2f7dd51aa2f030941467630c440f27e19a2119a3956399df972bf922eb404868

Sharing

Copy URL Twitter E-mail

General

Target

2f7dd51aa2f030941467630c440f27e19a2119a3956399df972bf922eb404868
Size

8.4MB
MD5

de1736e7b04fee4fe4ea3190521ed2a4
SHA1

1cc58daf87575681dcc8cfdb51d48ed3ed3dfc70
SHA256

2f7dd51aa2f030941467630c440f27e19a2119a3956399df972bf922eb404868
SHA512

a17db4838554a5de7b01567f5852faca95a24b8c949d4691202820e243ec9bbf7c1312ba8ef57cf52279a04903d34a1164358bcff8839562c8a34cb1bfdfdbbe
SSDEEP

196608:k3ZgrDIYOtLG4h3s/I2jM8NIuQEMa6/vFIQaR++QTkCeFOT+baVHpXV:hE1AjVQt9Ng+BJfT8aVHpX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f7dd51aa2f030941467630c440f27e19a2119a3956399df972bf922eb404868

Files

2f7dd51aa2f030941467630c440f27e19a2119a3956399df972bf922eb404868
.exe windows x86

52c3c092521fb3c739ac70053586b7da

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundA

kernel32

TlsSetValue
LocalReAlloc
EnterCriticalSection
TlsFree
FileTimeToSystemTime
GlobalFlags
GetACP
GetCPInfo
GetOEMCP
GetCurrentDirectoryA
DeleteFileA
lstrcpyA
lstrcmpiA
ReadFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
GetWindowsDirectoryA
GetNumberFormatA
SetErrorMode
GetFileAttributesExA
FileTimeToLocalFileTime
GetFileAttributesA
GetFileSizeEx
GetFileTime
GetTempFileNameA
GetTempPathA
InitializeCriticalSectionAndSpinCount
GetTickCount
GetProfileIntA
Sleep
SearchPathA
VirtualProtect
FindResourceExW
RtlUnwind
RaiseException
ExitProcess
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapAlloc
HeapFree
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
ExitThread
CreateThread
HeapQueryInformation
HeapSize
SetStdHandle
TlsAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
IsProcessorFeaturePresent
IsValidCodePage
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
QueryPerformanceCounter
GetStringTypeW
LCMapStringW
CompareStringW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
WriteConsoleW
CreateFileW
SetEnvironmentVariableA
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GetCurrentProcessId
WaitForSingleObject
ResumeThread
SetThreadPriority
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
InterlockedExchange
lstrcmpA
GetModuleHandleW
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
GetModuleHandleA
FreeLibrary
CompareStringA
LoadLibraryW
ActivateActCtx
DeactivateActCtx
lstrcmpW
FreeResource
GetLastError
SetLastError
GlobalFree
CopyFileA
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
lstrlenW
MultiByteToWideChar
MulDiv
lstrlenA
InitializeCriticalSection
GlobalHandle
GetFileType
GlobalReAlloc
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
WinExec
GetModuleFileNameA
CreateDirectoryA
LoadLibraryA
GetProcAddress
CreateFileA
FindResourceA
WriteFile
InterlockedDecrement
WideCharToMultiByte
OpenProcess
CreateToolhelp32Snapshot
Process32First
Process32Next
CloseHandle
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection

user32

DrawIconEx
IsZoomed
SetWindowRgn
SetParent
DestroyAcceleratorTable
WindowFromPoint
SetClassLongA
LoadMenuW
GetSystemMenu
DrawStateA
DrawEdge
DrawFrameControl
CopyAcceleratorTableA
ToAsciiEx
GetKeyboardLayout
GetKeyboardState
LoadAcceleratorsW
CreateAcceleratorTableA
SetRect
SetCursorPos
BringWindowToTop
LockWindowUpdate
TranslateAcceleratorA
InsertMenuItemA
LoadAcceleratorsA
LoadMenuA
ReuseDDElParam
UnpackDDElParam
GetKeyNameTextA
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
LoadImageW
IsCharLowerA
MapVirtualKeyExA
UnionRect
UpdateLayeredWindow
MonitorFromPoint
IsMenu
PostThreadMessageA
WaitMessage
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
CreateMenu
SetMenuDefaultItem
IsClipboardFormatAvailable
FrameRect
GetUpdateRect
RegisterClipboardFormatA
CopyIcon
CharUpperBuffA
GetDoubleClickTime
SubtractRect
MapDialogRect
DrawIcon
DestroyCursor
GetWindowRgn
SetRectEmpty
DeleteMenu
RealChildWindowFromPoint
GetSysColorBrush
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetDC
ReleaseDC
IntersectRect
GetWindowThreadProcessId
ShowOwnedPopups
SetCursor
GetMessageA
TranslateMessage
GetCursorPos
ValidateRect
SystemParametersInfoA
DestroyMenu
GetMenuItemInfoA
InflateRect
PostQuitMessage
ShowWindow
GetNextDlgGroupItem
SetWindowTextA
IsDialogMessageA
HideCaret
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetForegroundWindow
ShowScrollBar
IsWindowVisible
GetClientRect
PostMessageA
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
GetWindowRect
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetParent
GetWindowTextLengthA
GetWindowTextA
GetScrollPos
SetScrollPos
GetWindow
GetWindowLongA
SetFocus
SendMessageA
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
RemoveMenu
LoadImageA
CopyImage
GetIconInfo
OffsetRect
MessageBeep
NotifyWinEvent
MoveWindow
EnableScrollBar
DrawFocusRect
InvertRect
GetAsyncKeyState
MapVirtualKeyA
ReleaseCapture
SetCapture
KillTimer
SetTimer
InvalidateRect
FillRect
LoadBitmapW
PtInRect
DefWindowProcA
GetSystemMetrics
wsprintfA
LoadIconW
LoadCursorA
UpdateWindow
GetSubMenu
CheckMenuItem
EnableWindow
IsRectEmpty
CreatePopupMenu
GetMenuDefaultItem
RedrawWindow
CharUpperA
DestroyIcon
IsIconic
UnregisterClassA
LoadCursorW
SetLayeredWindowAttributes
CheckDlgButton
EnumDisplayMonitors
GetKeyState

gdi32

GetObjectType
SelectPalette
RectVisible
ExtSelectClipRgn
DeleteDC
CreateDCA
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
StretchBlt
GetStockObject
ScaleWindowExtEx
SetWindowExtEx
SetTextColor
SetBkColor
GetObjectA
CreateBitmap
CreateFontIndirectA
ExtTextOutA
GetTextExtentPoint32A
CreateRectRgn
CreateRectRgnIndirect
SetRectRgn
CombineRgn
PatBlt
DeleteObject
CreatePatternBrush
DPtoLP
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
CopyMetaFileA
GetDeviceCaps
GetTextFaceA
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
CreatePen
CreateSolidBrush
CreateHatchBrush
GetTextMetricsA
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetBkColor
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreateDIBSection
CreateRoundRectRgn
CreatePolygonRgn
GetTextColor
CreateEllipticRgn
Polyline
Ellipse
Polygon
SetDIBColorTable
SetPixel
Rectangle
OffsetRgn
GetRgnBox
EnumFontFamiliesExA
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
TextOutA

advapi32

RegCloseKey
RegEnumKeyExA
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA

shell32

SHBrowseForFolderA
DragQueryFileA
DragFinish
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetDesktopFolder
SHGetFileInfoA
ShellExecuteA
SHGetFolderPathA
ShellAboutA
SHAppBarMessage

ole32

DoDragDrop
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CoTaskMemFree
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CreateStreamOnHGlobal
CoInitialize
CoUninitialize
CoCreateGuid
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoCreateInstance
CoInitializeEx
CoInitializeSecurity

oleaut32

VariantTimeToSystemTime
SystemTimeToVariantTime
VariantClear
VariantInit
SysFreeString
SysAllocString
VarBstrFromDate
SysStringLen
SysAllocStringLen
VariantChangeType

msimg32

AlphaBlend
TransparentBlt

comctl32

ImageList_GetIconSize

shlwapi

PathAppendA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW
PathFindExtensionA

oleacc

CreateStdAccessibleObject
LresultFromObject
AccessibleObjectFromWindow

gdiplus

GdiplusShutdown
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdiplusStartup
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipGetImagePalette
GdipFree
GdipAlloc

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

comdlg32

GetFileTitleA

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 259KB - Virtual size: 259KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6.9MB - Virtual size: 6.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

52c3c092521fb3c739ac70053586b7da

Headers

DLL Characteristics

File Characteristics

Imports

winmm

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

msimg32

comctl32

shlwapi

oleacc

gdiplus

imm32

winspool.drv

comdlg32

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 259KB - Virtual size: 259KB

.data Size: 22KB - Virtual size: 51KB

.rsrc Size: 6.9MB - Virtual size: 6.9MB

.reloc Size: 179KB - Virtual size: 178KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 259KB - Virtual size: 259KB

.data
Size: 22KB - Virtual size: 51KB

.rsrc
Size: 6.9MB - Virtual size: 6.9MB

.reloc
Size: 179KB - Virtual size: 178KB