bc8ffe61ec614e56361f756dd161699a3130bf8037a804b193771fa0090b1ba2

Sharing

Copy URL

Twitter E-mail

General

Target

bc8ffe61ec614e56361f756dd161699a3130bf8037a804b193771fa0090b1ba2
Size

2.1MB
MD5

803acc641ff51d3a8b86d140a6c5bbe0
SHA1

8a34d5d278241d0db5c558b43841b5b7c7902884
SHA256

bc8ffe61ec614e56361f756dd161699a3130bf8037a804b193771fa0090b1ba2
SHA512

e54711b5adbe9a2317c7967e5a6f126c64d8e6a04aff05d7c24cb71562c7b4fb15ec36bddcc3d1bde9af86ffcf252d3c3100bdfbe28c277e7ba62343094371a9
SSDEEP

49152:I/syjOujHFBRWcwy7WOW5teXxaTXNuGL:I/DB/HTXx6L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc8ffe61ec614e56361f756dd161699a3130bf8037a804b193771fa0090b1ba2

Files

bc8ffe61ec614e56361f756dd161699a3130bf8037a804b193771fa0090b1ba2
.exe windows:6 windows x64

fcac26fec8c3b67e730c3c9cc7648805

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

SetEndOfFile
WriteConsoleW
HeapSize
GetTimeZoneInformation
GetCurrentDirectoryW
FlushFileBuffers
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
GetFileSizeEx
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
SetFilePointerEx
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
HeapAlloc
HeapFree
HeapReAlloc
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileType
GetFileInformationByHandle
GetDriveTypeW
GetStdHandle
ExitProcess
GetCommandLineW
FreeLibraryAndExitThread
ResumeThread
ExitThread
SizeofResource
RtlUnwind
LoadLibraryExW
TlsFree
InitializeCriticalSectionAndSpinCount
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
GetCPInfo
LCMapStringEx
DecodePointer
EncodePointer
InitializeCriticalSectionEx
CompareStringEx
GetStringTypeW
FindClose
FindNextFileA
FindFirstFileA
QueryPerformanceFrequency
GetModuleFileNameA
GetModuleHandleA
TlsSetValue
TlsGetValue
TlsAlloc
GetCurrentThread
Sleep
CreateMutexA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DuplicateHandle
SetFilePointer
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleW
GetFullPathNameW
GetFileAttributesW
VerifyVersionInfoW
WideCharToMultiByte
VerSetConditionMask
MultiByteToWideChar
GlobalUnlock
OpenMutexW
FreeLibrary
GlobalLock
GetProcAddress
FindResourceW
LoadResource
LoadLibraryW
GlobalFree
DeleteFileW
GlobalAlloc
LockResource
GetLastError
FreeResource
GetModuleHandleExW
CreateDirectoryW
SetEvent
CreateEventW
ReleaseMutex
CreateMutexW
MulDiv
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetFileSize
CreateFileW
WriteFile
WaitForSingleObject
ReadFile
SetFileAttributesW
GetModuleFileNameW
GetCurrentThreadId
CloseHandle
TerminateThread
CreateThread

