f00ab3045970d5d5a4f2a6715233864bcb0fa534ec951206e03a1779e6b4d4b0

Sharing

Copy URL Twitter E-mail

General

Target

f00ab3045970d5d5a4f2a6715233864bcb0fa534ec951206e03a1779e6b4d4b0
Size

4.5MB
MD5

b33c318b15acc6d8d5c1db2995ae16e6
SHA1

87ba58066a82743a52941adde9e629b3727ac027
SHA256

f00ab3045970d5d5a4f2a6715233864bcb0fa534ec951206e03a1779e6b4d4b0
SHA512

2a5ef2a270d0439dd689f49e8ba446bd50c3ec63092c03b91ceb398da7f8ef7d899db31494b953716b69b3557cad0f88ccf354b3ccb528ae3fd9630044e015aa
SSDEEP

98304:YIV+JMQzC7I5yxKc/yJqTZsirjfEzkPOjAWE29O3cS:YIVGoAhCsyBWE29O3f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f00ab3045970d5d5a4f2a6715233864bcb0fa534ec951206e03a1779e6b4d4b0

Files

f00ab3045970d5d5a4f2a6715233864bcb0fa534ec951206e03a1779e6b4d4b0
.dll windows:6 windows x86

41fd6c590adf5875b57ce6910aab2e5f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

__WSAFDIsSet
freeaddrinfo
getaddrinfo
inet_ntoa
inet_addr
gethostbyaddr
gethostbyname
getsockname
recv
send
select
accept
listen
bind
setsockopt
ioctlsocket
socket
WSACleanup
WSAStartup
closesocket
shutdown
WSAGetLastError
htons
connect

crypt32

CertGetCertificateContextProperty
CertFreeCertificateContext
CertDuplicateCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertOpenStore
CertCloseStore

kernel32

lstrcmpW
GlobalAddAtomW
GlobalFindAtomW
CompareStringW
GetCurrentThread
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetVolumeInformationW
lstrcmpiW
FileTimeToLocalFileTime
SystemTimeToTzSpecificLocalTime
GetFileSizeEx
LocalAlloc
GlobalReAlloc
GlobalHandle
LocalReAlloc
SetErrorMode
GlobalGetAtomNameW
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GlobalFlags
VirtualProtect
GetCurrentDirectoryW
lstrcpyW
FindResourceExW
GetWindowsDirectoryW
GetProfileIntW
SearchPathW
GetTempFileNameW
GetUserDefaultLCID
GetModuleHandleA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeSListHead
WriteConsoleW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
MoveFileExW
GetConsoleOutputCP
SetFilePointerEx
EnumSystemLocalesW
IsValidLocale
LCMapStringW
GetTimeFormatW
GetDateFormatW
VirtualAlloc
HeapQueryInformation
SetStdHandle
FreeLibraryAndExitThread
ExitThread
CreateThread
GetFileInformationByHandle
GetDriveTypeW
SetConsoleCtrlHandler
ExitProcess
GetCommandLineW
GetCommandLineA
InterlockedFlushSList
RtlUnwind
GetCPInfo
GetStringTypeW
LCMapStringEx
GetSystemDirectoryW
EncodePointer
SuspendThread
SetThreadPriority
GlobalDeleteAtom
lstrcmpA
MulDiv
SizeofResource
LockResource
LoadResource
FindResourceW
MultiByteToWideChar
GetLastError
lstrlenA
lstrlenW
WideCharToMultiByte
GetModuleFileNameA
GetSystemTime
SystemTimeToFileTime
ProcessIdToSessionId
GetCurrentProcessId
GetTickCount
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ResumeThread
GetExitCodeThread
TerminateThread
FindFirstFileW
GlobalLock
FindClose
CreateDirectoryW
GetEnvironmentVariableW
FormatMessageA
LocalFree
OpenProcess
TerminateProcess
CloseHandle
WinExec
GetCurrentThreadId
TlsAlloc
TlsSetValue
TlsGetValue
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
HeapFree
InitializeCriticalSectionAndSpinCount
HeapSize
HeapReAlloc
RaiseException
HeapAlloc
DecodePointer
HeapDestroy
GetProcessHeap
GetLocalTime
MoveFileA
DeleteFileA
FormatMessageW
VerSetConditionMask
VerifyVersionInfoW
GetVersionExW
GetProcAddress
GetModuleHandleW
GetCurrentProcess
GetSystemInfo
DeleteFileW
GlobalAlloc
GlobalFree
CreateFileW
DeviceIoControl
FreeLibrary
WTSGetActiveConsoleSessionId
GetComputerNameW
LoadLibraryExW
LoadLibraryW
GetSystemPowerStatus
GetTimeZoneInformation
GetModuleFileNameW
WaitForSingleObject
WriteFile
QueryPerformanceFrequency
QueryPerformanceCounter
GetLogicalDrives
CreateToolhelp32Snapshot
CopyFileW
GetFileTime
Process32FirstW
Process32NextW
CreateMutexW
GetExitCodeProcess
K32EnumProcesses
K32EnumProcessModules
K32GetModuleFileNameExW
CreatePipe
GetStartupInfoW
CreateProcessW
PeekNamedPipe
ReadFile
DuplicateHandle
FileTimeToSystemTime
VirtualQuery
GetUserDefaultLangID
InitializeCriticalSectionEx
CreateFileMappingW
GetDiskFreeSpaceA
CreateEventW
ResetEvent
SetEvent
CreateFileA
GetComputerNameA
GetModuleHandleExW
SetLastError
TlsFree
GetStdHandle
GetFileType
SwitchToFiber
DeleteFiber
CreateFiber
GetSystemTimeAsFileTime
ConvertFiberToThread
ConvertThreadToFiber
LoadLibraryA
FindNextFileW
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
FlushFileBuffers
GetFileSize
LockFileEx
UnlockFile
HeapCompact
WaitForSingleObjectEx
FlushViewOfFile
OutputDebugStringW
GetFileAttributesExW
GetFileAttributesA
GetTempPathA
HeapValidate
GetFileAttributesW
GetTempPathW
UnlockFileEx
SetEndOfFile
GetFullPathNameA
SetFilePointer
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
GetFullPathNameW
HeapCreate
AreFileApisANSI
TryEnterCriticalSection
GlobalSize
GlobalUnlock

