471ac1172bfb67f51d65d6c4314277e49f33215afd70af095de4801036438187

Sharing

Copy URL Twitter E-mail

General

Target

471ac1172bfb67f51d65d6c4314277e49f33215afd70af095de4801036438187
Size

3.5MB
MD5

9680752a1f7cbf954747c3189a002ed3
SHA1

8986b9b9168ad370b4e9b32da9cc1016bf82bd42
SHA256

471ac1172bfb67f51d65d6c4314277e49f33215afd70af095de4801036438187
SHA512

4c38e3562a512f53a4e8655ec7f8bcf41663d2e130ea4b5c52fc28ac50029f9910f3de0d78e31cc29ebc0c46d5363808623f6710c1bff5b22322faeb279fb735
SSDEEP

49152:CjFH+VxR+LPc3ZoZ5/haSm3CB68xkn9vEuLgzGBobUIH:e5+VWqe0Sm3C1Sn9cuL9obn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
471ac1172bfb67f51d65d6c4314277e49f33215afd70af095de4801036438187

Files

471ac1172bfb67f51d65d6c4314277e49f33215afd70af095de4801036438187
.exe windows:4 windows x86

ca2450f88d61b1d1a860f9f3ac33b297

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mpr

WNetConnectionDialog

kernel32

FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
GetEnvironmentStrings
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetEnvironmentStringsW
GetStringTypeA
GetLocaleInfoA
HeapCreate
GetUserDefaultLCID
GetVersionExA
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetConsoleCtrlHandler
GetLocaleInfoW
GetCommTimeouts
SetCommTimeouts
WriteFile
CloseHandle
CreateProcessA
LoadLibraryA
GetProcAddress
IsBadWritePtr
SetHandleCount
FindFirstFileA
FindClose
ReleaseMutex
GetVersion
SetCurrentDirectoryA
GetCommandLineA
CreateMutexA
GetSystemDefaultLangID
SetUnhandledExceptionFilter
LockResource
GetLastError
GetThreadPriority
GlobalMemoryStatus
WritePrivateProfileStringA
GetWindowsDirectoryA
GetPrivateProfileStringA
lstrlenA
GetLocalTime
GlobalSize
GlobalFree
GlobalLock
GlobalUnlock
VirtualAlloc
EnumResourceNamesA
FindResourceA
LoadResource
GlobalAlloc
lstrcpyA
SetThreadPriority
InterlockedExchange
HeapDestroy
LCMapStringW
LCMapStringA
FatalAppExitA
HeapSize
SetStdHandle
HeapReAlloc
GetACP
GetSystemTime
GetStartupInfoA
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetFileType
PeekNamedPipe
GetFileInformationByHandle
TerminateProcess
ExitProcess
RaiseException
RtlUnwind
SetFileAttributesA
LocalFileTimeToFileTime
GetOEMCP
GetCPInfo
GlobalFlags
GetProcessVersion
GetProfileIntA
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
GetCurrentThread
GetPrivateProfileIntA
lstrlenW
CreateEventA
SuspendThread
ResumeThread
SetEvent
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
UnlockFile
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
GetModuleFileNameA
GetFileTime
SetFileTime
GetFullPathNameA
GetTempFileNameA
FormatMessageA
VirtualProtect
lstrcmpA
lstrcpynA
SetLastError
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
ReleaseSemaphore
OpenSemaphoreA
CreateSemaphoreA
SearchPathA
LocalFree
LocalAlloc
GetModuleHandleA
SetErrorMode
GetEnvironmentVariableA
GetCurrentProcessId
VirtualQuery
GetSystemInfo
GetTickCount
SystemTimeToFileTime
LoadLibraryExA
MoveFileA
CopyFileA
GetDiskFreeSpaceA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentDirectoryA
GetDriveTypeA
GetFileAttributesA
CreateDirectoryA
SizeofResource
GetFileSize
ReadFile
SetFilePointer
SetEndOfFile
FindFirstChangeNotificationA
WaitForMultipleObjects
FindCloseChangeNotification
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetTempPathA
WinExec
MulDiv
GlobalReAlloc
VirtualFree
FindNextFileA
HeapAlloc
GetProcessHeap
HeapFree
CreateThread
WaitForSingleObject
Sleep
ExitThread
DeviceIoControl
DeleteFileA
RemoveDirectoryA
CreateFileA
FreeLibrary
Beep
IsValidLocale
IsValidCodePage
EnumSystemLocalesA

