2a270d6a0d77fd1e12f813c8f8661e86

Resubmissions

05/10/2023, 08:37

231005-kjkgqahf8x 3

24/06/2021, 00:42

210624-sfghqaaf6e 1

Sharing

Copy URL Twitter E-mail

General

Target

2a270d6a0d77fd1e12f813c8f8661e86
Size

859KB
MD5

2a270d6a0d77fd1e12f813c8f8661e86
SHA1

842e6e1bab2c707e1eb530e4ad74a2c4d1132411
SHA256

df756941e80feb206d83104d332b3546982a2c49a5dd9de78b960368a14be573
SHA512

aa0a0bbce66da4b9842375c4c1a9439e49e9da405a85527d2a0390c207c69b44ca30ad4d9be04d13e90d1e80ad3e82528ee20aa732df440c3429475e7fc7ea04
SSDEEP

12288:ojABXv+PHDjGgbDvvLcK1RZBoQ/30m7arxcK:osh+PegbD3PRLB/0xcK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a270d6a0d77fd1e12f813c8f8661e86

Files

2a270d6a0d77fd1e12f813c8f8661e86
.exe windows:4 windows x86

5dadf8ee0257c2c95a17454af6763a72

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MulDiv
GetCurrentThreadId
SetLastError
FreeLibrary
LoadLibraryExA
GetModuleHandleA
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
SetStdHandle
SetFilePointer
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
LCMapStringW
LCMapStringA
GetOEMCP
GetCPInfo
TlsFree
TlsSetValue
lstrcmpA
TlsGetValue
GetFileType
SetHandleCount
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetStdHandle
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapCreate
HeapDestroy
GetStartupInfoA
GetCommandLineA
HeapReAlloc
VirtualQuery
GetSystemInfo
VirtualProtect
RtlUnwind
GetSystemTimeAsFileTime
LocalFree
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
GetProcAddress
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
FlushInstructionCache
IsDBCSLeadByte
CreateThread
TerminateThread
lstrcmpiA
lstrlenA
InterlockedDecrement
InterlockedIncrement
lstrlenW
MoveFileExA
GlobalLock
GlobalUnlock
GetCurrentProcess
SetProcessWorkingSetSize
FindFirstFileA
FindNextFileA
FindClose
WideCharToMultiByte
DeleteFileA
GetVolumeInformationA
GetVersionExA
GetFileSize
ReadFile
CreateFileA
GetLastError
WriteFile
MultiByteToWideChar
CloseHandle
GlobalAlloc
FindResourceA
LoadResource
SizeofResource
LockResource
FreeResource
lstrcpynA
GetDateFormatA
GetTimeFormatA
GetTimeZoneInformation
Sleep
GetModuleFileNameA
SetCurrentDirectoryA
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
TlsAlloc

user32

ScreenToClient
InvalidateRgn
SetCapture
SetWindowLongA
GetWindowLongA
CreateWindowExA
DestroyWindow
SetWindowPos
ShowWindow
SendMessageA
LoadIconA
ReleaseDC
FillRect
GetDC
SetTimer
EnableWindow
GetDlgItem
SetDlgItemTextA
IsChild
SendDlgItemMessageA
GetParent
GetClassNameA
ReleaseCapture
CallWindowProcA
DestroyAcceleratorTable
GetWindow
GetFocus
GetDesktopWindow
IsWindow
GetClassInfoExA
LoadCursorA
RegisterClassExA
PostMessageA
GetWindowRect
InsertMenuItemA
FindWindowA
GetKeyState
SetWindowTextA
GetSystemMetrics
SetActiveWindow
EndPaint
BeginPaint
LoadImageA
GetClientRect
PtInRect
RedrawWindow
SetLayeredWindowAttributes
KillTimer
CharLowerA
OffsetRect
InflateRect
GetUpdateRect
SetFocus
GetWindowDC
CreatePopupMenu
ClientToScreen
MoveWindow
CreateAcceleratorTableA
GetWindowTextA
GetWindowTextLengthA
RegisterWindowMessageA
SystemParametersInfoA
GetScrollInfo
SetCursor
GetDlgItemInt
GetDlgCtrlID
DialogBoxParamA
CheckMenuItem
GetMenuItemID
TrackMouseEvent
PostQuitMessage
DispatchMessageA
TranslateMessage
GetMessageA
LoadStringA
MessageBoxA
GetWindowInfo
GetSysColor
SetForegroundWindow
TrackPopupMenu
DefWindowProcA
ValidateRect
GetSysColorBrush
GetMenuItemRect
FrameRect
CharNextA
EndDialog
DestroyMenu
CopyRect
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
UnregisterClassA
LockWindowUpdate
MessageBeep
GetCursorPos
SetScrollInfo
GetWindowPlacement
RegisterHotKey
UnregisterHotKey
InvalidateRect
UpdateWindow
DrawTextA
GetMenuItemCount

