c47f1edd83b90eee075c6f85976eaded028aaafe1f8a7cfe4931cb0410a39aab

Sharing

Copy URL Twitter E-mail

General

Target

c47f1edd83b90eee075c6f85976eaded028aaafe1f8a7cfe4931cb0410a39aab
Size

3.9MB
MD5

aa04feba19432f0448ae170fbd5e48c7
SHA1

837ee8144e76fe6808beab605797f9a5099f02c2
SHA256

c47f1edd83b90eee075c6f85976eaded028aaafe1f8a7cfe4931cb0410a39aab
SHA512

82c8b1afd22f45e0ea4c9913c6a37017fe94984f84f7667f5f543039dca8772eb7b7dfbbc3a3c7703ced5fad5bc8da31a3fc98f3520ccde086ab1e982580c041
SSDEEP

98304:llA1JjceBRdMfdlag7rdSr8OF979pfOZKAv4OoPBZw5tSKQbMWU8J:lMJjceBRJgqf6kBZw5tSKnWU8J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c47f1edd83b90eee075c6f85976eaded028aaafe1f8a7cfe4931cb0410a39aab

Files

c47f1edd83b90eee075c6f85976eaded028aaafe1f8a7cfe4931cb0410a39aab
.exe windows:6 windows x86

54c10c8afcad95158bca8c680fbe7412

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
IsDebuggerPresent
GetStartupInfoW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
MoveFileExW
GetExitCodeProcess
EnumSystemLocalesW
IsValidLocale
LCMapStringW
GetTimeFormatW
GetDateFormatW
GetConsoleOutputCP
SetFilePointerEx
ReadConsoleW
SetStdHandle
VirtualQuery
VirtualAlloc
HeapQueryInformation
GetCommandLineW
GetCommandLineA
FreeLibraryAndExitThread
ExitThread
CreateThread
GetModuleHandleExW
ExitProcess
PeekNamedPipe
GetFileType
GetFileInformationByHandle
GetDriveTypeW
InterlockedPushEntrySList
RtlUnwind
ResetEvent
OpenEventA
GetCPInfo
CompareStringEx
GetStringTypeW
LCMapStringEx
GetLocaleInfoEx
GetExitCodeThread
TryEnterCriticalSection
InitializeCriticalSectionEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
QueryPerformanceFrequency
RaiseException
OutputDebugStringW
InitializeSListHead
GetTempFileNameW
SearchPathW
GetProfileIntW
GetTempPathW
FindResourceExW
GetTickCount64
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
FileTimeToLocalFileTime
SetErrorMode
GetUserDefaultLCID
GetWindowsDirectoryW
lstrcpyW
FileTimeToSystemTime
VirtualProtect
GlobalGetAtomNameW
lstrcmpiW
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FindFirstFileW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GetCurrentDirectoryW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
InitializeCriticalSection
GlobalFlags
CopyFileW
MulDiv
GlobalSize
GetThreadLocale
CompareStringW
GlobalFindAtomW
LoadLibraryA
GetSystemDirectoryW
EncodePointer
GlobalAddAtomW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
MultiByteToWideChar
lstrcmpW
lstrcmpA
GlobalDeleteAtom
LoadLibraryExW
GetVersionExW
GetCurrentThread
ResumeThread
GlobalFree
GetModuleHandleW
GetModuleHandleA
OutputDebugStringA
HeapSize
HeapReAlloc
DecodePointer
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
CreateSemaphoreA
GetTickCount
CreateProcessW
SetThreadPriority
TerminateProcess
GetCurrentProcess
WaitForMultipleObjectsEx
ReleaseSemaphore
GetProcessHeap
HeapFree
HeapAlloc
DeleteFileW
DeleteFileA
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
WriteConsoleA
GetConsoleMode
GetTimeZoneInformation
GetCurrentProcessId
GetFileAttributesA
GetStdHandle
CreateEventA
WaitForSingleObjectEx
VerifyVersionInfoW
GetSystemTimeAsFileTime
TlsSetValue
CreateDirectoryW
TlsGetValue
TerminateThread
QueueUserAPC
CreateWaitableTimerW
WaitForMultipleObjects
SetWaitableTimer
CreateEventW
SleepEx
WaitForSingleObject
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
PostQueuedCompletionStatus
GetQueuedCompletionStatus
CreateIoCompletionPort
SetLastError
VerSetConditionMask
FindNextFileA
FindFirstFileA
FindClose
Sleep
GlobalLock
GlobalUnlock
GlobalAlloc
GetModuleFileNameW
CloseHandle
WriteFile
FlushFileBuffers
CreateFileW
LoadLibraryW
FindResourceW
SizeofResource
LockResource
LoadResource
GetProcAddress
FreeLibrary
WideCharToMultiByte
FormatMessageW
FormatMessageA
LocalFree
TlsFree
TlsAlloc
GetCurrentThreadId
CreateMutexA
GetLastError
GetSystemInfo
WriteConsoleW

