cc3620a022b092c54d13e75a12a66b179b26034758825479c4d4cf3045b01319

Sharing

Copy URL Twitter E-mail

General

Target

cc3620a022b092c54d13e75a12a66b179b26034758825479c4d4cf3045b01319
Size

3.1MB
MD5

b21b657995b5028499af998c2c4bec60
SHA1

76316ec46ec5a1de684caf1580fee80dd41fe27d
SHA256

cc3620a022b092c54d13e75a12a66b179b26034758825479c4d4cf3045b01319
SHA512

3e4ba1e293e874b55fec39e5362156bcaf31528e4f25c3198181032fac41a733894fd927326a3dc2ea49d8c7bf56da1b743847dccb93852ed251ef457c4ced32
SSDEEP

98304:DAbs7eCrh4Q2vcr0VY2c49Idz4xAjyS/Od+GxpFdFxXg9o82:DNeohO0Aaip7ddRXg9o8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc3620a022b092c54d13e75a12a66b179b26034758825479c4d4cf3045b01319

Files

cc3620a022b092c54d13e75a12a66b179b26034758825479c4d4cf3045b01319
.exe windows:5 windows x86

e954ecd1b3059f63dbb038ad32ffc199

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

htons
getsockopt
getpeername
recv
closesocket
socket
connect
WSASetLastError
shutdown
bind
freeaddrinfo
getaddrinfo
ntohs
WSACleanup
WSAStartup
accept
listen
ioctlsocket
__WSAFDIsSet
select
send
sendto
recvfrom
htonl
ntohl
getsockname
setsockopt
WSAGetLastError
WSAIoctl
gethostname

kernel32

GlobalLock
GlobalAlloc
GlobalSize
CopyFileW
GlobalFree
DeactivateActCtx
CreateActCtxW
ReleaseActCtx
ActivateActCtx
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
FreeResource
GetThreadLocale
LocalAlloc
SetEnvironmentVariableA
GlobalHandle
LocalReAlloc
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
lstrcmpA
GetPrivateProfileIntW
FindNextFileW
FindFirstFileW
lstrlenA
GlobalFlags
GlobalGetAtomNameW
DeleteFileW
lstrcmpiW
LockFile
UnlockFile
GetFileSize
DuplicateHandle
GetVolumeInformationW
GetFullPathNameW
GetNumberFormatW
GetFileAttributesExW
GetFileAttributesW
GetFileSizeEx
GetFileTime
SetErrorMode
GetTempFileNameW
GetTempPathW
GetProfileIntW
SearchPathW
FindResourceExW
CompareStringW
GetDriveTypeW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
CreateFileW
GetProcessHeap
SetEndOfFile
GetConsoleCP
GetCurrentDirectoryW
IsValidCodePage
GetOEMCP
GetACP
HeapSize
GetLocaleInfoW
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
UnhandledExceptionFilter
HeapCreate
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteFile
SetUnhandledExceptionFilter
GetCPInfo
LCMapStringW
GetTimeZoneInformation
GetConsoleMode
SetConsoleMode
GlobalUnlock
SetConsoleCtrlHandler
ExitProcess
CreateFileA
WriteConsoleW
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
FindFirstFileExA
GetDriveTypeA
FindClose
SetFilePointer
GetFileInformationByHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
HeapReAlloc
ExitThread
GetSystemTimeAsFileTime
RtlUnwind
HeapAlloc
HeapFree
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetStartupInfoW
HeapSetInformation
GetCommandLineW
DecodePointer
EncodePointer
InterlockedIncrement
FlushConsoleInputBuffer
GlobalMemoryStatus
GetCurrentProcessId
QueryPerformanceCounter
GetVersion
GetModuleHandleA
GetCurrentThreadId
InterlockedDecrement
CreateThread
SetThreadAffinityMask
CreateEventA
SetThreadPriority
SuspendThread
ResumeThread
TerminateThread
PulseEvent
RaiseException
SetThreadIdealProcessor
GetModuleFileNameW
lstrcpynW
GetLocalTime
ResetEvent
SetEvent
LoadLibraryA
CopyFileA
GetModuleHandleW
GetModuleFileNameA
GetFullPathNameA
SetCurrentDirectoryA
WritePrivateProfileStringA
GetUserDefaultLangID
GetPrivateProfileStringW
GetPrivateProfileSectionW
WritePrivateProfileStringW
GetPrivateProfileStringA
GetWindowsDirectoryW
lstrcpyW
WideCharToMultiByte
lstrlenW
MultiByteToWideChar
GetTickCount
LoadLibraryW
GetProcAddress
FreeLibrary
GetStdHandle
GetFileType
WaitForMultipleObjects
PeekNamedPipe
ReadFile
FormatMessageA
Sleep
ExpandEnvironmentStringsA
WaitForSingleObject
CloseHandle
GetVersionExW
SleepEx
GetLastError
SetLastError
InterlockedExchange
LeaveCriticalSection
TryEnterCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
SetCriticalSectionSpinCount
FindResourceW
LoadResource
LockResource
SizeofResource
FlushFileBuffers
FormatMessageW
LocalFree
ReadConsoleInputA
MulDiv
HeapQueryInformation
GlobalReAlloc

