e762f8a6e4feeebd9bbf506056e44840fbeffc923290fb4dfcaaa7140fae6bae

Sharing

Copy URL Twitter E-mail

General

Target

e762f8a6e4feeebd9bbf506056e44840fbeffc923290fb4dfcaaa7140fae6bae
Size

10.3MB
MD5

048cb3176fe96b4a8b6d27d45f3862b9
SHA1

b2512c98dd58ca9538677d326a95d1d22b1828b6
SHA256

e762f8a6e4feeebd9bbf506056e44840fbeffc923290fb4dfcaaa7140fae6bae
SHA512

90424951cb319a0d03d3e82c9f5d2ca8229ba7a904ae9e7ab3cb3aa3e5a17967c09b5801052014f10cedb966ae88cfa9dfe211f477674e455af397c56c2075cb
SSDEEP

196608:z/8bTNfPUP2mShWWWKVWSUOvWmKy5GJV/BY:gbZHUbqYVPi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e762f8a6e4feeebd9bbf506056e44840fbeffc923290fb4dfcaaa7140fae6bae

Files

e762f8a6e4feeebd9bbf506056e44840fbeffc923290fb4dfcaaa7140fae6bae
.exe windows:4 windows x86

f8f58e5d8cccbeaaeeeb4ee978b5ef51

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamProperty
midiStreamOpen
midiOutUnprepareHeader
waveOutOpen
waveOutGetNumDevs
waveOutClose
waveOutReset
waveOutPause
waveOutWrite
waveOutPrepareHeader
waveOutUnprepareHeader
PlaySoundA
waveOutRestart
midiStreamRestart
waveOutGetPosition
midiStreamClose
midiOutReset
midiStreamStop
midiOutPrepareHeader
midiStreamOut

ws2_32

recvfrom
ioctlsocket
recv
getpeername
accept
ntohl
WSAAsyncSelect
closesocket
inet_ntoa
WSACleanup

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerLanguageNameA

msvfw32

ICClose
DrawDibDraw
ICOpen
ICCompressorFree
ICSeqCompressFrameEnd
DrawDibClose
ICSendMessage
ICSeqCompressFrameStart
DrawDibEnd
DrawDibOpen

avifil32

AVIStreamInfoA
AVIFileExit
AVIStreamLength
AVIFileInit
AVIStreamOpenFromFileA
AVIStreamGetFrame
AVIStreamRelease
AVIStreamGetFrameClose
AVIStreamSampleToTime
AVIStreamGetFrameOpen
AVIStreamStart

avicap32

capCreateCaptureWindowA
capGetDriverDescriptionA

imm32

ImmReleaseContext
ImmGetCompositionStringW
ImmGetContext
ImmNotifyIME
ImmSetCompositionFontA
ImmGetCompositionStringA
ImmSetCompositionWindow

kernel32

GetThreadLocale
lstrcmpiA
GetShortPathNameA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
lstrcmpA
LocalAlloc
TlsAlloc
GlobalHandle
TlsFree
TlsSetValue
LocalReAlloc
TlsGetValue
GetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
GetCurrentThread
SetThreadPriority
GlobalFlags
GetProfileIntA
IsBadWritePtr
IsBadReadPtr
GetPrivateProfileIntA
SetErrorMode
GetProcessVersion
GetOEMCP
GetStartupInfoA
RtlUnwind
GetSystemTime
RaiseException
GetSystemTimeAsFileTime
ExitThread
GetACP
SetStdHandle
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetEnvironmentVariableA
VirtualFree
SetEnvironmentVariableA
LCMapStringA
LCMapStringW
VirtualAlloc
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
IsBadCodePtr
IsDBCSLeadByte
FileTimeToSystemTime
FormatMessageA
ReleaseMutex
CreateMutexA
HeapSize
HeapDestroy
HeapCreate
GetLocalTime
Beep
IsDBCSLeadByteEx
IsValidCodePage
GetCPInfo
GetTempFileNameA
TerminateThread
InterlockedIncrement
GetVersion
GetLocaleInfoA
GetTimeZoneInformation
QueryPerformanceCounter
QueryPerformanceFrequency
SetLastError
LoadLibraryExA
GetStringTypeExA
OpenProcess
TerminateProcess
GetFileSize
SetFilePointer
CreateToolhelp32Snapshot
Process32First
Process32Next
WideCharToMultiByte
GetCurrentProcess
SetSystemPowerState
GetWindowsDirectoryA
GetSystemDirectoryA
InterlockedDecrement
LocalFree
MultiByteToWideChar
CreateSemaphoreA
ResumeThread
ReleaseSemaphore
EnterCriticalSection
LeaveCriticalSection
GetProfileStringA
SetCommTimeouts
SetCommMask
GetCommState
SetCommState
WriteFile
PurgeComm
WaitCommEvent
ClearCommError
WaitForMultipleObjects
GetOverlappedResult
GetCommModemStatus
CreateFileA
SetEvent
FindResourceA
LoadResource
LockResource
ReadFile
lstrlenW
GetModuleFileNameA
GetCurrentThreadId
ExitProcess
GlobalSize
GlobalFree
DeleteCriticalSection
InitializeCriticalSection
lstrcatA
lstrlenA
WinExec
lstrcpyA
FindNextFileA
GetLogicalDriveStringsA
GetDriveTypeA
GlobalReAlloc
HeapFree
HeapReAlloc
GetProcessHeap
HeapAlloc
GetUserDefaultLCID
GetFullPathNameA
FreeLibrary
LoadLibraryA
GetLastError
GetVersionExA
WritePrivateProfileStringA
GetPrivateProfileStringA
CreateThread
CreateEventA
Sleep
ExpandEnvironmentStringsA
GlobalAlloc
GlobalLock
GlobalUnlock
GetTempPathA
FindFirstFileA
FindClose
GetFileAttributesA
MoveFileA
DeleteFileA
CopyFileA
CreateDirectoryA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetVolumeInformationA
GetModuleHandleA
GetProcAddress
GetDiskFreeSpaceA
MulDiv
GetCommandLineA
GetTickCount
CreateProcessA
WaitForSingleObject
CloseHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
DuplicateHandle
lstrcpynA
FileTimeToLocalFileTime
InterlockedExchange
FindResourceExA
lstrcpyW
SuspendThread

