f03911cbac37eed8d88239de08ea0a5963877beedc25096d374e75bea38ec98e

Sharing

Copy URL Twitter E-mail

General

Target

f03911cbac37eed8d88239de08ea0a5963877beedc25096d374e75bea38ec98e
Size

12.0MB
MD5

ceba990582daa84bcdb58e71618f4a23
SHA1

8aeb8edbedff406d53c880fc206244c18e248359
SHA256

f03911cbac37eed8d88239de08ea0a5963877beedc25096d374e75bea38ec98e
SHA512

a73c650756484469262f031e8405ea708e17636e6b80123818ac02a04d68816d4bbac51ab5b304bf887fcfbb71be0b01482edb6fd9612267d3c3d1ec6c8728d8
SSDEEP

196608:A1o0v6wDf+YW+JW2h1exJquxw1B/5ZLp1G7T7KfEh7M5OoaDj9Zim8prh4sVOxU/:mo0SwSYlh8x8awfpU7T7RFM5kgprzom

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f03911cbac37eed8d88239de08ea0a5963877beedc25096d374e75bea38ec98e

Files

f03911cbac37eed8d88239de08ea0a5963877beedc25096d374e75bea38ec98e
.exe windows x86

e2dcdd5aa81b3d875951648f16a4b261

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventW
WaitForMultipleObjects
InitializeCriticalSection
DeviceIoControl
WriteFile
GetDriveTypeW
GetDiskFreeSpaceExW
GetCurrentProcessId
MoveFileExW
OpenProcess
CreateFileW
WaitForSingleObject
TerminateProcess
CreateDirectoryW
SetLastError
WideCharToMultiByte
FindResourceExW
Process32FirstW
SetEvent
MultiByteToWideChar
CreateToolhelp32Snapshot
FindClose
WriteConsoleW
GetConsoleCP
FlushFileBuffers
SetStdHandle
FindNextFileA
LoadLibraryExW
GetSystemWindowsDirectoryW
FreeLibrary
Process32NextW
GetModuleHandleW
CreateProcessW
GetProcAddress
FindResourceW
LoadResource
LoadLibraryW
LockResource
Sleep
FreeResource
GetSystemDirectoryW
GetVersionExW
LeaveCriticalSection
GetModuleFileNameW
InterlockedCompareExchange
GetCurrentProcess
EnterCriticalSection
SizeofResource
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExA
DeleteCriticalSection
HeapDestroy
DecodePointer
HeapAlloc
RaiseException
CloseHandle
HeapReAlloc
GetLastError
GetConsoleMode
LCMapStringW
GetStringTypeW
GetACP
GetStdHandle
GetModuleFileNameA
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
HeapSize
CreateMutexW
InitializeCriticalSectionAndSpinCount
ExitThread
CreateThread
EncodePointer
HeapFree
RtlUnwind
InitializeSListHead
QueryPerformanceCounter
GetStartupInfoW
IsProcessorFeaturePresent
GetCommandLineW
ResetEvent
GetTickCount
MulDiv
GetFileSize
ReadFile
GetFileType
SetFilePointer
SetFileTime
DuplicateHandle
SystemTimeToFileTime
DosDateTimeToFileTime
GetCurrentDirectoryW
IsDebuggerPresent
OutputDebugStringW
GetSystemTimeAsFileTime
LocalFileTimeToFileTime
CreateFileA
GetFileSizeEx
SetFilePointerEx
HeapLock
HeapUnlock
HeapWalk
GetCurrentThreadId
OpenThread
ReleaseMutex
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter

user32

PostMessageW
ShowWindow
FindWindowW
CallWindowProcW
AllowSetForegroundWindow
GetWindowThreadProcessId
GetWindowRect
DestroyWindow
IsWindowVisible
MoveWindow
IsZoomed
GetParent
IsIconic
CreateWindowExW
UpdateLayeredWindow
GetKeyState
GetCapture
SetCapture
ReleaseCapture
SetTimer
KillTimer
GetDC
ReleaseDC
BeginPaint
EndPaint
GetUpdateRect
InvalidateRect
GetCursorPos
MapWindowPoints
IsRectEmpty
PtInRect
DefWindowProcW
EnableWindow
RegisterClassW
RegisterClassExW
GetClassInfoExW
GetSystemMetrics
SetPropW
GetPropW
RemovePropW
SetCursor
OffsetRect
LoadCursorW
LoadImageW
SystemParametersInfoW
MonitorFromWindow
GetMonitorInfoW
CharNextW
CharPrevW
DrawTextW
FillRect
SetRect
IntersectRect
GetWindowDC
GetWindowTextW
GetWindowTextLengthW
CopyRect
EqualRect
CreateAcceleratorTableW
InvalidateRgn
CreateCaret
HideCaret
ShowCaret
SetCaretPos
ClientToScreen
GetSysColor
GetWindowRgn
SendMessageW
LoadStringW
SetForegroundWindow
GetWindowLongW
GetMessageW
GetWindow
SetWindowPos
ScreenToClient
SetWindowTextW
IsWindow
DispatchMessageW
SetFocus
TranslateMessage
SetWindowLongW
GetClientRect
PostQuitMessage

gdi32

SetStretchBltMode
TextOutW
GetTextColor
SetViewportOrgEx
SetTextColor
MoveToEx
SelectObject
CreateDIBSection
CreateCompatibleDC
CreateRectRgn
DeleteDC
PtInRegion
DeleteObject
BitBlt
CreateCompatibleBitmap
CreateFontIndirectW
CreatePen
GetStockObject
Rectangle
RestoreDC
SaveDC
GetTextMetricsW
GetObjectW
SetWindowOrgEx
GetDeviceCaps
CombineRgn
CreateRectRgnIndirect
CreateRoundRectRgn
CreateSolidBrush
GetCharABCWidthsW
GetClipBox
GetTextExtentPoint32W
LineTo
RoundRect
SelectClipRgn
ExtSelectClipRgn
SetBkColor
SetBkMode
StretchBlt

advapi32

RegQueryValueExW
RegOpenKeyExW
OpenProcessToken
RegCloseKey
AdjustTokenPrivileges
LookupPrivilegeValueW
RegQueryValueExA
RegEnumKeyExW
RegSetValueExW
RegCreateKeyExW

shell32

SHGetSpecialFolderPathW
ord165
SHGetPathFromIDListW
SHBrowseForFolderW

ole32

OleInitialize
CoInitialize
CoTaskMemFree
CoCreateInstance
CoInitializeEx
OleLockRunning
CoUninitialize
OleUninitialize
CLSIDFromString
CLSIDFromProgID

shlwapi

PathRemoveBackslashW
PathCombineW
StrCmpIW
PathAppendW
PathFileExistsW
SHGetValueW
StrStrIW
PathRemoveFileSpecW
StrCmpNIW

comctl32

_TrackMouseEvent
ord17

msimg32

AlphaBlend

psapi

GetModuleFileNameExW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

Sections

.text
Size: 499KB - Virtual size: 498KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21.2MB - Virtual size: 21.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e2dcdd5aa81b3d875951648f16a4b261

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

shlwapi

comctl32

msimg32

psapi

version

Sections

.text Size: 499KB - Virtual size: 498KB

.rdata Size: 115KB - Virtual size: 114KB

.data Size: 10KB - Virtual size: 15KB

.rsrc Size: 21.2MB - Virtual size: 21.2MB

.reloc Size: 24KB - Virtual size: 23KB

.text
Size: 499KB - Virtual size: 498KB

.rdata
Size: 115KB - Virtual size: 114KB

.data
Size: 10KB - Virtual size: 15KB

.rsrc
Size: 21.2MB - Virtual size: 21.2MB

.reloc
Size: 24KB - Virtual size: 23KB