1ed62c22dac3eb60df246a61b3c8940fd4ddd9cf83639f2549f949ca58ff9fe5

Sharing

Copy URL

Twitter E-mail

General

Target

1ed62c22dac3eb60df246a61b3c8940fd4ddd9cf83639f2549f949ca58ff9fe5
Size

4.5MB
MD5

ff50e72312fd03ffd41cfed6df5e6334
SHA1

4844341313e5f8a826b75361b25bb48fecb2fdf5
SHA256

1ed62c22dac3eb60df246a61b3c8940fd4ddd9cf83639f2549f949ca58ff9fe5
SHA512

a3070a50bc53bfc68a9bd30e3e41d4f77ec7513541d08b2505162f0feaab73b2229fa7b3fa5ec684c77d8baa7c60dfb19dd1c0b08be639b83a0452bb7d5dd519
SSDEEP

98304:ChK+FIalRsru9yLYVeZ22lmJOvjvV0SmF53FLOAkGkzdnEVomFHKnP:Co+nSZ2aJ0SmF53FLOyomFHKnP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ed62c22dac3eb60df246a61b3c8940fd4ddd9cf83639f2549f949ca58ff9fe5

Files

1ed62c22dac3eb60df246a61b3c8940fd4ddd9cf83639f2549f949ca58ff9fe5
.exe windows:6 windows x86

845f564db7c1b000ac0c7900b8a10b61

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
SetStdHandle
HeapQueryInformation
VirtualQuery
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
GetCommandLineW
GetCommandLineA
PeekNamedPipe
GetFileType
RtlUnwind
OpenEventA
ReleaseSemaphore
ResetEvent
AreFileApisANSI
GetCPInfo
CompareStringEx
LCMapStringEx
GetLocaleInfoEx
ReadConsoleW
VirtualFree
VirtualAlloc
GetFileInformationByHandle
UnmapViewOfFile
GetACP
FindNextFileW
GetTimeFormatW
SetFilePointerEx
DeviceIoControl
GetDriveTypeW
FreeResource
GetStdHandle
RemoveDirectoryW
CreateDirectoryW
WaitForSingleObjectEx
QueryPerformanceFrequency
GetSystemInfo
RaiseException
OutputDebugStringW
GetDateFormatW
LCMapStringW
EnumSystemLocalesW
IsValidLocale
GetTimeZoneInformation
GetConsoleOutputCP
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
WriteConsoleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SleepConditionVariableSRW
GetConsoleMode
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
SystemTimeToTzSpecificLocalTime
SetFileAttributesW
LocalFileTimeToFileTime
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
SetErrorMode
GetWindowsDirectoryW
FindResourceExW
SearchPathW
GetProfileIntW
GetTempPathW
GetUserDefaultLCID
SetFileTime
GetTempFileNameW
GetFileTime
lstrcmpiW
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
FormatMessageA
GetVolumeInformationW
GetFullPathNameW
FlushFileBuffers
FindFirstFileW
FindClose
DeleteFileW
VerifyVersionInfoW
VerSetConditionMask
GetThreadLocale
SystemTimeToFileTime
FileTimeToSystemTime
VirtualProtect
GlobalFlags
GetSystemDefaultUILanguage
GetLocaleInfoW
LocalReAlloc
LocalAlloc
GlobalHandle
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GlobalGetAtomNameW
GlobalReAlloc
GetFileSize
GetFileAttributesW
CreateFileW
GetCurrentDirectoryW
InitializeCriticalSectionAndSpinCount
ResumeThread
SuspendThread
SetThreadPriority
CreateEventW
WaitForSingleObject
lstrcpyW
GetTickCount64
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
CompareStringA
lstrcmpA
GetVersionExW
GetCurrentThread
GetCurrentProcessId
CopyFileW
GlobalFree
GlobalSize
GlobalAlloc
MulDiv
GlobalLock
GlobalUnlock
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryW
LoadLibraryA
LoadLibraryExW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
SetLastError
EncodePointer
OutputDebugStringA
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionEx
HeapFree
Sleep
SetThreadUILanguage
SetThreadLocale
GetUserDefaultLangID
GetUserDefaultUILanguage
MultiByteToWideChar
GetDiskFreeSpaceExW
GlobalMemoryStatusEx
FindResourceW
LoadResource
LockResource
SizeofResource
CreateEventA
SetEvent
LeaveCriticalSection
EnterCriticalSection
CloseHandle
LocalFree
WideCharToMultiByte
FormatMessageW
GetStringTypeW