user32

DeleteMenu
MapDialogRect
GetAsyncKeyState
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
RealChildWindowFromPoint
OffsetRect
SetRectEmpty
SendDlgItemMessageA
CopyImage
SystemParametersInfoW
InflateRect
DestroyMenu
IsDialogMessageW
CheckDlgButton
MoveWindow
ShowWindow
LoadCursorW
GetSysColorBrush
GetDesktopWindow
FillRect
ClientToScreen
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
GetSystemMetrics
CharUpperW
GetWindowThreadProcessId
IsWindowEnabled
SetCursor
ShowOwnedPopups
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
PostQuitMessage
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
LoadIconW
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameW
GetParent
GetClassLongW
GetWindowLongW
PtInRect
EqualRect
CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowRect
GetClientRect
GetWindowTextLengthW
GetWindowTextW
SetTimer
GetPropW
DrawEdge
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetLayeredWindowAttributes
ScrollWindow
RedrawWindow
EndPaint
DrawFrameControl
IsZoomed
GetSystemMenu
BringWindowToTop
SetCursorPos
SendMessageW
DefWindowProcW
IsWindow
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
EnableWindow
GetCapture
GetFocus
SetFocus
GetDlgItem
IsIconic
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsMenu
CreateWindowExW
SetWindowLongW
PostMessageW
UnregisterClassW
FindWindowA
GetDlgCtrlID
SetWindowTextW
GetMenuItemCount
GetMenuItemInfoW
SetMenuItemInfoW
FindWindowW
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxW
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
InsertMenuW
AppendMenuW
RemoveMenu
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
IsWindowVisible
GetActiveWindow
GetKeyState
ValidateRect
GetCursorPos
KillTimer
InvalidateRect
DestroyIcon
IntersectRect
TrackMouseEvent
LoadImageW
GetNextDlgGroupItem
SetCapture
ReleaseCapture
WindowFromPoint
DrawFocusRect
IsRectEmpty
DrawIconEx
GetIconInfo
MessageBeep
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
MapVirtualKeyW
GetKeyNameTextW
RemovePropW
SetWindowsHookExW
CallNextHookEx
UnhookWindowsHookEx
RegisterWindowMessageW
GetMessagePos
GetMessageTime
CopyIcon
FrameRect
DrawIcon
UnionRect
CallWindowProcW
RegisterClassW
WaitMessage
GetClassInfoW
GetClassInfoExW
EnumDisplayMonitors
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
LoadMenuW
DrawStateW
SetClassLongW
SetWindowRgn
SetScrollPos
SetParent
UpdateLayeredWindow
MonitorFromPoint
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
PostThreadMessageW
DestroyCursor
GetWindowRgn
CreateMenu
SubtractRect
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
GetUpdateRect
IsClipboardFormatAvailable
CharUpperBuffW
RegisterClipboardFormatW
ModifyMenuW
GetDoubleClickTime
SetMenuDefaultItem
LockWindowUpdate
SetRect
CopyAcceleratorTableW
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
SetPropW

