01df4152874b4d91852408c5eff63a76a34c54404e48b5497e898474697f4bd3

Sharing

Copy URL Twitter E-mail

General

Target

01df4152874b4d91852408c5eff63a76a34c54404e48b5497e898474697f4bd3
Size

1.3MB
MD5

bc1c36c5163d13cff8d489e73650b648
SHA1

c0ff9217b1c26612441fa2d733f2be2f75ed6e05
SHA256

01df4152874b4d91852408c5eff63a76a34c54404e48b5497e898474697f4bd3
SHA512

30377fae058f278e59a2912459b6a7542633b96f5957b0f7fc6591c2094a5c52cbfb273f791043dff31ca424f58515f3be57506160f490ecfd3f19f1fc6a7667
SSDEEP

24576:SGw+m1aABzyt5Y4kOYZAw7jkeVv+MsUQVbodhP:i1aAB2t5Y4kOYZP7Q2f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01df4152874b4d91852408c5eff63a76a34c54404e48b5497e898474697f4bd3

Files

01df4152874b4d91852408c5eff63a76a34c54404e48b5497e898474697f4bd3
.exe windows:5 windows x86

d9172e1702f2378f445a139164b197b6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeSetEvent
timeKillEvent
timeGetTime

comctl32

ord17
_TrackMouseEvent

gdiplus

GdipScaleMatrix
GdipMeasureString
GdipFillPath
GdipFillEllipseI
GdipDrawEllipseI
GdipDrawString
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipSetStringFormatTrimming
GdipDeleteStringFormat
GdipStringFormatGetGenericTypographic
GdipCloneStringFormat
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipDrawPath
GdipDrawRectangleI
GdipDrawBezierI
GdipDrawLineI
GdipFillRectangle
GdipDeletePath
GdipTransformPath
GdipIsOutlineVisiblePathPointI
GdipIsVisiblePathPointI
GdipGetPathWorldBoundsI
GdiplusStartup
GdiplusShutdown
GdipCreateBitmapFromFile
GdipAddPathPolygonI
GdipAddPathPieI
GdipAddPathArcI
GdipAddPathEllipseI
GdipAddPathRectangleI
GdipAddPathCurveI
GdipAddPathBezierI
GdipAddPathLine2I
GdipAddPathLineI
GdipClosePathFigure
GdipStartPathFigure
GdipGetPathFillMode
GdipSetPathFillMode
GdipResetPath
GdipClonePath
GdipCreatePath
GdipCreateTexture
GdipCreateBitmapFromHBITMAP
GdipCreateSolidFill
GdipGetPenDashStyle
GdipSetPenDashStyle
GdipGetPenLineJoin
GdipSetPenLineJoin
GdipGetPenDashCap197819
GdipGetPenEndCap
GdipGetPenStartCap
GdipSetPenDashCap197819
GdipSetPenEndCap
GdipSetPenStartCap
GdipSetPenColor
GdipGetPenWidth
GdipSetPenWidth
GdipClonePen
GdipLoadImageFromFileICM
GdipLoadImageFromFile
GdipImageRotateFlip
GdipDrawImageRect
GdipSetWorldTransform
GdipRotateMatrix
GdipTranslateMatrix
GdipCreatePen2
GdipSetLineBlend
GdipCloneBrush
GdipDeleteBrush
GdipCreateLineBrushFromRect
GdipDrawArc
GdipDeletePen
GdipCreatePen1
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipDeleteMatrix
GdipCreateMatrix
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCreateHBITMAPFromBitmap
GdipImageSelectActiveFrame
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipDisposeImage
GdipCloneImage
GdipAlloc
GdipFree
GdipCreateBitmapFromFileICM

shlwapi

PathIsRelativeW
PathFileExistsW

imm32

ImmSetOpenStatus
ImmGetOpenStatus
ImmGetContext
ImmReleaseContext
ImmSetCompositionWindow