user32

GetDoubleClickTime
SubtractRect
DrawIcon
GetWindowRgn
TranslateAcceleratorW
LockWindowUpdate
BringWindowToTop
SetCursorPos
CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
DrawFrameControl
DrawEdge
SetClassLongW
DestroyAcceleratorTable
SetParent
SetWindowRgn
IsZoomed
PostThreadMessageW
DrawIconEx
CopyImage
NotifyWinEvent
EnableScrollBar
HideCaret
InvertRect
CreatePopupMenu
GetMenuDefaultItem
CharUpperW
IsIconic
WaitMessage
EnumDisplayMonitors
DeleteMenu
RegisterClipboardFormatW
RealChildWindowFromPoint
UnregisterClassW
GetSysColorBrush
GetMenuItemInfoW
ShowOwnedPopups
GetMessageW
TranslateMessage
ValidateRect
GetNextDlgGroupItem
SetWindowContextHelpId
MapDialogRect
MapVirtualKeyW
GetKeyNameTextW
CharNextW
InvalidateRgn
CopyAcceleratorTableW
GetDesktopWindow
CreateDialogIndirectParamW
EndDialog
IntersectRect
GetWindowThreadProcessId
IsWindowEnabled
ShowWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
CharUpperBuffW
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcW
GetMenu
SetWindowPos
EndPaint
BeginPaint
UnhookWindowsHookEx
GetMenuState
GetMenuStringW
GetMenuItemID
InsertMenuW
GetMenuItemCount
RemoveMenu
MessageBoxA
GetProcessWindowStation
GetUserObjectInformationW
SystemParametersInfoW
ReleaseCapture
SetCapture
GetCapture
GetCursorPos
CallWindowProcW
GetComboBoxInfo
GetWindowDC
SetRectEmpty
IsMenu
RedrawWindow
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
EqualRect
IsRectEmpty
SetRect
LoadBitmapW
GetWindow
MoveWindow
UpdateWindow
FindWindowA
LoadIconW
IsWindowVisible
GetSystemMenu
AppendMenuW
PostQuitMessage
MessageBoxW
SetForegroundWindow
SetActiveWindow
CopyIcon
MessageBeep
IsWindow
GetMessagePos
SetWindowLongW
ScreenToClient
PtInRect
SetLayeredWindowAttributes
GetAsyncKeyState
GetKeyState
GetSystemMetrics
UpdateLayeredWindow
LoadCursorW
KillTimer
GetUpdateRect
IsClipboardFormatAvailable
SetMenuDefaultItem
CreateMenu
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
MonitorFromPoint
UnionRect
MapVirtualKeyExW
IsCharLowerW
EmptyClipboard
SetTimer
DestroyMenu
LoadMenuW
DestroyCursor
LoadImageW
GetIconInfo
GetDC
ReleaseDC
GetSysColor
GetSubMenu
TrackPopupMenuEx
CloseClipboard
SetClipboardData
OpenClipboard
UnpackDDElParam
ReuseDDElParam
BeginDeferWindowPos
InsertMenuItemW
PostMessageW
SetCursor
DestroyIcon
GetWindowLongW
EnableWindow
WindowFromPoint
GetParent
GetNextDlgTabItem
GetActiveWindow
InvalidateRect
ClientToScreen
GetClientRect
GetWindowRect
SendMessageW
DrawFocusRect
FrameRect
FillRect
OffsetRect
InflateRect
CopyRect
DrawStateW
PeekMessageW

