460726ab95500092dc4ae567685b1fc5848e143932a21a4cf85834cb61bf4e3f

Sharing

Copy URL Twitter E-mail

General

Target

460726ab95500092dc4ae567685b1fc5848e143932a21a4cf85834cb61bf4e3f
Size

762KB
MD5

67bbdb73592e16046fd3132354b8b60c
SHA1

8265e87efcf5b85cd5aedcc936bcf37d066e3e59
SHA256

460726ab95500092dc4ae567685b1fc5848e143932a21a4cf85834cb61bf4e3f
SHA512

4b5592898befc441e84f33193369fe457df74a16d34760eab7220b1483a23fd24b7944c0fc5bc50ab8d70e9996a4dddcbf32dafd73bc8225d6f95ace0252d778
SSDEEP

12288:NxyALFDD68peCIQ+hi187F55dGXjExIf/+72+McUM:xJDLvQi18pMXjaIXPv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
460726ab95500092dc4ae567685b1fc5848e143932a21a4cf85834cb61bf4e3f

Files

460726ab95500092dc4ae567685b1fc5848e143932a21a4cf85834cb61bf4e3f
.exe windows x86

38e5c00c132d77fadd49bf6e1c0d5adb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
GetFileSize
ReadFile
GetTickCount
GetModuleHandleW
GetProcAddress
LoadLibraryW
GlobalUnlock
GlobalLock
GetACP
GetLastError
ExitProcess
CreateDirectoryW
GetFileAttributesW
LocalFileTimeToFileTime
SetFilePointer
SetFileTime
WriteFile
SystemTimeToFileTime
FormatMessageW
InitializeCriticalSectionAndSpinCount
GetCurrentProcessId
MulDiv
FreeResource
LoadResource
LockResource
SizeofResource
FindResourceW
GlobalAlloc
GetLocalTime
lstrcmpiW
lstrcpynW
IsProcessorFeaturePresent
LCMapStringEx
ResetEvent
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
OutputDebugStringW
RaiseException
RtlUnwind
SetLastError
TlsAlloc
TlsGetValue
GetCurrentDirectoryW
TlsFree
FreeLibrary
LoadLibraryExW
FindClose
FindFirstFileExW
FindNextFileW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
DeleteFileW
RemoveDirectoryW
GetStdHandle
GetModuleHandleExW
HeapFree
HeapAlloc
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileSizeEx
SetFilePointerEx
GetFileType
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadConsoleW
HeapReAlloc
GetTimeZoneInformation
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetProcessHeap
HeapSize
WriteConsoleW
SetEndOfFile
WideCharToMultiByte
MultiByteToWideChar
LocalFree
DecodePointer
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
TlsSetValue
GetStringTypeW
CreateThread
CopyFileW
CreateProcessW
GetModuleHandleA
GetModuleFileNameW
lstrlenW
GetModuleFileNameA
lstrcmpW
lstrcpyW
CloseHandle
Process32FirstW
Process32NextW
Sleep
CreateToolhelp32Snapshot
OpenProcess
SetEvent
TerminateProcess

user32

SetWindowRgn
UpdateLayeredWindow
MoveWindow
IsWindowEnabled
GetWindowRgn
CharPrevW
DrawTextW
FillRect
SetRect
CreatePopupMenu
DestroyMenu
EnableMenuItem
AppendMenuW
TrackPopupMenu
CreateCaret
GetCaretBlinkTime
HideCaret
ShowCaret
SetCaretPos
GetCaretPos
ClientToScreen
UpdateWindow
EqualRect
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
wsprintfA
DrawTextA
CreateAcceleratorTableW
InvalidateRgn
GetGUIThreadInfo
SetForegroundWindow
GetKeyboardLayout
GetKeyNameTextW
MapVirtualKeyExW
SetCursor
GetMonitorInfoW
MonitorFromWindow
GetWindow
GetParent
GetPropW
IsRectEmpty
OffsetRect
UnionRect
IntersectRect
GetSysColor
MapWindowPoints
ScreenToClient
GetCursorPos
GetWindowRect
GetClientRect
InvalidateRect
GetUpdateRect
EndPaint
BeginPaint
ReleaseDC
GetDC
KillTimer
SetTimer
ReleaseCapture
SetCapture
GetKeyState
GetFocus
GetActiveWindow
SetFocus
CharNextW
IsZoomed
IsIconic
IsWindowVisible
SetWindowPos
DestroyWindow
IsWindow
CreateWindowExW
DispatchMessageW
TranslateMessage
GetMessageW
CharLowerBuffW
PostMessageW
SetWindowLongW
MessageBoxW
SetPropW
GetSystemMetrics
InflateRect
EnableWindow
ShowWindow
GetWindowLongW
PostQuitMessage
SendMessageW
GetClassInfoExW
RegisterClassExW
RegisterClassW
CallWindowProcW
DefWindowProcW
wsprintfW
LoadCursorW
PtInRect
LoadImageW

