d542ab51e5b3d6aae0ff6f6023d08522da5fd51904332a5308c91566af2d6d86

Sharing

Copy URL Twitter E-mail

General

Target

d542ab51e5b3d6aae0ff6f6023d08522da5fd51904332a5308c91566af2d6d86
Size

2.5MB
MD5

aa40f379442f562825e202467a175dbb
SHA1

b8c98e9a20f4bb4742897f764890e01fea9989b1
SHA256

d542ab51e5b3d6aae0ff6f6023d08522da5fd51904332a5308c91566af2d6d86
SHA512

61972e180b4fa68629fc0d25ae9edcf6901f7364ef149590a14d2cb41baedaad3d6c041856f015999b8ab5d17f983a361f49c59e04d1b0e31ab4b032f13562b9
SSDEEP

49152:0C07jXxSw7CSJlCcUfBxykqLhQO6C5Pd/9tslRYW8UQQTicpTq7lnZ:0ljXxSwWSJlCcUfBxykqLhpt5DcdQQTI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d542ab51e5b3d6aae0ff6f6023d08522da5fd51904332a5308c91566af2d6d86

Files

d542ab51e5b3d6aae0ff6f6023d08522da5fd51904332a5308c91566af2d6d86
.exe windows:5 windows x86

c7f55c54967eec25f109c13864b188b2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetTimer
DestroyWindow
GetWindowLongW
IsIconic
IsZoomed
MonitorFromPoint
PostQuitMessage
MonitorFromWindow
GetMonitorInfoW
ScreenToClient
GetClientRect
OffsetRect
GetWindowRect
PeekMessageW
SetWindowRgn
SetWindowLongW
MessageBoxW
MoveWindow
IsWindow
ShowWindow
IsWindowVisible
SetForegroundWindow
SetWindowTextW
SetWindowPos
ReleaseDC
LoadCursorW
RegisterClassW
GetClassInfoExW
GetWindow
EnableWindow
SetFocus
GetSystemMetrics
UnregisterClassW
CallWindowProcW
SetPropW
GetPropW
GetDC
InvalidateRect
GetKeyState
GetCursorPos
GetFocus
SetCapture
ReleaseCapture
BeginPaint
EndPaint
GetUpdateRect
IsRectEmpty
IntersectRect
UpdateLayeredWindow
PtInRect
CharNextW
UnionRect
SetCursor
ClientToScreen
PostMessageW
GetSysColor
GetAsyncKeyState
OpenClipboard
IsClipboardFormatAvailable
GetClipboardData
CloseClipboard
EmptyClipboard
SetClipboardData
wsprintfW
MapWindowPoints
GetParent
FindWindowW
GetDesktopWindow
KillTimer
WaitMessage
GetQueueStatus
TranslateMessage
RegisterClassExW
CallMsgFilterW
SendMessageW
DispatchMessageW
DefWindowProcW
CreateWindowExW
MsgWaitForMultipleObjectsEx

winmm

timeGetTime
timeSetEvent
timeKillEvent

comctl32

_TrackMouseEvent
ord17

gdiplus

GdipDrawEllipseI
GdipDrawString
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipSetStringFormatTrimming
GdipDeleteStringFormat
GdipStringFormatGetGenericTypographic
GdipCloneStringFormat
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipDrawPath
GdipDrawRectangleI
GdipDrawBezierI
GdipDrawLineI
GdipFillRectangle
GdipDeletePath
GdipTransformPath
GdipIsOutlineVisiblePathPointI
GdipIsVisiblePathPointI
GdipGetPathWorldBoundsI
GdipAddPathPolygonI
GdipAddPathPieI
GdipAddPathArcI
GdipAddPathEllipseI
GdipAddPathRectangleI
GdipAddPathCurveI
GdipAddPathBezierI
GdipAddPathLine2I
GdipAddPathLineI
GdipClosePathFigure
GdipStartPathFigure
GdipGetPathFillMode
GdipSetPathFillMode
GdipResetPath
GdipClonePath
GdipCreatePath
GdipCreateTexture
GdipCreateBitmapFromHBITMAP
GdipCreateSolidFill
GdipGetPenDashStyle
GdipSetPenDashStyle
GdipGetPenLineJoin
GdipSetPenLineJoin
GdipGetPenDashCap197819
GdipGetPenEndCap
GdipFillEllipseI
GdipSetPenDashCap197819
GdipSetPenEndCap
GdipSetPenStartCap
GdipSetPenColor
GdipGetPenWidth
GdipSetPenWidth
GdipClonePen
GdipLoadImageFromFileICM
GdipLoadImageFromFile
GdipImageRotateFlip
GdipDrawImageRect
GdipSetWorldTransform
GdipRotateMatrix
GdipTranslateMatrix
GdipCreatePen2
GdipSetLineBlend
GdipCloneBrush
GdipDeleteBrush
GdipCreateLineBrushFromRect
GdipDrawArc
GdipDeletePen
GdipCreatePen1
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipFillPath
GdipDeleteMatrix
GdipCreateMatrix
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCreateHBITMAPFromBitmap
GdipImageSelectActiveFrame
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipDisposeImage
GdipCloneImage
GdipAlloc
GdipFree
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipMeasureString
GdipGetPenStartCap
GdiplusShutdown
GdiplusStartup
GdipScaleMatrix

