5012437e23c124fb1694c3f8a74d48eb0e16a48af50e223b02466e0160f0795c

Sharing

Copy URL Twitter E-mail

General

Target

5012437e23c124fb1694c3f8a74d48eb0e16a48af50e223b02466e0160f0795c
Size

652KB
MD5

3e517ae9adf247040620c4dc29862a08
SHA1

a1d588dd66687ba2741ea32b075332f9f382096a
SHA256

5012437e23c124fb1694c3f8a74d48eb0e16a48af50e223b02466e0160f0795c
SHA512

4f350f168442cb0528daa3cdf9db387f646004767c4389ca41511c817076fcb0a3b65d1a948fbbff9846db994d7e462524c3d62e98693db47bdf0f577ba49bdd
SSDEEP

12288:aYGouxNa4jl/h1jrpmhLOnRnd4uC7qaUWw0ac:aY0Nx/h1P4EndS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5012437e23c124fb1694c3f8a74d48eb0e16a48af50e223b02466e0160f0795c

Files

5012437e23c124fb1694c3f8a74d48eb0e16a48af50e223b02466e0160f0795c
.exe windows:5 windows x86

1c92f4f8a9918499d97eca839ee0a4b9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
InitializeCriticalSectionAndSpinCount
GetACP
IsValidCodePage
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
HeapCreate
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
GetPrivateProfileStringA
lstrcatA
GetConsoleMode
GetConsoleCP
HeapSize
CreateThread
ExitThread
HeapReAlloc
VirtualAlloc
GetCommandLineA
GetDriveTypeA
GetFileInformationByHandle
ExpandEnvironmentStringsA
WaitForMultipleObjects
PeekNamedPipe
GetSystemDirectoryA
VerSetConditionMask
VerifyVersionInfoA
SleepEx
HeapAlloc
HeapFree
GetTickCount
GetTempPathA
FreeConsole
InterlockedDecrement
SizeofResource
LockResource
LoadResource
FindResourceA
WideCharToMultiByte
LoadLibraryA
GetModuleHandleA
GetProcAddress
SetLastError
GetLastError
LocalAlloc
lstrlenA
FormatMessageA
FindClose
FindFirstFileA
CloseHandle
CreateFileA
SetFilePointer
ReadFile
SystemTimeToFileTime
lstrcpyA
LocalFileTimeToFileTime
CreateDirectoryA
GetFileAttributesA
GetCurrentDirectoryA
SetFileTime
WriteFile
MulDiv
MultiByteToWideChar
LocalFree
GlobalUnlock
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RaiseException
RtlUnwind
ExitProcess
Sleep
FileTimeToLocalFileTime
GetCurrentProcess
SetEndOfFile
FlushFileBuffers
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
InterlockedIncrement
GetModuleHandleW
FileTimeToSystemTime
GetFullPathNameA
GetCurrentProcessId
WaitForSingleObject
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetModuleFileNameA
GetLocaleInfoA
InterlockedExchange
lstrcmpA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
FreeLibrary
lstrcmpW
GetVersionExA
FreeResource
GlobalFree
GlobalAlloc
GlobalLock
DeleteFileA

user32

PostThreadMessageA
GetSysColorBrush
DestroyMenu
LoadCursorA
EndPaint
BeginPaint
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetWindowThreadProcessId
SetCursor
GetMessageA
TranslateMessage
GetCursorPos
ValidateRect
PostQuitMessage
ShowWindow
SetWindowTextA
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
EnableWindow
wsprintfA
LoadBitmapA
GetWindowRect
GetClientRect
GetKeyState
SetMenu
SetForegroundWindow
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
GetDC
SendMessageA
UpdateWindow
LoadIconA
GetSysColor
IsWindowVisible
GetFocus
PostMessageA
GetParent
CopyRect
GetMenuItemCount
GetMenuItemID
GetSubMenu
ModifyMenuA
ReleaseDC
GetDesktopWindow
GetMenuState
RegisterClipboardFormatA
EndDialog
GetNextDlgTabItem
IsWindowEnabled
GetDlgItem
GetWindowLongA
IsWindow
DestroyWindow
CreateDialogIndirectParamA
SetActiveWindow
GetActiveWindow
GetWindow
GetSystemMetrics
GetWindowPlacement
IsIconic
SystemParametersInfoA
SetWindowPos
SetWindowLongA
GetMenu
PtInRect
CallWindowProcA
DefWindowProcA
GetDlgCtrlID
AdjustWindowRectEx
RegisterClassA

gdi32

SetMapMode
DeleteObject
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetStockObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

CryptGenRandom
CryptEncrypt
CryptDestroyKey
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptAcquireContextA
CryptReleaseContext
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
CryptImportKey

shell32

ShellExecuteA

shlwapi

PathFindExtensionA

oledlg

ord8

ole32

OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleFlushClipboard

oleaut32

VariantInit
VariantChangeType
VariantClear

wldap32

ord22
ord211
ord143
ord60
ord50
ord26
ord30
ord32
ord35
ord79
ord33
ord301
ord27
ord41
ord46
ord200

ws2_32

ntohl
htonl
gethostname
ioctlsocket
listen
accept
recvfrom
sendto
getaddrinfo
freeaddrinfo
connect
socket
closesocket
getpeername
getsockopt
htons
bind
ntohs
getsockname
setsockopt
WSAIoctl
send
recv
select
WSAGetLastError
__WSAFDIsSet
WSASetLastError
WSAStartup
WSACleanup

crypt32

CertFreeCertificateContext

Sections

.text
Size: 408KB - Virtual size: 407KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 145KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1c92f4f8a9918499d97eca839ee0a4b9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

wldap32

ws2_32

crypt32

Sections

.text Size: 408KB - Virtual size: 407KB

.rdata Size: 88KB - Virtual size: 88KB

.data Size: 9KB - Virtual size: 25KB

.rsrc Size: 145KB - Virtual size: 148KB

.text
Size: 408KB - Virtual size: 407KB

.rdata
Size: 88KB - Virtual size: 88KB

.data
Size: 9KB - Virtual size: 25KB

.rsrc
Size: 145KB - Virtual size: 148KB