ecf7b2eb800c3446176929944dab29986c67e37286292c51f00f76bb8f65b8e6

Sharing

Copy URL Twitter E-mail

General

Target

ecf7b2eb800c3446176929944dab29986c67e37286292c51f00f76bb8f65b8e6
Size

3.4MB
MD5

c7c015fafb443c6c3096208e47be1487
SHA1

470762f8e897ebef33d32e81acb88d71e90eb90d
SHA256

ecf7b2eb800c3446176929944dab29986c67e37286292c51f00f76bb8f65b8e6
SHA512

b0d61c7e326ed13de6c082a2192dde0c15aa83560c841caefb34cf92bd52a5317e4d2e6313c44ea159d192644ac1aca644223ec9ad80726da99cc8964a8f30d6
SSDEEP

98304:WBGgqYl18LaBkfT9TFKxEh7lQouJRP9PFLOAkGkzdnEVomFHKnP:WBxqo18L/JfQouJRPlFLOyomFHKnP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ecf7b2eb800c3446176929944dab29986c67e37286292c51f00f76bb8f65b8e6

Files

ecf7b2eb800c3446176929944dab29986c67e37286292c51f00f76bb8f65b8e6
.exe windows:5 windows x86

f22367fe41ecdfc0833ba436fb5bc01b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
CompareStringW
GetStdHandle
ExitProcess
GetFileType
SetStdHandle
QueryPerformanceFrequency
GetTimeZoneInformation
SetFilePointerEx
GetCommandLineA
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
VirtualQuery
VirtualAlloc
RtlUnwind
OutputDebugStringW
GetStringTypeW
GetConsoleCP
GetConsoleMode
HeapQueryInformation
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
CreateEventW
WaitForSingleObjectEx
ResetEvent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetTempFileNameA
SearchPathA
GetProfileIntA
GetTempPathA
GetTickCount
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExA
FileTimeToLocalFileTime
SetErrorMode
FindResourceExW
GetWindowsDirectoryA
GetVolumeInformationA
lstrcmpiA
GetCurrentProcess
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
FlushFileBuffers
FindFirstFileA
FindClose
GetFileSize
GetFileAttributesA
VerifyVersionInfoA
lstrcpyA
VerSetConditionMask
GetCPInfo
GetOEMCP
VirtualProtect
GetSystemDefaultUILanguage
GetLocaleInfoW
GetThreadLocale
FileTimeToSystemTime
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GlobalFlags
GetACP
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpA
GetCurrentThread
ResumeThread
SuspendThread
SetThreadPriority
CreateEventA
WaitForSingleObject
SetEvent
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
lstrcmpW
GlobalDeleteAtom
LoadLibraryA
LoadLibraryExW
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
GetCurrentProcessId
MultiByteToWideChar
MulDiv
GlobalSize
GlobalAlloc
FindResourceA
GlobalFree
GlobalUnlock
GlobalLock
LoadLibraryW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
FreeResource
SetLastError
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
HeapFree
GetLocalTime
LocalFree
GetLastError
FormatMessageA
CopyFileA
DeleteFileA
GetVersionExA
GetNativeSystemInfo
GetSystemInfo
CloseHandle
WideCharToMultiByte
WriteFile
CreateFileA
GetModuleFileNameA
GetCurrentDirectoryA
Sleep
OutputDebugStringA
GetUserDefaultUILanguage
FindResourceW
LoadResource
LockResource
SizeofResource
GetCommandLineW
CreateFileW