user32

ScrollWindowEx
SetDlgItemTextA
SetDlgItemInt
GetDlgItemInt
SendDlgItemMessageA
BeginDeferWindowPos
EndDeferWindowPos
ShowScrollBar
GetScrollPos
RegisterClassA
GetClassLongA
RemovePropA
GetLastActivePopup
RegisterWindowMessageA
GetWindowPlacement
EndDialog
CreateDialogIndirectParamA
CharUpperA
GetWindowTextLengthA
LoadMenuA
GetAsyncKeyState
CreateIconIndirect
GetIconInfo
CopyIcon
LoadStringA
GetMenuItemCount
GetMenuItemID
GetMenuStringA
GetMenuState
GetTabbedTextExtentA
WindowFromDC
GetWindowDC
UnhookWindowsHookEx
CallNextHookEx
SetWindowsHookExA
GetPropA
MoveWindow
SetPropA
CallWindowProcA
AdjustWindowRectEx
DrawTextW
MapWindowPoints
SetWindowTextA
DestroyWindow
DestroyCaret
CreateCaret
ShowCaret
UnregisterClassA
RegisterClassExA
CreateWindowExA
GetScrollInfo
SetScrollInfo
SetCaretPos
ScrollWindow
GetMessageTime
BeginPaint
EndPaint
HideCaret
EnumChildWindows
GetSysColorBrush
GetDoubleClickTime
GetCursor
ClipCursor
GrayStringA
DrawTextA
TabbedTextOutA
MsgWaitForMultipleObjects
DrawStateA
FrameRect
GetNextDlgTabItem
UnionRect
EnumWindows
GetWindowTextA
GetDlgItem
FindWindowA
GetWindowThreadProcessId
GetClassNameA
GetDesktopWindow
GetKeyboardLayout
ExitWindowsEx
GetForegroundWindow
LoadIconA
TranslateMessage
DrawFrameControl
DrawEdge
DrawFocusRect
WindowFromPoint
GetMessageA
DispatchMessageA
SetRectEmpty
IsDialogMessageA
CreateIconFromResourceEx
CreateIconFromResource
DrawIconEx
CreatePopupMenu
AppendMenuA
ModifyMenuA
CreateMenu
CreateAcceleratorTableA
GetDlgCtrlID
EnableMenuItem
ClientToScreen
EnumDisplaySettingsA
LoadImageA
SystemParametersInfoA
ShowWindow
IsWindowEnabled
TranslateAcceleratorA
GetKeyState
CopyAcceleratorTableA
PostQuitMessage
IsZoomed
GetClassInfoA
DefWindowProcA
GetSystemMenu
DeleteMenu
GetMenu
SetMenu
PeekMessageA
IsIconic
SetFocus
GetActiveWindow
GetWindow
DestroyAcceleratorTable
SetWindowRgn
GetMessagePos
ScreenToClient
ChildWindowFromPointEx
CopyRect
LoadBitmapA
WinHelpA
KillTimer
SetTimer
ReleaseCapture
GetCapture
SetCapture
GetScrollRange
SetScrollRange
SetScrollPos
SetRect
InflateRect
IntersectRect
DestroyIcon
PtInRect
OffsetRect
IsWindowVisible
EnableWindow
RedrawWindow
GetWindowLongA
SetWindowLongA
GetSysColor
SetActiveWindow
SetCursorPos
LoadCursorA
SetCursor
GetDC
FillRect
InvertRect
IsRectEmpty
ScrollDC
ReleaseDC
IsChild
CheckMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ShowOwnedPopups
wvsprintfA
CharNextA
SetWindowContextHelpId
MapDialogRect
InsertMenuA
RemoveMenu
LoadAcceleratorsA
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
GetNextDlgGroupItem
GetDCEx
TrackPopupMenu
DestroyMenu
SetForegroundWindow
GetWindowRect
EqualRect
UpdateWindow
ValidateRect
InvalidateRect
LockWindowUpdate
GetClientRect
GetFocus
GetParent
GetTopWindow
PostMessageA
IsWindow
SetParent
DestroyCursor
SendMessageA
SetWindowPos
MessageBeep
MessageBoxA
GetCursorPos
GetSystemMetrics
IsClipboardFormatAvailable
EmptyClipboard
SetClipboardData
OpenClipboard
GetClipboardData
CloseClipboard
wsprintfA
WaitForInputIdle
InSendMessage
PostThreadMessageA
GetCaretPos
SetClassLongA
RegisterClipboardFormatA
GetSubMenu
DeferWindowPos