user32

GetNextDlgGroupItem
IsRectEmpty
IntersectRect
SetRect
InvalidateRgn
CopyAcceleratorTableW
WindowFromPoint
ReleaseCapture
SetCapture
WaitMessage
CharUpperW
DestroyIcon
KillTimer
SetTimer
DeleteMenu
CopyImage
LoadCursorW
GetSysColorBrush
GetSystemMetrics
RealChildWindowFromPoint
MapVirtualKeyW
GetKeyNameTextW
LoadMenuW
SetRectEmpty
SendDlgItemMessageA
FillRect
ClientToScreen
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuState
GetMenuStringW
IsDialogMessageW
SetWindowTextW
CheckDlgButton
MoveWindow
MessageBeep
OffsetRect
CharNextW
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
LoadIconW
UnhookWindowsHookEx
GetTopWindow
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
EnableWindow
SendMessageW
GetWindowLongW
SetWindowLongW
GetClassNameW
GetClassLongW
EqualRect
CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
DrawStateW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
RegisterClipboardFormatW
DrawFocusRect
DrawIconEx
GetIconInfo
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
SetLayeredWindowAttributes
DestroyMenu
SetScrollRange
GetScrollPos
GetMenuItemInfoW
InflateRect
GetAsyncKeyState
TrackMouseEvent
LoadImageW
CreatePopupMenu
GetMenuDefaultItem
BringWindowToTop
EnumDisplayMonitors
ShowWindow
GetParent
GetClientRect
GetWindowRect
PtInRect
SetWindowPos
GetDC
ReleaseDC
BeginPaint
EndPaint
InvalidateRect
AdjustWindowRect
SystemParametersInfoW
LoadBitmapW
MessageBoxA
MessageBoxW
UnregisterClassW
GetFocus
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
IsWindow
DestroyWindow
CreateDialogIndirectParamW
EndDialog
GetDlgItem
GetNextDlgTabItem
GetActiveWindow
IsWindowEnabled
SetActiveWindow
GetDesktopWindow
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
IsWindowVisible
GetKeyState
ValidateRect
GetCursorPos
SetWindowsHookExW
CallNextHookEx
PostMessageW
PostQuitMessage
ShowOwnedPopups
SetCursor
GetWindowThreadProcessId
GetLastActivePopup
SetWindowContextHelpId
GetWindow
MapDialogRect
RegisterWindowMessageW
GetMessagePos
GetMessageTime
DefWindowProcW
CallWindowProcW
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
IsMenu
IsChild
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsIconic
GetDlgCtrlID
SetFocus
GetCapture
GetMenu
SetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
TrackPopupMenu
UpdateWindow
GetForegroundWindow
SetForegroundWindow
RedrawWindow
ScrollWindow
SetScrollPos
SetClassLongW
SetWindowRgn
SetParent
DrawEdge
LoadAcceleratorsW
DrawFrameControl
IsZoomed
GetSystemMenu
SetCursorPos
CopyIcon
FrameRect
DrawIcon
UnionRect
PostThreadMessageW
UpdateLayeredWindow
MonitorFromPoint
GetComboBoxInfo
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuW
CharUpperBuffW
IsClipboardFormatAvailable
GetUpdateRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SubtractRect
CreateMenu
GetWindowRgn
DestroyCursor
GetScrollRange

