00db776fb0f82d71710533005dd0e4e9aeee2b7742719fcf3cabd4243c69943f

Sharing

Copy URL Twitter E-mail

General

Target

00db776fb0f82d71710533005dd0e4e9aeee2b7742719fcf3cabd4243c69943f
Size

2.3MB
MD5

f8703b8cba7d550e6342156a0d6d0966
SHA1

7850bc24ea8cbea49ce5491ca03262b3f6891662
SHA256

00db776fb0f82d71710533005dd0e4e9aeee2b7742719fcf3cabd4243c69943f
SHA512

02805d656f0c73dea9cae681add6f0b195265d967a96d48c0434eda70c376427cde995fe25b73439f3ed3a260c62d4ae6e407b1534e48a06e81150f5628aa504
SSDEEP

49152:IqIlFxn71TC9d7vvvTsbe3RE73Qfz2uskWM8:Alz5+d7vXTsw03e2Gm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00db776fb0f82d71710533005dd0e4e9aeee2b7742719fcf3cabd4243c69943f

Files

00db776fb0f82d71710533005dd0e4e9aeee2b7742719fcf3cabd4243c69943f
.exe windows:4 windows x86

4ae5ebe4c92c4532078540d6501ed2fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA

comctl32

ord17

gdi32

SetBkMode
SetStretchBltMode
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
IntersectClipRect
MoveToEx
LineTo
DeleteObject
SetBkColor
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateBitmap
PatBlt
GetMapMode
DPtoLP
GetTextColor
GetBkColor
LPtoDP
SelectPalette
SelectObject
RestoreDC
SaveDC
DeleteDC
Rectangle
SetPixel
CreateCompatibleBitmap
CreateFontIndirectA
GetStockObject
CreateRectRgn
RealizePalette
StretchDIBits
GetDIBits
BitBlt
CreateCompatibleDC
CreatePalette
CreateDIBitmap
GetTextExtentPointA
GetObjectA

kernel32

GetTimeZoneInformation
GetSystemTime
GetLocalTime
TerminateProcess
GetACP
HeapSize
HeapReAlloc
SetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
ExitProcess
GetProfileStringA
InterlockedExchange
GetStartupInfoA
RaiseException
HeapAlloc
HeapFree
RtlUnwind
GetOEMCP
GetCPInfo
GetProcessVersion
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
GlobalFlags
FileTimeToLocalFileTime
FileTimeToSystemTime
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileTime
GlobalFree
WaitForSingleObject
GlobalAlloc
GetCurrentThread
FormatMessageA
LocalFree
LocalAlloc
WideCharToMultiByte
InterlockedIncrement
FreeLibrary
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpiA
GetThreadLocale
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
lstrcpyA
lstrlenA
MultiByteToWideChar
LoadLibraryA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
InterlockedDecrement
GlobalLock
GlobalUnlock
MulDiv
GetModuleHandleA
GetProcAddress
SetLastError
GetDiskFreeSpaceA
SetVolumeLabelA
GetDriveTypeA
CreateDirectoryA
GetFileAttributesA
SetFileAttributesA
ResumeThread
CreateThread
FindResourceA
SizeofResource
LoadResource
LockResource
CreateMutexA
GetCommandLineA
GetVersionExA
GetModuleFileNameA
GetLastError
GetTickCount
Sleep
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
GetSystemInfo
GetPrivateProfileStringA
lstrcmpA
lstrcatA
GetPrivateProfileIntA
WritePrivateProfileStringA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DeleteFileA
GetFileSize
SetFilePointer
WriteFile
CreateFileA
ReadFile
CloseHandle
FindFirstFileA
FindNextFileA
FindClose
GetCurrentDirectoryA
GetEnvironmentStrings
SetCurrentDirectoryA

msvcrt

setvbuf
fsetpos
fgetpos
fgetc
fputc
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
free
calloc
ungetwc
fgetwc

oleaut32

VariantClear
SysAllocStringLen
SysFreeString
VariantTimeToSystemTime
VariantChangeType
SysAllocString
SysStringLen
VariantCopy
SysAllocStringByteLen

olepro32

ord253

shell32

ShellExecuteA
ShellExecuteExA

user32

LoadIconA
SendDlgItemMessageA
MapWindowPoints
GetFocus
SetActiveWindow
IsWindow
AdjustWindowRectEx
IsWindowVisible
GetTopWindow
IsChild
GetParent
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
CharUpperA
wsprintfA
UnhookWindowsHookEx
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
ScreenToClient
CharToOemBuffA
OemToCharBuffA
CharLowerA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
FillRect
GetSysColor
GetCursorPos
WindowFromPoint
SetFocus
GetClassNameA
LoadStringA
PostQuitMessage
InvalidateRect
UpdateWindow
CopyRect
PostMessageA
MessageBoxA
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
GetNextDlgTabItem
EnableWindow
KillTimer
RedrawWindow
GetClientRect
SendMessageA
SetTimer
SetWindowRgn
GetDesktopWindow
LoadImageA
PeekMessageA
DispatchMessageA
TranslateMessage
PostThreadMessageA
RegisterClipboardFormatA
MessageBeep
GetNextDlgGroupItem
SetRect
IsWindowEnabled
DestroyMenu
GetSysColorBrush
LoadCursorA
PtInRect
CharNextA
InflateRect
MapDialogRect
SetWindowContextHelpId
EndDialog
CreateDialogIndirectParamA
GetMessageA
GetActiveWindow
ValidateRect
SetCursor
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetWindowLongA
CopyAcceleratorTableA

wininet

FtpFindFirstFileA
FtpOpenFileA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetReadFile
InternetCloseHandle
InternetOpenA
InternetConnectA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

wsock32

send
ntohs
inet_ntoa
recv
gethostbyname
htons
socket
setsockopt
connect
WSAGetLastError
WSAAsyncSelect
closesocket
WSACleanup
WSAStartup
ioctlsocket

comdlg32

GetFileTitleA

ole32

CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID

oledlg

ord8

Sections

.text
Size: 249KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 55KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 24KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4ae5ebe4c92c4532078540d6501ed2fa

Headers

File Characteristics

Imports

advapi32

comctl32

gdi32

kernel32

msvcrt

oleaut32

olepro32

shell32

user32

wininet

winspool.drv

wsock32

comdlg32

ole32

oledlg

Sections

.text Size: 249KB - Virtual size: 252KB

.data Size: 55KB - Virtual size: 56KB

Size: 24KB - Virtual size: 48KB

.rsrc Size: 2.0MB - Virtual size: 2.0MB

.idata Size: 8KB - Virtual size: 12KB

.text
Size: 249KB - Virtual size: 252KB

.data
Size: 55KB - Virtual size: 56KB

.rsrc
Size: 2.0MB - Virtual size: 2.0MB

.idata
Size: 8KB - Virtual size: 12KB