a55c04b78e8404aafdc0cc363b4fc01969cd27c85660e127a551ca1043f2ca6c

Sharing

Copy URL Twitter E-mail

General

Target

a55c04b78e8404aafdc0cc363b4fc01969cd27c85660e127a551ca1043f2ca6c
Size

5.5MB
MD5

1a7f4b24d25b72656f3b620bea026ba0
SHA1

182376f33993c23830f775a708117bf9b793aa08
SHA256

a55c04b78e8404aafdc0cc363b4fc01969cd27c85660e127a551ca1043f2ca6c
SHA512

7dfa7755dec50b8735f6a42fe88b5983efacae28dd6af216a34b48168c43029bcd8624bfb41ae18ee9c62360a123af8103f7d6f08e07112f879991bb7ab2fceb
SSDEEP

98304:V6bber9TL66EzKZDJCi0jyFfRahed63N31B1KwQsP3A0bFO6ob/vBzwLIFLOAkGo:4bk9TL66EzKZDJCi0wObFO6ob/vB88FQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a55c04b78e8404aafdc0cc363b4fc01969cd27c85660e127a551ca1043f2ca6c

Files

a55c04b78e8404aafdc0cc363b4fc01969cd27c85660e127a551ca1043f2ca6c
.exe windows:6 windows x86

0436488281e58d68ed43b3d0a883731b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wldap32

ord127
ord117
ord142
ord14
ord27
ord26
ord41
ord208
ord167
ord79
ord46
ord133
ord147
ord301
ord216
ord219
ord145

ws2_32

ntohs
WSASocketW
gethostname
WSACreateEvent
__WSAFDIsSet
ioctlsocket
WSACloseEvent
getsockopt
WSAEnumNetworkEvents
freeaddrinfo
inet_ntoa
WSAGetLastError
WSAStartup
htons
inet_addr
htonl
getnameinfo
getaddrinfo
setsockopt
WSASetLastError
WSAIoctl
gethostbyaddr
getsockname
gethostbyname
getpeername
sendto
recvfrom
recv
send
select
connect
accept
listen
bind
socket
closesocket
WSACleanup
WSAEventSelect

crypt32

CertEnumCertificatesInStore
CertOpenStore
CertOpenSystemStoreW
CertGetCertificateContextProperty
CertDuplicateCertificateContext
CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetEnhancedKeyUsage
CertGetIntendedKeyUsage

kernel32

MulDiv
OutputDebugStringA
GetCurrentThread
GlobalDeleteAtom
lstrcmpA
lstrcmpW
lstrcpyW
SetThreadPriority
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
GlobalAddAtomW
EncodePointer
GlobalFindAtomW
CompareStringW
FlushFileBuffers
GetFileSize
GetFullPathNameW
GetVolumeInformationW
LockFile
SetEndOfFile
SetFilePointer
UnlockFile
lstrcmpiW
MoveFileW
FileTimeToLocalFileTime
SystemTimeToTzSpecificLocalTime
GetFileAttributesW
GetFileAttributesExW
GetFileSizeEx
GlobalGetAtomNameW
GlobalReAlloc
GlobalHandle
TlsFree
LocalReAlloc
GetCurrentDirectoryW
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GlobalFlags
GetTempPathW
VirtualProtect
SetErrorMode
GetTempFileNameW
GetUserDefaultLCID
GetProfileIntW
SearchPathW
FindResourceExW
GetWindowsDirectoryW
UnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
WriteConsoleW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
EnumSystemLocalesW
IsValidLocale
LCMapStringW
GetTimeFormatW
GetDateFormatW
GetConsoleOutputCP
VirtualAlloc
HeapQueryInformation
SetStdHandle
SetConsoleCtrlHandler
SetFilePointerEx
FreeLibraryAndExitThread
ExitThread
CreateThread
GetFileInformationByHandle
GetDriveTypeW
GetCommandLineW
GetCommandLineA
RtlUnwind
GetCPInfo
GetStringTypeW
LCMapStringEx
OutputDebugStringW
InitializeCriticalSectionAndSpinCount
ReadConsoleW
ReadConsoleA
SetConsoleMode
GetConsoleMode
GetEnvironmentVariableW
GetModuleHandleA
GetFileType
GetStdHandle
GetEnvironmentVariableA
GetSystemTimeAsFileTime
WaitForSingleObjectEx
SetLastError
GetSystemDirectoryW
GetComputerNameA
CreateFileA
GlobalUnlock
SetEvent
ResetEvent
CreateEventW
ResumeThread
FileTimeToSystemTime
SystemTimeToFileTime
GetUserDefaultLangID
VirtualQuery
OpenFileMappingW
WriteFile
DuplicateHandle
WaitForSingleObject
ReadFile
PeekNamedPipe
CreateProcessW
GetStartupInfoW
CreatePipe
TerminateProcess
GetExitCodeProcess
OpenProcess
Process32NextW
Process32FirstW
GetModuleHandleExW
RemoveVectoredExceptionHandler
AddVectoredExceptionHandler
ExitProcess
SetUnhandledExceptionFilter
GetFileTime
GlobalSize
GetSystemTime
FindNextFileW
LoadLibraryA
CreateToolhelp32Snapshot
SleepEx
GetModuleFileNameW
CreateDirectoryW
FindClose
FindFirstFileW
GetLogicalDrives
GetTimeZoneInformation
GetSystemPowerStatus
CompareFileTime
LoadLibraryW
LoadLibraryExW
ConvertThreadToFiber
GetComputerNameW
WTSGetActiveConsoleSessionId
GetTickCount
DeviceIoControl
CreateFileW
GlobalFree
GlobalAlloc
GetSystemInfo
GetCurrentProcess
GetModuleHandleW
GetVersionExW
VerifyVersionInfoW
VerSetConditionMask
FormatMessageW
LocalFree
DeleteFileA
MoveFileA
GetLocalTime
GetModuleFileNameA
CreateMutexW
IsSystemResumeAutomatic
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
CloseHandle
lstrlenA
GetTickCount64
CopyFileW
WinExec
GetCurrentProcessId
TlsGetValue
TlsSetValue
TlsAlloc
GetCurrentThreadId
InitializeCriticalSection
WideCharToMultiByte
lstrlenW
MoveFileExW
GetSystemDefaultLangID
DeleteFileW
Sleep
FreeLibrary
GetProcAddress
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
FindResourceW
LoadResource
LockResource
SizeofResource
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
HeapFree
GlobalLock
ConvertFiberToThread
CreateFiber
DeleteFiber
WaitForMultipleObjects
SwitchToFiber
LocalAlloc

