004e406adb2a35b8e6797e29eca7b5468d4def2eacf10d5e5eed3dfab5e3310f

Sharing

Copy URL Twitter E-mail

General

Target

004e406adb2a35b8e6797e29eca7b5468d4def2eacf10d5e5eed3dfab5e3310f
Size

14.9MB
MD5

66bb197a78d618b53427445a54d949e3
SHA1

cf3d6afda5b7c4a3c722ff94e251110a77989136
SHA256

004e406adb2a35b8e6797e29eca7b5468d4def2eacf10d5e5eed3dfab5e3310f
SHA512

263aeaef4bea5f6e8aa05bef85b2309e16fd098cce55ede3e5cddcf7f7dd4628769827fe51a6dce65bafa19d729bd4a4bf26ab0fb9b39c78836f99389c5c741a
SSDEEP

196608:HKlkyIe2qVj5OJke2qV5KkK1GL5OJC6jk9m+0JVcBc9BDalw:H2b2mj5yl2m9L5yC6Ig+0Ac9sm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
004e406adb2a35b8e6797e29eca7b5468d4def2eacf10d5e5eed3dfab5e3310f

Files

004e406adb2a35b8e6797e29eca7b5468d4def2eacf10d5e5eed3dfab5e3310f
.exe windows:4 windows x86

adf117d3b2dd23959b5ccac86522ceb5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

psapi

EnumProcessModules
GetModuleBaseNameA
GetModuleFileNameExA
GetModuleInformation
EnumProcesses

winmm

midiStreamOpen
midiStreamProperty
midiOutPrepareHeader
midiStreamOut
waveOutOpen
waveOutGetNumDevs
waveOutClose
waveOutReset
midiStreamStop
midiStreamRestart
midiOutUnprepareHeader
midiOutReset
waveOutPause
waveOutWrite
waveOutPrepareHeader
waveOutUnprepareHeader
PlaySoundA
mixerClose
mixerGetDevCapsA
mixerOpen
mixerGetLineInfoA
mixerGetLineControlsA
mixerGetControlDetailsA
mixerSetControlDetails
mixerGetNumDevs
waveOutRestart
midiStreamClose

ws2_32

htonl
socket
sendto
recvfrom
ioctlsocket
connect
bind
listen
getpeername
accept
__WSAFDIsSet
ntohs
getsockname
ntohl
htons
WSAAsyncSelect
closesocket
inet_addr
inet_ntoa
gethostbyname
WSAStartup
WSACleanup
select
recv
send
gethostname

msvfw32

DrawDibDraw

avifil32

AVIStreamInfoA
AVIStreamGetFrame

rasapi32

RasGetConnectStatusA
RasHangUpA

kernel32

Module32First
GetWindowsDirectoryA
GetSystemDirectoryA
SetLastError
TerminateProcess
GetTimeZoneInformation
GetVersion
TerminateThread
FileTimeToSystemTime
LocalReAlloc
TlsGetValue
SetErrorMode
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
RtlUnwind
RaiseException
HeapSize
GetACP
TlsSetValue
SetHandleCount
GetStdHandle
GetFileType
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
LCMapStringA
LCMapStringW
IsBadWritePtr
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GetThreadLocale
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
DuplicateHandle
lstrcpynA
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpA
lstrcmpiA
InterlockedDecrement
InterlockedIncrement
GetExitCodeThread
GetCurrentThread
CreateRemoteThread
SuspendThread
GetStartupInfoA
WriteProcessMemory
ReadProcessMemory
GetCurrentProcessId
Thread32Next
Thread32First
CreateMutexA
VirtualFree
VirtualFreeEx
VirtualAlloc
VirtualAllocEx
FlushViewOfFile
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
CreateFileMappingA
FormatMessageA
LocalFree
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
GetFileTime
FileTimeToLocalFileTime
GlobalDeleteAtom
GlobalAddAtomA
GetEnvironmentVariableA
GetSystemInfo
ReleaseMutex
GetSystemTime
GetLocalTime
UnhandledExceptionFilter
Module32Next
IsProcessorFeaturePresent
GetCurrentProcess
GetFileSize
SetFilePointer
CreateToolhelp32Snapshot
Process32First
Process32Next
IsBadReadPtr
CreateSemaphoreA
ResumeThread
ReleaseSemaphore
EnterCriticalSection
LeaveCriticalSection
GetProfileStringA
WriteFile
WaitForMultipleObjects
CreateFileA
SetEvent
FindResourceA
LoadResource
LockResource
SizeofResource
ReadFile
PeekNamedPipe
CreatePipe
GetExitCodeProcess
lstrlenW
RemoveDirectoryA
GetModuleFileNameA
GetCurrentThreadId
ExitProcess
GlobalSize
GlobalFree
DeleteCriticalSection
InitializeCriticalSection
lstrcatA
lstrlenA
WinExec
lstrcpyA
FindNextFileA
GetLogicalDriveStringsA
GetDriveTypeA
GlobalReAlloc
HeapFree
HeapReAlloc
GetProcessHeap
HeapAlloc
GetUserDefaultLCID
MultiByteToWideChar
WideCharToMultiByte
GetFullPathNameA
FreeLibrary
LoadLibraryA
GetLastError
GetVersionExA
WritePrivateProfileStringA
GetPrivateProfileStringA
CreateThread
CreateEventA
Sleep
ExpandEnvironmentStringsA
GlobalAlloc
GlobalLock
GlobalUnlock
GetTempPathA
FindFirstFileA
FindClose
SetFileAttributesA
GetFileAttributesA
DeleteFileA
CreateDirectoryA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetVolumeInformationA
GetModuleHandleA
GetProcAddress
GetDiskFreeSpaceA
MulDiv
GetCommandLineA
GetTickCount
CreateProcessA
WaitForSingleObject
CloseHandle
OpenProcess
InterlockedExchange

