1abaf2458717d206180582030a5b5ce1dff4985e267bc57d145dcb236b153874

Sharing

Copy URL Twitter E-mail

General

Target

1abaf2458717d206180582030a5b5ce1dff4985e267bc57d145dcb236b153874
Size

572KB
MD5

f0f37c6c90c837536233c2b4f28b0a43
SHA1

64df8421b59a5bb63d3d4702546331869636740d
SHA256

1abaf2458717d206180582030a5b5ce1dff4985e267bc57d145dcb236b153874
SHA512

3a42ace36c6dd61b26668547c37b693c8e1543246b271690ebd572bcf416230fa950dbba3cf13667eeb1f6f6b2665d45227f28b959f52310db7142111ac63b73
SSDEEP

6144:iV+u0bUDMT2EDFjj4bflswu/jtLFVgT/WOfrtNswrEH7fYP72QKO+3Y1tMmbWs:Ob3MKbflsw0t5VgLWYtHraO9+3Y12wW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1abaf2458717d206180582030a5b5ce1dff4985e267bc57d145dcb236b153874

Files

1abaf2458717d206180582030a5b5ce1dff4985e267bc57d145dcb236b153874
.exe windows:4 windows x86

8bd80946f485d704bb1a70a7c2516e7d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetStdHandle
CompareStringA
CompareStringW
IsBadCodePtr
GetStringTypeW
GetStringTypeA
IsBadWritePtr
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
SetUnhandledExceptionFilter
GetTimeZoneInformation
GetACP
HeapSize
GetCommandLineA
GetStartupInfoA
TerminateProcess
RaiseException
RtlUnwind
CloseHandle
GetFileTime
GetFileSize
GetFileAttributesA
GetTickCount
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
GetCurrentProcess
DuplicateHandle
SetErrorMode
GetThreadLocale
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
FormatMessageA
LocalFree
GlobalFree
GetCurrentThread
MultiByteToWideChar
WideCharToMultiByte
InterlockedIncrement
SetLastError
InterlockedDecrement
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetProfileStringA
FlushInstructionCache
lstrlenA
GlobalAlloc
GlobalLock
GlobalUnlock
HeapFree
GetVersionExA
FindResourceA
LoadResource
LockResource
SizeofResource
lstrcpynA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetModuleHandleA
GetVersion
MulDiv
lstrcpyA
lstrcmpiA
GetCurrentThreadId
lstrcmpA
GetModuleFileNameA
CreateMutexA
GetLastError
ExitProcess
IsBadReadPtr
VirtualProtect
VirtualAlloc
FreeLibrary
VirtualFree
GetProcessHeap
HeapReAlloc
HeapAlloc
LoadLibraryA
GetProcAddress
CreateFileA
WriteFile
SetEnvironmentVariableA

user32

MessageBeep
GetNextDlgGroupItem
CopyAcceleratorTableA
CharNextA
GetDesktopWindow
LoadStringA
MapDialogRect
SetWindowContextHelpId
EndDialog
CreateDialogIndirectParamA
TranslateMessage
PostQuitMessage
GrayStringA
TabbedTextOutA
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
SetActiveWindow
SetFocus
MessageBoxA
IsChild
WinHelpA
wsprintfA
GetDlgItem
GetWindowTextLengthA
GetDlgCtrlID
GetKeyState
GetClassLongA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
RegisterWindowMessageA
IntersectRect
SetCursor
GetMessagePos
FrameRect
MapWindowPoints
GetSysColorBrush
PeekMessageA
GetMenuItemCount
GetMenuItemID
PostThreadMessageA
GetSubMenu
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
GetWindowPlacement
GetMenu
GetWindowTextA
DrawIconEx
ValidateRect
DrawFrameControl
RemovePropA
SetCapture
ReleaseCapture
DestroyWindow
DrawEdge
CharUpperA
RegisterClipboardFormatA
DrawTextA
BeginPaint
EndPaint
SetForegroundWindow
UnregisterClassA
RegisterClassA
CreateWindowExA
SetPropA
GetPropA
CreatePopupMenu
DestroyMenu
GetMenuItemInfoA
DispatchMessageA
GetMessageA
ShowScrollBar
SetScrollRange
SetScrollPos
SetScrollInfo
GetScrollRange
GetScrollPos
EnableScrollBar
GetWindowInfo
IsZoomed
MoveWindow
ShowWindow
PostMessageA
SetWindowPos
RedrawWindow
IsWindowVisible
IsRectEmpty
ChildWindowFromPointEx
DestroyIcon
SystemParametersInfoA
SetWindowRgn
GetActiveWindow
IsWindow
GetClassInfoA
LoadCursorA
FillRect
SetRect
SetRectEmpty
ScreenToClient
PtInRect
GetDC
GetFocus
GetScrollInfo
IsWindowEnabled
CallWindowProcA
SetWindowLongA
WindowFromDC
ReleaseDC
GetWindowRect
GetMenuState
GetWindowDC
DefWindowProcA
GetCapture
GetCursorPos
SetTimer
GetTopWindow
GetWindow
UnhookWindowsHookEx
KillTimer
SetWindowsHookExA
GetClassNameA
CallNextHookEx
UpdateWindow
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
EnableWindow
GetParent
SendMessageA
ClientToScreen
WindowFromPoint
CopyRect
GetSysColor
InflateRect
DrawFocusRect
OffsetRect
DrawStateA
GetWindowLongA
GetIconInfo
LoadImageA
LoadIconA
InvalidateRect
AdjustWindowRectEx
HideCaret

