14f74990523cf40ab178009a1c65e3fb928db4afc3f1d0f06329196033749e75

Sharing

Copy URL Twitter E-mail

General

Target

14f74990523cf40ab178009a1c65e3fb928db4afc3f1d0f06329196033749e75
Size

10.0MB
MD5

3b45866381ff4d525d195d195fc233cc
SHA1

b0dbf33dd13150a3daa683e1c87bc757e5666e66
SHA256

14f74990523cf40ab178009a1c65e3fb928db4afc3f1d0f06329196033749e75
SHA512

9071a8fdfc2080343eac682143f1ab774ac1a6ff0fd2915a9c78626eb8ed944923d821a1f32eaa61d907b2e15d2dcbf3fe85459e420a07558da4daa91fa00887
SSDEEP

98304:T89H+m8WpnfHNPbMjAAYkoEbvT6gXxH63KATKqsImg7hBPctFq5XZJmhu:Tw9aYCvTxo3fTBDVFQeX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14f74990523cf40ab178009a1c65e3fb928db4afc3f1d0f06329196033749e75

Files

14f74990523cf40ab178009a1c65e3fb928db4afc3f1d0f06329196033749e75
.exe windows:6 windows x64

f994d9663e54cf1d6848f8c813219277

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

comctl32

ord17
InitCommonControlsEx

wsock32

accept
listen
send
WSAGetLastError
setsockopt
inet_ntoa
sendto
htons
htonl
recv
getservbyname
inet_addr
ntohs
socket
getservbyport
gethostbyaddr
ioctlsocket
WSAStartup
WSASetLastError
select
gethostbyname
closesocket
bind
connect
WSACleanup
recvfrom
getsockname
__WSAFDIsSet
getsockopt
gethostname

ws2_32

getaddrinfo
freeaddrinfo

wldap32

ord35
ord30
ord143
ord60
ord217
ord41
ord33
ord79
ord36
ord32
ord27
ord13
ord26
ord88
ord45
ord301
ord195
ord211
ord200

crypt32

CertFreeCertificateContext
CertGetNameStringW

bcrypt

BCryptGenerateKeyPair
BCryptOpenAlgorithmProvider
BCryptExportKey
BCryptFinalizeKeyPair
BCryptDestroyKey
BCryptCloseAlgorithmProvider

d2d1

ord1

dwrite

DWriteCreateFactory

prntvpt

ord9
ord4
ord3

gdiplus

GdipAlloc
GdipCreateSolidFill
GdipFree
GdipCreateFromHDC
GdipDeleteBrush
GdipFillRectangleI
GdipDeleteGraphics
GdipCreatePen1
GdiplusStartup
GdiplusShutdown
GdipDrawRectangleI
GdipCloneBrush
GdipDeletePen

