290f6fef2c84fa41ab5bc9cab1aecb6e5290f1a3e3df8d0112c6480e7e0b44bd

Sharing

Copy URL Twitter E-mail

General

Target

290f6fef2c84fa41ab5bc9cab1aecb6e5290f1a3e3df8d0112c6480e7e0b44bd
Size

500KB
MD5

138d36fa9406bb47ebe2f5257e32dd65
SHA1

bc7711a7e6c2195570276f4323f4d569453b3d29
SHA256

290f6fef2c84fa41ab5bc9cab1aecb6e5290f1a3e3df8d0112c6480e7e0b44bd
SHA512

60a1d1c9012fb0e3c12d406e8c20a324696c93975b330a448725313aea8abff02f78c3c368be6432aa3bfd8f6527333801e073d35acb1e66ae3e02173c7a4e12
SSDEEP

6144:ZixBgxAwE0/dWmVOp0uptcuQwffyQ6lMGtun8ZZoAF5/uXjByY+y27:UTwE0gc2dpGVwfaQ6GG42ZF/uzAY+F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
290f6fef2c84fa41ab5bc9cab1aecb6e5290f1a3e3df8d0112c6480e7e0b44bd

Files

290f6fef2c84fa41ab5bc9cab1aecb6e5290f1a3e3df8d0112c6480e7e0b44bd
.dll windows:4 windows x86

48d7b215f48faa402cefb27d280163d6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
FreeEnvironmentStringsA
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapCreate
lstrcpyA
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
IsBadWritePtr
GetACP
HeapSize
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RaiseException
GetCommandLineA
TerminateProcess
ExitProcess
HeapFree
HeapAlloc
HeapReAlloc
RtlUnwind
GetTickCount
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
GetCurrentProcess
DuplicateHandle
GetThreadLocale
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GetProcessVersion
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
GetLastError
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFullPathNameA
GetTempFileNameA
GetFileAttributesA
GetCurrentThread
GlobalFree
FormatMessageA
LocalFree
GlobalReAlloc
lstrcpynA
lstrcmpA
MulDiv
SetLastError
FindResourceA
LoadResource
LockResource
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
GlobalAlloc
GlobalLock
GlobalUnlock
GetModuleFileNameA
Sleep
CreateFileA
WriteFile
CloseHandle
FreeLibrary
VirtualFree
VirtualAlloc
LoadLibraryA
GetProcAddress
GetProcessHeap
SetStdHandle

user32

GetMessageA
TranslateMessage
GetActiveWindow
ValidateRect
GetDesktopWindow
DestroyMenu
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
PostMessageA
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
SetActiveWindow
SetFocus
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
WindowFromPoint
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
MessageBoxA
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetMenuItemID
TrackPopupMenu
UnpackDDElParam
GetWindowTextLengthA
GetWindowTextA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
SetMenu
SetPropA
UnhookWindowsHookEx
GetPropA
GetCursorPos
SendMessageA
InvalidateRect
GetParent
GetSubMenu
LoadMenuA
EnableWindow
MessageBeep
GetClientRect
SetWindowLongA
SetCursor
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
GetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
CreateDialogIndirectParamA
EndDialog
SetRectEmpty
GetScrollRange
TranslateAcceleratorA
GetWindowPlacement
GetSystemMetrics
GetDlgCtrlID
IsIconic
GetFocus
IsChild
AdjustWindowRectEx
FillRect
SetCapture
RedrawWindow
ReleaseCapture
PtInRect
IsWindow
GetSysColor
InflateRect
ReleaseDC
GetDC
GetWindowRect
LoadIconA
LoadBitmapA
AnimateWindow
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetKeyState
UpdateWindow
LoadCursorA
SetTimer
BringWindowToTop
IsZoomed
SetCursorPos
DestroyCursor
PostQuitMessage
ShowOwnedPopups
SetWindowContextHelpId
MapDialogRect
SetRect
LoadStringA
GetSysColorBrush
GetClassNameA
KillTimer
GetClassLongA
ReuseDDElParam
FindWindowA
PostThreadMessageA
SetParent
RegisterClipboardFormatA
LockWindowUpdate
GetDCEx
GetTabbedTextExtentA
CharUpperA
GetNextDlgGroupItem
CopyAcceleratorTableA
CharNextA
GetDlgItem
LoadAcceleratorsA

gdi32

GetViewportExtEx
GetWindowExtEx
CreatePen
CreateSolidBrush
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
PatBlt
CreateRectRgnIndirect
StretchDIBits
CreateCompatibleBitmap
GetCharWidthA
GetTextMetricsA
Rectangle
DPtoLP
GetDeviceCaps
AbortDoc
EndDoc
EndPage
StartPage
SetAbortProc
CreateDCA
GetMapMode
SetRectRgn
CombineRgn
LPtoDP
GetTextColor
GetBkColor
GetNearestColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
GetWindowOrgEx
CreateRectRgn
DeleteObject
GetCurrentPositionEx
SetTextAlign
LineTo
MoveToEx
GetViewportOrgEx
GetStockObject
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SelectObject
RestoreDC
SaveDC
StartDocA
DeleteDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
CreateCompatibleDC
BitBlt
GetTextExtentPoint32A
GetObjectA
CreateFontIndirectA
IntersectClipRect

comdlg32

GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA
CommDlgExtendedError
PrintDlgA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegOpenKeyExA
SetFileSecurityA
GetFileSecurityA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

shell32

DragQueryFileA
DragFinish

comctl32

ord17
ImageList_Destroy

oledlg

ord8

ole32

CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

VariantChangeType
SysAllocStringByteLen
SysAllocString
VariantCopy
VariantClear
SysAllocStringLen
SysFreeString
VariantTimeToSystemTime
SysStringLen

odbc32

ord10
ord5
ord16
ord61
ord13
ord18
ord11
ord3
ord14
ord9
ord15
ord51
ord45
ord50
ord1
ord2
ord41
ord68
ord12
ord46
ord19
ord44
ord8
ord59
ord20
ord49
ord48
ord4
ord72
ord17

Exports

Exports

SetCOMProfile
WSCreateInstance

Sections

.text
Size: 240KB - Virtual size: 238KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 144KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

48d7b215f48faa402cefb27d280163d6

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

odbc32

Exports

Exports

Sections

.text Size: 240KB - Virtual size: 238KB

.rdata Size: 64KB - Virtual size: 61KB

.data Size: 144KB - Virtual size: 157KB

.rsrc Size: 12KB - Virtual size: 11KB

.reloc Size: 36KB - Virtual size: 33KB

.text
Size: 240KB - Virtual size: 238KB

.rdata
Size: 64KB - Virtual size: 61KB

.data
Size: 144KB - Virtual size: 157KB

.rsrc
Size: 12KB - Virtual size: 11KB

.reloc
Size: 36KB - Virtual size: 33KB