b2036d0fc83c9cfcab6025babe3b1888ebece853a45106dfb0f0807d3217fd31

Sharing

Copy URL Twitter E-mail

General

Target

b2036d0fc83c9cfcab6025babe3b1888ebece853a45106dfb0f0807d3217fd31
Size

7.8MB
MD5

671667f7a0bd73cda05d9740b3654a60
SHA1

6f2a5dd4949e1311db5041d194042d8028a7aaf9
SHA256

b2036d0fc83c9cfcab6025babe3b1888ebece853a45106dfb0f0807d3217fd31
SHA512

16ee22a6853a836d0cfc62e66da29ee2e7ce6909b8152f37a67d7d853a80ec50964e2216c3e8b051baf7a4e722dafdb43089229cffd53ab2c8b419133cb5ca96
SSDEEP

196608:BX3JPQeCoiLWQZHS3rDmPRTcxOyo59FLOyomFHKnPn:h5ExS3ro6QFm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2036d0fc83c9cfcab6025babe3b1888ebece853a45106dfb0f0807d3217fd31

Files

b2036d0fc83c9cfcab6025babe3b1888ebece853a45106dfb0f0807d3217fd31
.exe windows:6 windows x86

46e5ba42aff6f19b3881cdc9cf9f5fd9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
GetTimeZoneInformation
CompareStringW
GetTimeFormatW
GetDateFormatW
GetCommandLineW
HeapQueryInformation
VirtualQuery
GetSystemInfo
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
SetStdHandle
LCMapStringW
IsBadCodePtr
GetStringTypeW
GetStringTypeA
InterlockedDecrement
IsBadWritePtr
VirtualAlloc
VirtualFree
FindNextFileW
CreateFileW
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
RtlUnwind
GetVersion
GetCommandLineA
LCMapStringA
CreateDirectoryA
GetLocalTime
IsBadReadPtr
ExitProcess
CreateThread
TerminateThread
GetExitCodeThread
GetComputerNameA
DeviceIoControl
InterlockedCompareExchange
HeapValidate
InterlockedExchange
InterlockedIncrement
RtlMoveMemory
lstrcpyn
QueryPerformanceFrequency
RaiseException
OutputDebugStringW
FindFirstFileExW
IsValidCodePage
SetEnvironmentVariableW
HeapCreate
WriteConsoleW
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
GetTickCount
GetTempFileNameA
SearchPathA
GetProfileIntA
GetTickCount64
GetTempPathA
VerifyVersionInfoA
VerSetConditionMask
GetWindowsDirectoryA
FindResourceExW
lstrcpyA
GetACP
GetCurrentDirectoryA
GetCPInfo
GetOEMCP
VirtualProtect
GetUserDefaultUILanguage
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetFileAttributesA
FileTimeToLocalFileTime
GetVersionExA
GlobalFindAtomA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetSystemDirectoryW
EncodePointer
lstrcmpiA
LoadLibraryA
GetCurrentProcess
DuplicateHandle
GetVolumeInformationA
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
FindFirstFileA
FindClose
GlobalAddAtomA
GlobalFlags
FreeLibrary
ResumeThread
SetThreadPriority
GetCurrentThreadId
WaitForSingleObject
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
CompareStringA
FileTimeToSystemTime
GlobalGetAtomNameA
lstrcmpA
LoadLibraryW
GetModuleHandleW
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringA
GetCurrentProcessId
SetLastError
CopyFileA
FormatMessageA
MulDiv
LocalFree
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalAlloc
MultiByteToWideChar
VirtualQueryEx
ReadProcessMemory
Module32First
Module32Next
WideCharToMultiByte
VirtualAllocEx
FindResourceW
Sleep
OpenProcess
WriteProcessMemory
AllocConsole
SetConsoleWindowInfo
WriteConsoleA
GetStdHandle
SetConsoleTitleA
CreateEventA
CreateProcessA
GetProcessHeap
DeleteCriticalSection
GetProcAddress
HeapDestroy
DecodePointer
HeapAlloc
LoadResource
CloseHandle
HeapReAlloc
Process32Next
DeleteFileA
LockResource
ReadFile
CreateFileA
GetLastError
CreateToolhelp32Snapshot
HeapSize
GetModuleHandleA
FindResourceA
InitializeCriticalSectionEx
WriteFile
HeapFree
Process32First
SizeofResource
OpenEventA
GetModuleFileNameA
GetEnvironmentVariableA

