6fc16d8a20f44dc9c81c629c220d8ad078d0302f8063df8f174ef59ae5db4686

Sharing

Copy URL

Twitter E-mail

General

Target

6fc16d8a20f44dc9c81c629c220d8ad078d0302f8063df8f174ef59ae5db4686
Size

542KB
MD5

d52979213f26ed3c526198e36124fe92
SHA1

23ce481b1b93ca18a6b28ad177b7b96e69be9cef
SHA256

6fc16d8a20f44dc9c81c629c220d8ad078d0302f8063df8f174ef59ae5db4686
SHA512

9f9010e0e5b8d10b88afc9cc9f20cf47ab0fa5ab9af37ee7f69798ceafc211401a08f3425915a4a51390ba2c978da08602883326ee83f966be0b2bf1584eecc0
SSDEEP

12288:PjFANgp9OL4CI7BdoWAfwu/OXUfZvCOuX/wuQOLNBad8+FgC:PhAup8bfZv/OLNBau+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fc16d8a20f44dc9c81c629c220d8ad078d0302f8063df8f174ef59ae5db4686

Files

6fc16d8a20f44dc9c81c629c220d8ad078d0302f8063df8f174ef59ae5db4686
.exe windows:5 windows x86

67858b2143783ac82f07c869374d2e36

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime

gdiplus

GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipLoadImageFromFile
GdipCloneImage
GdipDisposeImage
GdipGetImageHeight
GdipGetImageWidth
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetSmoothingMode
GdipReleaseDC
GdipDrawImageRectI

kernel32

GlobalFindAtomW
GlobalAddAtomW
GetCurrentThreadId
CompareStringA
GetLocaleInfoW
lstrcmpA
EnumResourceLanguagesW
ConvertDefaultLocale
GetCurrentThread
InterlockedDecrement
GetThreadLocale
LockFile
UnlockFile
DuplicateHandle
GetCurrentProcess
GetVolumeInformationW
GetFullPathNameW
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalAlloc
InterlockedIncrement
GlobalFlags
TlsGetValue
GlobalHandle
TlsAlloc
TlsSetValue
GlobalDeleteAtom
TlsFree
GlobalGetAtomNameW
lstrlenA
GetFileAttributesW
GetFileTime
SetErrorMode
GetTickCount
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
ExitThread
CreateThread
MoveFileA
HeapAlloc
HeapFree
RtlUnwind
HeapReAlloc
HeapSize
SetStdHandle
GetFileType
VirtualProtect
VirtualAlloc
VirtualQuery
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
SetEnvironmentVariableA
GetVersionExW
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
SetLastError
MulDiv
FlushFileBuffers
FreeResource
FreeLibrary
LoadLibraryW
GetFileSizeEx
GetDiskFreeSpaceA
GetModuleHandleA
FindFirstFileW
FindClose
FindFirstFileA
SetEndOfFile
GetFileSize
CreateFileW
SetFilePointer
WriteFile
ReadFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
CreateFileA
GetSystemInfo
GetDiskFreeSpaceW
GetModuleHandleW
GetProcAddress
lstrlenW
MultiByteToWideChar
lstrcpyW
SetFileAttributesA
GetFileAttributesA
CreateDirectoryA
CreateMutexW
CreateProcessW
CopyFileA
GetCurrentProcessId
OpenProcess
WritePrivateProfileStringW
GetPrivateProfileStringW
DeleteFileA
DeleteFileW
WideCharToMultiByte
Sleep
GetExitCodeThread
InterlockedExchange
LeaveCriticalSection
SetEvent
EnterCriticalSection
DeleteCriticalSection
CreateEventW
InitializeCriticalSection
LocalFree
lstrcatW
GetLastError
RaiseException
FormatMessageW
GlobalFree
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
FindResourceW
LoadResource
LockResource
SizeofResource
CopyFileW
GetModuleFileNameW
CloseHandle
WaitForSingleObject
LocalReAlloc

user32

TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
ClientToScreen
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
CharUpperW
IsRectEmpty
SetWindowRgn
SetTimer
KillTimer
LoadCursorW
CharNextW
GetSysColorBrush
InflateRect
GetMenuItemInfoW
DestroyMenu
UnregisterClassW
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
TranslateAcceleratorW
BringWindowToTop
SetRectEmpty
CreatePopupMenu
InsertMenuItemW
LoadAcceleratorsW
ReuseDDElParam
UnpackDDElParam
RegisterClipboardFormatW
PostThreadMessageW
FillRect
GetWindowThreadProcessId
ShowOwnedPopups
SetCursor
GetMessageW
TranslateMessage
ValidateRect
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
EnableMenuItem
CheckMenuItem
ShowWindow
MoveWindow
IsDialogMessageW
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
UpdateWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
LoadMenuW
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
LoadBitmapW
GetDC
SystemParametersInfoW
AdjustWindowRect
SetWindowTextW
GetWindowRect
PtInRect
SetWindowLongW
GetWindowLongW
PostMessageW
wsprintfW
TrackMouseEvent
InvalidateRect
CopyRect
LoadImageW
MessageBoxA
SetRect
GetParent
SetWindowPos
GetCursorPos
ReleaseCapture
SetCapture
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
GetDesktopWindow
LoadIconW
MessageBoxW
EnableWindow
SendMessageW
GetMenuState

gdi32

SetTextColor
SetBkColor
CreateBitmap
SaveDC
RestoreDC
SetBkMode
SetMapMode
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
ExtSelectClipRgn
CreatePatternBrush
GetStockObject
CreateEllipticRgn
LPtoDP
Ellipse
GetBkColor
GetTextColor
GetTextExtentPoint32W
OffsetViewportOrgEx
CreateFontIndirectW
CreateRectRgnIndirect
GetRgnBox
GetMapMode
SetViewportOrgEx
Escape
ExtTextOutW
TextOutW
GetDeviceCaps
CreateSolidBrush
StretchBlt
GetCurrentObject
CreateCompatibleBitmap
CreateFontW
DeleteDC
DeleteObject
BitBlt
SelectObject
CreateDIBSection
RectVisible
PtVisible
GetPixel
GetWindowExtEx
GetViewportExtEx
GetObjectW
CreateCompatibleDC
SetViewportExtEx

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegEnumKeyW
RegOpenKeyExW
RegQueryValueW
RegOpenKeyW
RegCreateKeyExW
RegDeleteKeyW
RegQueryValueExW
RegCloseKey
RegSetValueExW

shell32

DragFinish
DragQueryFileW
ShellExecuteW

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameW
PathStripToRootW
PathIsUNCW
UrlUnescapeW
PathFindExtensionW

oledlg

OleUIBusyW

ole32

CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree

oleaut32

SysFreeString
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SysAllocString
OleCreateFontIndirect
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
VariantCopy
SafeArrayDestroy

ws2_32

gethostbyname
send
WSAGetLastError
connect
htons
inet_addr
recv
select
shutdown
setsockopt
closesocket
ioctlsocket
socket
WSAStartup
WSACleanup

wininet

InternetCanonicalizeUrlW
InternetCrackUrlW

Sections

.text
Size: 395KB - Virtual size: 395KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

67858b2143783ac82f07c869374d2e36

Headers

DLL Characteristics

File Characteristics

Imports

winmm

gdiplus

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

wininet

Sections

.text Size: 395KB - Virtual size: 395KB

.rdata Size: 98KB - Virtual size: 97KB

.data Size: 13KB - Virtual size: 96KB

.rsrc Size: 34KB - Virtual size: 33KB

.text
Size: 395KB - Virtual size: 395KB

.rdata
Size: 98KB - Virtual size: 97KB

.data
Size: 13KB - Virtual size: 96KB

.rsrc
Size: 34KB - Virtual size: 33KB