7f5b7759cb11c45bfa37cc6d404b581e9d8ff15e372fb7f9f331946e8cc24eac

Sharing

Copy URL Twitter E-mail

General

Target

7f5b7759cb11c45bfa37cc6d404b581e9d8ff15e372fb7f9f331946e8cc24eac
Size

7.3MB
MD5

1ace79e8b71019cede9e3953ac51be82
SHA1

0060487bb240715a31dd772251250815929aa72c
SHA256

7f5b7759cb11c45bfa37cc6d404b581e9d8ff15e372fb7f9f331946e8cc24eac
SHA512

fe674fbf122792b540ee26707766d2441ba9d16fc4aeb6e6544d99223290ec0adaadb9c0f174f402aa6fb06cd2c1bd10f5c39af6c16e920b5e42fc84a3a9bd85
SSDEEP

196608:UcOBCbuixWLirY1PsSFIe1aCM+negfDk:UbBInWTf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f5b7759cb11c45bfa37cc6d404b581e9d8ff15e372fb7f9f331946e8cc24eac

Files

7f5b7759cb11c45bfa37cc6d404b581e9d8ff15e372fb7f9f331946e8cc24eac
.exe windows:5 windows x86

57fb843791248959f090bd72b5f21f34

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

libeay32

ord641
ord652
ord648
ord363
ord364
ord544
ord1178
ord3050
ord1654
ord1653
ord909
ord1186
ord2623
ord657
ord579
ord566
ord578
ord2442
ord181
ord254
ord109
ord84
ord1022
ord1016
ord202
ord200
ord66
ord395
ord82
ord204
ord484
ord485
ord222
ord2291
ord227
ord248
ord223
ord2254
ord1017
ord1015
ord118
ord365
ord3353
ord3422
ord205
ord78
ord53
ord98
ord1804
ord197
ord2415
ord2416
ord2412
ord298
ord224
ord3188
ord3226
ord2023
ord2075
ord640
ord585
ord653
ord581
ord1958
ord1216
ord469
ord467
ord3212
ord2206
ord89
ord680

ssleay32

ord155
ord82
ord86
ord125
ord45
ord77
ord341
ord343
ord314
ord315
ord172
ord171
ord110
ord112
ord96
ord15
ord108
ord58
ord78
ord6
ord183
ord74
ord12
ord111
ord141
ord16
ord73
ord142
ord222
ord235
ord17
ord24
ord21
ord225
ord75
ord42
ord83
ord157
ord61
ord90
ord8
ord76
ord48
ord182
ord31
ord242
ord166
ord43

ws2_32

socket
WSACreateEvent
WSAEventSelect
WSACleanup
htons
sendto
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
recvfrom
ntohs
ntohl
setsockopt
gethostbyname
recv
send
closesocket
connect
WSASocketW
WSAStartup
inet_addr
gethostname
WSAGetLastError
ioctlsocket
getsockopt
select
__WSAFDIsSet
accept
shutdown
htonl
listen
getaddrinfo
freeaddrinfo
getnameinfo
bind