user32

RemovePropA
GetMessageTime
GetWindowPlacement
GetCursor
WindowFromDC
GetTabbedTextExtentA
GetScrollPos
ScrollWindowEx
DrawEdge
DrawFocusRect
WindowFromPoint
GetMessageA
DispatchMessageA
SetRectEmpty
RegisterClipboardFormatA
CreateIconFromResourceEx
CreateIconFromResource
DrawIconEx
CreatePopupMenu
AppendMenuA
ModifyMenuA
CreateMenu
CreateAcceleratorTableA
GetDlgCtrlID
GetSubMenu
EnableMenuItem
ClientToScreen
EnumDisplaySettingsA
LoadImageA
SystemParametersInfoA
ShowWindow
IsWindowEnabled
TranslateAcceleratorA
GetKeyState
CopyAcceleratorTableA
PostQuitMessage
IsZoomed
GetClassInfoA
DefWindowProcA
GetSystemMenu
DeleteMenu
GetMenu
SetMenu
PeekMessageA
UnhookWindowsHookEx
SetFocus
GetActiveWindow
GetWindow
DestroyAcceleratorTable
SetWindowRgn
GetMessagePos
ScreenToClient
ChildWindowFromPointEx
CopyRect
LoadBitmapA
WinHelpA
KillTimer
SetTimer
ReleaseCapture
GetCapture
SetCapture
GetScrollRange
SetScrollRange
SetScrollPos
SetRect
InflateRect
IntersectRect
DestroyIcon
PtInRect
OffsetRect
IsWindowVisible
RedrawWindow
GetWindowLongA
SetWindowLongA
GetSysColor
SetActiveWindow
SetCursorPos
LoadCursorA
SetCursor
GetDC
FillRect
IsRectEmpty
ReleaseDC
IsChild
TrackPopupMenu
DestroyMenu
SetForegroundWindow
GetWindowRect
EqualRect
UpdateWindow
ValidateRect
InvalidateRect
GetClientRect
GetFocus
GetParent
GetTopWindow
PostMessageA
IsWindow
SetParent
DestroyCursor
SendMessageA
SetWindowPos
MessageBeep
MessageBoxA
GetCursorPos
GetSystemMetrics
EmptyClipboard
SetClipboardData
OpenClipboard
GetClipboardData
CloseClipboard
wsprintfA
WaitForInputIdle
DestroyWindow
RegisterClassA
AdjustWindowRectEx
MapWindowPoints
SendDlgItemMessageA
SetPropA
GetPropA
GetMenuItemInfoA
IsDialogMessageA
DrawMenuBar
SetMenuItemInfoA
GetMenuStringA
GetMenuItemCount
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
GetWindowDC
GetMenuItemID
InsertMenuA
TrackPopupMenuEx
GetMenuState
GetClassLongA
SetClassLongA
LoadCursorFromFileA
RegisterWindowMessageA
EnumChildWindows
GetWindowTextLengthA
GetForegroundWindow
MoveWindow
TileWindows
CascadeWindows
BringWindowToTop
ShowCursor
ClipCursor
GetKeyboardLayoutList
ActivateKeyboardLayout
GetKeyboardType
GetLastActivePopup
SetWindowsHookExA
CallNextHookEx
CheckMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
PostThreadMessageA
GetNextDlgGroupItem
CharNextA
GetSysColorBrush
LoadStringA
UnregisterClassA
EndDialog
CreateDialogIndirectParamA
CharUpperA
MapDialogRect
SetWindowContextHelpId
SetWindowTextA
DrawStateA
FrameRect
GetNextDlgTabItem
UnregisterHotKey
RegisterHotKey
CreateWindowExA
CallWindowProcA
ChangeDisplaySettingsA
EnumWindows
GetWindowTextA
GetDlgItem
FindWindowA
GetWindowThreadProcessId
mouse_event
keybd_event
GetClassNameA
GetDesktopWindow
LoadIconA
TranslateMessage
IsIconic
DrawFrameControl
EnableWindow