user32

SetDlgItemInt
DrawTextW
GetDlgItemInt
SetCursor
SetCapture
LoadCursorW
TrackPopupMenu
LoadStringW
DestroyMenu
ClientToScreen
SetWindowTextW
FillRect
GetWindowRect
GetSystemMetrics
SetWindowPos
GetWindowTextW
PtInRect
DrawMenuBar
GetAsyncKeyState
InsertMenuW
GetSubMenu
CreateWindowExW
SetWindowLongPtrW
GetMenuItemCount
GetMenu
GetMenuItemID
CallWindowProcW
RegisterHotKey
UnregisterHotKey
EndPaint
BeginPaint
GetCursorPos
IsIconic
UpdateWindow
ReleaseCapture
InvalidateRect
ReleaseDC
GetDC
EnableMenuItem
SetForegroundWindow
RegisterWindowMessageW
GetClassInfoExW
CreateMenu
EnableWindow
DialogBoxParamW
GetDlgItem
SetFocus
GetDlgItemTextW
SetDlgItemTextW
CreatePopupMenu
GetParent
PostMessageW
SendMessageW
ShowWindow
GetWindowPlacement
SystemParametersInfoW
GetWindowThreadProcessId
GetMessageW
DefWindowProcW
AdjustWindowRectEx
DestroyWindow
IsWindowVisible
MonitorFromWindow
MessageBoxExW
DeleteMenu
ScreenToClient
CallNextHookEx
SetMenuItemBitmaps
GetWindowLongPtrW
RegisterClassExW
PostQuitMessage
LoadAcceleratorsW
IsWindow
DispatchMessageW
SetTimer
IsDialogMessageW
GetMonitorInfoW
SetWindowPlacement
AttachThreadInput
GetForegroundWindow
AdjustWindowRect
SetMenu
UnhookWindowsHookEx
EnumWindows
SetLayeredWindowAttributes
TranslateAcceleratorW
TranslateMessage
LoadIconW
GetClassNameW
SetWindowsHookExW
RemoveMenu
GetClientRect
AppendMenuW
GetMenuItemRect
UpdateLayeredWindow
SetRect
KillTimer
EndDialog

gdi32

GetStockObject
SetDCBrushColor
CreateDIBSection
TextOutW
GetTextExtentPoint32W
SetBkColor
BitBlt
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
GetPixel
DeleteDC
SetTextColor
SetBkMode
DeleteObject
CreateSolidBrush
CreateFontIndirectW
CreateFontW
GetDeviceCaps
GetObjectW

comdlg32

FindTextW
ChooseColorW
ChooseFontW
GetOpenFileNameW
GetSaveFileNameW

shell32

DragQueryFileW
CommandLineToArgvW
DragFinish
Shell_NotifyIconW
ShellExecuteW

ole32

CoCreateInstance
CreateStreamOnHGlobal
CoUninitialize
StringFromGUID2
CoInitialize

gdiplus

GdipSetImageAttributesWrapMode
GdipFree
GdipCreateImageAttributes
GdipDeleteGraphics
GdipGetImageWidth
GdipCreateBitmapFromScan0
GdipGetImageGraphicsContext
GdiplusStartup
GdiplusShutdown
GdipSetImageAttributesColorMatrix
GdipImageGetFrameDimensionsCount
GdipGetPropertyItem
GdipImageSelectActiveFrame
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipGetPropertyItemSize
GdipCreateFromHDC
GdipDrawImageRectRectI
GdipCreateBitmapFromStream
GdipGetImageHeight
GdipDrawImageRectRect
GdipCloneImage
GdipAlloc
GdipDisposeImageAttributes
GdipDisposeImage
GdipSetInterpolationMode
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromFile

msimg32

AlphaBlend

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

crypt32

CertEnumCertificatesInStore
CertOpenSystemStoreA
CertCloseStore

ws2_32

recv
select
inet_pton
freeaddrinfo
getaddrinfo
WSAGetLastError
WSACleanup
WSAStartup
socket
closesocket
send
shutdown
htons
ioctlsocket
connect

shlwapi

PathFindFileNameW
ord12
PathFindExtensionW
PathFileExistsW
PathRemoveExtensionW

comctl32

ord412
CreateStatusWindowW
ord17
ord413
ord410

advapi32

CryptGenRandom
CryptReleaseContext
CryptAcquireContextW

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 310KB - Virtual size: 309KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 199KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 206KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fcac26fec8c3b67e730c3c9cc7648805

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

shell32

ole32

gdiplus

msimg32

version

crypt32

ws2_32

shlwapi

comctl32

advapi32

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 310KB - Virtual size: 309KB

.data Size: 199KB - Virtual size: 280KB

.pdata Size: 61KB - Virtual size: 61KB

_RDATA Size: 512B - Virtual size: 348B

.rsrc Size: 206KB - Virtual size: 205KB

.reloc Size: 10KB - Virtual size: 9KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 310KB - Virtual size: 309KB

.data
Size: 199KB - Virtual size: 280KB

.pdata
Size: 61KB - Virtual size: 61KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 206KB - Virtual size: 205KB

.reloc
Size: 10KB - Virtual size: 9KB