zlibwapi

ord20
ord19
ord21

kernel32

OutputDebugStringW
SetErrorMode
SetUnhandledExceptionFilter
CreateMutexW
GetComputerNameW
ReleaseMutex
RemoveDirectoryW
CopyFileW
GetFileAttributesW
GetDiskFreeSpaceExW
GetWindowsDirectoryW
lstrcpyW
lstrcatW
WinExec
GlobalLock
GlobalUnlock
MulDiv
GlobalFree
ResumeThread
GlobalAlloc
FindFirstFileW
FindNextFileW
FindClose
lstrcmpW
GetCommTimeouts
CreateThread
GetCommModemStatus
HeapFree
HeapSize
HeapReAlloc
RaiseException
HeapAlloc
DecodePointer
GetProcessHeap
SetLastError
FormatMessageA
GlobalSize
FormatMessageW
OutputDebugStringA
GetModuleHandleA
LoadLibraryA
SetThreadPriority
SuspendThread
EncodePointer
GetSystemDirectoryW
LoadLibraryExW
GlobalDeleteAtom
GlobalAddAtomW
GlobalFindAtomW
lstrcmpA
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
FileTimeToLocalFileTime
GetCurrentThread
CompareStringA
FlushFileBuffers
GetFileSize
GetFullPathNameW
GetVolumeInformationW
LockFile
GetTempPathW
SetFilePointer
UnlockFile
DuplicateHandle
MoveFileW
GetThreadLocale
GetFileAttributesExW
GetFileSizeEx
GetFileTime
LocalFileTimeToFileTime
SetFileAttributesW
SetFileTime
GlobalFlags
GlobalGetAtomNameW
InitializeCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalReAlloc
CompareStringW
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
VirtualProtect
FindResourceExW
VerSetConditionMask
VerifyVersionInfoW
GetTempFileNameW
GetProfileIntW
SearchPathW
GetUserDefaultLCID
UnhandledExceptionFilter
SystemTimeToFileTime
WaitForSingleObjectEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetDriveTypeW
GetLogicalDriveStringsW
GetPrivateProfileIntW
SetCurrentDirectoryW
GetModuleFileNameW
SetEndOfFile
GetCurrentThreadId
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
FindFirstFileExW
WriteConsoleW
GetTimeZoneInformation
SetFilePointerEx
EnumSystemLocalesW
IsValidLocale
GetTimeFormatW
GetDateFormatW
SetEnvironmentVariableA
GetACP
GetStdHandle
QueryPerformanceFrequency
HeapQueryInformation
GetCommandLineW
GetCommandLineA
VirtualQuery
VirtualAlloc
GetSystemInfo
SetStdHandle
ReadConsoleW
GetConsoleMode
GetConsoleCP
FreeLibraryAndExitThread
ExitThread
GetFileType
GetModuleHandleExW
ExitProcess
InterlockedPushEntrySList
RtlUnwind
GetStringTypeW
LCMapStringW
SetThreadExecutionState
TerminateThread
GetExitCodeThread
DeleteFileW
WideCharToMultiByte
TerminateProcess
CreateProcessW
CreatePipe
SetEvent
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
CreateDirectoryW
GetCurrentDirectoryW
GetModuleHandleW
GetTickCount
WriteFile
Sleep
ReadFile
ClearCommError
GetOverlappedResult
WaitForSingleObject
ResetEvent
WaitCommEvent
CreateEventW
SetCommTimeouts
SetupComm
CreateFileW
SetCommState
GetCommState
PurgeComm
SetCommMask
WritePrivateProfileStringW
GetPrivateProfileStringW
FreeLibrary
GetLastError
GetLocalTime
GetCurrentProcessId
IsProcessorFeaturePresent
LocalAlloc
GetProcAddress
LoadLibraryW
CloseHandle
GetCurrentProcess
InterlockedDecrement
InterlockedIncrement
lstrcmpiW
lstrlenW
FreeResource
SizeofResource
LockResource
LoadResource
FindResourceW
GetCPInfo
MultiByteToWideChar
GetVersionExW
GetVersion
LocalFree

