825c61f894392ac55a2c28875136ca193a03a565ff8fe0e5a34161e1f652754c

Sharing

Copy URL

Twitter E-mail

General

Target

825c61f894392ac55a2c28875136ca193a03a565ff8fe0e5a34161e1f652754c
Size

3.5MB
MD5

d97724863323911c586223e491dcfa14
SHA1

f0e3c7c2f756462c865e0e3d118be52c769681f2
SHA256

825c61f894392ac55a2c28875136ca193a03a565ff8fe0e5a34161e1f652754c
SHA512

0c72b434502230a6dd4e459846ef7a79e79cc83a6c23ce1beb696cbeb1c56f50d47cecf99198d5cfc210c7a96d8bb832cf5a0c5c79cf19e1086a3b590c60d071
SSDEEP

98304:7wg2j619mzfCaMCZbajPtNTZLcPBkqPy94iNCO9LA:kg2jwQL5ZajPtcPBLq94iNCWLA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
825c61f894392ac55a2c28875136ca193a03a565ff8fe0e5a34161e1f652754c

Files

825c61f894392ac55a2c28875136ca193a03a565ff8fe0e5a34161e1f652754c
.exe windows:5 windows x86

1f72c1c5800a418b592fc90c09c56b87

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetThreadLocale
FileTimeToSystemTime
lstrcmpA
InterlockedExchange
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetFileTime
GetTempFileNameA
GetFullPathNameA
GetDiskFreeSpaceA
GetModuleFileNameW
GlobalFlags
GetModuleHandleW
InterlockedIncrement
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
GetCurrentProcessId
GetCPInfo
GetOEMCP
MoveFileA
GetStringTypeExA
lstrcmpiA
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
GetShortPathNameA
FileTimeToLocalFileTime
GetFileSizeEx
SetErrorMode
GetTickCount
RtlUnwind
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
RaiseException
Sleep
ExitProcess
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
VirtualQuery
HeapReAlloc
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
IsValidCodePage
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetStdHandle
InitializeCriticalSectionAndSpinCount
HeapCreate
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
lstrcmpW
GetModuleHandleA
GetVersionExA
GetCurrentThreadId
SetLastError
GlobalAlloc
FormatMessageA
LocalFree
MultiByteToWideChar
MulDiv
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
SetFileTime
GetCurrentDirectoryA
GetFileAttributesA
CreateDirectoryA
LocalFileTimeToFileTime
lstrcpyA
lstrlenA
lstrcatA
SystemTimeToFileTime
ReadFile
SetFilePointer
WriteFile
LoadLibraryA
GetProcAddress
FreeLibrary
CreateFileA
CreateFileMappingA
MapViewOfFile
FlushViewOfFile
UnmapViewOfFile
CloseHandle
FindFirstFileA
FindClose
GetLastError
DeleteFileA
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
InterlockedDecrement
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
TlsFree
SizeofResource

user32

ReleaseDC
GetWindowDC
BeginPaint
EndPaint
InflateRect
IsZoomed
PostQuitMessage
ShowOwnedPopups
MapDialogRect
SetWindowContextHelpId
GetMenuItemInfoA
GetSysColorBrush
LoadCursorA
IsRectEmpty
DeleteMenu
SetRect
SetTimer
KillTimer
WindowFromPoint
DestroyIcon
CharUpperA
CharNextA
CopyAcceleratorTableA
InvalidateRgn
SetCapture
GetNextDlgGroupItem
MessageBeep
UnregisterClassA
RegisterClipboardFormatA
PostThreadMessageA
ReleaseCapture
LoadAcceleratorsA
InvalidateRect
InsertMenuItemA
CreatePopupMenu
SetRectEmpty
BringWindowToTop
TranslateAcceleratorA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
LoadIconA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenu
SetMenu
SetForegroundWindow
GetDC
PostMessageA
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
CopyRect
PtInRect
DefWindowProcA
CallWindowProcA
GetMenu
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetFocus
SetWindowPos
ShowWindow
MoveWindow
GetDlgCtrlID
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
GetWindowTextLengthA
GetWindowTextA
GetWindow
SetFocus
SetWindowsHookExA
CallNextHookEx
GetMessageA
SendMessageA
EnableWindow
SetWindowLongA
GetWindowLongA
TranslateMessage
DispatchMessageA
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
GetMenuState
GetMenuStringA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetDesktopWindow
GetActiveWindow
SetActiveWindow
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
UpdateWindow
FindWindowA
GetSubMenu
LoadMenuA
GetClientRect
wsprintfA
TabbedTextOutA
FillRect
UnpackDDElParam
ReuseDDElParam
DestroyMenu
GetWindowThreadProcessId
SetCursor
EndDialog
GetNextDlgTabItem
GetParent
IsWindowEnabled
GetDlgItem
IsWindow
DestroyWindow
CreateDialogIndirectParamA
GetSysColor

shell32

DragQueryFileA
ExtractIconA
SHGetFileInfoA
ShellExecuteA
DragFinish

ole32

OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
OleUninitialize
CoInitializeEx
CoUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoRevokeClassObject
CLSIDFromProgID
CoTaskMemAlloc
CoInitialize
CoCreateInstance
OleRun
CoTaskMemFree
OleInitialize
CLSIDFromString
CoFreeUnusedLibraries

oleaut32

SysAllocStringLen
SysStringByteLen
SysAllocStringByteLen
VarUdateFromDate
VariantChangeType
VariantCopy
SysFreeString
SysAllocString
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantClear
VariantInit
SafeArrayDestroy
VarDateFromStr
VarBstrFromDate
OleCreateFontIndirect
GetErrorInfo
SysStringLen

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathRemoveFileSpecW

oledlg

ord8

oleacc

LresultFromObject
CreateStdAccessibleObject

gdi32

CreateSolidBrush
CreateFontIndirectA
CreateRectRgnIndirect
GetMapMode
DPtoLP
GetTextMetricsA
GetTextExtentPoint32A
GetBkColor
GetClipBox
SetTextColor
SetBkColor
GetObjectA
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
SaveDC
RestoreDC
SetMapMode
ExcludeClipRect
IntersectClipRect
DeleteObject
GetViewportExtEx
GetWindowExtEx
BitBlt
GetPixel
PtVisible
GetTextColor
GetRgnBox
GetStockObject
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetBkMode
GetDeviceCaps
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
ScaleViewportExtEx

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

comdlg32

GetFileTitleA

advapi32

GetFileSecurityA
SetFileSecurityA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueA
RegCloseKey
RegCreateKeyA

Sections

.text
Size: 378KB - Virtual size: 378KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1f72c1c5800a418b592fc90c09c56b87

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

ole32

oleaut32

shlwapi

oledlg

oleacc

gdi32

winspool.drv

comdlg32

advapi32

Sections

.text Size: 378KB - Virtual size: 378KB

.rdata Size: 89KB - Virtual size: 88KB

.data Size: 3.0MB - Virtual size: 3.0MB

.rsrc Size: 24KB - Virtual size: 23KB

.text
Size: 378KB - Virtual size: 378KB

.rdata
Size: 89KB - Virtual size: 88KB

.data
Size: 3.0MB - Virtual size: 3.0MB

.rsrc
Size: 24KB - Virtual size: 23KB