gdi32

CreateRectRgn
GetTextExtentPoint32A
GetStockObject
GetTextMetricsA
TextOutA
SetTextAlign
CreateDIBitmap
Polygon
CreatePen
SelectClipRgn
EndPage
CreatePatternBrush
Rectangle
SetTextColor
GetCurrentObject
EndDoc
GetTextExtentExPointA
GetDeviceCaps
StartDocA
BitBlt
CreateRoundRectRgn
DeleteObject
SelectObject
CreateFontA
GetObjectA
DeleteDC
CreateSolidBrush
CreateCompatibleBitmap
CreateCompatibleDC
StretchBlt
StartPage
SetBkMode
SetStretchBltMode

comdlg32

GetOpenFileNameA
PrintDlgA

advapi32

RegDeleteKeyA
GetUserNameA
RegEnumKeyExA
RegQueryInfoKeyA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegDeleteValueA

shell32

SHGetSpecialFolderPathA
ShellExecuteA
DragFinish
DragQueryFileA
Shell_NotifyIconA

ole32

CLSIDFromProgID
CoGetClassObject
OleLockRunning
StringFromGUID2
CoInitializeEx
CoInitializeSecurity
CoUninitialize
CoSetProxyBlanket
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CreateStreamOnHGlobal
CLSIDFromString
OleInitialize
OleUninitialize

oleaut32

VarUI4FromStr
VariantClear
SysStringByteLen
GetErrorInfo
SysAllocStringLen
VariantInit
OleCreateFontIndirect
LoadRegTypeLi
SysAllocString
SysFreeString
SysStringLen
LoadTypeLi

ws2_32

closesocket
connect
htonl
htons
socket
gethostbyname
recv
send
setsockopt
WSAStartup
WSACleanup

gdiplus

GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateHBITMAPFromBitmap
GdipDisposeImage
GdiplusShutdown
GdiplusStartup
GdipAlloc
GdipCloneImage
GdipFree

winmm

PlaySoundA

comctl32

InitCommonControlsEx

msimg32

TransparentBlt

libeay32

ord227
ord223

ssleay32

ord87
ord59
ord75
ord43
ord341
ord74
ord183
ord127
ord130
ord78
ord108
ord12
ord58

Sections

.text
Size: 238KB - Virtual size: 238KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 693KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 484KB - Virtual size: 483KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

5dadf8ee0257c2c95a17454af6763a72

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

ws2_32

gdiplus

winmm

comctl32

msimg32

libeay32

ssleay32

Sections

.text Size: 238KB - Virtual size: 238KB

.rdata Size: 66KB - Virtual size: 65KB

.data Size: 70KB - Virtual size: 693KB

.rsrc Size: 484KB - Virtual size: 483KB

.text
Size: 238KB - Virtual size: 238KB

.rdata
Size: 66KB - Virtual size: 65KB

.data
Size: 70KB - Virtual size: 693KB

.rsrc
Size: 484KB - Virtual size: 483KB