1a4b78e566a12890eb7debd7489abcbb9684aae0873649fff57ba3b04a84d719

Sharing

Copy URL

Twitter E-mail

General

Target

1a4b78e566a12890eb7debd7489abcbb9684aae0873649fff57ba3b04a84d719
Size

3.4MB
MD5

c1b86a3b9c269ff337069e132a43ecf0
SHA1

b95810c4748e1ff4a34e0b01103f62e24c2792e5
SHA256

1a4b78e566a12890eb7debd7489abcbb9684aae0873649fff57ba3b04a84d719
SHA512

dc447c844a06c38749a4be06bbdb493baf962ff8cf37bc2f89ab5c23deed43506f27217acc433abd52c9fbe7df7893c29cee2cd54aea13d84daf6012c9a16d7e
SSDEEP

98304:u8/8+peU0vD343277MjHJPPbftFLOAkGkzdnEVomFHKnPS:u8/lpeU0vDiv1ftFLOyomFHKnPS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a4b78e566a12890eb7debd7489abcbb9684aae0873649fff57ba3b04a84d719

Files

1a4b78e566a12890eb7debd7489abcbb9684aae0873649fff57ba3b04a84d719
.exe windows:5 windows x86

362af37171129d41b5f5d45b1baf8584

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

recvfrom
listen
accept
freeaddrinfo
getaddrinfo
socket
gethostname
gethostbyname
inet_ntoa
setsockopt
ntohs
htons
getsockopt
getsockname
getpeername
connect
closesocket
bind
send
recv
WSASetLastError
select
__WSAFDIsSet
WSAGetLastError
WSAIoctl
WSAStartup
ioctlsocket
sendto
WSACleanup

wldap32

ord79
ord133
ord147
ord301
ord142
ord167
ord46
ord127
ord27
ord26
ord118
ord41
ord208
ord216
ord14
ord145

kernel32

ConnectNamedPipe
FindFirstFileA
FindNextFileA
GetACP
ExitProcess
InterlockedIncrement
InterlockedDecrement
GetFileType
SetFilePointer
SetFileTime
DuplicateHandle
SystemTimeToFileTime
DosDateTimeToFileTime
MulDiv
GetFileSize
CreateMutexW
GetModuleFileNameA
lstrcmpiW
FormatMessageW
CreateFileA
CreateDirectoryA
CopyFileA
GetComputerNameW
GetSystemTimes
GetLogicalDrives
GetLogicalDriveStringsW
GetDriveTypeW
GetDiskFreeSpaceExW
GlobalMemoryStatus
LocalAlloc
LocalFree
GlobalFree
FileTimeToDosDateTime
FileTimeToSystemTime
GetFileInformationByHandle
GetSystemTime
SetLastError
FormatMessageA
VerSetConditionMask
SleepEx
VerifyVersionInfoW
WaitForMultipleObjects
GetStdHandle
PeekNamedPipe
ExpandEnvironmentStringsA
GetSystemDirectoryW
FileTimeToLocalFileTime
lstrcmpA
GetCurrentThread
LoadLibraryExW
GlobalDeleteAtom
UnmapViewOfFile
GetFullPathNameW
GetVolumeInformationW
LockFile
SetEndOfFile
UnlockFile
LoadLibraryA
GetThreadLocale
GetFileAttributesExW
GetFileSizeEx
GetFileTime
EncodePointer
GlobalFindAtomW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalReAlloc
CompareStringW
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GlobalFlags
SetErrorMode
GetCommandLineW
IsDebuggerPresent
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
ExitThread
AreFileApisANSI
RtlUnwind
SetFilePointerEx
GetModuleHandleExW
HeapQueryInformation
VirtualAlloc
VirtualProtect
VirtualQuery
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
GetConsoleCP
GetConsoleMode
IsValidCodePage
GetOEMCP
GetCPInfo
GetTimeZoneInformation
ReadConsoleW
WaitForSingleObjectEx
SignalObjectAndWait
SwitchToThread
GetThreadPriority
GetLogicalProcessorInformation
CreateNamedPipeW
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
CreateTimerQueue
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
VirtualFree
GetThreadTimes
FreeLibraryAndExitThread
GetStringTypeW
MoveFileExW
SetStdHandle
FindFirstFileExW
SystemTimeToTzSpecificLocalTime
WriteConsoleW
GetDateFormatW
GetTimeFormatW
LCMapStringW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetEnvironmentVariableA
MapViewOfFile
CreateFileMappingW
lstrcpyW
TerminateJobObject
DeleteFileW
GetModuleHandleA
GetLongPathNameW
ExpandEnvironmentStringsW
GetCurrentDirectoryW
CreateDirectoryW
FindNextFileW
CopyFileW
GetVersionExW
GetVersion
GetModuleHandleW
DecodePointer
HeapSize
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapFree
HeapAlloc
HeapReAlloc
CreateThread
ResetEvent
SetEvent
GlobalAddAtomW
lstrcmpW
GetLocalTime
SetInformationJobObject
CreateJobObjectW
Process32NextW
OpenProcess
Process32FirstW
CreateToolhelp32Snapshot
CreateEventW
TerminateProcess
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
CreateFileW
GetProcAddress
LoadLibraryW
SetUnhandledExceptionFilter
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
ReadFile
GetStartupInfoW
CreatePipe
ReleaseSemaphore
GetCurrentThreadId
Sleep
OutputDebugStringW
CreateProcessW
GetSystemInfo
CreateSemaphoreW
RaiseException
GetTickCount
InterlockedCompareExchange
WaitForSingleObject
OutputDebugStringA
GetFileAttributesW
FindClose
FindFirstFileW
GetLastError
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcatW
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
CloseHandle
lstrlenW
DisconnectNamedPipe
FlushFileBuffers
WriteFile
FreeResource
DeleteFileA
CreateTimerQueueTimer
GetFileAttributesA
lstrlenA
SetThreadPriority

user32

RealChildWindowFromPoint
DrawTextExW
GrayStringW
TabbedTextOutW
GetWindowDC
CopyAcceleratorTableW
GetNextDlgGroupItem
GetNextDlgTabItem
MessageBeep
RegisterClipboardFormatW
CreateDialogIndirectParamW
EndDialog
PostThreadMessageW
SetMenu
GetCapture
GetDlgCtrlID
GetDlgItem
IsChild
GetClassInfoW
GetMessageTime
GetMessagePos
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
CharUpperW
UnhookWindowsHookEx
CallNextHookEx
SetWindowsHookExW
ValidateRect
PeekMessageW
RegisterWindowMessageW
MapDialogRect
SetWindowContextHelpId
GetMenuItemCount
GetMenuItemID
GetLastActivePopup
IsWindowEnabled
SendDlgItemMessageA
MessageBoxA
EnumWindows
GetWindowTextLengthW
GetWindowTextW
GetSysColor
GetCaretPos
ShowCaret
HideCaret
GetCaretBlinkTime
GetDesktopWindow
SetRect
CharPrevW
GetGUIThreadInfo
ClientToScreen
UpdateWindow
CreateAcceleratorTableW
MoveWindow
FillRect
SetCaretPos
SetWindowTextW
DrawTextW
MapVirtualKeyExW
GetKeyNameTextW
GetKeyboardLayout
PtInRect
IsRectEmpty
IntersectRect
MapWindowPoints
InvalidateRect
GetUpdateRect
EndPaint
BeginPaint
ReleaseDC
GetDC
ReleaseCapture
SetCapture
GetKeyState
GetActiveWindow
CharNextW
IsWindowVisible
DestroyWindow
GetFocus
GetWindow
GetParent
AdjustWindowRectEx
GetMenu
GetSystemMetrics
EnableWindow
IsWindow
CreateWindowExW
GetClassInfoExW
RegisterClassExW
RegisterClassW
CallWindowProcW
PostQuitMessage
DefWindowProcW
TranslateMessage
GetMessageW
GetMonitorInfoW
MonitorFromWindow
SetWindowLongW
GetWindowLongW
ScreenToClient
GetWindowRect
SetWindowRgn
IsZoomed
SetWindowPos
LoadCursorW
OffsetRect
UnionRect
SetCursor
wvsprintfW
CreateDesktopW
CloseDesktop
GetWindowThreadProcessId
PostMessageW
FindWindowW
UnregisterClassW
RegisterHotKey
UnregisterHotKey
DestroyMenu
GetSubMenu
TrackPopupMenu
GetCursorPos
LoadMenuW
SetFocus
ShowWindow
GetClientRect
SetPropW
GetSysColorBrush
IsDialogMessageW
WinHelpW
GetTopWindow
GetClassNameW
SetForegroundWindow
SendMessageW
IsIconic
GetPropW
GetClassLongW
EqualRect
CopyRect
RemovePropW
RedrawWindow
GetForegroundWindow
CreateCaret
SetActiveWindow
GetThreadDesktop
LoadIconW
MessageBoxW
KillTimer
SetTimer
wsprintfW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
InvalidateRgn
DispatchMessageW

