ed8e1c8f1e2b91d2a321d0a6ff3c457dc6acbf63eb856cdadcea7d3a3368217b

Sharing

Copy URL

Twitter E-mail

General

Target

ed8e1c8f1e2b91d2a321d0a6ff3c457dc6acbf63eb856cdadcea7d3a3368217b
Size

1.7MB
MD5

c2a9151e0e9f4175e555cf90300b45c9
SHA1

691fb1a1a121bc3c07f117585a02111ceec19484
SHA256

ed8e1c8f1e2b91d2a321d0a6ff3c457dc6acbf63eb856cdadcea7d3a3368217b
SHA512

0caa582b0946446ea1b4037469f08635247f6d34902b01985e00d029c09dbf20c8b6983429cb334662bb045fea24047163547a367ccad1fa129e1e57ddbe162c
SSDEEP

49152:vDYiUpvqxIC8QJL2BTbbRemS6xbKi4H4Tjz6IkCfg:vYpvqxICNJL2BTbbRemSYbKDH7C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed8e1c8f1e2b91d2a321d0a6ff3c457dc6acbf63eb856cdadcea7d3a3368217b

Files

ed8e1c8f1e2b91d2a321d0a6ff3c457dc6acbf63eb856cdadcea7d3a3368217b
.exe windows:4 windows x86

c636d3692273b827bc8c010b1d5bcbb5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

comctl32

InitCommonControlsEx

comdlg32

CommDlgExtendedError
GetOpenFileNameW
GetSaveFileNameW
PageSetupDlgW
PrintDlgW

gdi32

CreateCompatibleBitmap
CreateCompatibleDC
CreateFontA
CreateFontIndirectW
CreatePen
CreateSolidBrush
DPtoLP
DeleteDC
DeleteObject
EndDoc
EndPage
ExtTextOutW
GetDIBits
GetDeviceCaps
GetNearestColor
GetStockObject
GetTextMetricsW
LineTo
MoveToEx
Polygon
SelectObject
SetBkColor
SetTextAlign
SetTextColor
StartDocW
StartPage
TranslateCharsetInfo

kernel32

AddAtomA
Beep
CloseHandle
CompareStringW
CreateFileW
CreateMutexW
CreatePipe
CreateProcessW
CreateSemaphoreA
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FileTimeToLocalFileTime
FileTimeToSystemTime
FindAtomA
FindClose
FindFirstFileW
FindNextFileW
FindResourceW
FormatMessageA
FormatMessageW
FreeLibrary
FreeResource
GetAtomNameA
GetCPInfo
GetCommandLineA
GetCommandLineW
GetCurrentThreadId
GetDateFormatA
GetExitCodeProcess
GetFileAttributesW
GetFileTime
GetFullPathNameW
GetLastError
GetLocaleInfoW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetStartupInfoA
GetStdHandle
GetTempPathW
GetTimeFormatA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByteEx
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LoadResource
LocalFree
LockResource
MulDiv
MultiByteToWideChar
PeekConsoleInputW
PeekNamedPipe
QueryPerformanceCounter
QueryPerformanceFrequency
ReadFile
ReleaseSemaphore
SetHandleInformation
SetLastError
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile

msvcrt

_write
__getmainargs
__lc_codepage
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_beginthread
_cexit
_errno
_filbuf
_iob
_isctype
_onexit
_pclose
_pctype
_popen
_setjmp
_setmode
_waccess
_wchdir
_wfopen
_wgetcwd
_wgetenv
_wpopen
_wremove
_wrename
_wstat
_wsystem
_wunlink
abort
acos
asin
atan
atan2
atexit
atof
atoi
atol
ceil
clearerr
clock
cos
cosh
difftime
exit
exp
fclose
fflush
fgets
floor
fmod
fopen
fprintf
fputc
fputs
fread
free
freopen
frexp
fscanf
fseek
ftell
fwrite
getenv
gmtime
iswctype
ldexp
localeconv
localtime
log
log10
longjmp
malloc
memchr
memcmp
memcpy
memmove
mktime
modf
pow
rand
realloc
remove
rename
setlocale
setvbuf
signal
sin
sinh
sprintf
sqrt
srand
strcat
strchr
strcmp
strcoll
strcpy
strcspn
strerror
strftime
strlen
strncat
strncmp
strncpy
strpbrk
strrchr
strstr
strtoul
strxfrm
tan
tanh
time
tmpfile
tmpnam
tolower
toupper
towlower
towupper
ungetc
vfprintf
wcschr
wcscmp
wcscoll
wcscpy
wcsftime
wcslen
wcsncmp
wcsncpy
wcsrchr
wcsxfrm

msimg32

TransparentBlt

shell32

DragAcceptFiles
DragFinish
DragQueryFileW
ExtractIconExW
SHBrowseForFolderW
SHGetMalloc
SHGetPathFromIDListW
ShellExecuteExW
Shell_NotifyIconW

