63139bfe2c9fea3e11c027f434b48d62c63b734911f8b9e90092d2e6221965b5

Sharing

Copy URL Twitter E-mail

General

Target

63139bfe2c9fea3e11c027f434b48d62c63b734911f8b9e90092d2e6221965b5
Size

2.7MB
MD5

283d7b5fe4295fb6901dab243bc2aaa2
SHA1

8152e161126330b7a980d9b11cedac9ef551292a
SHA256

63139bfe2c9fea3e11c027f434b48d62c63b734911f8b9e90092d2e6221965b5
SHA512

73bfc00f0b50688804a736f000069d6ca25d6dd9779b64fab2c83ead8d8e614396aea6baac840aa8ddc00d6d526c9cf558233676b447eb4b448d438f948c0ccd
SSDEEP

49152:1yaNhe0AUWA0V6Bk1xzi6pLtqzoSqaID8xADV4ZjX9Q+++AdDb:1y+e0i9YUi6htNSqaID8PX9ef

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63139bfe2c9fea3e11c027f434b48d62c63b734911f8b9e90092d2e6221965b5

Files

63139bfe2c9fea3e11c027f434b48d62c63b734911f8b9e90092d2e6221965b5
.exe windows:4 windows x86

3172bbf21d404a8dc23ad41963a12ab7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GetCPInfo
GetOEMCP
SetErrorMode
GetTickCount
VirtualProtect
GetSystemInfo
VirtualQuery
HeapReAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetTimeFormatA
GetDateFormatA
GetSystemTimeAsFileTime
GetCommandLineA
GetStartupInfoA
GetFileType
ExitProcess
SetConsoleCtrlHandler
RtlUnwind
WriteConsoleW
GetStdHandle
GetConsoleCP
GlobalReAlloc
RaiseException
SetStdHandle
HeapDestroy
HeapCreate
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
LoadLibraryW
WriteConsoleA
GetConsoleOutputCP
SetEnvironmentVariableA
TlsGetValue
LocalAlloc
GetCurrentDirectoryA
GlobalFlags
GetFileTime
GetFileAttributesA
GetFullPathNameA
GetVolumeInformationA
DuplicateHandle
GetThreadLocale
SetEndOfFile
UnlockFile
LockFile
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetVersionExA
FormatMessageA
MulDiv
GetModuleFileNameW
FreeResource
GlobalFree
WritePrivateProfileStringA
GlobalAddAtomA
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
GlobalAlloc
GlobalDeleteAtom
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
FindClose
VirtualAlloc
VirtualFree
SetFilePointer
InterlockedIncrement
CreateThread
WaitForSingleObject
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
FlushFileBuffers
GlobalUnlock
WriteFile
GlobalLock
LocalFree
InterlockedDecrement
lstrcpynA
GetModuleHandleA
SetLastError
LoadLibraryA
GetProcAddress
FreeLibrary
lstrcpyA
GetACP
CloseHandle
LockResource
HeapSize
GetLogicalDriveStringsA
ReadFile
SizeofResource
GetDriveTypeA
GetProcessHeap
HeapFree
HeapAlloc
LoadResource
FindResourceA
GetFileSize
CreateFileA
GetVersion
CompareStringA
IsDebuggerPresent
CreateMutexA
GetModuleFileNameA
GetLastError
InterlockedExchange
lstrlenW
MultiByteToWideChar
CompareStringW
Sleep
WideCharToMultiByte
GetPrivateProfileIntA
GetSystemDefaultLCID
GetCurrentProcess
lstrlenA
SetPriorityClass
GetConsoleMode