gdi32

GetTextFaceW
GetViewportOrgEx
GetWindowOrgEx
SetPixelV
SetPaletteEntries
ExtFloodFill
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
RoundRect
OffsetRgn
GetRgnBox
Rectangle
LPtoDP
CreateRoundRectRgn
Polyline
Polygon
CreatePolygonRgn
GetTextColor
Ellipse
CreateEllipticRgn
SetDIBColorTable
CreateDIBSection
StretchBlt
SetPixel
GetTextCharsetInfo
CreateDIBitmap
CreateCompatibleBitmap
GetBkColor
RealizePalette
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
EnumFontFamiliesExW
GetTextMetricsW
DPtoLP
SetRectRgn
PatBlt
CreateRectRgnIndirect
CombineRgn
GetTextExtentPoint32W
CreateFontIndirectW
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutW
TextOutW
MoveToEx
SetTextAlign
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
BitBlt
CreateBitmap
GetObjectW
SetTextColor
SetBkColor
GetDeviceCaps
CreateDCW
CopyMetaFileW
EnumFontFamiliesW

msimg32

AlphaBlend
TransparentBlt

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegEnumValueW
RegQueryValueW
RegEnumKeyW
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
LookupAccountSidW
GetTokenInformation
OpenProcessToken
RegCloseKey
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
GetUserNameW
RegQueryValueExW
RegEnumKeyExW

shell32

SHGetSpecialFolderPathW
SHGetFileInfoW
ShellExecuteW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetDesktopFolder
DragQueryFileW
DragFinish
SHAppBarMessage
SHBrowseForFolderW

shlwapi

PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecA
PathStripToRootW
UrlUnescapeW
PathRemoveFileSpecW
StrFormatKBSizeW
PathIsUNCW

uxtheme

DrawThemeBackground
GetThemeColor
OpenThemeData
GetWindowTheme
IsAppThemed
DrawThemeParentBackground
GetThemeSysColor
GetThemePartSize
CloseThemeData
DrawThemeText
GetCurrentThemeName
IsThemeBackgroundPartiallyTransparent

ole32

ReleaseStgMedium
CoInitialize
CoInitializeSecurity
CoUninitialize
CoCreateInstance
CoSetProxyBlanket
CoTaskMemAlloc
CoTaskMemFree
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CreateStreamOnHGlobal
CoInitializeEx
CoDisconnectObject
CoCreateGuid
OleDuplicateData

oleaut32

SysAllocStringLen
VariantChangeType
SysStringLen
VariantCopy
VarBstrFromDate
LoadTypeLi
VariantInit
VariantClear
SysFreeString
VarUdateFromDate
SystemTimeToVariantTime
SysAllocString
VariantTimeToSystemTime

wininet

HttpSendRequestW
HttpAddRequestHeadersW
HttpOpenRequestW
InternetSetStatusCallbackW
InternetGetLastResponseInfoW
InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetReadFile
InternetConnectW
InternetCloseHandle
InternetOpenW
InternetCanonicalizeUrlW
InternetCrackUrlW
InternetSetOptionW
InternetGetCookieExA
InternetSetCookieA

wtsapi32

WTSQuerySessionInformationW
WTSFreeMemory

wsock32

WSASetLastError

bcrypt

BCryptGenRandom

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdipCreateBitmapFromHBITMAP

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmGetOpenStatus
ImmGetContext
ImmReleaseContext

winmm

PlaySoundW

Exports

Exports

GetModuleObject

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 841KB - Virtual size: 841KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 223KB - Virtual size: 222KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

41fd6c590adf5875b57ce6910aab2e5f

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

crypt32

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

shlwapi

uxtheme

ole32

oleaut32

wininet

wtsapi32

wsock32

bcrypt

gdiplus

oleacc

imm32

winmm

Exports

Exports

Sections

.text Size: 3.4MB - Virtual size: 3.4MB

.rdata Size: 841KB - Virtual size: 841KB

.data Size: 46KB - Virtual size: 93KB

.rsrc Size: 16KB - Virtual size: 16KB

.reloc Size: 223KB - Virtual size: 222KB

.text
Size: 3.4MB - Virtual size: 3.4MB

.rdata
Size: 841KB - Virtual size: 841KB

.data
Size: 46KB - Virtual size: 93KB

.rsrc
Size: 16KB - Virtual size: 16KB

.reloc
Size: 223KB - Virtual size: 222KB