gdi32

CreateRectRgn
GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectType
CreateHatchBrush
CreateRectRgnIndirect
GetClipBox
SetRectRgn
CombineRgn
GetMapMode
PatBlt
DPtoLP
GetRgnBox
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SelectClipRgn
CreatePalette
GetPaletteEntries
RealizePalette
GetSystemPaletteEntries
CreateRoundRectRgn
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
OffsetRgn
EnumFontFamiliesExW
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
GetTextFaceW
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
RestoreDC
SetLayout
PtVisible
GetTextExtentPoint32W
CreateFontIndirectW
SetBrushOrgEx
CreateDIBSection
StretchBlt
GetDIBColorTable
SetDIBColorTable
GetCurrentObject
GetTextMetricsW
GetObjectW
GetPixel
SetPixel
CreateBitmap
SetBkColor
SetTextColor
DeleteDC
GetStockObject
DeleteObject
BitBlt
GetLayout
SetTextAlign
IntersectClipRect
SelectObject
CreateCompatibleDC
GetNearestPaletteIndex
CreateCompatibleBitmap
SaveDC
CreateDCW
CopyMetaFileW
GetDeviceCaps
GetTextColor
GetBkColor
SetBkMode
CreatePen
Rectangle
MoveToEx
LineTo
CreateSolidBrush
Escape
ExtTextOutW
TextOutW
RectVisible
ExcludeClipRect

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegEnumValueW
RegQueryValueExW
RegOpenKeyExW
RegQueryValueW
RegSetValueExW
RegCreateKeyW
DeregisterEventSource
ReportEventA
RegisterEventSourceA
RegEnumKeyExW
RegCloseKey
RegEnumKeyW
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW

shell32

DragQueryFileW
ShellExecuteW
ShellExecuteA
SHGetFileInfoW
SHGetDesktopFolder
SHAppBarMessage
SHBrowseForFolderW
ShellExecuteExW
DragFinish
SHGetSpecialFolderLocation
SHGetPathFromIDListW

comctl32

_TrackMouseEvent
InitCommonControlsEx
ImageList_GetIconSize

shlwapi

PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW
StrCatW
PathRemoveFileSpecW

ole32

DoDragDrop
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoCreateGuid
CreateStreamOnHGlobal
CoUninitialize
CoSetProxyBlanket
CoCreateInstance
CoInitializeSecurity
CoInitializeEx
CoTaskMemFree
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CoGetClassObject
StgOpenStorageOnILockBytes
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
OleLockRunning
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoInitialize
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromProgID
CLSIDFromString

oleaut32

VariantCopy
OleCreateFontIndirect
SysAllocString
SafeArrayDestroy
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantChangeType
SysAllocStringLen
SysFreeString
VariantClear
VarBstrFromDate
VariantInit

oledlg

OleUIBusyW

gdiplus

GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromStream
GdipCloneBrush
GdipCreateFont
GdipDrawImageRectRect
GdipDrawString
GdipCreateFromHDC
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipCreateSolidFill
GdipDeleteFont
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipDeletePrivateFontCollection
GdipNewPrivateFontCollection
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDeleteBrush
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageRectI

winmm

PlaySoundW

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 621KB - Virtual size: 620KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 63KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e954ecd1b3059f63dbb038ad32ffc199

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

winmm

oleacc

imm32

Sections

.text Size: 2.3MB - Virtual size: 2.3MB

.rdata Size: 621KB - Virtual size: 620KB

.data Size: 63KB - Virtual size: 145KB

.rsrc Size: 82KB - Virtual size: 82KB

.text
Size: 2.3MB - Virtual size: 2.3MB

.rdata
Size: 621KB - Virtual size: 620KB

.data
Size: 63KB - Virtual size: 145KB

.rsrc
Size: 82KB - Virtual size: 82KB