user32

OemToCharA
CharToOemA
GetMenuCheckMarkDimensions
ModifyMenuA
SetMenuItemBitmaps
MoveWindow
wvsprintfA
SetWindowTextA
IsDialogMessageA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SendDlgItemMessageA
MapWindowPoints
DispatchMessageA
AdjustWindowRectEx
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
GetTopWindow
IsChild
WinHelpA
RegisterClassA
GetMenuItemID
SetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
IsIconic
GetWindowPlacement
EndDialog
CreateDialogIndirectParamA
IsWindowEnabled
GetDlgCtrlID
GetDoubleClickTime
SetCursorPos
GetNextDlgTabItem
SetCaretPos
GetCaretPos
GetWindow
GetDlgItem
MapDialogRect
SetWindowPos
ShowWindow
InsertMenuA
GetMenuItemInfoA
InsertMenuItemA
DefFrameProcA
DlgDirListA
PostThreadMessageA
GetMenuStringA
GetSubMenu
TranslateMDISysAccel
GetWindowDC
GetClipboardData
CloseClipboard
GetClassNameA
GetMenuItemCount
GetMenuItemRect
SetRectEmpty
GetSysColorBrush
EnableMenuItem
IsWindowVisible
PeekMessageA
GetCapture
InvertRect
PostMessageA
GetMessagePos
IsClipboardFormatAvailable
GrayStringA
TabbedTextOutA
GetClassInfoA
DefWindowProcA
DrawEdge
SystemParametersInfoA
LoadStringA
LockWindowUpdate
LoadIconA
ShowScrollBar
GetSystemMetrics
wsprintfA
SetClassLongA
GetMenu
GetMenuState
CheckMenuItem
WindowFromPoint
GetCursorPos
GetKeyState
IntersectRect
SubtractRect
EqualRect
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
SetRect
SetActiveWindow
GetActiveWindow
MessageBoxA
SetFocus
LoadBitmapA
CopyRect
LoadAcceleratorsA
GetDesktopWindow
GetTabbedTextExtentA
DestroyIcon
GetWindowThreadProcessId
WaitMessage
RemoveMenu
GetDCEx
GetDialogBaseUnits
MsgWaitForMultipleObjects
DrawFocusRect
OffsetRect
DrawTextA
UpdateWindow
GetUpdateRect
IsRectEmpty
GetAsyncKeyState
InvalidateRect
KillTimer
SetTimer
SetScrollRange
GetScrollPos
GetScrollRange
SetScrollPos
SetCursor
DefMDIChildProcA
TranslateAcceleratorA
DrawMenuBar
BringWindowToTop
RedrawWindow
OpenClipboard
DlgDirSelectExA
GetSystemMenu
ClipCursor
LoadCursorA
IsWindow
GetParent
BeginPaint
EndPaint
MessageBeep
GetFocus
GetDC
FrameRect
ReleaseDC
SendMessageA
ReleaseCapture
GetClientRect
ClientToScreen
ScreenToClient
GetWindowRect
PtInRect
SetCapture
GetSysColor
FillRect
InflateRect
EnableWindow
SetParent
DestroyCursor
FindWindowA
ShowOwnedPopups
PostQuitMessage
DeleteMenu
GetMessageA
TranslateMessage
ValidateRect
CharUpperA
UnpackDDElParam
ReuseDDElParam
SetMenu
LoadMenuA
DestroyMenu
CreatePopupMenu
AppendMenuA
GetWindowLongA
DestroyWindow
TrackPopupMenu
UnregisterClassA

gdi32

FillRgn
RealizePalette
CreateCompatibleDC
AnimatePalette
GetPaletteEntries
CreateFontIndirectA
EnumFontFamiliesExA
StrokePath
EndPath
BeginPath
Polyline
SetDIBitsToDevice
Arc
CreateSolidBrush
SetPixel
GetPixel
GetObjectA
StretchDIBits
SetStretchBltMode
SelectPalette
CreatePalette
StretchBlt
GetDeviceCaps
GetTextMetricsA
CreateRectRgn
DeleteEnhMetaFile
EnumEnhMetaFile
GetEnhMetaFileA
GetStockObject
GetCurrentPositionEx
AbortDoc
EndDoc
EndPage
StartPage
DPtoLP
StartDocA
GetTextColor
SetAbortProc
CreateDCA
GetCharABCWidthsFloatA
GetCurrentObject
CreateFontA
DeleteObject
GetBkColor
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreatePen
GetWindowOrgEx
SetPaletteEntries
PatBlt
GetBitmapBits
SetBitmapBits
CreateBitmap
GetTextExtentPoint32A
CreatePolygonRgn
Ellipse
GetGlyphOutlineA
GetDCOrgEx
GetClipBox
SetTextColor
SetBkColor
DeleteDC
SaveDC
RestoreDC
SelectObject
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
GetClipRgn
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
GetViewportExtEx
GetWindowExtEx
ExtCreatePen
CreateHatchBrush
CreatePatternBrush
CreateDIBPatternBrushPt
GetMapMode
SetRectRgn
CombineRgn
CreateRectRgnIndirect
LPtoDP
Rectangle
GetViewportOrgEx
GetCharWidthA
CopyMetaFileA
GetNearestColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
BitBlt
CreateCompatibleBitmap
FrameRgn

comdlg32

GetFileTitleA
CommDlgExtendedError
GetSaveFileNameA
GetOpenFileNameA
PageSetupDlgA
PrintDlgA
ChooseFontA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegOpenKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueA
RegEnumKeyA
RegSetValueA

shell32

DragQueryFileA
DragFinish
SHGetFileInfoA
SHFileOperationA
ShellExecuteA
DragAcceptFiles
ExtractIconA

comctl32

ImageList_BeginDrag
ord17
ImageList_DragMove
ImageList_DragEnter
ImageList_SetDragCursorImage
ImageList_DragShowNolock
ImageList_DragLeave
ImageList_EndDrag
ImageList_Draw
ImageList_GetImageInfo
ImageList_AddMasked
ImageList_Merge
ord13
ord14
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
ImageList_Read
ImageList_Write
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA

ole32

RevokeDragDrop
CoLockObjectExternal
OleDuplicateData
RegisterDragDrop
DoDragDrop
OleGetClipboard
ReadClassStg
ReadFmtUserTypeStg
CreateBindCtx
CoTaskMemAlloc
ReleaseStgMedium
CoCreateInstance
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoDisconnectObject
CoTreatAsClass
StringFromCLSID
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
OleRegGetUserType
OleSetClipboard
CoTaskMemFree
OleIsCurrentClipboard
OleFlushClipboard

oleaut32

SafeArrayGetUBound
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
VariantClear
SafeArrayRedim
VariantCopy
SysAllocString
SysAllocStringByteLen
VariantChangeType
SysStringByteLen
VarCyFromStr
VarBstrFromCy
VarDateFromStr
VarBstrFromDate
SafeArrayCopy
SafeArrayUnlock
SafeArrayAllocDescriptor
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayAllocData
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SysStringLen

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

CONST
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 240KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ca2450f88d61b1d1a860f9f3ac33b297

Headers

File Characteristics

Imports

mpr

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

ole32

oleaut32

Sections

.text Size: 2.1MB - Virtual size: 2.1MB

CONST Size: 4KB - Virtual size: 4KB

.rdata Size: 240KB - Virtual size: 240KB

.data Size: 88KB - Virtual size: 1.7MB

.rsrc Size: 1.1MB - Virtual size: 1.1MB

.tc Size: 244KB - Virtual size: 244KB

.text
Size: 2.1MB - Virtual size: 2.1MB

CONST
Size: 4KB - Virtual size: 4KB

.rdata
Size: 240KB - Virtual size: 240KB

.data
Size: 88KB - Virtual size: 1.7MB

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

.tc
Size: 244KB - Virtual size: 244KB