kernel32

WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
RtlUnwindEx
RtlPcToFileHeader
RaiseException
SetLastError
EncodePointer
RtlUnwind
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetFileType
GetStringTypeW
FlsAlloc
FlsGetValue
FlsSetValue
InitializeCriticalSectionAndSpinCount
FlsFree
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
SetEnvironmentVariableW
SetStdHandle
SetFilePointerEx
GetCommandLineW
GetModuleHandleA
GlobalFree
WideCharToMultiByte
GetTickCount
GlobalHandle
GlobalAlloc
GlobalLock
lstrcmpiW
GlobalUnlock
GetThreadLocale
SetErrorMode
FindResourceA
FreeResource
LoadLibraryA
FindResourceExA
LockResource
LoadResource
GetProcAddress
HeapFree
MultiByteToWideChar
GetLastError
HeapAlloc
GetProcessHeap
GetModuleFileNameA
CloseHandle
CreateMutexA
SetCurrentDirectoryA
FindFirstFileA
FindNextFileA
FindClose
GlobalSize
SizeofResource
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
ExitProcess
ReadFile
WriteFile
SetFilePointer
CreateFileA
CreateProcessA
SetEndOfFile
GetFileSize
HeapSize
CreateFileW
MulDiv
CreateDirectoryW
FormatMessageA
ReleaseSemaphore
WaitForSingleObject
GetCurrentThreadId
DeleteCriticalSection
CreateSemaphoreA
CompareStringW
ResumeThread
Sleep
TerminateThread
SetEvent
ResetEvent
CreateEventA
GlobalReAlloc
GetComputerNameExW
CreateEventW
GetExitCodeThread
CreateThread
GetModuleHandleW
FindFirstFileW
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetDiskFreeSpaceW
RemoveDirectoryW
GetFinalPathNameByHandleW
SetFileTime
GetModuleFileNameW
GetTempPathW
GetFileAttributesW
GetSystemDirectoryW
GetVersion
SetFileAttributesW
GetFileAttributesExW
FileTimeToSystemTime
DeleteFileW
LoadLibraryW
GetCurrentDirectoryW
GetWindowsDirectoryW
LocalFree
MoveFileExW
SystemTimeToFileTime
FreeLibrary
GetTempFileNameW
GetFileTime
GetSystemDirectoryA
GetLocaleInfoA
CompareStringA
AreFileApisANSI
LockFile
GetFullPathNameA
UnlockFileEx
UnmapViewOfFile
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetFileAttributesA
GetVersionExA
DeleteFileA
GetSystemInfo
UnlockFile
CreateFileMappingA
LockFileEx
GetCurrentProcessId
GetSystemTimeAsFileTime
GetSystemTime
MapViewOfFile
QueryPerformanceCounter
HeapReAlloc
GetLocaleInfoW
GetTimeFormatW
GetDateFormatW
ReleaseMutex
InterlockedPushEntrySList
InitializeSListHead
InterlockedPopEntrySList
GetConsoleScreenBufferInfo
GetStdHandle
GetConsoleMode
ReadConsoleW
WriteConsoleW
LCMapStringW
TlsSetValue
TlsAlloc
TlsGetValue
TlsFree
GetTimeZoneInformation
GetLocalTime
QueryPerformanceFrequency
SystemTimeToTzSpecificLocalTime
CreateProcessW
GetEnvironmentVariableA
GetEnvironmentVariableW
SetHandleInformation
CreatePipe
WaitNamedPipeW
PeekNamedPipe
OpenProcess
ReadProcessMemory
GetExitCodeProcess
GetFileInformationByHandle
FileTimeToLocalFileTime
GetTempFileNameA
FileTimeToDosDateTime
SetFileAttributesA
lstrlenA
lstrcatA
lstrcpyA
GetDiskFreeSpaceExA
FindResourceExW
FindResourceW
SetThreadLocale
TerminateProcess
CreateNamedPipeW
WriteFileEx
WaitForMultipleObjectsEx
GetConsoleOutputCP
ReadFileEx
SleepEx
GetEnvironmentStringsW
OutputDebugStringA
OutputDebugStringW
LoadLibraryExW
FlushFileBuffers
FreeEnvironmentStringsW

user32

SetWindowLongPtrA
PostQuitMessage
GetClientRect
SystemParametersInfoA
SetWindowLongW
SetCapture
SetPropW
DefMDIChildProcW
MoveWindow
GetWindowLongA
CallWindowProcA
ClientToScreen
SetWindowLongA
GetCapture
DefFrameProcW
ShowWindow
TrackPopupMenu
ChildWindowFromPointEx
CreatePopupMenu
SendMessageW
ScreenToClient
CreateWindowExW
GetPropW
SetWindowPos
GetKeyState
DefWindowProcW
SetFocus
GetFocus
GetCursorPos
KillTimer
TranslateMessage
IsWindowEnabled
PeekMessageW
TranslateMDISysAccel
SetTimer
DispatchMessageW
WindowFromPoint
PostMessageW
GetMessageW
UpdateWindow
IsZoomed
RegisterClassExW
SetWindowTextW
GetWindowRect
LoadImageA
EnableWindow
DestroyWindow
GetWindowTextW
ReleaseDC
PtInRect
GetParent
SendMessageA
PostMessageA
SetWindowLongPtrW
GetDC
CallWindowProcW
IsIconic
RegisterClipboardFormatA
GetClipboardFormatNameA
PeekMessageA
GetSystemMetrics
InvalidateRect
GetWindowLongPtrA
GetSysColor
UnionRect
GetDlgItem
GetForegroundWindow
GetTopWindow
GetWindowLongPtrW
MessageBoxW
MessageBoxA
InsertMenuW
DestroyMenu
SetMenuItemInfoW
GetSubMenu
DeleteMenu
GetMenuItemCount
GetMenuItemInfoW
CopyAcceleratorTableA
CreateMenu
DrawMenuBar
SetMenu
LoadMenuIndirectW
CreateAcceleratorTableA
DestroyAcceleratorTable
TranslateAcceleratorA
LoadAcceleratorsW
GetSysColorBrush
GetWindowTextLengthW
GetWindowLongW
GetWindow
RegisterClassW
SetScrollInfo
ScrollWindowEx
GetActiveWindow
FillRect
IsWindowVisible
EnableMenuItem
MapWindowPoints
AdjustWindowRectEx
GetSystemMenu
CharUpperA
MessageBeep
GetWindowTextLengthA
EnumWindows
GetWindowThreadProcessId
GetDesktopWindow
SetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
BeginPaint
wsprintfW
EndPaint
wsprintfA
DdeAccessData
DdeUnaccessData
DdeCreateStringHandleW
DdeAddData
DdeInitializeW
DdeQueryConvInfo
GetClipboardFormatNameW
DdePostAdvise
DdeNameService
DdeFreeStringHandle
DdeCmpStringHandles
ReleaseCapture
DdeCreateDataHandle
LoadCursorA
DestroyCursor
LoadIconA
SetCursor

