringWindowToTop
LockWindowUpdate
GetScrollInfo
SetScrollInfo
LoadIconA
SetClassLongA
OpenClipboard
CloseClipboard
SendMessageA
SetClipboardData
EmptyClipboard
GetDoubleClickTime
GetIconInfo
CopyIcon
GetMenuDefaultItem
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetLastActivePopup
GetTopWindow
GetClassNameA
GetClassLongA
PtInRect
EqualRect
MapWindowPoints
AdjustWindowRectEx
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
GetForegroundWindow
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
GetKeyState
SetFocus
GetDlgItem
IsIconic
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsMenu
IsWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
PeekMessageA
DispatchMessageA
RegisterWindowMessageA
LoadBitmapW
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
SetRectEmpty
SendDlgItemMessageA
ScreenToClient
ClientToScreen
EndPaint
BeginPaint
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
CharUpperA
RemoveMenu
InsertMenuA
GetMenuItemID
GetMenuState
GetMenuStringA
ChangeWindowMessageFilter
CheckMenuRadioItem
SetForegroundWindow
ModifyMenuA
AppendMenuA
GetMenuItemCount
EnableMenuItem
GetSystemMenu
GetSystemMetrics
PostThreadMessageA
RegisterDeviceNotificationA
UpdateWindow
AttachThreadInput
GetWindowDC
GetUpdateRect
HideCaret
InvertRect
GetKeyNameTextA
FrameRect
DrawIcon
RegisterClipboardFormatA
CharUpperBuffA
LoadMenuA
InsertMenuItemA
UnpackDDElParam
ReuseDDElParam
IsCharLowerA
MapVirtualKeyExA
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
IsClipboardFormatAvailable
SubtractRect
CreateMenu
GetComboBoxInfo
DestroyCursor
GetWindowRgn
CopyRect
SetRect
GetSysColor
LoadIconW
TranslateAcceleratorA
LoadAcceleratorsA
LoadImageA
ReleaseDC
GetDC
GetParent
FillRect
DrawStateA
UnregisterClassA
OffsetRect
InflateRect
GetFocus
ReleaseCapture
SetCapture
GetCapture
SetWindowLongA
GetWindowLongA
IsRectEmpty
LoadCursorA
WindowFromPoint
GetCursorPos
SetCursor
GetSubMenu
GetClientRect
MessageBoxA
GetWindowRect
InvalidateRect
LoadMenuW
GetWindow
GetDlgCtrlID
PostMessageA
EnableWindow

gdi32

GetObjectW
ExtEscape
GetFontData
SetDIBitsToDevice
GetTextMetricsW
BeginPath
CloseFigure
EndPath
FillPath
SetMiterLimit
StrokeAndFillPath
StrokePath
WidenPath
GetRegionData
GetCharWidthW
SetBkColor
GetTextFaceA
SetPixelV
GetViewportOrgEx
GetWindowOrgEx
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
SetPaletteEntries
ExtFloodFill
StretchDIBits
EnumFontFamiliesExA
LPtoDP
GetSystemPaletteEntries
GetNearestPaletteIndex
GetPaletteEntries
CreatePalette
OffsetRgn
SetPixel
RealizePalette
GetDIBits
GetRgnBox
CreateRoundRectRgn
Polyline
Polygon
CreatePolygonRgn
GetTextColor
GetBkColor
Ellipse
CreateEllipticRgn
GetTextMetricsA
GetTextCharsetInfo
EnumFontFamiliesA
CreateDIBitmap
DPtoLP
SetRectRgn
PatBlt
GetMapMode
CreateRectRgnIndirect
CombineRgn
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
PolyBezierTo
ExtTextOutA
TextOutA
MoveToEx
ExtCreatePen
SelectClipPath
SetTextAlign
SetTextColor
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
GetOutlineTextMetricsW
SelectPalette
ExtSelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetClipRgn
GetClipBox
ExcludeClipRect
Escape
CreatePatternBrush
CreateHatchBrush
CreateBitmap
CreateDCA
CopyMetaFileA
EndPage
StartPage
EndDoc
StartDocA
GetTextExtentPoint32A
DeleteEnhMetaFile
CreateEnhMetaFileA
CloseEnhMetaFile
SelectClipRgn
CreateRectRgn
RoundRect
Rectangle
CreateFontIndirectA
GetDeviceCaps
CreateCompatibleBitmap
BitBlt
SetBrushOrgEx
GetObjectA
SetDIBColorTable
GetDIBColorTable
CreateDIBSection
SetStretchBltMode
StretchBlt
SelectObject
DeleteObject
DeleteDC
CreatePen
CreateCompatibleDC
GetStockObject
CreateSolidBrush
CreateFontA