gdi32

GetSystemPaletteEntries
CreateDIBitmap
CreatePalette
StretchBlt
SelectPalette
RealizePalette
GetDIBits
ExtCreatePen
DeleteObject
SetMapMode
SetWindowExtEx
SetViewportOrgEx
SelectClipRgn
CreatePolygonRgn
GetClipRgn
SetStretchBltMode
ExtCreateRegion
SetPixel
CreateDIBSection
CreateRectRgnIndirect
SetBkColor
EnumFontFamiliesExA
GetNearestPaletteIndex
StrokePath
StrokeAndFillPath
FillPath
PlayMetaFileRecord
EnumMetaFile
GetRgnBox
PtInRegion
CloseMetaFile
CreateMetaFileA
SetROP2
SetPolyFillMode
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
ScaleWindowExtEx
GetClipBox
ExcludeClipRect
GetCurrentPositionEx
PolyBezierTo
ExtSelectClipRgn
GetViewportExtEx
GetMapMode
SetRectRgn
GetCharWidthA
SetAbortProc
CopyMetaFileA
EnumFontFamiliesA
CreateICA
RectInRegion
CreateEllipticRgnIndirect
Polyline
DeleteEnhMetaFile
SetWinMetaFileBits
PlayEnhMetaFile
SetEnhMetaFileBits
GetEnhMetaFileBits
CloseFigure
GetPath
OffsetRgn
FrameRgn
CreatePenIndirect
RestoreDC
SaveDC
SetWindowOrgEx
IntersectClipRect
GetTextExtentPoint32W
ExtTextOutW
LineTo
GetWindowExtEx
GetViewportOrgEx
GetTextAlign
GetTextFaceA
GetWindowOrgEx
BeginPath
EndPath
PathToRegion
CreateEllipticRgn
CreateRoundRectRgn
GetTextColor
GetBkMode
GetBkColor
GetROP2
GetStretchBltMode
GetPolyFillMode
CreateCompatibleBitmap
CreateDCA
CreateBrushIndirect
GetDeviceCaps
GetTextExtentPoint32A
Polygon
Arc
Chord
Pie
RoundRect
GetCurrentObject
DPtoLP
LPtoDP
Rectangle
Ellipse
SetPixelV
CreateCompatibleDC
GetPixel
BitBlt
StartPage
StartDocA
DeleteDC
EndDoc
EndPage
GetObjectA
GetStockObject
CreateFontIndirectA
CreateSolidBrush
FillRgn
CreateRectRgn
CombineRgn
PatBlt
CreatePen
SelectObject
CreatePatternBrush
CreateBitmap
DeleteMetaFile
CreateHatchBrush
MoveToEx
GetNearestColor
SetTextAlign
TranslateCharsetInfo
SetBrushOrgEx
AbortDoc
Escape
GetTextMetricsA
ExtTextOutA
RectVisible
PtVisible
GetTextExtentExPointW
CreateFontA
GetTextExtentExPointA
SetDIBitsToDevice
StretchDIBits
SetTextColor
SetBkMode
TextOutA

msimg32

GradientFill

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

comdlg32

GetOpenFileNameA
GetFileTitleA
PrintDlgA
GetSaveFileNameA
CommDlgExtendedError
ChooseFontA
ChooseColorA

