44ee84bdbee259a432df6846436c83e1b54e4016d665e1b017e0c0ccf9e2ac71

Sharing

Copy URL

Twitter E-mail

General

Target

44ee84bdbee259a432df6846436c83e1b54e4016d665e1b017e0c0ccf9e2ac71
Size

2.2MB
MD5

3a334ccfb7ee0f63423b39de139f28d3
SHA1

a778e7d5def6ee1e36deab556ccea1ec7b63286b
SHA256

44ee84bdbee259a432df6846436c83e1b54e4016d665e1b017e0c0ccf9e2ac71
SHA512

1f456e66097569bf900c6a5bd7cab6c2c018bba84be0dffa39f9a993fdfdd5542ef14037b9675fe4eaf514b13d0dc0548b1ce48ce917ef82a15c9b73b0ddb1aa
SSDEEP

49152:J2s2GQciip7BYMwm2QjPFQcRCCMVX8DKsPP0hKxqfRJBfXaoNq:2GQ2p71wmLxQcwCMp8WsPshKxqfRO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44ee84bdbee259a432df6846436c83e1b54e4016d665e1b017e0c0ccf9e2ac71

Files

44ee84bdbee259a432df6846436c83e1b54e4016d665e1b017e0c0ccf9e2ac71
.exe windows:6 windows x86

da46055dd713f0bfda7d5f8c45ae1f8c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetOpenUrlA
InternetOpenA
InternetReadFile
InternetCloseHandle

winspool.drv

GetJobW
ClosePrinter
OpenPrinterW
DocumentPropertiesW

comctl32

InitCommonControlsEx

uxtheme

IsAppThemed
GetWindowTheme
DrawThemeParentBackground
DrawThemeText
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
GetCurrentThemeName

kernel32

QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
OutputDebugStringW
RaiseException
IsProcessorFeaturePresent
ResetEvent
TerminateProcess
FindResourceExW
GetWindowsDirectoryW
SetErrorMode
SearchPathW
GetProfileIntW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
LocalFileTimeToFileTime
GetFileSizeEx
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FormatMessageA
RtlUnwind
GetCommandLineA
GetCommandLineW
GetSystemInfo
VirtualQuery
CreateThread
ExitThread
FreeLibraryAndExitThread
GetStdHandle
GetFileType
GetFileAttributesExW
FileTimeToLocalFileTime
GetThreadLocale
GetStringTypeExW
MoveFileW
lstrcmpiW
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetShortPathNameW
FlushFileBuffers
FindFirstFileW
FindClose
GetTempPathW
SetFilePointer
DeleteFileW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GetCurrentDirectoryW
VerifyVersionInfoW
VerSetConditionMask
LocalReAlloc
LocalAlloc
GlobalHandle
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GlobalFlags
GlobalGetAtomNameW
CompareStringW
GlobalFindAtomW
GetSystemDirectoryW
EncodePointer
ResumeThread
SetThreadPriority
CreateEventW
WaitForSingleObject
SetEvent
GlobalAddAtomW
GetTickCount64
lstrcpyW
GlobalReAlloc
InitializeCriticalSectionAndSpinCount
CloseHandle
GetFileSize
CreateFileW
SystemTimeToFileTime
ReplaceFileW
SetFileTime
GetTempFileNameW
GetFullPathNameW
GetFileTime
GetFileAttributesW
GetDiskFreeSpaceW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
CompareStringA
MultiByteToWideChar
lstrcmpA
GlobalDeleteAtom
LoadLibraryExW
GetVersionExW
GetCurrentThreadId
GetCurrentThread
lstrcmpW
LoadLibraryW
GetModuleHandleW
GetModuleHandleA
OutputDebugStringA
WideCharToMultiByte
CopyFileW
FormatMessageW
LocalFree
GlobalFree
GlobalSize
GlobalAlloc
SetLastError
GetModuleFileNameW
GetCurrentProcessId
MulDiv
GlobalLock
GlobalUnlock
GetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
FreeLibrary
VirtualFree
VirtualProtect
IsBadReadPtr
GetProcAddress
VirtualAlloc
GetProcessHeap
Sleep
LoadLibraryA
DeleteCriticalSection
DecodePointer
LoadResource
LockResource
SizeofResource
FindResourceW
HeapDestroy
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
ExitProcess
LCMapStringW
GetTimeZoneInformation
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStringTypeW
WaitForSingleObjectEx
GetModuleHandleExW
HeapQueryInformation
QueryPerformanceFrequency
SetStdHandle