advapi32

RegOpenKeyW
RegDeleteValueW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW

shell32

SHChangeNotify
ShellExecuteA
SHGetSpecialFolderPathW
DragQueryFileW

shlwapi

SHDeleteKeyW
PathStripPathW
PathFindFileNameW
PathStripPathA
PathFileExistsW
PathAddExtensionW
PathAppendW
PathCombineW

ws2_32

gethostname
gethostbyname
WSAStartup

gdi32

PlayEnhMetaFile
GetTextMetricsW
GetObjectW
SetWindowOrgEx
CreateRoundRectRgn
CreateRectRgn
CreateEnhMetaFileW
CreateCompatibleDC
CreateDIBitmap
CreateFontIndirectW
PtInRegion
CreateDIBSection
CombineRgn
CreatePenIndirect
GetEnhMetaFileHeader
CloseEnhMetaFile
SelectObject
SaveDC
RestoreDC
Rectangle
RemoveFontMemResourceEx
AddFontMemResourceEx
CreateCompatibleBitmap
BitBlt
CreatePen
DeleteDC
DeleteObject
GetDeviceCaps
CreateRectRgnIndirect
SetBitmapBits
GetBitmapBits
GetTextExtentPointA
CreatePatternBrush
GdiFlush
TextOutW
MoveToEx
GetObjectA
SetTextColor
CreateSolidBrush
GetCharABCWidthsW
GetClipBox
GetTextExtentPoint32W
LineTo
SelectClipRgn
ExtSelectClipRgn
SetBkColor
SetBkMode
StretchBlt
SetStretchBltMode
GetStockObject

ole32

ReleaseStgMedium
OleDuplicateData
DoDragDrop
CoCreateInstance
CreateStreamOnHGlobal
CLSIDFromString
CLSIDFromProgID
OleLockRunning

oleaut32

VariantClear
SysFreeString
VariantInit
SysAllocString

comctl32

InitCommonControlsEx
ord17
_TrackMouseEvent

gdiplus

GdipCreateBitmapFromScan0
GdipDrawLine
GdipDrawImageI
GdiplusStartup
GdiplusShutdown
GdipAlloc
GdipFree
GdipCreatePath
GdipDeletePath
GdipAddPathLine
GdipAddPathArc
GdipCreateMatrix
GdipDeleteMatrix
GdipTranslateMatrix
GdipRotateMatrix
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipCreatePen1
GdipDeletePen
GdipSetPenMode
GdipSetPenDashStyle
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipCloneImage
GdipDisposeImage
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipCreateFromHDC
GdipDeleteGraphics
GdipReleaseDC
GdipSetSmoothingMode
GdipSetTextRenderingHint
GdipSetInterpolationMode
GdipSetWorldTransform
GdipResetWorldTransform
GdipDrawRectangleI
GdipDrawPath
GdipFillRectangleI
GdipFillPath
GdipDrawImageRectRect
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipDeleteFont
GdipDrawString
GdipMeasureString
GdipStringFormatGetGenericTypographic
GdipDeleteStringFormat
GdipCloneStringFormat
GdipSetStringFormatFlags
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipSetStringFormatTrimming
GdipGetImageWidth
GdipGetImageHeight
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipImageSelectActiveFrame
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipDrawImageRectI
GdipTranslateWorldTransform
GdipRotateWorldTransform
GdipCreatePen2
GdipSetPenStartCap
GdipSetPenEndCap
GdipGetImageGraphicsContext

imm32

ImmGetContext
ImmReleaseContext
ImmSetCompositionWindow

Sections

.text
Size: 522KB - Virtual size: 522KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

38e5c00c132d77fadd49bf6e1c0d5adb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

shlwapi

ws2_32

gdi32

ole32

oleaut32

comctl32

gdiplus

imm32

Sections

.text Size: 522KB - Virtual size: 522KB

.rdata Size: 144KB - Virtual size: 144KB

.data Size: 8KB - Virtual size: 13KB

.rsrc Size: 51KB - Virtual size: 51KB

.reloc Size: 34KB - Virtual size: 34KB

.text
Size: 522KB - Virtual size: 522KB

.rdata
Size: 144KB - Virtual size: 144KB

.data
Size: 8KB - Virtual size: 13KB

.rsrc
Size: 51KB - Virtual size: 51KB

.reloc
Size: 34KB - Virtual size: 34KB