6d7fbe4c7d13e5a09a3b9b8b51c98fd509da6af01a38f83b46a90c1f60dfd498

Sharing

Copy URL

Twitter E-mail

General

Target

6d7fbe4c7d13e5a09a3b9b8b51c98fd509da6af01a38f83b46a90c1f60dfd498
Size

1.0MB
MD5

8bd26f3a4fe96dcb7db9199a6d67803d
SHA1

9b10d6a17c957c2ae5cfc348b8cf37cad6f6be73
SHA256

6d7fbe4c7d13e5a09a3b9b8b51c98fd509da6af01a38f83b46a90c1f60dfd498
SHA512

aac888093b27442490b25a7b8909fe4d7804cb4f092116aa072012b30631d9a14c07beaeb17c0e9587873f968ca77a009905292519da8d29add1539a8ec04d97
SSDEEP

12288:XDHe+z1hzyfPMf75jmEEF1YvPcvzQ+4YHEHoFN6WtljaElI9TC:XDHe+zPf9j6+PR+4bHoFN6WtljaEy9T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d7fbe4c7d13e5a09a3b9b8b51c98fd509da6af01a38f83b46a90c1f60dfd498

Files

6d7fbe4c7d13e5a09a3b9b8b51c98fd509da6af01a38f83b46a90c1f60dfd498
.exe windows x86

f9fac3f34acc6d4f6e2a745913b7aeeb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
LCMapStringW
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
LCMapStringA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapReAlloc
TerminateProcess
HeapSize
GetACP
HeapFree
HeapAlloc
lstrcpyA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
ExitProcess
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
GetTickCount
SetErrorMode
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetThreadLocale
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GlobalFlags
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFullPathNameA
GetTempFileNameA
GetFileAttributesA
GetCurrentThread
CloseHandle
GetLastError
SetLastError
MulDiv
FormatMessageA
LocalFree
GetModuleFileNameA
InterlockedDecrement
InterlockedIncrement
lstrcpynA
lstrcmpA
FileTimeToLocalFileTime
FileTimeToSystemTime
WideCharToMultiByte
MultiByteToWideChar
LoadLibraryA
FreeLibrary
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GlobalLock
GlobalUnlock
GetModuleHandleA
GetProcAddress
GetVersion
GlobalAlloc
GlobalReAlloc
FindResourceA
LoadResource
LockResource
GlobalFree
Sleep
lstrlenA

user32

CharNextA
LockWindowUpdate
GetDCEx
InvertRect
WindowFromPoint
LoadStringA
GetSysColorBrush
GetClassNameA
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
PostQuitMessage
GetSystemMenu
DeleteMenu
AppendMenuA
SetParent
IsZoomed
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
DestroyCursor
SetCursorPos
TranslateMessage
ValidateRect
GetCursorPos
DestroyMenu
GrayStringA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
IsRectEmpty
FillRect
FindWindowA
GetDesktopWindow
wvsprintfA
CopyAcceleratorTableA
SetMenuItemBitmaps
CheckMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
SetFocus
AdjustWindowRectEx
DeferWindowPos
IsWindowVisible
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
GetNextDlgGroupItem
MessageBeep
CharUpperA
RegisterClipboardFormatA
GetMenuCheckMarkDimensions
PostThreadMessageA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
IntersectRect
IsIconic
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
MessageBoxA
LoadIconA
GetWindowRect
EqualRect
BeginDeferWindowPos
EndDeferWindowPos
GetDC
ReleaseDC
RedrawWindow
GetMenuItemCount
GetMenuItemID
GetSubMenu
ModifyMenuA
GetMenuState
GetTabbedTextExtentA
SystemParametersInfoA
UpdateWindow
DrawTextA
GetMessageA
GetCapture
SetCapture
DispatchMessageA
ReleaseCapture
GetCursor
SetCursor
GetScrollRange
GetFocus
IsChild
InflateRect
GetSystemMetrics
SetRect
DrawFrameControl
CopyRect
GetMessagePos
ScreenToClient
PtInRect
KillTimer
InvalidateRect
GetSysColor
LoadCursorA
PostMessageA
GetParent
GetClientRect
LoadBitmapA
OffsetRect
EnableWindow
SetTimer
SendMessageA
EnableMenuItem
UnregisterClassA

gdi32

GetTextFaceA
GetWindowOrgEx
CreateSolidBrush
CreatePen
GetROP2
GetViewportExtEx
GetDeviceCaps
GetBkMode
GetTextAlign
GetPolyFillMode
GetStretchBltMode
GetNearestColor
GetBkColor
GetTextColor
CreateDCA
SetAbortProc
StartPage
EndPage
EndDoc
AbortDoc
GetViewportOrgEx
CreateFontA
GetCharWidthA
StretchDIBits
GetTextMetricsA
CombineRgn
SetRectRgn
GetMapMode
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetWindowExtEx
CreateRectRgn
GetCurrentPositionEx
SetTextAlign
LineTo
MoveToEx
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
Rectangle
SelectObject
GetStockObject
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateRectRgnIndirect
GetTextExtentPoint32A
CreateFontIndirectA
DeleteObject
GetObjectA
PatBlt
GetClipBox
SetTextColor
SetBkColor
CreateBitmap
LPtoDP
DPtoLP
DeleteDC
StartDocA
SaveDC
RestoreDC
CreatePatternBrush

comdlg32

GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA
CommDlgExtendedError
PrintDlgA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegQueryValueExA
RegOpenKeyExA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

shell32

DragQueryFileA
DragFinish

comctl32

ImageList_Draw
ImageList_GetImageInfo
ImageList_ReplaceIcon
ord17
ImageList_Destroy
ImageList_Create

oledlg

ord8

ole32

CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
CLSIDFromProgID
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

SysStringLen
VariantTimeToSystemTime
SysAllocStringLen
SysFreeString
VariantClear
VariantCopy
SysAllocString
SysAllocStringByteLen
VariantChangeType

odbc32

ord2
ord48
ord49
ord20
ord17
ord59
ord8
ord44
ord19
ord46
ord12
ord68
ord43
ord41
ord10
ord1
ord50
ord45
ord51
ord15
ord9
ord14
ord3
ord11
ord18
ord13
ord61
ord16
ord5

Sections

.text
Size: 288KB - Virtual size: 285KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 324KB - Virtual size: 338KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 348KB - Virtual size: 347KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f9fac3f34acc6d4f6e2a745913b7aeeb

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

odbc32

Sections

.text Size: 288KB - Virtual size: 285KB

.rdata Size: 72KB - Virtual size: 68KB

.data Size: 324KB - Virtual size: 338KB

.rsrc Size: 348KB - Virtual size: 347KB

.text
Size: 288KB - Virtual size: 285KB

.rdata
Size: 72KB - Virtual size: 68KB

.data
Size: 324KB - Virtual size: 338KB

.rsrc
Size: 348KB - Virtual size: 347KB