1c7d8a64ac960d4684d3b82c9a44e218b6088425a0fbc72cc83cfa3a33e19b16

Sharing

Copy URL Twitter E-mail

General

Target

1c7d8a64ac960d4684d3b82c9a44e218b6088425a0fbc72cc83cfa3a33e19b16
Size

537KB
MD5

25c6dd3cdb9ead4abba6ed73ecdaafe4
SHA1

b8ec88a1583af8a2bc25c82ac8db26cfb2d12e6d
SHA256

1c7d8a64ac960d4684d3b82c9a44e218b6088425a0fbc72cc83cfa3a33e19b16
SHA512

98f5aa794ef4b4441f26008891f4407038234c977a65d3d16cb15f0bdb45bc1e1f2632048059863736193505b444de2d4bad14f6e3814087983c7b94f06494e5
SSDEEP

12288:sICP8OOYY/x6zyTiU8Q89VuS7wMVwFJ2sVLBC8yiK/J:sICP8OHIx5SPwFJ2sVUhie

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c7d8a64ac960d4684d3b82c9a44e218b6088425a0fbc72cc83cfa3a33e19b16

Files

1c7d8a64ac960d4684d3b82c9a44e218b6088425a0fbc72cc83cfa3a33e19b16
.exe windows:5 windows x86

bc63abc5ad972cb5eb70c9fe70725fbe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeSetEvent
timeKillEvent
timeGetTime

comctl32

ord17
_TrackMouseEvent

gdiplus

GdipScaleMatrix
GdipMeasureString
GdipFillPath
GdipFillEllipseI
GdipDrawEllipseI
GdipDrawString
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipSetStringFormatTrimming
GdipDeleteStringFormat
GdipStringFormatGetGenericTypographic
GdipCloneStringFormat
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipDrawPath
GdipDrawRectangleI
GdipDrawBezierI
GdipDrawLineI
GdipFillRectangle
GdipDeletePath
GdipTransformPath
GdipIsOutlineVisiblePathPointI
GdipIsVisiblePathPointI
GdipGetPathWorldBoundsI
GdiplusStartup
GdiplusShutdown
GdipCreateBitmapFromFile
GdipAddPathPolygonI
GdipAddPathPieI
GdipAddPathArcI
GdipAddPathEllipseI
GdipAddPathRectangleI
GdipAddPathCurveI
GdipAddPathBezierI
GdipAddPathLine2I
GdipAddPathLineI
GdipClosePathFigure
GdipStartPathFigure
GdipGetPathFillMode
GdipSetPathFillMode
GdipResetPath
GdipClonePath
GdipCreatePath
GdipCreateTexture
GdipCreateBitmapFromHBITMAP
GdipCreateSolidFill
GdipGetPenDashStyle
GdipSetPenDashStyle
GdipGetPenLineJoin
GdipSetPenLineJoin
GdipGetPenDashCap197819
GdipGetPenEndCap
GdipGetPenStartCap
GdipSetPenDashCap197819
GdipSetPenEndCap
GdipSetPenStartCap
GdipSetPenColor
GdipGetPenWidth
GdipSetPenWidth
GdipClonePen
GdipLoadImageFromFile
GdipImageRotateFlip
GdipDrawImageRect
GdipSetWorldTransform
GdipRotateMatrix
GdipTranslateMatrix
GdipCreatePen2
GdipSetLineBlend
GdipCloneBrush
GdipDeleteBrush
GdipCreateLineBrushFromRect
GdipDrawArc
GdipDeletePen
GdipCreatePen1
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipDeleteMatrix
GdipCreateMatrix
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCreateHBITMAPFromBitmap
GdipImageSelectActiveFrame
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipCreateBitmapFromStream
GdipDisposeImage
GdipCloneImage
GdipAlloc
GdipFree