gdi32

CreateCompatibleBitmap
LineTo
MoveToEx
SetTextColor
CreateFontIndirectA
SaveDC
GetDeviceCaps
RestoreDC
GetTextExtentPoint32W
SetBkColor
CreateSolidBrush
SelectObject
CreateCompatibleDC
DeleteDC
DeleteObject

comdlg32

GetOpenFileNameW
ChooseColorA
GetSaveFileNameW
PageSetupDlgW
PrintDlgExW

advapi32

ReportEventA
DeregisterEventSource
RegCreateKeyA
RegEnumKeyExW
CreateProcessAsUserW
RegEnumValueW
RegDeleteValueW
RegCloseKey
RegEnumKeyExA
LogonUserW
GetUserNameW
RegGetValueW
RegQueryValueExA
RegSetValueExA
RegisterEventSourceA
RegCreateKeyExA
RegCreateKeyExW
RegOpenKeyExA
RegOpenKeyExW
RegSetValueExW
RegQueryValueExW

shell32

ShellExecuteA
DragQueryFileA
CommandLineToArgvW
SHGetFolderPathW
DragQueryFileW

ole32

CoCreateGuid
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
CoUninitialize
CoTaskMemFree
CoCreateInstance
ReleaseStgMedium
OleInitialize
OleUninitialize
OleSetContainedObject
DoDragDrop
CoInitializeEx
CoTaskMemAlloc
CreateStreamOnHGlobal

oleaut32

SafeArrayUnaccessData
SystemTimeToVariantTime
DispGetParam
SysAllocStringLen
SysStringLen
SysAllocString
SysFreeString
VariantClear
SafeArrayAccessData
SafeArrayGetDim
SafeArrayGetVartype
SafeArrayGetLBound
SafeArrayGetUBound
VariantInit
VariantCopy

