8e12a3843a450dada5d5eca5a09a7e1c1d66e620b916fdaee9062d350a3cc0c8

Sharing

Copy URL Twitter E-mail

General

Target

8e12a3843a450dada5d5eca5a09a7e1c1d66e620b916fdaee9062d350a3cc0c8
Size

3.8MB
MD5

157ed75b7e2fc6c0e00575bc54ffe77d
SHA1

7c8db3a4022800d22d53d59a9d6edb4e8a2ea421
SHA256

8e12a3843a450dada5d5eca5a09a7e1c1d66e620b916fdaee9062d350a3cc0c8
SHA512

d241a747cc27f5b85234fd2dbf86f2d01f12b8a637c38c613f21ec7d366e9fdf38c4fb322f145b7f0a50b9f733eae6ad37832a04e0075043dbd9ea42f132e0ec
SSDEEP

98304:tS7dix2a6kLZF/HTgIt8NHeZTr8SkUObLELKOR8dgpXlNYlvZb:tS7dix2a6knbMPUOTgpXlOlvZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e12a3843a450dada5d5eca5a09a7e1c1d66e620b916fdaee9062d350a3cc0c8

Files

8e12a3843a450dada5d5eca5a09a7e1c1d66e620b916fdaee9062d350a3cc0c8
.dll windows:6 windows x86

8b42d7e21900d92f9741e61f725c163c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

crypt32

CertOpenStore
CertGetCertificateContextProperty
CertFreeCertificateContext
CertDuplicateCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore

kernel32

WriteConsoleW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
MoveFileExW
GetConsoleOutputCP
SetFilePointerEx
EnumSystemLocalesW
IsValidLocale
LCMapStringW
GetTimeFormatW
GetDateFormatW
VirtualQuery
VirtualAlloc
HeapQueryInformation
SetStdHandle
FreeLibraryAndExitThread
ExitThread
CreateThread
GetFileInformationByHandle
GetDriveTypeW
SetConsoleCtrlHandler
ExitProcess
GetCommandLineW
GetCommandLineA
InterlockedFlushSList
RtlUnwind
GetCPInfo
GetStringTypeW
LCMapStringEx
OutputDebugStringW
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeSListHead
WaitForSingleObjectEx
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
TlsAlloc
TlsSetValue
TlsGetValue
GetExitCodeThread
WaitForSingleObject
ResumeThread
Sleep
GetLastError
lstrlenW
WideCharToMultiByte
HeapFree
InitializeCriticalSectionEx
HeapSize
HeapReAlloc
RaiseException
HeapAlloc
DecodePointer
GetProcessHeap
GetCurrentProcessId
GetModuleFileNameA
GetLocalTime
MoveFileA
DeleteFileA
SizeofResource
LockResource
LoadResource
FindResourceW
MultiByteToWideChar
GetTickCount
GetSystemPowerStatus
GetTimeZoneInformation
DeleteFileW
lstrlenA
GetProcAddress
GetModuleHandleW
FreeLibrary
GetModuleFileNameW
LocalFree
FormatMessageW
VerSetConditionMask
VerifyVersionInfoW
GetVersionExW
GetCurrentProcess
GetSystemInfo
GlobalAlloc
GlobalFree
GetUserDefaultLCID
CreateFileW
DeviceIoControl
CloseHandle
WTSGetActiveConsoleSessionId
GetComputerNameW
LoadLibraryExW
LoadLibraryW
QueryPerformanceFrequency
QueryPerformanceCounter
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
OpenProcess
GetExitCodeProcess
TerminateProcess
CreatePipe
GetStartupInfoW
CreateProcessW
PeekNamedPipe
ReadFile
DuplicateHandle
WriteFile
GetLogicalDrives
FindFirstFileW
FindClose
CreateDirectoryW
CopyFileW
GetFileTime
SystemTimeToFileTime
FileTimeToSystemTime
CreateFileA
GetComputerNameA
CreateEventW
ResetEvent
SetEvent
GetStdHandle
GetFileType
SetLastError
InitializeCriticalSectionAndSpinCount
TlsFree
GetModuleHandleExW
SwitchToFiber
DeleteFiber
CreateFiber
GetSystemTimeAsFileTime
ConvertFiberToThread
ConvertThreadToFiber
LoadLibraryA
FindNextFileW
GetEnvironmentVariableW
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
GetSystemTime
GlobalSize
GlobalUnlock
GlobalLock
MulDiv
OutputDebugStringA
EncodePointer
GetSystemDirectoryW
GetModuleHandleA
GlobalDeleteAtom
lstrcmpW
GlobalAddAtomW
GlobalFindAtomW
CompareStringW
SetThreadPriority
SuspendThread
GetCurrentThread
lstrcmpA
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
FlushFileBuffers
GetFileSize
GetFullPathNameW
GetVolumeInformationW
LockFile
SetEndOfFile
SetFilePointer
UnlockFile
lstrcmpiW
FileTimeToLocalFileTime
GetFileAttributesW
GetFileAttributesExW
GetFileSizeEx
SystemTimeToTzSpecificLocalTime
GlobalReAlloc
GlobalHandle
LocalAlloc
LocalReAlloc
SetErrorMode
GlobalGetAtomNameW
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GlobalFlags
VirtualProtect
GetCurrentDirectoryW
lstrcpyW
FindResourceExW
GetWindowsDirectoryW
GetTempPathW
GetProfileIntW
GetTempFileNameW
SearchPathW