gdi32

GetTextMetricsA
ExtSelectClipRgn
RoundRect
GetCurrentObject
DPtoLP
GetTextExtentPoint32A
ExcludeClipRect
LPtoDP
Rectangle
Ellipse
SetPixelV
CreateCompatibleDC
GetPixel
BitBlt
StartPage
StartDocA
DeleteDC
EndDoc
EndPage
GetObjectA
GetStockObject
CreateFontIndirectA
CreateSolidBrush
FillRgn
CreateRectRgn
CombineRgn
PatBlt
CreatePen
SelectObject
CreatePatternBrush
CreateBitmap
CreateBrushIndirect
CreateDCA
CreateCompatibleBitmap
GetPolyFillMode
GetStretchBltMode
GetROP2
GetBkColor
GetBkMode
GetTextColor
CreateRoundRectRgn
CreateEllipticRgn
PathToRegion
EndPath
BeginPath
GetWindowOrgEx
GetViewportOrgEx
GetWindowExtEx
GetDIBits
RealizePalette
SelectPalette
StretchBlt
CreatePalette
GetSystemPaletteEntries
CreateDIBitmap
DeleteObject
SelectClipRgn
CreatePolygonRgn
GetClipRgn
SetStretchBltMode
ExtCreateRegion
SetPixel
CreateDIBSection
CreateRectRgnIndirect
SetBkColor
CreateFontA
TranslateCharsetInfo
TextOutA
SetBkMode
SetTextColor
SetDIBitsToDevice
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
MoveToEx
LineTo
GetViewportExtEx
PtVisible
RectVisible
ExtTextOutA
Escape
GetMapMode
RestoreDC
SaveDC
GetClipBox
SetWindowOrgEx
CreatePenIndirect
SetPolyFillMode
SetROP2
GetDeviceCaps

msimg32

GradientFill

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

comdlg32

GetFileTitleA
ChooseColorA
GetSaveFileNameA
GetOpenFileNameA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyA
RegQueryValueA

shell32

SHFileOperationA
ShellAboutA
DragQueryFileA
DragFinish
DragAcceptFiles
SHGetSpecialFolderPathA
Shell_NotifyIconA
ShellExecuteA

ole32

StgCreateDocfileOnILockBytes
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CLSIDFromProgID
CoGetClassObject
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
OleInitialize
OleUninitialize
CLSIDFromString
CreateStreamOnHGlobal
CoCreateInstance
OleRun
CoFreeUnusedLibraries

oleaut32

LoadTypeLi
SysStringLen
VariantTimeToSystemTime
SysAllocStringByteLen
SysAllocStringLen
OleCreateFontIndirect
UnRegisterTypeLi
OleCreatePictureIndirect
SafeArrayGetLBound
SafeArrayGetDim
SafeArrayUnaccessData
OleLoadPicture
SafeArrayAccessData
SafeArrayGetElement
VariantCopyInd
VariantInit
SysAllocString
SafeArrayDestroy
SafeArrayCreate
SafeArrayPutElement
VariantCopy
VariantClear
VariantChangeType
SafeArrayGetUBound
SysFreeString
RegisterTypeLi
LHashValOfNameSys

comctl32

ImageList_GetIcon
ord17
ImageList_AddMasked
ImageList_Draw
_TrackMouseEvent
ImageList_Read
ImageList_GetImageInfo
ImageList_DrawIndirect
ImageList_GetImageCount
ImageList_SetBkColor
ImageList_Add
ImageList_BeginDrag
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_EndDrag
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock

oledlg

ord8

wininet

InternetCloseHandle
InternetConnectA
InternetOpenA
InternetCanonicalizeUrlA
InternetCrackUrlA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetReadFile
InternetSetOptionA

imm32

ImmGetDescriptionA

Exports

Exports

e2ee_CacheClear
e2ee_CacheDecr
e2ee_CacheDelete
e2ee_CacheExists
e2ee_CacheGet
e2ee_CacheGetMulti
e2ee_CacheGetMultiText
e2ee_CacheGetText
e2ee_CacheIncr
e2ee_CacheSet
e2ee_CacheSetExpire
e2ee_CacheSetText

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8.0MB - Virtual size: 8.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 456KB - Virtual size: 921KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 344KB - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

adf117d3b2dd23959b5ccac86522ceb5

Headers

File Characteristics

Imports

psapi

winmm

ws2_32

msvfw32

avifil32

rasapi32

kernel32

user32

gdi32

msimg32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

oledlg

wininet

imm32

Exports

Exports

Sections

.text Size: 3.2MB - Virtual size: 3.2MB

.rdata Size: 8.0MB - Virtual size: 8.0MB

.data Size: 456KB - Virtual size: 921KB

Size: 344KB - Virtual size: 344KB

.rsrc Size: 2.9MB - Virtual size: 2.9MB

.text
Size: 3.2MB - Virtual size: 3.2MB

.rdata
Size: 8.0MB - Virtual size: 8.0MB

.data
Size: 456KB - Virtual size: 921KB

.rsrc
Size: 2.9MB - Virtual size: 2.9MB