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegSetValueExA
RegCreateKeyA
GetFileSecurityA
SetFileSecurityA
RegSetValueA
RegCreateKeyExA
RegOpenKeyA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegQueryValueA

shell32

Shell_NotifyIconA
SHGetFileInfoA
SHGetMalloc
DragQueryFileA
DragFinish
ExtractIconA
ShellExecuteA
SHChangeNotify
SHGetSpecialFolderPathA
SHBrowseForFolderA
SHGetPathFromIDListA

ole32

CoCreateInstance
CreateStreamOnHGlobal
CLSIDFromString
OleLockRunning
OleSetContainedObject
OleCreateFromData
OleCreateStaticFromData
OleCreateFromFile
OleCreateLinkToFile
OleCreate
OleSave
GetHGlobalFromILockBytes
OleGetIconOfClass
WriteClassStm
OleSaveToStream
CreateItemMoniker
CreateGenericComposite
OleQueryCreateFromData
CreateFileMoniker
CoInitialize
CoUninitialize
StgCreateDocfile
StgOpenStorage
StgIsStorageFile
OleSetMenuDescriptor
OleRun
OleUninitialize
OleInitialize
CLSIDFromProgID
RevokeDragDrop
DoDragDrop
RegisterDragDrop
ReleaseStgMedium
CoTaskMemFree
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
OleGetClipboard
CoLockObjectExternal
OleDuplicateData
CoTaskMemAlloc
CreateBindCtx
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
ReadClassStg
StringFromCLSID
CoTreatAsClass
CoDisconnectObject
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleIsRunning
OleLoad
OleConvertOLESTREAMToIStorage

oleaut32

VariantCopyInd
SafeArrayGetElement
GetErrorInfo
SysAllocString
SafeArrayDestroy
SafeArrayCreate
SafeArrayPutElement
RegisterTypeLi
LHashValOfNameSys
LoadTypeLi
OleCreateFontIndirect
UnRegisterTypeLi
SysAllocStringByteLen
SysFreeString
SysStringLen
OleLoadPicture
SafeArrayGetElemsize
VarBstrFromCy
VarDateFromStr
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetDim
VariantTimeToSystemTime
VariantCopy
VariantClear
VariantChangeType
SafeArrayGetUBound
SafeArrayGetLBound
VariantInit
SysAllocStringLen

odbc32

ord2
ord1
ord23
ord41
ord45
ord51
ord15
ord9
ord14
ord11
ord10
ord54
ord43
ord68
ord46
ord44
ord8
ord59
ord17
ord20
ord49
ord48
ord4
ord5
ord72
ord12
ord18
ord16
ord13
ord50
ord19
ord3
ord61

comctl32

ImageList_Create
ImageList_LoadImageA
ImageList_Read
ImageList_Write
ImageList_DrawIndirect
ImageList_Duplicate
ImageList_GetIcon
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ImageList_Destroy
ord17
_TrackMouseEvent
ImageList_Draw
ImageList_AddMasked
ImageList_SetBkColor
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_ReplaceIcon

oledlg

ord11
ord4
ord3
ord8

wininet

InternetOpenA
InternetGetLastResponseInfoA
InternetOpenUrlA
InternetCloseHandle
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetQueryOptionA
InternetSetStatusCallback
InternetSetFilePointer
InternetWriteFile
InternetReadFile
InternetQueryDataAvailable
InternetConnectA
FtpGetFileA

Exports

Exports

_Scintilla_DirectFunction@16

Sections

.text
Size: 4.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 300KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 548KB - Virtual size: 547KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f8f58e5d8cccbeaaeeeb4ee978b5ef51

Headers

File Characteristics

Imports

winmm

ws2_32

version

msvfw32

avifil32

avicap32

imm32

kernel32

user32

gdi32

msimg32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

odbc32

comctl32

oledlg

wininet

Exports

Exports

Sections

.text Size: 4.5MB - Virtual size: 4.5MB

.rdata Size: 5.0MB - Virtual size: 5.0MB

.data Size: 300KB - Virtual size: 1.1MB

.rsrc Size: 548KB - Virtual size: 547KB

.text
Size: 4.5MB - Virtual size: 4.5MB

.rdata
Size: 5.0MB - Virtual size: 5.0MB

.data
Size: 300KB - Virtual size: 1.1MB

.rsrc
Size: 548KB - Virtual size: 547KB