gdi32

PtVisible
TextOutA
Escape
GetMapMode
GetBkColor
LPtoDP
SetMapMode
GetWindowExtEx
GetViewportExtEx
SetViewportOrgEx
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
DPtoLP
GetDeviceCaps
RestoreDC
SaveDC
SetWindowOrgEx
PlayEnhMetaFile
SelectClipRgn
CreatePatternBrush
SetBrushOrgEx
PatBlt
UnrealizeObject
SetROP2
IntersectClipRect
GetClipBox
ExcludeClipRect
SetStretchBltMode
StretchDIBits
RectVisible
CreateDIBitmap
GetTextExtentPointA
SetBkMode
ExtFloodFill
GetStockObject
SelectPalette
RealizePalette
CreateBitmap
SetTextColor
CreateICA
GetDIBits
GetRegionData
ExtCreateRegion
CreateRectRgnIndirect
CreateEllipticRgn
CreateFontA
Polygon
GetTextColor
GetObjectA
StretchBlt
CreateFontIndirectA
GetTextMetricsA
GetTextExtentPoint32A
DeleteObject
Ellipse
CreatePen
CreateSolidBrush
DeleteDC
BitBlt
SelectObject
CreateCompatibleDC
CreateDIBSection
SetPixel
LineTo
MoveToEx
ExtTextOutA
SetBkColor
Arc
CreateRectRgn
CreateCompatibleBitmap
FrameRgn
FillRgn
OffsetRgn
CombineRgn
CreatePolygonRgn
CreateRoundRectRgn
OffsetViewportOrgEx

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA

comctl32

ImageList_GetIcon
ImageList_GetImageCount
_TrackMouseEvent
InitCommonControlsEx
ImageList_Draw
ImageList_GetIconSize
ord17
ImageList_Destroy
ImageList_Create
ImageList_AddMasked

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
OleUninitialize

olepro32

ord253

oleaut32

SysFreeString
VariantClear
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysAllocString
SysAllocStringByteLen
SysStringLen
SysAllocStringLen

msvcp60

??1_Lockit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??0_Lockit@std@@QAE@XZ

msvcrt

fopen
fclose
realloc
fread
malloc
free
strncpy
ftell
fseek
floor
calloc
strncmp

Sections

.text
Size: 336KB - Virtual size: 333KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8bd80946f485d704bb1a70a7c2516e7d

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

oledlg

ole32

olepro32

oleaut32

msvcp60

msvcrt

Sections

.text Size: 336KB - Virtual size: 333KB

.rdata Size: 60KB - Virtual size: 57KB

.data Size: 108KB - Virtual size: 186KB

.rsrc Size: 64KB - Virtual size: 62KB

.text
Size: 336KB - Virtual size: 333KB

.rdata
Size: 60KB - Virtual size: 57KB

.data
Size: 108KB - Virtual size: 186KB

.rsrc
Size: 64KB - Virtual size: 62KB