1ba1b89d14fd577eb818b7e0426a9117f8290ec9b7a32f512b4fbdc0e824a430

Sharing

Copy URL Twitter E-mail

General

Target

1ba1b89d14fd577eb818b7e0426a9117f8290ec9b7a32f512b4fbdc0e824a430
Size

1.6MB
MD5

14efa0468c717e9a6274630d6335ef41
SHA1

88e6c7b026d8390dfbacc7384df53056b52d27d7
SHA256

1ba1b89d14fd577eb818b7e0426a9117f8290ec9b7a32f512b4fbdc0e824a430
SHA512

60611d08b977020ba7ce2ee63ad6a771581fddc4b96de61da68509e9ea4405c121b4ca52e4f9746a950d6369b0a4c4aae627b91fff69bd566a849c7a3532be39
SSDEEP

24576:E5Rk4iC+jeM2SYAgdu7VV5yZYgXVyKFgckTP5tIk54k4u3HJVqNEg5NE:EVeJ5ydMTP5t7Ou3HJVqNb5N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ba1b89d14fd577eb818b7e0426a9117f8290ec9b7a32f512b4fbdc0e824a430

Files

1ba1b89d14fd577eb818b7e0426a9117f8290ec9b7a32f512b4fbdc0e824a430
.exe windows:4 windows x86

c92a51d0b7c7a85139f663a6a4c49e88

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringW
CompareStringA
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
GetVersionExA
GetEnvironmentVariableA
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
HeapSize
HeapReAlloc
GetACP
GetLocalTime
GetSystemTime
GetTimeZoneInformation
GetFileType
SetStdHandle
CreateThread
RaiseException
GetCommandLineA
GetStartupInfoA
TerminateProcess
SetEnvironmentVariableA
RtlUnwind
CopyFileA
SetErrorMode
GetFileTime
GetFileSize
GetOEMCP
GetCPInfo
GetProcessVersion
SizeofResource
GlobalFlags
TlsGetValue
GetProfileIntA
LocalSize
GetTickCount
EnumResourceLanguagesA
EnumResourceNamesA
EnumResourceTypesA
OpenProcess
LoadLibraryExW
LoadLibraryExA
LoadLibraryW
VirtualQuery
VirtualProtect
GetSystemInfo
GetTimeFormatA
GetDateFormatA
GetTempPathA
GetCurrentProcessId
ExitProcess
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
lstrlenW
FileTimeToLocalFileTime
FileTimeToSystemTime
MulDiv
SetLastError
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetModuleFileNameA
GetShortPathNameA
GetThreadLocale
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
SetEndOfFile
UnlockFile
LockFile
CloseHandle
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetLastError
FormatMessageA
LocalFree
WideCharToMultiByte
lstrlenA
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
GlobalFree
LockResource
FindResourceA
LoadResource
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
GetModuleHandleA
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
InterlockedDecrement
InterlockedIncrement
GetFileAttributesA
GlobalSize
MultiByteToWideChar
GlobalAlloc
GlobalUnlock
GlobalLock

user32

EnableMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
SetDlgItemTextA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
CharUpperA
SetCursor
GetCursorPos
ValidateRect
GetSysColor
PeekMessageA
TranslateMessage
GetMessageA
ClientToScreen
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetClipboardData
IsClipboardFormatAvailable
EnableWindow
RegisterWindowMessageA
GetSystemMetrics
IsRectEmpty
SetRectEmpty
IsWindow
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
LoadStringA
DestroyMenu
LoadCursorA
SetCapture
ReleaseCapture
GetDesktopWindow
GetWindowThreadProcessId
WindowFromPoint
GetClassNameA
PtInRect
GetSysColorBrush
LoadMenuA
DispatchMessageA
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
DestroyIcon
RegisterClipboardFormatA
SetRect
EnableScrollBar
KillTimer
SetTimer
UnionRect
InvertRect
DrawIconEx
InflateRect
DrawFocusRect
DrawEdge
SendMessageTimeoutA
FillRect
SetWindowLongW
GetWindowLongW
IsWindowUnicode
EnumWindows
CallWindowProcW
DefWindowProcW
DefFrameProcA
DefFrameProcW
DefDlgProcA
DefDlgProcW
DefMDIChildProcA
DefMDIChildProcW
RegisterClassW
DrawFrameControl
DrawStateA
GetDCEx
LockWindowUpdate
CreateIconFromResourceEx
LookupIconIdFromDirectoryEx
LoadImageA
GetIconInfo
GetCursor
SetWindowRgn
mouse_event
CreateIconIndirect
CopyIcon
SetClassLongA
GetDoubleClickTime
SetWindowContextHelpId
MapDialogRect
CharNextA
CopyAcceleratorTableA
GetNextDlgGroupItem
UnregisterClassA
PostThreadMessageA
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
PostQuitMessage
DrawIcon
MessageBoxA
AppendMenuA
PostMessageA
GetParent
InvalidateRect
MessageBeep
LoadIconA
GetFocus
GetKeyState
GetClientRect
GetWindowRect
IsIconic
GetSystemMenu
SendMessageA