user32

GetTopWindow
GetNextDlgTabItem
IsMenu
SendMessageW
GetWindowLongW
DestroyCursor
GrayStringW
DrawTextExW
TabbedTextOutW
EnableWindow
GetSubMenu
DeleteMenu
RemoveMenu
LoadBitmapW
GetSysColorBrush
CreatePopupMenu
CreateMenu
GetMenuItemID
GetMenuState
ModifyMenuW
InsertMenuW
GetMenuItemCount
AppendMenuW
ReleaseDC
GetDC
GetDesktopWindow
GetSystemMetrics
GetClassLongW
EqualRect
MapWindowPoints
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
DestroyIcon
DrawIconEx
SystemParametersInfoW
GetParent
SetCursor
InvalidateRect
ClientToScreen
WindowFromPoint
SetScrollRange
GetScrollPos
SetScrollPos
DrawTextW
RedrawWindow
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetMenuItemInfoW
SetRect
DrawEdge
FillRect
GetSysColor
CopyRect
UnhookWindowsHookEx
SetScrollInfo
GetScrollInfo
WinHelpW
MonitorFromWindow
GetMonitorInfoW
CheckMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
ShowWindow
MoveWindow
SetDlgItemTextW
CheckDlgButton
GetActiveWindow
GetWindowRect
PostMessageW
FrameRect
InflateRect
OffsetRect
DrawFocusRect
GetClientRect
DrawStateW
GetIconInfo
LoadImageW
GetFocus
GetKeyState
PtInRect
IsWindow
GetWindowDC
IsIconic
SetTimer
GetWindow
GetClassNameW
KillTimer
SetWindowLongW
SetWindowTextW
IsDialogMessageW
LoadMenuW
CreateDialogIndirectParamW
EndDialog
SendDlgItemMessageA
WaitMessage
CharUpperW
RegisterClipboardFormatW
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
RealChildWindowFromPoint
BringWindowToTop
ReleaseCapture
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
LoadCursorW
PostThreadMessageW
PeekMessageW
TranslateMessage
DispatchMessageW
LoadIconW
UpdateWindow
GetDlgCtrlID
DrawIcon
PostQuitMessage
MessageBoxA
GetMessagePos
ScreenToClient
NotifyWinEvent
CopyIcon
MessageBeep
GetSystemMenu
EnableMenuItem
SetWindowRgn
MessageBoxW
UnregisterClassW
SetRectEmpty
BeginPaint
EndPaint
IsWindowEnabled
GetWindowThreadProcessId
GetLastActivePopup
GetMenuStringW
GetKeyNameTextW
MapVirtualKeyW
DestroyMenu
IntersectRect
GetMessageW
IsWindowVisible
ValidateRect
GetCursorPos
SetWindowsHookExW
CallNextHookEx
RegisterWindowMessageW
GetMessageTime
DefWindowProcW
ReuseDDElParam
CopyImage
GetAsyncKeyState
IsRectEmpty
SetParent
TrackMouseEvent
SetCapture
CharNextW
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
UnionRect
LockWindowUpdate
GetMenuDefaultItem
EnableScrollBar
HideCaret
InvertRect
GetWindowRgn
SubtractRect
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
GetUpdateRect
IsClipboardFormatAvailable
CharUpperBuffW
GetDoubleClickTime
SetMenuDefaultItem
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
GetComboBoxInfo
MonitorFromPoint
UpdateLayeredWindow
SetCursorPos
IsZoomed
DrawFrameControl
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
SetClassLongW
EnumDisplayMonitors
SetLayeredWindowAttributes
ScrollWindow

gdi32

GetTextFaceW
GetViewportOrgEx
GetWindowOrgEx
SetPaletteEntries
ExtFloodFill
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
RoundRect
LPtoDP
Polyline
Polygon
CreatePolygonRgn
CreateEllipticRgn
SetDIBColorTable
StretchBlt
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
RealizePalette
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
EnumFontFamiliesExW
GetRgnBox
DPtoLP
SetRectRgn
GetMapMode
CreateRectRgnIndirect
CreateDCW
CopyMetaFileW
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
MoveToEx
SetTextAlign
SetTextCharacterExtra
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetObjectType
GetClipBox
ExcludeClipRect
StretchDIBits
GetCharWidthW
GetTextColor
SetBrushOrgEx
GetBkColor
GetBrushOrgEx
CreatePatternBrush
SetPixelV
GetBitmapDimensionEx
CombineRgn
OffsetRgn
CreateRoundRectRgn
CreateRectRgn
GetTextMetricsW
CreateFontW
SetTextColor
SetBkColor
CreateBitmap
GetStockObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
Rectangle
CreateHatchBrush
PatBlt
SetPixel
GetPixel
GetObjectW
DeleteDC
DeleteObject
SelectObject
CreateDIBSection
Ellipse
GetTextExtentPoint32W
CreateFontIndirectW
GetBkMode
CreatePen
CreateSolidBrush
GetDeviceCaps
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC

msimg32

TransparentBlt
AlphaBlend

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
RegQueryValueExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
GetUserNameW
RegEnumValueW
RegQueryValueW
RegSetValueW
RegEnumKeyExW
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW

shell32

ShellExecuteExW
ShellExecuteW
SHGetSpecialFolderPathW
SHFormatDrive
SHGetFileInfoW
DragQueryFileW
DragFinish
ExtractIconW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHBrowseForFolderW
SHAppBarMessage

comctl32

ImageList_GetImageCount
ImageList_GetIcon
ImageList_AddMasked
ImageList_ReplaceIcon
_TrackMouseEvent
InitCommonControlsEx
ImageList_Draw

shlwapi

PathFileExistsW
PathRemoveFileSpecW
StrFormatKBSizeW
PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathIsDirectoryW
UrlUnescapeW
PathFindExtensionW

uxtheme

IsAppThemed
CloseThemeData
GetThemeSysColor
GetWindowTheme
GetCurrentThemeName
GetThemeColor
DrawThemeText
DrawThemeParentBackground
DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
OpenThemeData

ole32

OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoCreateGuid
CoRevokeClassObject
CoRegisterClassObject
ReleaseStgMedium
OleDuplicateData
CLSIDFromString
CoTaskMemAlloc
StringFromCLSID
CreateStreamOnHGlobal
CoUninitialize
CoCreateInstance
CoInitialize
CLSIDFromProgID
StringFromGUID2
CoDisconnectObject
CoGetClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CoInitializeEx
DoDragDrop
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
CoTaskMemFree
OleTranslateAccelerator
IsAccelerator
OleLockRunning

oleaut32

OleCreateFontIndirect
VarBstrFromDate
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
RegisterTypeLi
LoadRegTypeLi
LoadTypeLi
SysStringLen
VariantCopy
SysAllocString
VariantChangeType
VariantClear
VariantInit
SysStringByteLen
SysFreeString
OleLoadPicture
SysAllocStringLen

oledlg

OleUIBusyW

wsock32

getsockname
getpeername
WSAAsyncSelect
WSASetLastError

makelicense

MakeLicFile

setupapi

SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo

rpcrt4

UuidFromStringW

gdiplus

GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipFree
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdiplusShutdown
GdipAlloc

dbghelp

MiniDumpWriteDump

wininet

InternetSetStatusCallbackW
HttpQueryInfoW
HttpSendRequestW
HttpOpenRequestW
InternetSetOptionW
InternetQueryOptionW
InternetCrackUrlW
InternetCanonicalizeUrlW
InternetOpenW
InternetCloseHandle
InternetConnectW
InternetReadFile
InternetSetFilePointer
InternetWriteFile
InternetQueryDataAvailable
InternetGetLastResponseInfoW

oleacc

LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundW

Sections

.text
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 805KB - Virtual size: 805KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.giats
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

57fb843791248959f090bd72b5f21f34

Headers

DLL Characteristics

File Characteristics

Imports

libeay32

ssleay32

ws2_32

zlibwapi

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

wsock32

makelicense

setupapi

rpcrt4

gdiplus

dbghelp

wininet

oleacc

imm32

winmm

Sections

.text Size: 4.2MB - Virtual size: 4.2MB

.rdata Size: 805KB - Virtual size: 805KB

.data Size: 54KB - Virtual size: 99KB

.gfids Size: 109KB - Virtual size: 108KB

.giats Size: 512B - Virtual size: 20B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 2.2MB - Virtual size: 2.2MB

.text
Size: 4.2MB - Virtual size: 4.2MB

.rdata
Size: 805KB - Virtual size: 805KB

.data
Size: 54KB - Virtual size: 99KB

.gfids
Size: 109KB - Virtual size: 108KB

.giats
Size: 512B - Virtual size: 20B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 2.2MB - Virtual size: 2.2MB