gdi32

CreatePenIndirect
CreateRectRgnIndirect
GetCharABCWidthsW
GetClipBox
LineTo
RoundRect
SelectClipRgn
ExtSelectClipRgn
SetBkColor
StretchBlt
SetStretchBltMode
CreateDIBSection
MoveToEx
TextOutW
ExtTextOutW
CombineRgn
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetBkColor
GetTextColor
GetRgnBox
GetMapMode
GetViewportExtEx
GetDeviceCaps
SetTextColor
SetBkMode
GetTextExtentPoint32W
CreateSolidBrush
GetObjectA
SetWindowOrgEx
GetObjectW
GetTextMetricsW
SelectObject
SaveDC
SetMapMode
RectVisible
RestoreDC
Rectangle
PtVisible
GetStockObject
CreatePen
CreateFontIndirectW
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
DeleteObject
CreateRoundRectRgn
DeleteDC
Escape
CreateBitmap
CreatePatternBrush
GdiFlush
GetWindowExtEx

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

CryptGetHashParam
RegSetValueExW
RegCloseKey
RegEnumValueW
RegQueryValueW
RegEnumKeyW
CryptEncrypt
CryptImportKey
CryptDestroyKey
GetUserNameW
CryptReleaseContext
CryptDestroyHash
RegOpenKeyExW
CryptHashData
CryptCreateHash
CryptAcquireContextW
RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyW
RegCreateKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegQueryValueExW
RegDeleteValueW

shell32

ShellExecuteExW
Shell_NotifyIconW
ShellExecuteA
SHGetSpecialFolderPathW
SHGetFolderPathW
SHFileOperationW
SHGetMalloc
ShellExecuteW

comctl32

ord17
InitCommonControlsEx
_TrackMouseEvent

shlwapi

PathRemoveFileSpecW
PathStripPathW
StrCpyW
PathFileExistsW
PathCombineW
PathStripPathA
PathFindExtensionW
PathIsUNCW
PathStripToRootW
PathFindFileNameW

ole32

CoRevokeClassObject
CoCreateInstance
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
CoUninitialize
CoFreeUnusedLibraries
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoCreateGuid
CoInitialize
OleUninitialize
CoTaskMemFree
CoTaskMemAlloc
CoSetProxyBlanket
CreateStreamOnHGlobal
OleLockRunning
CLSIDFromProgID
CLSIDFromString
OleInitialize

oleaut32

SysStringLen
VariantChangeType
SysAllocString
VariantInit
SysAllocStringLen
SafeArrayAccessData
SafeArrayDestroy
SystemTimeToVariantTime
VariantCopy
OleCreateFontIndirect
VariantTimeToSystemTime
SafeArrayCreateVector
SysFreeString
VariantClear

oledlg

OleUIBusyW

urlmon

UrlMkSetSessionOption

gdiplus

GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipGetImageHeight
GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneBrush
GdipDeleteBrush
GdipCreateLineBrushI
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetCompositingQuality
GdipSetSmoothingMode
GdipSetPixelOffsetMode
GdipSetTextRenderingHint
GdipSetInterpolationMode
GdipGraphicsClear
GdipDrawImage
GdipDrawImageRectI
GdipDeleteFontFamily
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipDeleteFont
GdipGetFamily
GdipDrawString
GdipCreateStringFormat
GdipDeleteStringFormat
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipGetImageWidth

wininet

InternetCheckConnectionW
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetSetCookieW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

dbghelp

MiniDumpWriteDump

imm32

ImmSetCompositionWindow
ImmSetCompositionFontW
ImmReleaseContext
ImmGetContext

netapi32

Netbios

iphlpapi

GetAdaptersInfo

psapi

GetPerformanceInfo

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 298KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

362af37171129d41b5f5d45b1baf8584

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

wldap32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

urlmon

gdiplus

wininet

version

dbghelp

imm32

netapi32

iphlpapi

psapi

oleacc

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 298KB - Virtual size: 298KB

.data Size: 47KB - Virtual size: 77KB

.rsrc Size: 1.6MB - Virtual size: 1.6MB

.reloc Size: 74KB - Virtual size: 74KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 298KB - Virtual size: 298KB

.data
Size: 47KB - Virtual size: 77KB

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

.reloc
Size: 74KB - Virtual size: 74KB