advapi32

RegSetValueW
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
GetFileSecurityW
SetFileSecurityW
RegEnumKeyW
RegQueryValueW
RegEnumKeyExW
RegEnumValueW
RegCloseKey

shell32

DragQueryFileW
DragFinish
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetDesktopFolder
SHAddToRecentDocs
SHGetFileInfoW
SHAppBarMessage
ExtractIconW
ShellExecuteW

oledlg

OleUIBusyW

gdi32

CreatePalette
GetTextFaceW
GetWindowOrgEx
GetTextAlign
GetStretchBltMode
GetPolyFillMode
GetNearestColor
GetBkMode
GetROP2
GetCharWidthW
Polyline
Polygon
CreatePolygonRgn
GetBkColor
LPtoDP
Ellipse
CreateEllipticRgn
Rectangle
GetViewportOrgEx
GetTextColor
OffsetRgn
GetRgnBox
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
SetRectRgn
GetMapMode
CreateRectRgnIndirect
CreateRoundRectRgn
GetTextMetricsW
GetTextExtentPoint32W
SetDIBColorTable
CreateDIBSection
StretchBlt
SetPixel
RealizePalette
PatBlt
GetDIBits
CombineRgn
DPtoLP
SetAbortProc
AbortDoc
EndPage
StartPage
EndDoc
CreateFontIndirectW
CreateCompatibleBitmap
CreateDCW
CopyMetaFileW
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
FrameRgn
GetPaletteEntries
TextOutW
MoveToEx
GetObjectW
StartDocW
SetTextAlign
SetTextColor
SetStretchBltMode
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SetBkColor
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetDeviceCaps
GetCurrentPositionEx
GetClipBox
ExcludeClipRect
Escape
DeleteObject
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
CreateBitmap
BitBlt
DeleteDC
ExtFloodFill
GetBoundsRect
ExtTextOutW
SetPaletteEntries
PtInRegion
EnumFontFamiliesExW
RoundRect
GetNearestPaletteIndex
GetSystemPaletteEntries
SetPixelV
FillRgn

shlwapi

PathIsUNCW
StrFormatKBSizeW
PathRemoveFileSpecW
PathFindFileNameW
PathFindExtensionW
PathStripToRootW