user32

ReleaseCapture
SetCapture
WaitMessage
GetAsyncKeyState
CopyImage
IntersectRect
LoadCursorA
RealChildWindowFromPoint
SetRectEmpty
MapVirtualKeyA
GetKeyNameTextA
SystemParametersInfoA
GetMenuItemInfoA
DestroyMenu
InvalidateRect
SetCursor
ShowOwnedPopups
DrawIconEx
IsRectEmpty
OffsetRect
InflateRect
DrawFocusRect
GetSysColorBrush
SetWindowRgn
DrawStateA
DrawFrameControl
DrawEdge
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
GetCursorPos
TranslateMessage
GetMessageA
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconA
CallNextHookEx
SetWindowsHookExA
GetTopWindow
GetClassNameA
GetClassLongA
PtInRect
EqualRect
MapWindowPoints
AdjustWindowRectEx
GetWindowRect
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
ScrollWindow
RedrawWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
UpdateWindow
TrackPopupMenu
WindowFromPoint
GetMenu
GetCapture
GetKeyState
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
IsMenu
CreateWindowExA
GetClassInfoExA
LockWindowUpdate
RegisterClassA
CallWindowProcA
DefWindowProcA
NotifyWinEvent
GetMessageTime
GetMessagePos
PeekMessageA
DispatchMessageA
RegisterWindowMessageA
UnhookWindowsHookEx
IsDialogMessageA
SetWindowLongA
GetFocus
GetDlgCtrlID
SendDlgItemMessageA
CheckDlgButton
EnableScrollBar
GetDoubleClickTime
GetIconInfo
CopyRect
LoadBitmapW
SendMessageA
SetTimer
KillTimer
SetWindowTextA
FindWindowA
FindWindowExA
EnableWindow
UnregisterClassA
LoadIconW
GetSystemMenu
SetWindowPos
MoveWindow
ShowWindow
GetWindow
GetWindowTextLengthA
GetWindowTextA
GetScrollPos
SetScrollPos
SetFocus
GetLastActivePopup
GetWindowThreadProcessId
MessageBoxA
FillRect
GetSysColor
ScreenToClient
LoadCursorW
DeleteMenu
CharNextA
CopyAcceleratorTableA
InvalidateRgn
SetRect
GetNextDlgGroupItem
MessageBeep
SetLayeredWindowAttributes
EnumDisplayMonitors
SetParent
MonitorFromPoint
OpenClipboard
CloseClipboard
ClientToScreen
EndPaint
SetClipboardData
EmptyClipboard
DestroyIcon
LoadImageA
LoadImageW
TrackMouseEvent
IsZoomed
CharUpperA
SetMenu
AppendMenuA
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
IsWindow
DestroyWindow
CreateDialogIndirectParamA
EndDialog
GetDlgItem
GetNextDlgTabItem
GetActiveWindow
IsWindowEnabled
SetActiveWindow
GetWindowLongA
GetDesktopWindow
GetParent
GetMenuStringA
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuA
RemoveMenu
DrawTextA
DrawTextExA
GrayStringA
TabbedTextOutA
GetDC
GetWindowDC
ReleaseDC
BeginPaint
CopyIcon
GetMenuDefaultItem
SetMenuDefaultItem
ModifyMenuA
LoadMenuW
SetCursorPos
UnionRect
BringWindowToTop
PostMessageA
CreatePopupMenu
GetWindowRgn
DestroyCursor
CreateMenu
InvertRect
HideCaret
GetComboBoxInfo
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
DrawMenuBar
MapVirtualKeyExA
IsCharLowerA
PostThreadMessageA
IsClipboardFormatAvailable
FrameRect
CharUpperBuffA
SubtractRect
CreateAcceleratorTableA
LoadAcceleratorsW
ToAsciiEx
GetKeyboardState
GetKeyboardLayout
RegisterClipboardFormatA
ReuseDDElParam
UnpackDDElParam
InsertMenuItemA
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
UpdateLayeredWindow
GetUpdateRect
SetClassLongA
GetClassInfoA
DestroyAcceleratorTable

gdi32

DeleteObject
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
MoveToEx
TextOutA
ExtTextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
CreateRectRgn
CreateRectRgnIndirect
Ellipse
GetBkColor
GetTextColor
GetTextExtentPoint32A
PatBlt
CreatePolygonRgn
Polygon
Polyline
GetTextMetricsA
CreateFontIndirectA
GetMapMode
SetRectRgn
DPtoLP
GetRgnBox
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
RealizePalette
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateRoundRectRgn
Rectangle
OffsetRgn
RoundRect
CreatePalette
GetPaletteEntries
EnumFontFamiliesExA
GetNearestPaletteIndex
GetSystemPaletteEntries
LPtoDP
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
SetPixelV
GetTextFaceA
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateBitmap
CopyMetaFileA
CreateSolidBrush
DeleteDC
EndDoc
EndPage
BitBlt
StartPage
StartDocA
CreateDCA
CreateCompatibleDC
GetObjectA
CreateEllipticRgn
GetDeviceCaps
CreateFontA

msimg32

TransparentBlt
AlphaBlend

winspool.drv

AddPrinterA
AddPrinterDriverA
GetPrinterDriverDirectoryA
DocumentPropertiesA
ClosePrinter
OpenPrinterA
ord202
EnumPrintersA

advapi32

RegDeleteValueA
RegEnumValueA
RegEnumKeyExA
RegQueryValueA
RegSetValueExA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegEnumKeyA
RegCloseKey

shell32

SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHGetDesktopFolder
SHAppBarMessage
SHGetFileInfoA
DragFinish
DragQueryFileA
ShellExecuteA

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameA
PathFileExistsA
PathStripToRootA
StrFormatKBSizeA
PathRemoveFileSpecW
PathIsUNCA
PathFindExtensionA

uxtheme

GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
GetWindowTheme
DrawThemeParentBackground
DrawThemeText
IsAppThemed
GetCurrentThemeName
GetThemeColor
DrawThemeBackground
CloseThemeData
OpenThemeData

ole32

OleInitialize
OleUninitialize
OleFlushClipboard
OleIsCurrentClipboard
DoDragDrop
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleLockRunning
CoInitializeEx
CoUninitialize
CoRevokeClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CoInitialize
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
CoCreateGuid
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
OleTranslateAccelerator
IsAccelerator

oleaut32

SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
VarBstrFromDate
OleCreateFontIndirect
SysAllocString
SysAllocStringByteLen
LoadTypeLi
VariantChangeType
VariantClear
SysAllocStringLen
VariantInit
SysFreeString

oledlg

ord8

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

setupapi

SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundA

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 324KB - Virtual size: 323KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f22367fe41ecdfc0833ba436fb5bc01b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

version

setupapi

oleacc

imm32

winmm

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 324KB - Virtual size: 323KB

.data Size: 22KB - Virtual size: 44KB

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.reloc Size: 139KB - Virtual size: 138KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 324KB - Virtual size: 323KB

.data
Size: 22KB - Virtual size: 44KB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

.reloc
Size: 139KB - Virtual size: 138KB