56ce0af330f29c95dfc1842252efd63de4b0dd9041a596c80c4a373681eeddbf

Sharing

Copy URL Twitter E-mail

General

Target

56ce0af330f29c95dfc1842252efd63de4b0dd9041a596c80c4a373681eeddbf
Size

14.8MB
MD5

4da41ec359c21cadd9eedc58596b94a9
SHA1

b5f4a35232e326e23600c22a79a1c70d09de4e07
SHA256

56ce0af330f29c95dfc1842252efd63de4b0dd9041a596c80c4a373681eeddbf
SHA512

934c8c8db6895877866e0dc5ac6d2aeae7279a1781c9c0cf69171e3fc47d7cb2d42a39c85711e2593c3b855d27d6e7247f7b7bc4ea1bd19e6a0a4778648f42bd
SSDEEP

393216:gFFGdqBn+GpvDlzxV2NraeWMf9EHZVRicxDCoYbRQqHrq:fSn+cb7TQ96RTebQqH+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56ce0af330f29c95dfc1842252efd63de4b0dd9041a596c80c4a373681eeddbf

Files

56ce0af330f29c95dfc1842252efd63de4b0dd9041a596c80c4a373681eeddbf
.exe windows:4 windows x86

dc53de5b2956cb2b6f10d424fa85b322

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeZoneInformation
GetACP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
LCMapStringA
HeapReAlloc
VirtualAlloc
IsBadWritePtr
GetDriveTypeA
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapSize
GetProfileStringA
InterlockedExchange
TerminateProcess
HeapFree
HeapAlloc
RaiseException
ExitProcess
GetCommandLineA
RtlUnwind
GetFileTime
GetFileSize
GetFileAttributesA
GetTickCount
GetFullPathNameA
GetVolumeInformationA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetThreadLocale
SizeofResource
GetCurrentDirectoryA
WritePrivateProfileStringA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalFlags
lstrcpynA
MulDiv
GlobalUnlock
GlobalFree
CloseHandle
GetModuleFileNameA
GlobalLock
GlobalAlloc
lstrcmpA
GetCurrentThread
FormatMessageA
LocalFree
FindNextFileA
FindFirstFileA
SetLastError
FindClose
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
FreeLibrary
FindResourceA
LoadResource
LockResource
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
lstrlenA
lstrcatA
LoadLibraryA
GetProcAddress
GetLastError
Sleep
WideCharToMultiByte
GetLogicalDriveStringsA
GetStartupInfoA
DeleteFileA
CopyFileA
LCMapStringW
MoveFileA

user32

CharUpperA
RegisterClipboardFormatA
PostThreadMessageA
PostQuitMessage
DestroyMenu
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
PostMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetActiveWindow
IsWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
IsWindowVisible
GetTopWindow
MessageBoxA
IsChild
GetParent
GetCapture
CopyAcceleratorTableA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetNextDlgGroupItem
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
SendMessageA
TrackPopupMenu
TranslateMessage
GetSubMenu
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
GetForegroundWindow
SetForegroundWindow
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
CopyRect
GetDC
InvalidateRect
MessageBeep
ReleaseDC
wsprintfA
IsIconic
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
SetMenu
LoadIconA
GetSystemMetrics
GetSysColor
EnableWindow
DefDlgProcA
IsWindowUnicode
LoadMenuA
GetWindowRect
CharNextA
GetSysColorBrush
LoadCursorA
GetDesktopWindow
PtInRect
GetClassNameA
InflateRect
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
LoadStringA
MapDialogRect
SetWindowContextHelpId
EndDialog
CreateDialogIndirectParamA
GetMessageA
GetClassLongA
SetRect
GetActiveWindow
ValidateRect
GetCursorPos
WinHelpA
SetCursor

gdi32

SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteObject
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
DPtoLP
GetTextColor
GetBkColor
LPtoDP
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateDIBitmap
GetTextExtentPointA
BitBlt
CreateCompatibleDC
PatBlt

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey

shell32

SHGetFileInfoA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ExtractIconA

comctl32

ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_Destroy
ImageList_Create
ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoRegisterMessageFilter
CLSIDFromString
CLSIDFromProgID
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoTaskMemAlloc

olepro32

ord253

oleaut32

VariantCopy
VariantClear
SysAllocStringLen
SysFreeString
VariantChangeType
SysAllocString
SysAllocStringByteLen
SysStringLen
VariantTimeToSystemTime

wininet

FtpGetFileSize
InternetReadFile
FtpOpenFileA
InternetConnectA
InternetOpenA
InternetCloseHandle
InternetCrackUrlA

Sections

.text
Size: 168KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14.6MB - Virtual size: 14.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dc53de5b2956cb2b6f10d424fa85b322

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wininet

Sections

.text Size: 168KB - Virtual size: 165KB

.rdata Size: 44KB - Virtual size: 42KB

.data Size: 20KB - Virtual size: 35KB

.rsrc Size: 14.6MB - Virtual size: 14.6MB

.text
Size: 168KB - Virtual size: 165KB

.rdata
Size: 44KB - Virtual size: 42KB

.data
Size: 20KB - Virtual size: 35KB

.rsrc
Size: 14.6MB - Virtual size: 14.6MB