msimg32

TransparentBlt
AlphaBlend

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyA
RegQueryValueA
RegEnumValueA
RegEnumKeyExA

shell32

DragQueryFileA
Shell_NotifyIconA
SHGetFileInfoA
SHGetMalloc
DragFinish
ShellExecuteA
SHAppBarMessage
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetSpecialFolderLocation
SHGetDesktopFolder

comctl32

InitCommonControlsEx
_TrackMouseEvent

shlwapi

PathFileExistsA
PathFindExtensionA
PathFindExtensionW
PathIsUNCA
PathFindFileNameA
StrFormatKBSizeA
PathRemoveFileSpecW
PathStripToRootA

uxtheme

IsThemeBackgroundPartiallyTransparent
GetThemePartSize
GetWindowTheme
GetThemeSysColor
DrawThemeText
GetCurrentThemeName
GetThemeColor
DrawThemeBackground
CloseThemeData
OpenThemeData
DrawThemeParentBackground
IsAppThemed

ole32

CoRegisterMessageFilter
CoRevokeClassObject
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CLSIDFromProgID
CLSIDFromString
CoInitialize
CoCreateGuid
CoCreateInstance
CoInitializeEx
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CreateStreamOnHGlobal

oleaut32

VarBstrFromDate
VariantCopy
OleCreateFontIndirect
SysAllocString
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
LoadTypeLi
SysStringLen
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysAllocStringByteLen
SysFreeString
OleLoadPicture

oledlg

ord8

gdiplus

GdipGetImageEncodersSize
GdipDrawImageRectI
GdipDrawImageI
GdipLoadImageFromStream
GdipDrawLineI
GdipSetSmoothingMode
GdipDrawImageRectRectI
GdipGetImageEncoders
GdipCreateBitmapFromStream
GdipCreateBitmapFromHBITMAP
GdipImageRotateFlip
GdipSaveImageToFile
GdipFillRectangleI
GdipSetInterpolationMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipGetImageHeight
GdipCreateFromHWND
GdipSetPenEndCap
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipCreateBitmapFromResource
GdipDisposeImage
GdipCloneImage
GdipFree
GdipAlloc
GdipSetPenStartCap
GdipDeletePen
GdipCreatePen1
GdipCreateFontFamilyFromName
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdiplusShutdown
GdiplusStartup
GdipMeasureString
GdipDrawString
GdipDeleteFont
GdipCreateFont
GdipDeleteFontFamily
GdipGetGenericFontFamilySansSerif
GdipLoadImageFromFile

crypt32

CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext
CryptSignMessage

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

ws2_32

WSASend
WSAGetLastError
setsockopt
closesocket
WSACleanup
WSAStartup
ioctlsocket

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0214ba5117db82de802d84b7ceffafc4

Headers

DLL Characteristics

File Characteristics

Imports

libsmartyf

previewpdf

sqlite3

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

crypt32

version

ws2_32

oleacc

imm32

winmm

Sections

.text Size: 2.9MB - Virtual size: 2.9MB

.rdata Size: 2.0MB - Virtual size: 2.0MB

.data Size: 59KB - Virtual size: 123KB

.rsrc Size: 4.2MB - Virtual size: 4.2MB

.reloc Size: 184KB - Virtual size: 184KB

.text
Size: 2.9MB - Virtual size: 2.9MB

.rdata
Size: 2.0MB - Virtual size: 2.0MB

.data
Size: 59KB - Virtual size: 123KB

.rsrc
Size: 4.2MB - Virtual size: 4.2MB

.reloc
Size: 184KB - Virtual size: 184KB