user32

InvalidateRect
KillTimer
SetTimer
DeleteMenu
MapDialogRect
GetAsyncKeyState
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
RealChildWindowFromPoint
GetDesktopWindow
OffsetRect
SetRectEmpty
SendDlgItemMessageA
IsDialogMessageW
SetWindowTextW
CheckDlgButton
MoveWindow
ShowWindow
CopyImage
SystemParametersInfoW
InflateRect
GetMenuItemInfoW
DestroyMenu
LoadCursorW
GetSysColorBrush
FillRect
ClientToScreen
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
GetSystemMetrics
CharUpperW
GetWindowThreadProcessId
IsWindowEnabled
SetCursor
ShowOwnedPopups
LoadBitmapW
DrawFrameControl
IsZoomed
GetSystemMenu
BringWindowToTop
SetCursorPos
CopyIcon
DestroyIcon
IsWindow
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
PostQuitMessage
GetCursorPos
GetActiveWindow
TranslateMessage
GetMessageW
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
LoadIconW
CallNextHookEx
SetWindowsHookExW
GetWindow
FrameRect
GetTopWindow
GetClassNameW
GetParent
GetClassLongW
EnumDisplayMonitors
PtInRect
EqualRect
CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowRect
GetClientRect
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
IntersectRect
TrackMouseEvent
LoadImageW
GetNextDlgGroupItem
SetCapture
ReleaseCapture
WindowFromPoint
DrawFocusRect
IsRectEmpty
DrawIconEx
GetIconInfo
MessageBeep
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
MapVirtualKeyW
GetKeyNameTextW
LoadMenuW
DefWindowProcW
CreateWindowExW
SetWindowLongW
PostMessageW
UnregisterClassW
FindWindowA
SendMessageW
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxW
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
AppendMenuW
RemoveMenu
UnhookWindowsHookEx
RegisterWindowMessageW
DispatchMessageW
PeekMessageW
GetMessagePos
GetMessageTime
CallWindowProcW
RegisterClassW
GetClassInfoW
GetClassInfoExW
IsMenu
IsChild
DestroyWindow
SetWindowPos
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsWindowVisible
IsIconic
GetDlgItem
GetDlgCtrlID
SetFocus
GetFocus
DrawIcon
UnionRect
UpdateLayeredWindow
MonitorFromPoint
GetKeyState
GetCapture
EnableWindow
GetMenu
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
SetLayeredWindowAttributes
SetClassLongW
SetWindowRgn
SetParent
GetWindowLongW
DrawEdge
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
PostThreadMessageW
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
SetRect
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
IsClipboardFormatAvailable
GetUpdateRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SubtractRect
CreateMenu
GetWindowRgn
DestroyCursor
GetLastActivePopup