gdi32

GetTextColor
CopyMetaFileW
CreateDCW
BitBlt
CreateHatchBrush
CreatePen
CreatePatternBrush
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
GetStockObject
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
PatBlt
CreateFontIndirectW
GetTextExtentPoint32W
GetTextMetricsW
GetRgnBox
GetMapMode
DPtoLP
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetPixel
StretchBlt
SetDIBColorTable
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
Rectangle
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceW
GetDeviceCaps
GetBkColor
GetObjectW
SetTextColor
SetBkColor
CreateBitmap
SetRectRgn
CreateRectRgn
CombineRgn
CreateDIBSection
SelectObject
DeleteObject
DeleteDC
CreateSolidBrush
CreateCompatibleBitmap
OffsetWindowOrgEx
SetMapMode
CreateCompatibleDC

msimg32

TransparentBlt
AlphaBlend

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

RegEnumKeyW
RegOpenKeyExW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegCloseKey
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW

shell32

SHAppBarMessage
SHBrowseForFolderW
DragFinish
DragQueryFileW
ShellExecuteW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteA

comctl32

_TrackMouseEvent

shlwapi

StrFormatKBSizeW
PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathFindExtensionW
StrCatW
PathRemoveFileSpecW

uxtheme

GetCurrentThemeName
IsAppThemed
GetThemeSysColor
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
GetWindowTheme

ole32

OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoInitializeEx
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoInitialize
CoCreateInstance
CoCreateGuid
CoUninitialize
CreateStreamOnHGlobal
IsAccelerator

oleaut32

LoadTypeLi
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
OleCreateFontIndirect
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysFreeString
SysAllocString
VariantCopy
VarBstrFromDate

oledlg

OleUIBusyW

gdiplus

GdipSetInterpolationMode
GdipDrawImageI
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageGraphicsContext
GdipCreateBitmapFromHBITMAP
GdipLoadImageFromStream
GdipDrawImageRectRect
GdipDrawImageRectI
GdipSetSmoothingMode
GdipReleaseDC
GdipDeleteGraphics
GdipCreateFromHDC
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDrawString
GdipDeleteFont
GdipCreateFont
GdipGetGenericFontFamilySansSerif
GdiplusStartup
GdiplusShutdown
GdipAlloc
GdipCreateFontFamilyFromName
GdipFree
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipSetSolidFillColor
GdipDrawImageRect
GdipGetImageHeight
GdipDeleteFontFamily
GdipCloneImage
GdipDisposeImage
GdipGetImageWidth

ws2_32

freeaddrinfo
getaddrinfo
WSAAddressToStringW
WSASocketW
WSARecv
WSAIoctl
WSASetLastError
ntohl
getsockopt
__WSAFDIsSet
WSASend
setsockopt
ioctlsocket
ntohs
inet_ntoa
htonl
WSAGetLastError
WSACleanup
WSAStartup
gethostbyname
gethostbyaddr
socket
send
select
recv
listen
htons
getsockname
getpeername
connect
closesocket
accept
bind

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 453KB - Virtual size: 452KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

54c10c8afcad95158bca8c680fbe7412

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

ws2_32

oleacc

imm32

winmm

Sections

.text Size: 2.1MB - Virtual size: 2.1MB

.rdata Size: 453KB - Virtual size: 452KB

.data Size: 47KB - Virtual size: 67KB

.rsrc Size: 1.1MB - Virtual size: 1.1MB

.reloc Size: 171KB - Virtual size: 171KB

.text
Size: 2.1MB - Virtual size: 2.1MB

.rdata
Size: 453KB - Virtual size: 452KB

.data
Size: 47KB - Virtual size: 67KB

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

.reloc
Size: 171KB - Virtual size: 171KB