user32

LoadCursorW
InvertRect
HideCaret
EnableScrollBar
MessageBeep
GetIconInfo
DrawIconEx
LoadImageA
IsRectEmpty
DrawFocusRect
WindowFromPoint
ReleaseCapture
SetCapture
GetNextDlgGroupItem
LoadImageW
TrackMouseEvent
InvalidateRect
KillTimer
SetTimer
DeleteMenu
SetCursor
ShowOwnedPopups
IntersectRect
MapDialogRect
GetAsyncKeyState
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
OffsetRect
SetRectEmpty
CopyImage
SystemParametersInfoA
InflateRect
GetMenuItemInfoA
DestroyMenu
PostQuitMessage
FillRect
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconW
LoadIconA
GetTopWindow
GetClassLongA
EqualRect
CopyRect
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetClientRect
RemovePropA
GetPropA
NotifyWinEvent
ShowScrollBar
GetScrollRange
SetScrollRange
ScrollWindow
RedrawWindow
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
IsIconic
DrawIcon
UnionRect
UpdateLayeredWindow
TranslateMessage
DispatchMessageA
MonitorFromPoint
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
EmptyClipboard
GetWindowPlacement
DestroyWindow
IsChild
IsMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
PostMessageA
GetMessageTime
GetMessagePos
RegisterWindowMessageA
LoadBitmapW
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
DrawStateA
FrameRect
SetClassLongA
SetWindowRgn
SetParent
DrawEdge
DrawFrameControl
IsZoomed
LoadMenuW
GetSystemMenu
BringWindowToTop
SetCursorPos
CopyIcon
CreatePopupMenu
GetMenuDefaultItem
MapVirtualKeyA
GetKeyNameTextA
SetLayeredWindowAttributes
EnumDisplayMonitors
OpenClipboard
CloseClipboard
SetPropA
SetClipboardData
GetMenuStringA
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuA
AppendMenuA
RemoveMenu
SendMessageA
EnableWindow
IsWindowEnabled
MessageBoxA
GetWindowLongA
GetParent
GetWindowThreadProcessId
GetLastActivePopup
GetWindowTextA
wsprintfA
GetWindowTextLengthA
UnhookWindowsHookEx
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
LoadCursorA
PeekMessageA
GetActiveWindow
GetKeyState
ValidateRect
GetCursorPos
SetWindowsHookExA
CallNextHookEx
SetFocus
SetScrollPos
GetScrollPos
GetWindow
IsWindow
ShowWindow
MoveWindow
SetWindowPos
GetDlgItem
CheckDlgButton
SendDlgItemMessageA
GetDlgCtrlID
GetFocus
SetWindowTextA
SetWindowLongA
IsDialogMessageA
GetWindowRect
ClientToScreen
PtInRect
GetDesktopWindow
GetClassNameA
RealChildWindowFromPoint
DestroyIcon
CharUpperA
CheckMenuItem
EnableMenuItem
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
InsertMenuItemA
SetWindowPlacement
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
PostThreadMessageA
WaitMessage
GetKeyboardLayout
IsCharLowerA
MapVirtualKeyExA
GetKeyboardState
ToAsciiEx
LoadAcceleratorsW
CreateAcceleratorTableA
DestroyAcceleratorTable
CopyAcceleratorTableA
SetRect
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuA
RegisterClipboardFormatA
CharUpperBuffA
IsClipboardFormatAvailable
GetUpdateRect
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
SubtractRect
DestroyCursor
GetWindowRgn
GetMessageA
CreateMenu

gdi32

GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutA
ExtTextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectA
GetTextExtentPoint32A
CombineRgn
CreateRectRgnIndirect
PatBlt
SetRectRgn
GetObjectType
GetTextMetricsA
EnumFontFamiliesExA
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
Rectangle
GetRgnBox
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceA
GetClipBox
ExcludeClipRect
Escape
CreateSolidBrush
CreateRectRgn
CreatePen
CreateHatchBrush
CreateCompatibleDC
BitBlt
GetObjectA
SetTextColor
SetBkColor
CreateBitmap
DeleteObject
DeleteDC
GetDeviceCaps
CreateDCA
DPtoLP
CreatePatternBrush
CopyMetaFileA

msimg32

TransparentBlt
AlphaBlend

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegQueryValueExA
RegEnumKeyExA
RegDeleteValueA
RegOpenKeyExA
RegDeleteKeyA
CryptAcquireContextA
RegCloseKey
RegCreateKeyExA
CryptCreateHash
CryptHashData
RegSetValueExA
CryptDestroyHash
CryptGetHashParam
CryptReleaseContext

shell32

SHAppBarMessage
SHBrowseForFolderA
DragFinish
DragQueryFileA
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteA
SHGetFileInfoA

shlwapi

PathRemoveFileSpecW
PathFindExtensionA
PathStripToRootA
PathIsUNCA
PathFindFileNameA
PathRemoveFileSpecA
StrFormatKBSizeA

uxtheme

IsAppThemed
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
GetWindowTheme
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor

ole32

IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CreateStreamOnHGlobal
CoInitializeEx
CoInitialize
CoUninitialize
CoDisconnectObject
CoCreateInstance
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc

oleaut32

VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocStringLen
SysAllocStringByteLen
SysFreeString
VariantClear
VariantCopy
VariantChangeType
VarBstrFromDate
LoadTypeLi
VariantInit
SysAllocString

gdiplus

GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundA

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 295KB - Virtual size: 294KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.:UY
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

46e5ba42aff6f19b3881cdc9cf9f5fd9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

shlwapi

uxtheme

ole32

oleaut32

gdiplus

oleacc

imm32

winmm

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 295KB - Virtual size: 294KB

.data Size: 92KB - Virtual size: 109KB

.:UY Size: 2.3MB - Virtual size: 2.3MB

.reloc Size: 135KB - Virtual size: 134KB

.rsrc Size: 3.4MB - Virtual size: 3.4MB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 295KB - Virtual size: 294KB

.data
Size: 92KB - Virtual size: 109KB

.:UY
Size: 2.3MB - Virtual size: 2.3MB

.reloc
Size: 135KB - Virtual size: 134KB

.rsrc
Size: 3.4MB - Virtual size: 3.4MB