shlwapi

PathIsRelativeW
PathFileExistsW

imm32

ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext

msimg32

AlphaBlend

kernel32

SetStdHandle
SetFilePointerEx
FlushFileBuffers
GetConsoleCP
WriteConsoleW
SetEndOfFile
OutputDebugStringW
LCMapStringW
GetStringTypeW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
ReadConsoleW
GetConsoleMode
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetStartupInfoW
GetFileType
GetProcessHeap
SetLastError
HeapSize
GetModuleHandleExW
ExitProcess
RtlUnwind
HeapReAlloc
HeapAlloc
IsProcessorFeaturePresent
IsDebuggerPresent
HeapFree
LoadLibraryExW
GetCommandLineW
DecodePointer
EncodePointer
GetEnvironmentVariableW
SetFileTime
WideCharToMultiByte
SetFilePointer
GetCurrentProcessId
GetModuleHandleA
GetFileSize
MultiByteToWideChar
GlobalSize
MulDiv
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
GetTickCount
VerSetConditionMask
GetCurrentDirectoryW
CreateFileW
ReadFile
WriteFile
CreateDirectoryW
LocalFileTimeToFileTime
QueryPerformanceFrequency
GetSystemTimeAsFileTime
QueryPerformanceCounter
SystemTimeToFileTime
VerifyVersionInfoW
GetModuleHandleW
InterlockedCompareExchange
LoadLibraryW
GetFileAttributesW
GetModuleFileNameW
GetProcAddress
TlsGetValue
TlsSetValue
TlsAlloc
TlsFree
WaitForSingleObject
SetEvent
CreateEventW
CloseHandle
TerminateThread
Sleep
RaiseException
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
VirtualQuery
FindResourceW
LoadResource
GetCurrentProcess
SizeofResource
GetStdHandle
GetLastError
GetQueuedCompletionStatus
InterlockedExchange
PostQueuedCompletionStatus
CreateIoCompletionPort

gdi32

CreateFontIndirectW
SelectObject
GetStockObject
BitBlt
GetDeviceCaps
CreateDIBSection
StretchBlt
CreateCompatibleDC
GetObjectW
DeleteObject
CreateRoundRectRgn
ExtSelectClipRgn
CreateRectRgnIndirect
GetObjectA
SetStretchBltMode
SetWindowOrgEx
GetWindowOrgEx
RestoreDC
SaveDC
DeleteDC

shell32

ShellExecuteW

ole32

CreateStreamOnHGlobal
CoCreateInstance

Sections

.text
Size: 613KB - Virtual size: 613KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c7f55c54967eec25f109c13864b188b2

Headers

DLL Characteristics

File Characteristics

Imports

user32

winmm

comctl32

gdiplus

shlwapi

imm32

msimg32

kernel32

gdi32

shell32

ole32

Sections

.text Size: 613KB - Virtual size: 613KB

.rdata Size: 97KB - Virtual size: 96KB

.data Size: 17KB - Virtual size: 25KB

.rsrc Size: 1.8MB - Virtual size: 1.8MB

.reloc Size: 26KB - Virtual size: 26KB

.text
Size: 613KB - Virtual size: 613KB

.rdata
Size: 97KB - Virtual size: 96KB

.data
Size: 17KB - Virtual size: 25KB

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

.reloc
Size: 26KB - Virtual size: 26KB