user32

UnregisterClassA
RegisterClipboardFormatA
PostThreadMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenu
GetMenu
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
EqualRect
GetScrollInfo
SetScrollInfo
CallWindowProcA
SetWindowLongA
GetWindowPlacement
IntersectRect
EndPaint
BeginPaint
GetWindowTextLengthA
GetWindowTextA
SetFocus
GetMenuItemID
UnhookWindowsHookEx
SetActiveWindow
MessageBeep
DestroyWindow
GetDlgItem
EndDialog
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
IsWindowVisible
GetKeyState
PeekMessageA
ValidateRect
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
MessageBoxA
SetWindowRgn
GetWindowDC
GetSysColorBrush
IsRectEmpty
DrawTextA
GrayStringA
DrawTextExA
TabbedTextOutA
BringWindowToTop
IsWindow
RegisterWindowMessageA
SetRect
RedrawWindow
ShowScrollBar
SetCapture
ReleaseCapture
ChangeDisplaySettingsA
GetSystemMetrics
CharUpperA
SetForegroundWindow
ScreenToClient
KillTimer
GetFocus
PtInRect
DefWindowProcA
GetDesktopWindow
GetClassInfoA
SystemParametersInfoA
LoadCursorA
DrawFrameControl
GetNextDlgTabItem
ClientToScreen
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
CharNextA
ShowWindow
MoveWindow
SetCursor
FillRect
GetSubMenu
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
CreateDialogIndirectParamA
GetDlgCtrlID
EnableWindow
UpdateWindow
LoadImageA
GetMenuItemCount
AppendMenuA
CreatePopupMenu
GetCursorPos
ReleaseDC
LockWindowUpdate
GetDC
SendMessageA
GetClientRect
DrawIcon
LoadIconA
LoadBitmapA
DeleteMenu
IsIconic
GetWindowRect
SetTimer
CopyRect
DestroyIcon
DestroyMenu
PostMessageA
GetActiveWindow
FrameRect
GetSysColor
DestroyCursor
GetWindowLongA
InvalidateRect
TrackPopupMenuEx
OffsetRect
DrawStateA
InflateRect
DrawFocusRect
GetIconInfo
CreateIconIndirect
WindowFromPoint
GetParent

gdi32

GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
GetMapMode
DPtoLP
GetRgnBox
MoveToEx
LineTo
GetClipBox
SetMapMode
SetROP2
SetBkMode
RestoreDC
SaveDC
CreateRectRgnIndirect
GetBitmapBits
GetDIBits
CombineRgn
GetROP2
Polyline
CreateSolidBrush
CreateRectRgn
GetCurrentObject
PtVisible
Escape
RectVisible
ExtTextOutA
TextOutA
GetTextExtentPoint32A
CreateFontIndirectA
Rectangle
GetBkColor
GetTextColor
BitBlt
SetTextColor
SetBkColor
SetPixel
CreateBitmap
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
GetPixel
GetObjectA
GetStockObject
CreateFontA
DeleteObject
CreatePen
CreateDCA
DeleteDC
GetDeviceCaps

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegOpenKeyA
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegCloseKey

shell32

SHBrowseForFolderA
ShellExecuteExA
SHGetPathFromIDListA

comctl32

_TrackMouseEvent
InitCommonControlsEx

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA

ws2_32

WSACleanup
WSAStartup

oledlg

ord8

ole32

CLSIDFromProgID
CLSIDFromString
CoTaskMemFree
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
OleRun
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoTaskMemAlloc
CoCreateInstance
CoInitialize
CoUninitialize
CoRevokeClassObject

oleaut32

VariantCopy
SysAllocStringByteLen
SafeArrayDestroy
VariantInit
SysStringByteLen
SysFreeString
SafeArrayGetUBound
SysAllocString
VariantChangeType
SysStringLen
SysAllocStringLen
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
GetErrorInfo
VariantClear

winmm

waveOutPrepareHeader
waveOutOpen
waveOutClose
waveOutWrite
waveOutUnprepareHeader

d3d9

Direct3DCreate9

ddraw

DirectDrawCreateEx

dbghelp

MakeSureDirectoryPathExists

intf

ord46
ord1
ord9
ord4
ord2

Sections

.rodata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 305KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3172bbf21d404a8dc23ad41963a12ab7

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ws2_32

oledlg

ole32

oleaut32

winmm

d3d9

ddraw

dbghelp

intf

Sections

.rodata Size: 12KB - Virtual size: 12KB

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 188KB - Virtual size: 188KB

.data Size: 20KB - Virtual size: 305KB

_RDATA Size: 4KB - Virtual size: 4KB

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.rodata
Size: 12KB - Virtual size: 12KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 188KB - Virtual size: 188KB

.data
Size: 20KB - Virtual size: 305KB

_RDATA
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB