bf5b536aef0e0154e79f415e30c0e9e58732a3a1c597391732396310ec4b245c

Sharing

Copy URL Twitter E-mail

General

Target

bf5b536aef0e0154e79f415e30c0e9e58732a3a1c597391732396310ec4b245c
Size

1.5MB
MD5

4c2686770358261034fdc319d218754e
SHA1

f936a7c88a63e3cc2dea0be7255a385177396eba
SHA256

bf5b536aef0e0154e79f415e30c0e9e58732a3a1c597391732396310ec4b245c
SHA512

04a7f8e66781e528565b7d0f52bb6227c77d9529666e16206cb317d3b5ac0c27d16843e06a7b1ad165fc25cb9d1d00e6354bdbf0b9cc0dc02fb85ac7c9b480b7
SSDEEP

24576:Py/OFNRM69OUoS7pJ8AT6Yr6BYn3WeJMPl8c7qapkvwUJ6yOy6rvb4uiWeNacr/5:PyO9OUooHZTFGGn3WeJMN8c7QwUJ6h7m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf5b536aef0e0154e79f415e30c0e9e58732a3a1c597391732396310ec4b245c

Files

bf5b536aef0e0154e79f415e30c0e9e58732a3a1c597391732396310ec4b245c
.exe windows:4 windows x86

6b53c0cfca8465aba2e9b50f9d11644a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

TerminateThread
lstrlenW
MultiByteToWideChar
GetStringTypeExW
GetThreadLocale
WideCharToMultiByte
Sleep
SetLastError
GetCurrentThreadId
CreateMutexW
SetErrorMode
GetFileSize
FindClose
GetTempPathW
GetCurrentProcess
GetSystemDirectoryW
GetWindowsDirectoryW
CreateDirectoryW
FindNextFileW
WritePrivateProfileStringW
DeleteFileW
ReadFile
FlushFileBuffers
UnmapViewOfFile
SetFilePointer
SetEndOfFile
MapViewOfFile
CreateFileMappingW
OpenFileMappingW
FileTimeToSystemTime
SystemTimeToFileTime
GetLocalTime
GetDateFormatW
GetLastError
GetTickCount
LoadLibraryW
LoadLibraryExW
FreeLibrary
GetProcAddress
CreateProcessW
GetExitCodeProcess
TerminateProcess
EnumResourceTypesW
EnumResourceNamesW
EnumResourceLanguagesW
SetUnhandledExceptionFilter
GetThreadSelectorEntry
GetCurrentProcessId
GetVersionExA
GetEnvironmentVariableW
GetModuleFileNameA
GetVersionExW
GetVolumeInformationW
GetSystemDefaultLangID
GetUserDefaultLangID
CreateEventW
SetEvent
ResetEvent
WaitForMultipleObjectsEx
QueryPerformanceFrequency
QueryPerformanceCounter
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetPrivateProfileStringW
lstrlenA
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapFree
HeapReAlloc
RaiseException
HeapSize
TlsSetValue
TlsAlloc
TlsGetValue
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
LCMapStringA
LCMapStringW
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
GetStringTypeA
GetStringTypeW
SetStdHandle
VirtualProtect
FlushInstructionCache
CreateThread
GlobalUnlock
GlobalFree
GlobalAlloc
GlobalLock
InterlockedDecrement
InterlockedIncrement
MulDiv
FindResourceExW
LoadResource
SizeofResource
LockResource
GetCurrentDirectoryW
LocalAlloc
LocalFree
GetModuleFileNameW
WriteFile
CloseHandle
FormatMessageW
GetModuleHandleW
CreateActCtxW
ActivateActCtx
DeactivateActCtx
ReleaseActCtx
SetFileAttributesW
RemoveDirectoryW
GetCommandLineW
FileTimeToLocalFileTime
ExpandEnvironmentStringsW
GetSystemTime
FindFirstFileW
GetFileAttributesW
GetTimeFormatW
CreateFileW

