f838a69c416b252d1c482aec24b8dfded30e9b6e58b72357271ca9f5553a1f4c

Sharing

Copy URL

Twitter E-mail

General

Target

f838a69c416b252d1c482aec24b8dfded30e9b6e58b72357271ca9f5553a1f4c
Size

2.1MB
MD5

31f36bf20144370de892a2baabb0cfcc
SHA1

1e3efb016154ef9dc15897d0efa432d89b3d19ad
SHA256

f838a69c416b252d1c482aec24b8dfded30e9b6e58b72357271ca9f5553a1f4c
SHA512

5aa0428c0c73f7d3d7c45d18a61f6cb82e43057e8ce213ce41951b1a9f7eaa591810da5f96e1b99d0c7eda47c2db151f6d5d7fcb5b9e5f512b3c016468b34c3d
SSDEEP

49152:EOWIxDipHCCQo7Ee/ZUyqkyjLZwmS7uqZJ/t2bs3McihIqdqYU:EuOvr7EehUvkCNEKUJ/t2bs3Mci

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f838a69c416b252d1c482aec24b8dfded30e9b6e58b72357271ca9f5553a1f4c

Files

f838a69c416b252d1c482aec24b8dfded30e9b6e58b72357271ca9f5553a1f4c
.dll windows:6 windows x86

4f8e13bfa0185e634da8906b2afed469

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetTimeZoneInformation
MoveFileExW
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
SetFilePointerEx
GetStdHandle
EnumSystemLocalesW
IsValidLocale
LCMapStringW
ExitProcess
VirtualAlloc
HeapQueryInformation
FreeEnvironmentStringsW
SetStdHandle
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
GetCommandLineW
GetCommandLineA
InterlockedFlushSList
RtlUnwind
GetCPInfo
GetStringTypeW
LCMapStringEx
OutputDebugStringW
SetEnvironmentVariableW
WriteConsoleW
InitializeSListHead
GetSystemTimeAsFileTime
GetEnvironmentStringsW
GetFileType
SizeofResource
LockResource
LoadResource
FindResourceW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
TlsAlloc
TlsSetValue
TlsGetValue
GetProcAddress
FreeLibrary
DeleteFileW
CopyFileW
GetLastError
lstrlenW
WideCharToMultiByte
HeapFree
InitializeCriticalSectionAndSpinCount
HeapSize
HeapReAlloc
RaiseException
HeapAlloc
DecodePointer
GetProcessHeap
GetCurrentProcessId
GetModuleFileNameA
GetLocalTime
MoveFileA
DeleteFileA
VirtualQuery
GetUserDefaultLangID
MultiByteToWideChar
QueryPerformanceFrequency
QueryPerformanceCounter
FindFirstFileW
FindClose
IsDebuggerPresent
Sleep
GetModuleFileNameW
CreateFileW
CloseHandle
GetFileTime
LocalFree
FormatMessageW
VerSetConditionMask
VerifyVersionInfoW
GetVersionExW
GetModuleHandleW
GetCurrentProcess
GetSystemInfo
GlobalAlloc
GlobalFree
GetTickCount
LoadLibraryExW
LoadLibraryW
InitializeCriticalSectionEx
TerminateProcess
GetStartupInfoW
ReadFile
WaitForSingleObject
DuplicateHandle
WriteFile
CreateEventW
ResetEvent
ResumeThread
SetEvent
GlobalSize
GlobalUnlock
GlobalLock
MulDiv
SetLastError
OutputDebugStringA
EncodePointer
GetSystemDirectoryW
GetModuleHandleA
LoadLibraryA
GlobalDeleteAtom
lstrcmpW
GlobalAddAtomW
GlobalFindAtomW
CompareStringW
GetCurrentThread
lstrcmpA
SetThreadPriority
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
FileTimeToLocalFileTime
FindNextFileW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFileAttributesW
GetFileAttributesExW
GetFileSizeEx
FlushFileBuffers
GetFileSize
GetFullPathNameW
GetVolumeInformationW
LockFile
SetEndOfFile
SetFilePointer
UnlockFile
lstrcmpiW
TlsFree
GlobalReAlloc
GlobalHandle
LocalAlloc
LocalReAlloc
SetErrorMode
GlobalGetAtomNameW
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GlobalFlags
VirtualProtect
GetCurrentDirectoryW
lstrcpyW
FindResourceExW
GetWindowsDirectoryW
GetTempPathW
GetProfileIntW
SearchPathW
GetTempFileNameW
GetUserDefaultLCID
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent

user32

InvalidateRect
KillTimer
SetTimer
DeleteMenu
MapDialogRect
GetAsyncKeyState
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
RealChildWindowFromPoint
GetDesktopWindow
OffsetRect
SetRectEmpty
SendDlgItemMessageA
IsDialogMessageW
CheckDlgButton
MoveWindow
ShowWindow
CopyImage
SystemParametersInfoW
InflateRect
DestroyMenu
LoadCursorW
GetSysColorBrush
FillRect
ClientToScreen
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
GetSystemMetrics
CharUpperW
GetWindowThreadProcessId
IsWindowEnabled
SetCursor
ShowOwnedPopups
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetCursorPos
GetActiveWindow
TranslateMessage
DestroyIcon
PostQuitMessage
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
DrawFrameControl
IsZoomed
GetSystemMenu
BringWindowToTop
SetCursorPos
DefWindowProcW
IsWindow
CreateWindowExW
LoadIconW
CallNextHookEx
SetWindowsHookExW
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameW
CopyIcon
GetClassLongW
GetWindowLongW
PtInRect
EqualRect
EnumDisplayMonitors
GetSysColor
MapWindowPoints
ScreenToClient
MessageBoxW
AdjustWindowRectEx
GetWindowRect
GetClientRect
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
IntersectRect
TrackMouseEvent
LoadImageW
GetNextDlgGroupItem
SetCapture
ReleaseCapture
WindowFromPoint
DrawFocusRect
IsRectEmpty
DrawIconEx
GetIconInfo
MessageBeep
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
MapVirtualKeyW
GetKeyNameTextW
LoadMenuW
GetMessageW
SetWindowLongW
PostMessageW
UnregisterClassW
FindWindowA
SendMessageW
GetDlgCtrlID
SetWindowTextW
GetMenuItemCount
GetMenuItemInfoW
SetMenuItemInfoW
FindWindowW
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
InsertMenuW
AppendMenuW
RemoveMenu
UnhookWindowsHookEx
RegisterWindowMessageW
DispatchMessageW
PeekMessageW
GetMessagePos
GetMessageTime
CallWindowProcW
CreateMenu
RegisterClassW
GetClassInfoW
GetClassInfoExW
IsMenu
IsChild
DestroyWindow
SetWindowPos
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsWindowVisible
IsIconic
GetDlgItem
SetFocus
GetFocus
GetKeyState
FrameRect
DrawIcon
UnionRect
UpdateLayeredWindow
GetCapture
EnableWindow
GetMenu
SetMenu
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
SetLayeredWindowAttributes
SetClassLongW
SetWindowRgn
SetParent
CopyRect
DrawEdge
MonitorFromPoint
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
PostThreadMessageW
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
SetRect
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
IsClipboardFormatAvailable
GetUpdateRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SubtractRect
DestroyCursor
GetWindowRgn
GetParent

gdi32

GetTextFaceW
GetViewportOrgEx
GetWindowOrgEx
SetPixelV
SetPaletteEntries
ExtFloodFill
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
RoundRect
OffsetRgn
GetRgnBox
Rectangle
LPtoDP
CreateRoundRectRgn
Polyline
Polygon
CreatePolygonRgn
GetTextColor
Ellipse
CreateEllipticRgn
SetDIBColorTable
CreateDIBSection
StretchBlt
SetPixel
GetTextCharsetInfo
CreateDIBitmap
CreateCompatibleBitmap
GetBkColor
RealizePalette
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
EnumFontFamiliesExW
GetTextMetricsW
DPtoLP
SetRectRgn
PatBlt
CreateRectRgnIndirect
CombineRgn
GetTextExtentPoint32W
CreateFontIndirectW
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutW
TextOutW
MoveToEx
SetTextAlign
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
BitBlt
CreateBitmap
GetObjectW
SetTextColor
SetBkColor
GetDeviceCaps
CreateDCW
CopyMetaFileW
EnumFontFamiliesW

msimg32

AlphaBlend
TransparentBlt

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegQueryValueExW
RegCloseKey
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW

shell32

SHGetSpecialFolderPathW
SHGetFileInfoW
ShellExecuteW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHAppBarMessage
SHBrowseForFolderW
DragFinish
DragQueryFileW
ExtractIconW

shlwapi

PathFindExtensionW
PathStripToRootW
PathRemoveFileSpecW
StrFormatKBSizeW
PathIsUNCW
PathFindFileNameW

uxtheme

DrawThemeBackground
GetThemeColor
GetCurrentThemeName
GetWindowTheme
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
GetThemePartSize
CloseThemeData
DrawThemeText
OpenThemeData
DrawThemeParentBackground

ole32

OleDuplicateData
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CreateStreamOnHGlobal
CoInitializeEx
CoDisconnectObject
CoCreateGuid
ReleaseStgMedium
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoCreateInstance
CoInitialize

oleaut32

VariantInit
VariantClear
SysFreeString
SysAllocString
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocStringLen
VariantCopy
VarBstrFromDate
VariantChangeType
LoadTypeLi
SysStringLen

winmm

PlaySoundW

ws2_32

gethostbyaddr
getsockname
htons
WSAStartup
WSAGetLastError
gethostbyname
socket
connect
send
closesocket
bind
listen
accept
select
recv

gdiplus

GdipCreateBitmapFromHBITMAP
GdipDrawImageRectI
GdipDrawImageI
GdipDeleteGraphics
GdipSetInterpolationMode
GdipCreateFromHDC
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmGetContext
ImmReleaseContext
ImmGetOpenStatus

Exports

Exports

GetModuleObject

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 354KB - Virtual size: 354KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4f8e13bfa0185e634da8906b2afed469

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

shlwapi

uxtheme

ole32

oleaut32

winmm

ws2_32

gdiplus

oleacc

imm32

Exports

Exports

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 354KB - Virtual size: 354KB

.data Size: 23KB - Virtual size: 44KB

.rsrc Size: 20KB - Virtual size: 20KB

.reloc Size: 139KB - Virtual size: 139KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 354KB - Virtual size: 354KB

.data
Size: 23KB - Virtual size: 44KB

.rsrc
Size: 20KB - Virtual size: 20KB

.reloc
Size: 139KB - Virtual size: 139KB