user32

CloseClipboard
OpenClipboard
ReuseDDElParam
UnpackDDElParam
LoadImageW
InsertMenuItemW
TranslateAcceleratorW
MonitorFromPoint
UnionRect
EnableScrollBar
UpdateLayeredWindow
SetMenuDefaultItem
GetMenuDefaultItem
MapDialogRect
SendDlgItemMessageA
DestroyMenu
DestroyIcon
SetClassLongW
LockWindowUpdate
CreatePopupMenu
BringWindowToTop
SetParent
SetRect
SetCursorPos
NotifyWinEvent
IntersectRect
MessageBeep
GetSystemMenu
LoadMenuW
IsZoomed
TrackMouseEvent
CopyAcceleratorTableW
DestroyAcceleratorTable
CreateAcceleratorTableW
LoadAcceleratorsW
MapVirtualKeyW
GetKeyboardState
GetAsyncKeyState
GetKeyboardLayout
ToUnicodeEx
DrawIconEx
IsRectEmpty
OffsetRect
InflateRect
DrawFocusRect
SetWindowRgn
DrawFrameControl
DrawEdge
KillTimer
SetTimer
RealChildWindowFromPoint
DeleteMenu
CopyImage
WindowFromPoint
ReleaseCapture
SetCapture
WaitMessage
CharUpperW
ClientToScreen
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
FillRect
InvalidateRect
DrawStateW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
GetTopWindow
GetClassNameW
GetClassLongW
PtInRect
EqualRect
ScreenToClient
AdjustWindowRectEx
SetClipboardData
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
GetWindowRgn
GetMenu
GetCapture
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
IsMenu
EmptyClipboard
GetDoubleClickTime
GetIconInfo
CopyIcon
ModifyMenuW
GetClassInfoExW
RegisterClassW
CallWindowProcW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
UnhookWindowsHookEx
GetLastActivePopup
GetWindowThreadProcessId
SetCursor
ShowOwnedPopups
CallNextHookEx
SetWindowsHookExW
GetCursorPos
ValidateRect
GetKeyState
GetActiveWindow
IsWindowVisible
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
IsDialogMessageW
GetWindow
GetWindowTextLengthW
GetWindowTextW
IsWindowEnabled
GetFocus
SetFocus
CheckDlgButton
GetDlgItem
SetWindowPos
MoveWindow
ShowWindow
EnumDisplayMonitors
GetMonitorInfoW
SystemParametersInfoW
LoadCursorW
GetParent
CopyRect
SetRectEmpty
GetSysColorBrush
GetSysColor
MapWindowPoints
IsCharLowerW
GetKeyNameTextW
MapVirtualKeyExW
RegisterClipboardFormatW
CharUpperBuffW
FrameRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsClipboardFormatAvailable
GetUpdateRect
SubtractRect
PostThreadMessageW
CreateMenu
GetNextDlgGroupItem
GetComboBoxInfo
GetWindowRect
DestroyCursor
HideCaret
SetLayeredWindowAttributes
GetClassInfoW
PostQuitMessage
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
GetUserObjectInformationW
GetProcessWindowStation
SetMenuItemInfoW
GetMenuItemInfoW
GetMenuItemCount
SetWindowTextW
GetDlgCtrlID
MessageBoxW
FindWindowA
EnableWindow
GetWindowLongW
DrawIcon
GetClientRect
GetSystemMetrics
SendMessageW
IsIconic
LoadIconW
GetDesktopWindow
SetWindowLongW
CreateWindowExW
DefWindowProcW
FindWindowW
PostMessageW
IsWindow
UnregisterClassW
SetMenu
InvertRect
RedrawWindow