Exports

Exports

MngrAccumulateTime
MngrAddLongTime
MngrAdhocAggregateCount
MngrAdhocAggregateIdent
MngrAdhocCheck
MngrAdhocCount
MngrAdhocCreate
MngrAdhocExtend
MngrAdhocFree
MngrAdhocType
MngrAllocHandle
MngrAllocHash
MngrAllocPtr
MngrAskMessage
MngrChooseApp
MngrClearFile
MngrClipLongTime
MngrCloseFile
MngrClosePicture
MngrCompAddress
MngrCompHashBinary
MngrCompHashBinaryBuffer
MngrCompHashText
MngrCompHashTextBuffer
MngrCompHashVariant
MngrCompLongTime
MngrCompLongToLongTime
MngrCompString
MngrCompText
MngrCompVariant
MngrCompVersions
MngrConvertMoney
MngrConvertOSVersion
MngrCopyFile
MngrCopyMemory
MngrDateString
MngrDateTimeToSecs
MngrDeprAccumulated
MngrDeprAsset
MngrDeprCreate
MngrDeprFree
MngrDeprPending
MngrDeprRecovery
MngrDeprResidual
MngrDivideLongTime
MngrDraw
MngrDrawNum
MngrDrawString
MngrEraseRect
MngrFetchPtr
MngrFetchText
MngrFitString
MngrFormatLongLong
MngrFormatLongTime
MngrFormatText4
MngrFormatTime
MngrFreeFile
MngrFreeHandle
MngrFreeHash
MngrFreePtr
MngrFreeSpace
MngrGetAPPLInfo
MngrGetAppIDs
MngrGetAppInfo
MngrGetAppInfoByIdent
MngrGetCurrentTime
MngrGetDateTime
MngrGetErrorString
MngrGetInternational
MngrGetMouse
MngrGetPreferenceLong
MngrGetPreferenceString
MngrGetPreferenceText
MngrGetResource
MngrGetRowTermText
MngrGetVersion
MngrGetZone
MngrHoldFile
MngrIndString
MngrKillPicture
MngrLineHeight
MngrLockHandle
MngrMakeMaid
MngrMoveFile
MngrNameFile
MngrNativeToUTCTime
MngrNormalizeString
MngrNumToString
MngrNumToText
MngrODBCConnectString
MngrODBCOptions
MngrOffsetRect
MngrOpenFile
MngrOpenLocal
MngrOpenPicture
MngrOptionString
MngrOptionValue
MngrOptionVerify
MngrParseAddress
MngrPassAppInfo
MngrPause
MngrPenProps
MngrPlotSIcon
MngrPostMessage
MngrPtInRect
MngrPurchaseName
MngrPurchaseNameEx
MngrRectangle
MngrSQLCancel
MngrSQLExecute
MngrSQLPoll
MngrSaveLocal
MngrSavePicture
MngrScaleLongTime
MngrScratchFile
MngrScrollRect
MngrSectRect
MngrSeekFile
MngrSetLongTime
MngrSetPreferenceLong
MngrSetPreferenceString
MngrSetPreferenceText
MngrSliceCount
MngrSliceCreate
MngrSliceDuration
MngrSliceEndpoint
MngrSliceFree
MngrSliceIdent
MngrSliceIndex
MngrSqrtLongTime
MngrStoreText
MngrSubLongTime
MngrSwitchFile
MngrTAvail
MngrTComputeHash
MngrTCount
MngrTDelete
MngrTEmpty
MngrTFind
MngrTFindEx
MngrTFindPtr
MngrTGet
MngrTGetPtr
MngrTInit
MngrTInsert
MngrTInsertEx
MngrTInsertPtr
MngrTKill
MngrTLocate
MngrTLocateEx
MngrTLocatePtr
MngrTRemove
MngrTSet
MngrTSetHash
MngrTSort
MngrTSortEx
MngrTextFont
MngrTimeString
MngrTimer
MngrUTCToNativeTime
MngrUnlockHandle
MngrUnsignedToText
MngrWidthString
MngrWriteFile
SQLAllocConnect
SQLAllocEnv
SQLAllocHandle
SQLAllocStmt
SQLBindCol
SQLBindParameter
SQLCancel
SQLColAttributes
SQLColumnPrivileges
SQLColumns
SQLConnect
SQLDescribeCol
SQLDescribeParam
SQLDisconnect
SQLDriverConnect
SQLError
SQLExecDirect
SQLExecute
SQLExtendedFetch
SQLFetch
SQLForeignKeys
SQLFreeConnect
SQLFreeEnv
SQLFreeHandle
SQLFreeStmt
SQLGetConnectOption
SQLGetCursorName
SQLGetData
SQLGetDiagField
SQLGetDiagRec
SQLGetFunctions
SQLGetInfo
SQLGetStmtOption
SQLGetTypeInfo
SQLMoreResults
SQLNativeSql
SQLNumParams
SQLNumResultCols
SQLParamData
SQLParamOptions
SQLPrepare
SQLPrimaryKeys
SQLProcedureColumns
SQLProcedures
SQLPutData
SQLQueryCount
SQLRowCount
SQLSetConnectOption
SQLSetCursorName
SQLSetEnvAttr
SQLSetPos
SQLSetScrollOptions
SQLSetStmtOption
SQLSpecialColumns
SQLStatistics
SQLTablePrivileges
SQLTables
SQLTransact

Sections

.text
Size: 6.4MB - Virtual size: 6.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 614KB - Virtual size: 655KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 283KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f994d9663e54cf1d6848f8c813219277

Headers

DLL Characteristics

File Characteristics

Imports

version

comctl32

wsock32

ws2_32

wldap32

crypt32

bcrypt

d2d1

dwrite

prntvpt

gdiplus

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 6.4MB - Virtual size: 6.4MB

.rdata Size: 2.6MB - Virtual size: 2.6MB

.data Size: 614KB - Virtual size: 655KB

.pdata Size: 283KB - Virtual size: 283KB

_RDATA Size: 512B - Virtual size: 252B

.rsrc Size: 5.1MB - Virtual size: 5.1MB

.reloc Size: 75KB - Virtual size: 75KB

.text
Size: 6.4MB - Virtual size: 6.4MB

.rdata
Size: 2.6MB - Virtual size: 2.6MB

.data
Size: 614KB - Virtual size: 655KB

.pdata
Size: 283KB - Virtual size: 283KB

_RDATA
Size: 512B - Virtual size: 252B

.rsrc
Size: 5.1MB - Virtual size: 5.1MB

.reloc
Size: 75KB - Virtual size: 75KB