user32

GetMessageW
MonitorFromPoint
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
MapDialogRect
SetWindowContextHelpId
RegisterClipboardFormatW
SystemParametersInfoW
MessageBeep
IsZoomed
PostQuitMessage
OffsetRect
GetWindowRect
InflateRect
GetSysColor
EnableWindow
SendMessageW
EnumChildWindows
InvalidateRect
GetPropW
EnumWindows
GetLastActivePopup
PostMessageW
SetForegroundWindow
UpdateWindow
IsChild
DrawTextW
SetTimer
KillTimer
TabbedTextOutW
DrawTextExW
GrayStringW
SetCursor
LoadBitmapW
SetRectEmpty
IntersectRect
UnionRect
IsRectEmpty
GetWindowLongW
GetDesktopWindow
GetWindow
wsprintfW
ExitWindowsEx
GetTopWindow
IsWindowVisible
GetParent
LoadMenuW
GetSubMenu
GetMenuItemCount
LockWindowUpdate
ModifyMenuW
GetAsyncKeyState
SetPropW
LoadImageW
GetSystemMetrics
RedrawWindow
IsMenu
AppendMenuW
GetCursorPos
ScreenToClient
PtInRect
UnregisterClassW
RegisterWindowMessageW
DispatchMessageW
PeekMessageW
GetMessagePos
GetMessageTime
DefWindowProcW
CallWindowProcW
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
IsWindow
SetCapture
SetWindowPos
TranslateMessage
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
SendDlgItemMessageA
IsIconic
GetDlgItem
GetDlgCtrlID
SetFocus
GetFocus
DrawEdge
GetSysColorBrush
DrawFocusRect
DrawIconEx
SetRect
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
GetUpdateRect
RealChildWindowFromPoint
SetLayeredWindowAttributes
EnumDisplayMonitors
GetMenuDefaultItem
SetMenuDefaultItem
PostThreadMessageW
WaitMessage
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableW
CopyAcceleratorTableW
CharNextW
InvalidateRgn
GetNextDlgGroupItem
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsClipboardFormatAvailable
FrameRect
SetCursorPos
CharUpperBuffW
CopyIcon
GetComboBoxInfo
SubtractRect
GetDoubleClickTime
GetKeyState
GetCapture
GetMenu
SetMenu
TrackPopupMenu
EnableMenuItem
SetActiveWindow
GetForegroundWindow
BeginPaint
EndPaint
ValidateRect
ScrollWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
RemovePropW
GetWindowTextW
GetWindowTextLengthW
AdjustWindowRectEx
MessageBoxW
MapWindowPoints
CopyRect
EqualRect
SetWindowLongW
GetClassLongW
GetClassNameW
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
LoadIconW
SetScrollInfo
GetScrollInfo
WinHelpW
MonitorFromWindow
GetMonitorInfoW
GetKeyNameTextW
MapVirtualKeyW
GetDC
ReleaseDC
ShowWindow
MoveWindow
CheckDlgButton
HideCaret
InvertRect
IsCharLowerW
MapVirtualKeyExW
DrawStateW
RemoveMenu
InsertMenuW
GetMenuState
EndDeferWindowPos
GetWindowThreadProcessId
CreateMenu
GetWindowRgn
ReleaseCapture
DrawIcon
GetWindowPlacement
ShowOwnedPopups
GetClientRect
LoadCursorW
BringWindowToTop
GetIconInfo
CopyImage
DestroyIcon
SetWindowRgn
DestroyMenu
GetMenuItemInfoW
DestroyAcceleratorTable
CreatePopupMenu
WindowFromPoint
SetClassLongW
SetParent
NotifyWinEvent
UpdateLayeredWindow
EnableScrollBar
TrackMouseEvent
CharUpperW
GetSystemMenu
DeleteMenu
DrawFrameControl
OpenClipboard
CloseClipboard
SetClipboardData
DestroyWindow
EmptyClipboard
IsWindowEnabled
SetWindowTextW
IsDialogMessageW
GetWindowDC
DestroyCursor
GetMenuItemID
ClientToScreen
FillRect
GetMenuStringW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
CheckMenuItem
SetMenuItemBitmaps

gdi32

ExtTextOutW
TextOutW
RectVisible
PtVisible
Polyline
BitBlt
GetBkColor
DPtoLP
GetMapMode
CreateCompatibleBitmap
LPtoDP
CreateCompatibleDC
CreateSolidBrush
MoveToEx
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
CreateFontIndirectW
SetRectRgn
CopyMetaFileW
CreateDCW
GetTextExtentPoint32W
CreateEllipticRgn
Ellipse
CreateDIBSection
CreateRoundRectRgn
GetDIBits
RealizePalette
SelectObject
StretchBlt
SetDIBColorTable
GetTextMetricsW
GetTextColor
CreatePolygonRgn
Polygon
Rectangle
RoundRect
CreateDIBitmap
GetTextCharsetInfo
GetRgnBox
OffsetRgn
CreatePalette
GetPaletteEntries
EnumFontFamiliesExW
Escape
GetSystemPaletteEntries
GetWindowOrgEx
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetViewportOrgEx
ExtFloodFill
SetPaletteEntries
GetTextFaceW
SetPixelV
GetCurrentObject
DeleteDC
SetBkColor
SetTextColor
GetObjectW
CreateRectRgnIndirect
CreateBitmap
CreateHatchBrush
CreatePen
CreatePatternBrush
CreateRectRgn
DeleteObject
ExcludeClipRect
GetClipBox
GetDeviceCaps
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
GetNearestPaletteIndex
PatBlt
GetCharWidth32W
SetROP2
SetTextAlign
SetPixel
EnumFontFamiliesW

msimg32

AlphaBlend
TransparentBlt

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

SetSecurityDescriptorDacl
RegCloseKey
RegEnumKeyExW
OpenProcessToken
ImpersonateSelf
LookupPrivilegeValueW
AdjustTokenPrivileges
InitializeSecurityDescriptor
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW

shell32

SHGetFileInfoW
SHGetDesktopFolder
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
SHAppBarMessage
DragFinish
DragQueryFileW
ShellExecuteW

comctl32

ImageList_AddMasked
ImageList_Draw
InitCommonControlsEx

shlwapi

PathFindExtensionW
PathFindFileNameW
StrFormatKBSizeW
PathStripToRootW
PathIsUNCW
PathRemoveFileSpecW

uxtheme

GetWindowTheme
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
GetCurrentThemeName
IsAppThemed
DrawThemeParentBackground
DrawThemeText
GetThemeSysColor

ole32

OleGetClipboard
DoDragDrop
OleLockRunning
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoGetClassObject
CoInitializeEx
CoDisconnectObject
CreateStreamOnHGlobal
CLSIDFromString
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoInitialize
CoCreateGuid
CoUninitialize
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
OleTranslateAccelerator
IsAccelerator
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
CLSIDFromProgID

oleaut32

OleCreateFontIndirect
LoadTypeLi
VarBstrFromDate
VariantCopy
SysAllocStringLen
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocString
SysFreeString
VariantChangeType
VariantClear
VariantInit

oledlg

OleUIBusyW

gdiplus

GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdipFree
GdipAlloc
GdiplusShutdown
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipGetImagePixelFormat
GdipCreateBitmapFromHBITMAP
GdiplusStartup

ws2_32

WSACleanup
WSAStartup

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

setupapi

SetupCloseInfFile
SetupTermDefaultQueueCallback
SetupInstallServicesFromInfSectionW
SetupDefaultQueueCallbackW
SetupInstallFromInfSectionW
SetupInitDefaultQueueCallback
SetupOpenInfFileW
InstallHinfSectionW

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 494KB - Virtual size: 493KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 178KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

845f564db7c1b000ac0c7900b8a10b61

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

ws2_32

oleacc

imm32

winmm

setupapi

Sections

.text Size: 2.2MB - Virtual size: 2.2MB

.rdata Size: 494KB - Virtual size: 493KB

.data Size: 41KB - Virtual size: 59KB

.rsrc Size: 1.6MB - Virtual size: 1.6MB

.reloc Size: 178KB - Virtual size: 177KB

.text
Size: 2.2MB - Virtual size: 2.2MB

.rdata
Size: 494KB - Virtual size: 493KB

.data
Size: 41KB - Virtual size: 59KB

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

.reloc
Size: 178KB - Virtual size: 177KB