gdi32

GetTextFaceW
GetViewportOrgEx
GetWindowOrgEx
SetPixelV
SetPaletteEntries
ExtFloodFill
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
RoundRect
OffsetRgn
GetRgnBox
Rectangle
LPtoDP
CreateRoundRectRgn
Polyline
Polygon
CreatePolygonRgn
GetTextColor
Ellipse
CreateEllipticRgn
SetDIBColorTable
CreateDIBSection
StretchBlt
SetPixel
GetTextCharsetInfo
CreateDIBitmap
CreateCompatibleBitmap
GetBkColor
RealizePalette
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
EnumFontFamiliesExW
GetTextMetricsW
DPtoLP
SetRectRgn
PatBlt
CreateRectRgnIndirect
CombineRgn
GetTextExtentPoint32W
CreateFontIndirectW
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutW
TextOutW
MoveToEx
SetTextAlign
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
BitBlt
CreateBitmap
GetObjectW
SetTextColor
SetBkColor
GetDeviceCaps
CreateDCW
CopyMetaFileW
EnumFontFamiliesW

msimg32

AlphaBlend
TransparentBlt

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
RegDeleteKeyW
RegEnumKeyExW
RegDeleteValueW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
RegCloseKey
LookupAccountSidW
GetTokenInformation
OpenProcessToken
GetUserNameW

shell32

SHGetSpecialFolderPathW
SHGetFileInfoW
ShellExecuteW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHAppBarMessage
SHBrowseForFolderW
DragFinish
DragQueryFileW

shlwapi

PathFindExtensionW
PathStripToRootW
PathRemoveFileSpecW
StrFormatKBSizeW
PathIsUNCW
PathFindFileNameW

uxtheme

DrawThemeBackground
GetThemeColor
GetCurrentThemeName
GetWindowTheme
IsAppThemed
CloseThemeData
GetThemeSysColor
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
DrawThemeText
DrawThemeParentBackground
OpenThemeData

ole32

OleLockRunning
OleDuplicateData
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CreateStreamOnHGlobal
CoInitializeEx
CoDisconnectObject
CoCreateGuid
ReleaseStgMedium
CoTaskMemFree
CoTaskMemAlloc
CoSetProxyBlanket
CoCreateInstance
CoUninitialize
CoInitializeSecurity
CoInitialize

oleaut32

VarUdateFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
SysStringLen
SysAllocString
VariantCopy
VarBstrFromDate
LoadTypeLi
SysFreeString
VariantClear
VariantInit
VariantChangeType
SysAllocStringLen

winmm

PlaySoundW

ws2_32

inet_ntoa
WSASetLastError
ioctlsocket
__WSAFDIsSet
htons
inet_addr
WSAStartup
WSAGetLastError
closesocket
socket
bind
listen
accept
connect
select
send
recv
getsockname
gethostbyname
gethostbyaddr
setsockopt
WSACleanup
getaddrinfo
freeaddrinfo

wtsapi32

WTSFreeMemory
WTSQuerySessionInformationW

bcrypt

BCryptGenRandom

gdiplus

GdipCreateFromHDC
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

Exports

Exports

GetModuleObject

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 777KB - Virtual size: 776KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 198KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8b42d7e21900d92f9741e61f725c163c

Headers

DLL Characteristics

File Characteristics

Imports

crypt32

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

shlwapi

uxtheme

ole32

oleaut32

winmm

ws2_32

wtsapi32

bcrypt

gdiplus

oleacc

imm32

Exports

Exports

Sections

.text Size: 2.8MB - Virtual size: 2.8MB

.rdata Size: 777KB - Virtual size: 776KB

.data Size: 39KB - Virtual size: 85KB

.rsrc Size: 12KB - Virtual size: 12KB

.reloc Size: 198KB - Virtual size: 198KB

.text
Size: 2.8MB - Virtual size: 2.8MB

.rdata
Size: 777KB - Virtual size: 776KB

.data
Size: 39KB - Virtual size: 85KB

.rsrc
Size: 12KB - Virtual size: 12KB

.reloc
Size: 198KB - Virtual size: 198KB