user32

AppendMenuW
BeginDeferWindowPos
BeginPaint
CallWindowProcW
CharLowerW
CharUpperW
CheckDlgButton
CheckMenuItem
CheckMenuRadioItem
ClientToScreen
CloseClipboard
CreateDialogParamW
CreatePopupMenu
CreateWindowExW
DefWindowProcW
DeferWindowPos
DeleteMenu
DestroyAcceleratorTable
DestroyIcon
DestroyMenu
DestroyWindow
DialogBoxParamW
DispatchMessageW
DrawFocusRect
DrawFrameControl
DrawIconEx
DrawMenuBar
DrawTextW
EmptyClipboard
EnableMenuItem
EnableWindow
EndDeferWindowPos
EndDialog
EndPaint
EnumWindows
FillRect
FindWindowW
FlashWindow
GetClassInfoW
GetClassNameW
GetClientRect
GetClipboardData
GetCursorPos
GetDC
GetDlgCtrlID
GetDlgItem
GetDlgItemInt
GetDlgItemTextW
GetFocus
GetKeyState
GetKeyboardState
GetMenu
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoW
GetMenuState
GetMessageW
GetNextDlgTabItem
GetParent
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMetrics
GetThreadDesktop
GetUserObjectInformationW
GetWindow
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowTextLengthW
GetWindowTextW
InsertMenuW
InvalidateRect
IsChild
IsDialogMessageW
IsDlgButtonChecked
IsIconic
KillTimer
LoadAcceleratorsW
LoadCursorW
LoadIconW
LoadImageW
MapVirtualKeyA
MessageBoxW
ModifyMenuW
OemToCharBuffA
OpenClipboard
PeekMessageW
PostMessageW
PostQuitMessage
RegisterClassW
RegisterClipboardFormatW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
ScreenToClient
SendDlgItemMessageW
SendMessageTimeoutW
SendMessageW
SetCapture
SetClipboardData
SetCursor
SetDlgItemInt
SetDlgItemTextA
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetMenuItemInfoW
SetTimer
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowTextW
ShowWindow
SystemParametersInfoW
ToAscii
TrackMouseEvent
TrackPopupMenu
TranslateAcceleratorW
TranslateMessage
UpdateWindow
VkKeyScanW
WinHelpW

uxtheme

CloseThemeData
DrawThemeBackground
DrawThemeParentBackground
GetThemeBackgroundContentRect
GetThemePartSize
OpenThemeData

Exports

Exports

luaL_addlstring
luaL_addstring
luaL_addvalue
luaL_argerror
luaL_buffinit
luaL_callmeta
luaL_checkany
luaL_checkinteger
luaL_checklstring
luaL_checknumber
luaL_checkoption
luaL_checkstack
luaL_checktype
luaL_checkudata
luaL_error
luaL_findtable
luaL_getmetafield
luaL_gsub
luaL_loadbuffer
luaL_loadfile
luaL_loadstring
luaL_newmetatable
luaL_newstate
luaL_openlib
luaL_openlibs
luaL_optinteger
luaL_optlstring
luaL_optnumber
luaL_prepbuffer
luaL_pushresult
luaL_ref
luaL_register
luaL_typerror
luaL_unref
luaL_where
lua_atpanic
lua_call
lua_checkstack
lua_close
lua_concat
lua_cpcall
lua_createtable
lua_dump
lua_equal
lua_error
lua_gc
lua_getallocf
lua_getfenv
lua_getfield
lua_gethook
lua_gethookcount
lua_gethookmask
lua_getinfo
lua_getlocal
lua_getmetatable
lua_getstack
lua_gettable
lua_gettop
lua_getupvalue
lua_insert
lua_iscfunction
lua_isnumber
lua_isstring
lua_isuserdata
lua_lessthan
lua_load
lua_newstate
lua_newthread
lua_newuserdata
lua_next
lua_objlen
lua_pcall
lua_pushboolean
lua_pushcclosure
lua_pushfstring
lua_pushinteger
lua_pushlightuserdata
lua_pushlstring
lua_pushnil
lua_pushnumber
lua_pushstring
lua_pushthread
lua_pushvalue
lua_pushvfstring
lua_rawequal
lua_rawget
lua_rawgeti
lua_rawset
lua_rawseti
lua_remove
lua_replace
lua_resume
lua_setallocf
lua_setfenv
lua_setfield
lua_sethook
lua_setlevel
lua_setlocal
lua_setmetatable
lua_settable
lua_settop
lua_setupvalue
lua_status
lua_toboolean
lua_tocfunction
lua_tointeger
lua_tolstring
lua_tonumber
lua_topointer
lua_tothread
lua_touserdata
lua_type
lua_typename
lua_xmove
lua_yield
luaopen_base
luaopen_debug
luaopen_io
luaopen_math
luaopen_os
luaopen_package
luaopen_string
luaopen_table

Sections

.text
Size: 1019KB - Virtual size: 1019KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 135KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 465KB - Virtual size: 465KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c636d3692273b827bc8c010b1d5bcbb5

Headers

File Characteristics

Imports

comctl32

comdlg32

gdi32

kernel32

msvcrt

msimg32

shell32

user32

uxtheme

Exports

Exports

Sections

.text Size: 1019KB - Virtual size: 1019KB

.data Size: 32KB - Virtual size: 31KB

.rdata Size: 121KB - Virtual size: 120KB

.bss Size: - Virtual size: 24KB

.edata Size: 3KB - Virtual size: 2KB

.idata Size: 11KB - Virtual size: 10KB

.rsrc Size: 135KB - Virtual size: 136KB

.reloc Size: 465KB - Virtual size: 465KB

.text
Size: 1019KB - Virtual size: 1019KB

.data
Size: 32KB - Virtual size: 31KB

.rdata
Size: 121KB - Virtual size: 120KB

.bss
Size: - Virtual size: 24KB

.edata
Size: 3KB - Virtual size: 2KB

.idata
Size: 11KB - Virtual size: 10KB

.rsrc
Size: 135KB - Virtual size: 136KB

.reloc
Size: 465KB - Virtual size: 465KB