21db43bc3337db1bd9198fce8e4c2411c35e1a55b79f9eab01af824290a295bd

Sharing

Copy URL

Twitter E-mail

General

Target

21db43bc3337db1bd9198fce8e4c2411c35e1a55b79f9eab01af824290a295bd
Size

860KB
MD5

49f261431e2c7f0aca719d459a7d5027
SHA1

c21d453a7668b07c3b241b2185268c3d1a0288a4
SHA256

21db43bc3337db1bd9198fce8e4c2411c35e1a55b79f9eab01af824290a295bd
SHA512

05053a906750d64fa5efdf49e77e2430afc374b91ea5b29d862b4d42c388412a9225877a11be570842b4721b41e7b2e0163cb8e4db9542742d25451cda9a3665
SSDEEP

12288:2cqVT4ZHKbtgKmdkvqTp8tq0mWWbW/cNNgIIKrQGfgDiFV:1+NvqTp8tq/DEUWIQB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21db43bc3337db1bd9198fce8e4c2411c35e1a55b79f9eab01af824290a295bd

Files

21db43bc3337db1bd9198fce8e4c2411c35e1a55b79f9eab01af824290a295bd
.exe windows:4 windows x86

9b98bdb56194f315d18a70a4d8472464

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetCommandLineA
CreateThread
ExitThread
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetACP
HeapSize
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
RaiseException
GetStdHandle
GetFileType
CompareStringA
CompareStringW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
RtlUnwind
HeapReAlloc
HeapAlloc
HeapFree
GetProfileStringA
GetTickCount
SetErrorMode
GetOEMCP
GetCPInfo
GlobalFlags
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileTime
GetFileSize
GetFileAttributesA
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
DuplicateHandle
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
MulDiv
SetLastError
GlobalFree
WideCharToMultiByte
InterlockedIncrement
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
CreateEventA
SuspendThread
GetCurrentThreadId
SetThreadPriority
ResumeThread
SetEvent
SetFileAttributesA
InterlockedDecrement
lstrlenA
lstrcpynA
BeginUpdateResourceA
UpdateResourceA
EndUpdateResourceA
GetSystemDirectoryA
GetWindowsDirectoryA
DeleteFileA
MultiByteToWideChar
ExitProcess
GetDiskFreeSpaceA
TerminateProcess
FormatMessageA
LocalFree
LoadLibraryA
OpenProcess
Sleep
GetTempPathA
FindFirstFileA
FindClose
CreateDirectoryA
GetCurrentDirectoryA
WritePrivateProfileStringA
GetModuleHandleA
GetProcAddress
GetSystemInfo
GetVersionExA
GetModuleFileNameA
SetCurrentDirectoryA
GetPrivateProfileIntA
GetPrivateProfileStringA
SetThreadLocale
CreateProcessA
WaitForSingleObject
CopyFileA
GetCurrentProcess
GetLastError
GlobalAlloc
GlobalLock
GlobalUnlock
LoadLibraryExA
FreeLibrary
FindResourceA
LoadResource
LockResource
SizeofResource
lstrcpyA
WriteFile
CreateFileA
ReadFile
CloseHandle
SetHandleCount
SetFilePointer

user32

MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
CharNextA
PtInRect
GetClassNameA
GetDesktopWindow
GetSysColorBrush
LoadCursorA
CharUpperA
DestroyMenu
LoadStringA
MoveWindow
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
MapWindowPoints
GetSysColor
AdjustWindowRectEx
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetMenuItemID
GetWindowTextLengthA
GetDlgCtrlID
DefWindowProcA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
CopyRect
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
ReleaseDC
GetDC
MessageBoxA
CreateIconFromResource
CreateIconFromResourceEx
UnregisterClassA
HideCaret
ShowCaret
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetParent
GetLastActivePopup
PostThreadMessageA
RegisterClipboardFormatA
GetSubMenu
IsWindowEnabled
GetWindowLongA
SetCursor
PostQuitMessage
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
LookupIconIdFromDirectory
GetClassLongA
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetClipboardData
ExitWindowsEx
GetSystemMetrics
DrawIcon
AppendMenuA
SendMessageA
GetSystemMenu
IsIconic
GetClientRect
EnableWindow
LoadIconA
SetFocus
EndDialog
GetWindowTextA
GetDlgItem
SetWindowLongA
CreateWindowExA
ScreenToClient
GetWindowRect
ShowWindow
SetWindowTextA
SetTimer
LoadBitmapA
UpdateWindow
InvalidateRect
PostMessageA
GrayStringA
InflateRect
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA

gdi32

GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
IntersectClipRect
Escape
DeleteObject
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetTextColor
SetBkMode
SetBkColor
RestoreDC
SaveDC
PatBlt
CreateBitmap
GetTextExtentPoint32A
Rectangle
CreateFontIndirectA
GetObjectA
CreateFontA
CreateSolidBrush
CreateHalftonePalette
GetPaletteEntries
GetStockObject
CreateDIBSection
CreateCompatibleDC
SelectObject
SetDIBColorTable
BitBlt
SetStretchBltMode
GetTextExtentPointA
CreateDIBitmap
StretchBlt
DeleteDC
GdiFlush
GetClipBox

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

LookupPrivilegeValueA
OpenProcessToken
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegSetValueA
AdjustTokenPrivileges
RegCreateKeyA

shell32

SHGetFileInfoA
SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA

comctl32

ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
OleRun
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
CoInitialize
CoUninitialize
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoTaskMemAlloc

olepro32

ord253

oleaut32

SysAllocStringLen
VariantClear
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysAllocString
SysAllocStringByteLen
SysStringLen
GetErrorInfo
SysFreeString

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

setupapi

SetupCopyOEMInfA

Sections

.text
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 544KB - Virtual size: 543KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9b98bdb56194f315d18a70a4d8472464

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

version

setupapi

Sections

.text Size: 240KB - Virtual size: 239KB

.rdata Size: 52KB - Virtual size: 50KB

.data Size: 20KB - Virtual size: 38KB

.rsrc Size: 544KB - Virtual size: 543KB

.text
Size: 240KB - Virtual size: 239KB

.rdata
Size: 52KB - Virtual size: 50KB

.data
Size: 20KB - Virtual size: 38KB

.rsrc
Size: 544KB - Virtual size: 543KB