56b8877e91bdd4bac48a58774588ced8a5e726cc065e6f6c353bbbeb2e266a96

Sharing

Copy URL

Twitter E-mail

General

Target

56b8877e91bdd4bac48a58774588ced8a5e726cc065e6f6c353bbbeb2e266a96
Size

14.1MB
MD5

b28f4c4f4303de96a6a6c91e01cfee06
SHA1

de836b670f4c0928be2351b39be91278eb8a9680
SHA256

56b8877e91bdd4bac48a58774588ced8a5e726cc065e6f6c353bbbeb2e266a96
SHA512

7fcfcf06252d1b5acb7f5346d279950507f9c88256e37fab8415f4b9775216fda18e60260987da18e878ca6ef4671d818b75f002ef25d03f20c60e1240633505
SSDEEP

196608:4WY3sZvt3tixuIqe12mRuAWy91UoP7HOmgG3aBn9Qf/oJV2iUfXosDiAzA1iGxn3:4WisZFtoMe12gu5O8VW/2EtumEiE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56b8877e91bdd4bac48a58774588ced8a5e726cc065e6f6c353bbbeb2e266a96

Files

56b8877e91bdd4bac48a58774588ced8a5e726cc065e6f6c353bbbeb2e266a96
.exe windows:5 windows x86

e85b12050fc2730f3bc0656bd996ea30

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathAppendW
PathRemoveFileSpecW
PathRemoveBackslashW
PathFileExistsA
PathIsDirectoryA
PathFindFileNameW
SHGetValueW
SHSetValueW
PathCanonicalizeW
PathIsRootW
PathRemoveExtensionW
PathFileExistsW

advapi32

RegisterEventSourceA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
DeregisterEventSource
ReportEventA
RegQueryValueExW
RegOpenKeyExW

kernel32

WaitForSingleObject
lstrcmpW
WideCharToMultiByte
MultiByteToWideChar
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetModuleHandleW
GetCurrentProcess
GetCurrentProcessId
CreateProcessW
CreateFileW
WriteFile
GetTempPathW
GetFileAttributesW
FindFirstFileW
RemoveDirectoryW
SetFileAttributesW
FindNextFileW
FindClose
CopyFileW
GetDiskFreeSpaceExW
GetTickCount
GetSystemDirectoryW
MoveFileExW
DeleteFileW
InterlockedCompareExchange
CreateMutexW
GetLastError
GetCommandLineW
CreateEventW
GetNativeSystemInfo
GetCurrentThreadId
GetUserDefaultUILanguage
FreeResource
QueryPerformanceCounter
QueryPerformanceFrequency
ReadFile
SetFilePointer
SystemTimeToFileTime
CreateDirectoryW
GetCurrentDirectoryW
LocalFileTimeToFileTime
InterlockedIncrement
InterlockedDecrement
ExitProcess
lstrlenA
OpenProcess
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
OutputDebugStringA
Sleep
TerminateProcess
GlobalMemoryStatus
GetVersion
GetModuleHandleA
SetEnvironmentVariableA
CompareStringW
SetEndOfFile
WriteConsoleW
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
SetConsoleCtrlHandler
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapCreate
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetLocaleInfoW
GetStdHandle
GetTimeZoneInformation
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
LCMapStringW
GetDateFormatA
GetTimeFormatA
RtlUnwind
GetStartupInfoW
HeapSetInformation
InterlockedExchange
DecodePointer
EncodePointer
RaiseException
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
Process32FirstW
HeapAlloc
HeapDestroy
GetFileSizeEx
CreateDirectoryA
CreateFileA
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
Process32NextW
CreateToolhelp32Snapshot
GetModuleFileNameW
GetVersionExW
GetSystemInfo
FreeLibrary
GetProcAddress
LoadLibraryW
GetComputerNameExW
CloseHandle
CreateThread
LoadLibraryA
FlushConsoleInputBuffer
ReadConsoleInputA
SetConsoleMode
lstrlenW

user32

GetCursorPos
MessageBoxA
GetProcessWindowStation
GetUserObjectInformationW
GetMessageW
PostThreadMessageW
wsprintfW
FindWindowW
SendMessageW
PostQuitMessage
IsWindow
CreateWindowExW
SetFocus
SetWindowTextW
ShowWindow
MoveWindow
SetCursor
LoadCursorW
EnableWindow
MessageBoxW
GetClassInfoExW
HideCaret
GetFocus
ShowCaret
GetSysColor
CreateCaret
SetCaretPos
SystemParametersInfoW
GetDC
ReleaseDC
GetSystemMetrics
SetRectEmpty
SetTimer
KillTimer
DrawTextW
DrawFocusRect
PostMessageW
ClientToScreen
SetWindowRgn
ScreenToClient
SetActiveWindow
LoadImageW
SetCapture
IsZoomed
GetKeyState
IsWindowEnabled
TranslateMessage
OffsetRect
BringWindowToTop
PeekMessageW
GetDesktopWindow
IntersectRect
GetActiveWindow
ReleaseCapture
MapWindowPoints
UpdateWindow
CallWindowProcW
GetWindow
DispatchMessageW
GetParent
PtInRect
GetWindowRect
EndPaint
UpdateLayeredWindow
GetClientRect
BeginPaint
MonitorFromWindow
GetMonitorInfoW
SetWindowPos
DestroyWindow
InvalidateRect
DefWindowProcW
GetWindowLongW
SetWindowLongW
RegisterClassExW

gdi32

SetBkMode
CreateFontIndirectW
ExtSelectClipRgn
GetTextColor
BitBlt
SetBkColor
SetRectRgn
CombineRgn
GetDeviceCaps
SetTextColor
GetObjectW
SelectClipRgn
CreateCompatibleBitmap
OffsetRgn
CreateRectRgn
DeleteDC
DeleteObject
SelectObject
CreateDIBSection
CreateCompatibleDC
ExtTextOutW
CreateRectRgnIndirect
GetClipBox

shell32

ord165
SHGetSpecialFolderPathW
ShellExecuteW
SHBrowseForFolderW
SHGetMalloc
SHGetPathFromIDListW

ole32

CoCreateInstance
CoInitialize
OleInitialize
CoUninitialize
CoCreateGuid

oleaut32

SysFreeString

comctl32

_TrackMouseEvent
ord17

msimg32

AlphaBlend
GradientFill

riched20

ord4

winhttp

WinHttpAddRequestHeaders
WinHttpReadData
WinHttpReceiveResponse
WinHttpOpenRequest
WinHttpOpen
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpCloseHandle
WinHttpCrackUrl
WinHttpSendRequest
WinHttpSetTimeouts
WinHttpConnect

Sections

.text
Size: 890KB - Virtual size: 890KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 269KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23.4MB - Virtual size: 23.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e85b12050fc2730f3bc0656bd996ea30

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

advapi32

kernel32

user32

gdi32

shell32

ole32

oleaut32

comctl32

msimg32

riched20

winhttp

Sections

.text Size: 890KB - Virtual size: 890KB

.rdata Size: 269KB - Virtual size: 269KB

.data Size: 14KB - Virtual size: 33KB

.rsrc Size: 23.4MB - Virtual size: 23.4MB

.reloc Size: 116KB - Virtual size: 116KB

.text
Size: 890KB - Virtual size: 890KB

.rdata
Size: 269KB - Virtual size: 269KB

.data
Size: 14KB - Virtual size: 33KB

.rsrc
Size: 23.4MB - Virtual size: 23.4MB

.reloc
Size: 116KB - Virtual size: 116KB