gdi32

DeleteObject
GetClipRgn
CreateRectRgn
ExtSelectClipRgn
GetObjectType
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreatePen
CreateSolidBrush
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextExtentPoint32A
GetTextMetricsA
CreateFontIndirectA
CopyMetaFileA
SetTextAlign
LineTo
MoveToEx
IntersectClipRect
ExcludeClipRect
SelectClipRgn
GetTextColor
BitBlt
StretchBlt
CreateCompatibleBitmap
CreateCompatibleDC
Polygon
GetBoundsRect
PatBlt
GetBkColor
SetPixel
Rectangle
GetTextCharsetInfo
GetPixel
CombineRgn
OffsetRgn
CreateDIBSection
CreateRectRgnIndirect
GetBitmapBits
ExtCreateRegion
GetDIBits
CreatePolygonRgn
SetBrushOrgEx
CreatePalette
CreateDIBitmap
GetViewportOrgEx
ExtTextOutW
GetTextExtentPoint32W
Polyline
Ellipse
GetMapMode
DPtoLP
StretchDIBits
LPtoDP
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetBkMode
GetClipBox
SetTextColor
SetBkColor
GetObjectA
CreateBitmap
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SelectPalette

comdlg32

GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueExA

comctl32

ImageList_Draw
ImageList_AddMasked
_TrackMouseEvent
ImageList_Destroy
ImageList_GetIcon
ImageList_GetIconSize
ImageList_DrawEx
ImageList_Add
ImageList_Create
ord17
FlatSB_GetScrollProp
ImageList_GetBkColor
ImageList_DrawIndirect
ImageList_GetImageInfo
ImageList_GetImageCount

ole32

CoTaskMemFree
CoLockObjectExternal
RevokeDragDrop
OleFlushClipboard
OleIsCurrentClipboard
DoDragDrop
OleGetClipboard
CLSIDFromString
CreateStreamOnHGlobal
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
CoTaskMemAlloc
OleDuplicateData
CoCreateInstance
ReleaseStgMedium
CLSIDFromProgID

oleaut32

SysStringLen
VarDateFromStr
SysStringByteLen
VariantChangeType
SysAllocStringByteLen
SysAllocString
VariantCopy
VariantClear
VariantChangeTypeEx
SysFreeString
VariantTimeToSystemTime
SysAllocStringLen

imagehlp

ImageDirectoryEntryToData

oledlg

ord8

olepro32

ord253

Sections

.text
Size: 952KB - Virtual size: 949KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 148KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 500KB - Virtual size: 499KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c92a51d0b7c7a85139f663a6a4c49e88

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

ole32

oleaut32

imagehlp

oledlg

olepro32

Sections

.text Size: 952KB - Virtual size: 949KB

.rdata Size: 148KB - Virtual size: 145KB

.data Size: 72KB - Virtual size: 88KB

.rsrc Size: 500KB - Virtual size: 499KB

.text
Size: 952KB - Virtual size: 949KB

.rdata
Size: 148KB - Virtual size: 145KB

.data
Size: 72KB - Virtual size: 88KB

.rsrc
Size: 500KB - Virtual size: 499KB