shlwapi

PathIsRelativeW
PathFileExistsW

imm32

ImmGetContext
ImmReleaseContext
ImmSetCompositionWindow

msimg32

AlphaBlend

kernel32

LoadLibraryW
GetConsoleCP
OutputDebugStringW
LCMapStringW
GetStringTypeW
GetCPInfo
GetOEMCP
GetFileAttributesW
GetACP
IsValidCodePage
GetConsoleMode
TerminateProcess
GetCurrentProcess
SetFilePointerEx
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameW
GetStartupInfoW
GetFileType
GetStdHandle
GetProcessHeap
SetLastError
HeapSize
GetModuleHandleExW
ExitProcess
RtlUnwind
IsProcessorFeaturePresent
IsDebuggerPresent
HeapReAlloc
HeapFree
HeapAlloc
LoadLibraryExW
GetCommandLineW
DecodePointer
EncodePointer
ReadConsoleW
SetStdHandle
FlushFileBuffers
WriteConsoleW
GetCurrentProcessId
SetEndOfFile
GetModuleHandleA
VirtualQuery
SetFilePointer
WideCharToMultiByte
WriteFile
GetEnvironmentVariableW
GetProcAddress
ReadFile
GetFileSize
SetUnhandledExceptionFilter
CreateFileW
InterlockedCompareExchange
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
TlsGetValue
TlsSetValue
TlsAlloc
TlsFree
WaitForSingleObject
SetEvent
MultiByteToWideChar
CreateEventW
CloseHandle
TerminateThread
Sleep
RaiseException
GetCurrentThreadId
GetQueuedCompletionStatus
InterlockedExchange
GetLastError
PostQueuedCompletionStatus
CreateIoCompletionPort
GetModuleHandleW
SystemTimeToFileTime
QueryPerformanceCounter
GetSystemTimeAsFileTime
QueryPerformanceFrequency
LocalFileTimeToFileTime
VerifyVersionInfoW
VerSetConditionMask
GetTickCount
GlobalFree
GetCurrentDirectoryW
FindResourceW
LoadResource
SizeofResource
GlobalAlloc
GlobalLock
GlobalUnlock
MulDiv
GlobalSize

user32

GetParent
GetDesktopWindow
PostQuitMessage
MapWindowPoints
SetClipboardData
DispatchMessageW
DefWindowProcW
CreateWindowExW
MsgWaitForMultipleObjectsEx
PeekMessageW
CallMsgFilterW
RegisterClassExW
TranslateMessage
GetQueueStatus
WaitMessage
KillTimer
PostMessageW
UnregisterClassW
SetTimer
DestroyWindow
GetWindowLongW
IsIconic
IsZoomed
MonitorFromPoint
MonitorFromWindow
GetMonitorInfoW
ScreenToClient
GetClientRect
OffsetRect
GetWindowRect
SetWindowRgn
SetWindowLongW
MessageBoxW
MoveWindow
IsWindow
ShowWindow
IsWindowVisible
SetForegroundWindow
SetWindowTextW
SetWindowPos
ReleaseDC
LoadCursorW
RegisterClassW
GetClassInfoExW
GetWindow
EnableWindow
SetFocus
GetSystemMetrics
SendMessageW
CallWindowProcW
SetPropW
GetPropW
GetDC
InvalidateRect
GetKeyState
GetCursorPos
GetFocus
SetCapture
ReleaseCapture
BeginPaint
EndPaint
GetUpdateRect
IsRectEmpty
IntersectRect
UpdateLayeredWindow
PtInRect
CharNextW
UnionRect
SetCursor
ClientToScreen
GetSysColor
GetAsyncKeyState
OpenClipboard
IsClipboardFormatAvailable
GetClipboardData
CloseClipboard
EmptyClipboard
FindWindowW

gdi32

GetObjectW
DeleteObject
CreateRoundRectRgn
GetStockObject
CreateFontIndirectW
ExtSelectClipRgn
SelectObject
BitBlt
GetDeviceCaps
CreateDIBSection
StretchBlt
CreateCompatibleDC
DeleteDC
SaveDC
RestoreDC
GetWindowOrgEx
SetWindowOrgEx
SetStretchBltMode
GetObjectA
CreateRectRgnIndirect

shell32

ShellExecuteW

ole32

CoCreateInstance
CreateStreamOnHGlobal

Sections

.text
Size: 398KB - Virtual size: 398KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bc63abc5ad972cb5eb70c9fe70725fbe

Headers

DLL Characteristics

File Characteristics

Imports

winmm

comctl32

gdiplus

shlwapi

imm32

msimg32

kernel32

user32

gdi32

shell32

ole32

Sections

.text Size: 398KB - Virtual size: 398KB

.rdata Size: 91KB - Virtual size: 90KB

.data Size: 17KB - Virtual size: 25KB

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 25KB - Virtual size: 25KB

.text
Size: 398KB - Virtual size: 398KB

.rdata
Size: 91KB - Virtual size: 90KB

.data
Size: 17KB - Virtual size: 25KB

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 25KB - Virtual size: 25KB