gdi32

MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
CreateEllipticRgn
Ellipse
GetBkColor
GetTextColor
GetTextExtentPoint32W
PatBlt
CreatePolygonRgn
Polygon
Polyline
SetTextAlign
CreateDIBSection
SetRectRgn
DPtoLP
RealizePalette
SetPixel
StretchBlt
SetDIBColorTable
Rectangle
GetRgnBox
OffsetRgn
RoundRect
CreatePalette
GetPaletteEntries
EnumFontFamiliesExW
ExtFloodFill
SetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetWindowOrgEx
LPtoDP
GetViewportOrgEx
SetPixelV
GetTextFaceW
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
CreateRectRgn
CreateHatchBrush
SetTextColor
SetBkColor
CreateBitmap
GetObjectW
GetTextMetricsW
GetTextCharsetInfo
GetStockObject
DeleteObject
CreateSolidBrush
CreateRectRgnIndirect
CreatePatternBrush
CreatePen
CreateFontIndirectW
CreateDIBitmap
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
GetDeviceCaps
CreateDCW
CopyMetaFileW
EnumFontFamiliesW
CreateRoundRectRgn
DeleteDC

msimg32

TransparentBlt
AlphaBlend

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

OpenProcessToken
RegEnumValueW
RegQueryValueW
RegEnumKeyW
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
LookupAccountSidW
GetTokenInformation
GetUserNameW
RegQueryValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCloseKey

shell32

ShellExecuteW
SHGetSpecialFolderPathW
SHBrowseForFolderW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHAppBarMessage
DragFinish
DragQueryFileW
SHGetFileInfoW

shlwapi

PathFindFileNameW
PathIsUNCW
PathStripToRootW
PathRemoveFileSpecW
StrFormatKBSizeW
PathFindExtensionW

uxtheme

CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
GetThemeSysColor
GetWindowTheme
OpenThemeData
GetThemePartSize
DrawThemeParentBackground
DrawThemeText
IsAppThemed
IsThemeBackgroundPartiallyTransparent

ole32

CoInitialize
CoInitializeSecurity
CoUninitialize
CoCreateInstance
CoSetProxyBlanket
CoInitializeEx
CoTaskMemAlloc
CoTaskMemFree
OleDuplicateData
ReleaseStgMedium
CoCreateGuid
CoDisconnectObject
CreateStreamOnHGlobal
DoDragDrop
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning

oleaut32

SysFreeString
SysAllocString
VariantTimeToSystemTime
LoadTypeLi
VarBstrFromDate
VariantCopy
VarUdateFromDate
VariantChangeType
SysAllocStringLen
SysStringLen
VariantInit
VariantClear
SystemTimeToVariantTime

gdiplus

GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetInterpolationMode
GdipDrawImageRectI
GdiplusShutdown
GdipGetImageWidth
GdipFree
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDrawImageI
GdipGetImageHeight
GdipAlloc
GdipGetImageGraphicsContext

winmm

PlaySoundW

wtsapi32

WTSFreeMemory
WTSQuerySessionInformationW
WTSRegisterSessionNotification

bcrypt

BCryptGenRandom

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

wsock32

shutdown

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 839KB - Virtual size: 838KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 214KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0436488281e58d68ed43b3d0a883731b

Headers

DLL Characteristics

File Characteristics

Imports

wldap32

ws2_32

crypt32

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

shlwapi

uxtheme

ole32

oleaut32

gdiplus

winmm

wtsapi32

bcrypt

oleacc

imm32

wsock32

Sections

.text Size: 3.1MB - Virtual size: 3.1MB

.rdata Size: 839KB - Virtual size: 838KB

.data Size: 40KB - Virtual size: 90KB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.reloc Size: 214KB - Virtual size: 214KB

.text
Size: 3.1MB - Virtual size: 3.1MB

.rdata
Size: 839KB - Virtual size: 838KB

.data
Size: 40KB - Virtual size: 90KB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

.reloc
Size: 214KB - Virtual size: 214KB