msimg32

AlphaBlend

kernel32

ReadFile
GetConsoleMode
GetConsoleCP
OutputDebugStringW
FreeLibrary
FatalAppExitA
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
SetConsoleCtrlHandler
GetStringTypeW
GetCPInfo
GetOEMCP
GetFileSize
GetACP
IsValidCodePage
CreateSemaphoreW
TerminateProcess
GetCurrentProcess
SetFilePointerEx
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameW
GetStartupInfoW
GetFileType
GetStdHandle
GetProcessHeap
GetCurrentThread
SetLastError
HeapSize
AreFileApisANSI
GetModuleHandleExW
ExitProcess
IsProcessorFeaturePresent
IsDebuggerPresent
HeapReAlloc
HeapFree
HeapAlloc
LoadLibraryExW
ExitThread
CreateThread
GetCommandLineW
RtlUnwind
DecodePointer
EncodePointer
ReadConsoleW
SetStdHandle
FlushFileBuffers
WriteConsoleW
CreateFileW
MultiByteToWideChar
Sleep
SetEndOfFile
GetSystemDirectoryW
LoadLibraryW
GetTempPathW
GetWindowsDirectoryW
CreateMutexW
VirtualQuery
CreateProcessW
GetComputerNameW
GetVersionExW
LockResource
SetProcessWorkingSetSize
FindFirstFileW
CopyFileW
FindClose
DeleteFileW
SetFilePointer
WideCharToMultiByte
CreateDirectoryW
WriteFile
SetFileTime
GetEnvironmentVariableW
GetFileAttributesW
GlobalSize
MulDiv
SetUnhandledExceptionFilter
GetCurrentProcessId
InterlockedCompareExchange
TlsGetValue
TlsSetValue
TlsAlloc
TlsFree
WaitForSingleObject
SetEvent
ResetEvent
CreateEventW
WaitForMultipleObjects
CloseHandle
TerminateThread
OpenProcess
SetThreadPriority
RaiseException
GetCurrentThreadId
TryEnterCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetQueuedCompletionStatus
InterlockedExchange
GetLastError
PostQueuedCompletionStatus
CreateIoCompletionPort
GetModuleHandleW
SystemTimeToFileTime
QueryPerformanceCounter
GetSystemTimeAsFileTime
FileTimeToSystemTime
QueryPerformanceFrequency
FileTimeToLocalFileTime
LocalFileTimeToFileTime
VerifyVersionInfoW
VerSetConditionMask
GetTickCount
GlobalFree
GetCurrentDirectoryW
SetCurrentDirectoryW
FindResourceW
LoadResource
SizeofResource
GlobalAlloc
GlobalLock
GlobalUnlock
GetProcAddress
GetModuleHandleA

user32

FindWindowW
GetDesktopWindow
GetParent
PostQuitMessage
wsprintfW
SetClipboardData
DispatchMessageW
DefWindowProcW
CreateWindowExW
MsgWaitForMultipleObjectsEx
PeekMessageW
CallMsgFilterW
RegisterClassExW
TranslateMessage
GetQueueStatus
WaitMessage
KillTimer
PostMessageW
UnregisterClassW
SetTimer
DestroyWindow
ReleaseDC
LoadCursorW
RegisterClassW
GetClassInfoExW
SetWindowLongW
IsWindow
GetWindowLongW
GetWindow
EnableWindow
SetFocus
ShowWindow
GetWindowRect
GetMonitorInfoW
MonitorFromWindow
IsIconic
SetWindowPos
LoadImageW
GetSystemMetrics
SendMessageW
CallWindowProcW
SetPropW
GetPropW
GetDC
SetWindowTextW
InvalidateRect
ScreenToClient
GetKeyState
GetCursorPos
GetFocus
SetCapture
ReleaseCapture
BeginPaint
EndPaint
MoveWindow
GetUpdateRect
GetClientRect
IsRectEmpty
IntersectRect
UpdateLayeredWindow
PtInRect
IsZoomed
MonitorFromPoint
OffsetRect
SetWindowRgn
MessageBoxW
IsWindowVisible
SetForegroundWindow
UnionRect
SetCursor
CharNextW
ClientToScreen
GetSysColor
GetAsyncKeyState
OpenClipboard
IsClipboardFormatAvailable
GetClipboardData
CloseClipboard
EmptyClipboard
MapWindowPoints

gdi32

CreateFontIndirectW
GetStockObject
GetObjectW
DeleteObject
SelectObject
ExtSelectClipRgn
GetTextMetricsW
BitBlt
CreateRoundRectRgn
GetDeviceCaps
CreateDIBSection
StretchBlt
CreateCompatibleDC
DeleteDC
SaveDC
RestoreDC
GetWindowOrgEx
SetWindowOrgEx
SetStretchBltMode
GetObjectA
CreateRectRgnIndirect

shell32

SHGetFolderPathW
SHFileOperationW
ShellExecuteW
ord165

ole32

CoCreateInstance
CreateStreamOnHGlobal
CoTaskMemFree

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d9172e1702f2378f445a139164b197b6

Headers

DLL Characteristics

File Characteristics

Imports

winmm

comctl32

gdiplus

shlwapi

imm32

msimg32

kernel32

user32

gdi32

shell32

ole32

advapi32

Sections

.text Size: 1.0MB - Virtual size: 1.0MB

.rdata Size: 147KB - Virtual size: 146KB

.data Size: 19KB - Virtual size: 28KB

.rsrc Size: 148KB - Virtual size: 147KB

.reloc Size: 37KB - Virtual size: 37KB

.text
Size: 1.0MB - Virtual size: 1.0MB

.rdata
Size: 147KB - Virtual size: 146KB

.data
Size: 19KB - Virtual size: 28KB

.rsrc
Size: 148KB - Virtual size: 147KB

.reloc
Size: 37KB - Virtual size: 37KB