gdiplus

GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdiplusShutdown

msimg32

AlphaBlend
TransparentBlt

user32

PeekMessageW
PostThreadMessageW
WaitMessage
IsWindow
LoadMenuW
DestroyMenu
GetClientRect
GetWindowRect
GetDesktopWindow
DrawStateW
InvalidateRect
GetClassNameW
LoadBitmapW
DestroyWindow
CreateDialogIndirectParamW
EndDialog
GetDlgItem
GetNextDlgTabItem
GetActiveWindow
SetActiveWindow
GetFocus
GetCursorPos
PtInRect
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
IsChild
IsWindowVisible
SetRectEmpty
CopyRect
IsIconic
GetDlgCtrlID
AdjustWindowRectEx
SetRect
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
IntersectRect
IsRectEmpty
DestroyIcon
LoadImageW
CopyImage
SetTimer
KillTimer
GetSystemMetrics
InflateRect
GetIconInfo
RegisterWindowMessageW
TrackMouseEvent
BeginDeferWindowPos
EndDeferWindowPos
CharUpperW
SetFocus
GetAsyncKeyState
GetCapture
SetCapture
ReleaseCapture
GetSystemMenu
CheckMenuItem
EnableMenuItem
DeleteMenu
SetWindowRgn
SetCursor
WindowFromPoint
EqualRect
LoadCursorW
NotifyWinEvent
DrawFrameControl
IsMenu
GetKeyState
GetMenuItemInfoW
GetClassLongW
DestroyAcceleratorTable
GetTopWindow
GetWindow
CreatePopupMenu
ModifyMenuW
TrackPopupMenu
MonitorFromPoint
GetMonitorInfoW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
TranslateMessage
RegisterClipboardFormatW
SetWindowPos
SetWindowContextHelpId
MapDialogRect
ShowWindow
MoveWindow
SetDlgItemTextW
CheckDlgButton
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
SetWindowLongW
IsDialogMessageW
GetMessageW
ValidateRect
ShowOwnedPopups
GetMessagePos
GetMessageTime
DefWindowProcW
CallWindowProcW
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
GetWindowPlacement
SetWindowPlacement
DeferWindowPos
GetMenu
SetMenu
GetForegroundWindow
SetForegroundWindow
ScrollWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
SetPropW
GetPropW
RemovePropW
MapWindowPoints
LoadIconW
SetScrollInfo
GetScrollInfo
WinHelpW
MonitorFromWindow
BringWindowToTop
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
RealChildWindowFromPoint
GetSysColorBrush
SetParent
SetLayeredWindowAttributes
EnumDisplayMonitors
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
MapVirtualKeyW
CreateAcceleratorTableW
CopyAcceleratorTableW
EnumChildWindows
LockWindowUpdate
SetClassLongW
GetMenuDefaultItem
SetMenuDefaultItem
UpdateLayeredWindow
EnableScrollBar
UnionRect
SendDlgItemMessageA
DestroyCursor
DrawIcon
DrawEdge
DrawFocusRect
DrawIconEx
IsClipboardFormatAvailable
GetDoubleClickTime
GetKeyNameTextW
CharUpperBuffW
SetCursorPos
CopyIcon
FrameRect
GetComboBoxInfo
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
CharNextW
InvalidateRgn
GetNextDlgGroupItem
IsCharLowerW
MapVirtualKeyExW
SubtractRect
GetUpdateRect
GetTabbedTextExtentW
CreateMenu
GetWindowRgn
HideCaret
InvertRect
PostQuitMessage
PostMessageW
SystemParametersInfoW
OffsetRect
MessageBeep
RedrawWindow
IsZoomed
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
GetLastActivePopup
GetWindowThreadProcessId
GetParent
GetWindowLongW
MessageBoxW
IsWindowEnabled
SendMessageW
FillRect
GetSysColor
ScreenToClient
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
UpdateWindow
ClientToScreen
UnregisterClassW
EnableWindow
DispatchMessageW
SetMenuItemInfoW

ole32

CoDisconnectObject
CLSIDFromProgID
CLSIDFromString
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CreateStreamOnHGlobal
CoInitialize
CoCreateInstance
CoCreateGuid
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CoInitializeEx
OleFlushClipboard
OleIsCurrentClipboard
DoDragDrop
OleLockRunning
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleGetClipboard
StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
CoRevokeClassObject
CoUninitialize
CoGetClassObject

oleaut32

VariantCopy
SysFreeString
SafeArrayDestroy
OleCreateFontIndirect
VarBstrFromDate
SysAllocString
SysAllocStringLen
VariantInit
VariantClear
VariantChangeType
LoadTypeLi
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

winmm

PlaySoundW

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 379KB - Virtual size: 378KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.trace
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

da46055dd713f0bfda7d5f8c45ae1f8c

Headers

DLL Characteristics

File Characteristics

Imports

wininet

winspool.drv

comctl32

uxtheme

kernel32

advapi32

shell32

oledlg

gdi32

shlwapi

gdiplus

msimg32

user32

ole32

oleaut32

imm32

oleacc

winmm

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 379KB - Virtual size: 378KB

.data Size: 47KB - Virtual size: 66KB

.data1 Size: 14KB - Virtual size: 14KB

.trace Size: 8KB - Virtual size: 8KB

.rsrc Size: 46KB - Virtual size: 46KB

.reloc Size: 148KB - Virtual size: 147KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 379KB - Virtual size: 378KB

.data
Size: 47KB - Virtual size: 66KB

.data1
Size: 14KB - Virtual size: 14KB

.trace
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 46KB - Virtual size: 46KB

.reloc
Size: 148KB - Virtual size: 147KB