user32

SetWindowTextW
SendDlgItemMessageW
SetDlgItemTextW
GetDlgItemTextW
MapWindowPoints
GetDlgItem
ScreenToClient
GetWindowRect
PeekMessageW
MessageBoxW
SetWindowPlacement
IsWindow
GetForegroundWindow
MapDialogRect
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetClipboardData
IsClipboardFormatAvailable
EndDialog
DialogBoxIndirectParamW
CopyRect
DrawMenuBar
RemoveMenu
GetWindowDC
RegisterClipboardFormatW
MsgWaitForMultipleObjects
LoadBitmapW
DrawEdge
GetKeyState
GetDlgCtrlID
InflateRect
GetWindowTextLengthW
PtInRect
WindowFromPoint
GetMenu
LoadMenuIndirectW
LoadMenuW
GetSubMenu
DrawFocusRect
UnhookWindowsHookEx
SetWindowsHookExW
DestroyIcon
RegisterWindowMessageW
CharNextW
CharLowerW
DeleteMenu
GetSysColorBrush
FrameRect
DrawTextW
GetMenuItemCount
GetMenuItemInfoW
SetMenuItemInfoW
GetSysColor
BeginPaint
GetParent
FillRect
EndPaint
GetWindowTextW
InvalidateRect
GetClassLongW
SetClassLongW
DefWindowProcW
PostQuitMessage
DefFrameProcW
GetMessageW
DestroyWindow
TranslateMDISysAccel
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
RemovePropW
SetWindowLongW
GetWindowLongW
ClientToScreen
GetClientRect
IsDialogMessageW
LoadAcceleratorsW
LoadIconW
RegisterClassExW
ShowWindow
GetWindow
GetDC
ReleaseDC
ReleaseCapture
GetCursorPos
SetCapture
SystemParametersInfoW
ChangeDisplaySettingsW
EnumDisplaySettingsW
SetWindowPos
AdjustWindowRectEx
GetWindowPlacement
SetTimer
CreateWindowExW
GetSystemMetrics
SetCursor
CallNextHookEx
PostMessageW
CallWindowProcW
KillTimer
SetFocus
SetForegroundWindow
SendMessageW
LoadCursorW
SetMenu
EnableMenuItem
TrackPopupMenu
LoadImageW
DestroyMenu
SetPropW
GetPropW
UpdateWindow

ole32

ReleaseStgMedium
CoUninitialize
CLSIDFromProgID
CoInitialize
StringFromGUID2
CreateStreamOnHGlobal
OleInitialize
OleUninitialize
CLSIDFromString
OleRun
OleSetContainedObject
OleDraw
OleSetMenuDescriptor
OleSave
CoCreateInstance
CoTaskMemFree
CoCreateGuid

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

comctl32

ImageList_DrawEx
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_Create

winmm

timeGetTime

gdi32

GetStockObject
CreateCompatibleDC
CreateDIBSection
CreatePen
SelectObject
DeleteObject
CreateSolidBrush
GetTextMetricsW
RoundRect
SetBkColor
SetTextColor
SetBkMode
GetTextExtentPoint32W
CreateCompatibleBitmap
BitBlt
StretchBlt
GdiFlush
DeleteDC
SaveDC
CreateFontIndirectW
EnumFontFamiliesExW
Rectangle
SetROP2
CreateHatchBrush
CreateFontW
RestoreDC
SetStretchBltMode
GetPixel
Ellipse
GetDeviceCaps
GetObjectW

comdlg32

GetOpenFileNameW
CommDlgExtendedError
GetSaveFileNameW

advapi32

RegCloseKey
RegDeleteValueW
RegSetValueExW
RegCreateKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
CryptAcquireContextW
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptDestroyKey
CryptReleaseContext
CryptDeriveKey
CryptDecrypt

shell32

DragQueryFileW
ShellExecuteExW
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListW
Shell_NotifyIconW
SHGetFileInfoW

oleaut32

SysAllocString
SysFreeString
OleLoadPicture
SafeArrayDestroy
SafeArrayUnaccessData
SafeArrayAccessData
VariantClear
VariantInit
SafeArrayPtrOfIndex
SafeArrayCreate
GetErrorInfo

Sections

.text
Size: 244KB - Virtual size: 241KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6b53c0cfca8465aba2e9b50f9d11644a

Headers

File Characteristics

Imports

kernel32

user32

ole32

version

comctl32

winmm

gdi32

comdlg32

advapi32

shell32

oleaut32

Sections

.text Size: 244KB - Virtual size: 241KB

.rdata Size: 56KB - Virtual size: 52KB

.data Size: 32KB - Virtual size: 44KB

.rsrc Size: 1.2MB - Virtual size: 1.2MB

.text
Size: 244KB - Virtual size: 241KB

.rdata
Size: 56KB - Virtual size: 52KB

.data
Size: 32KB - Virtual size: 44KB

.rsrc
Size: 1.2MB - Virtual size: 1.2MB