525c3369d2da7ccfc214f4b9521ea635c3e74b86d0a5d92885605d96a0af84bc

Sharing

Copy URL Twitter E-mail

General

Target

525c3369d2da7ccfc214f4b9521ea635c3e74b86d0a5d92885605d96a0af84bc
Size

3.8MB
MD5

7d005eb24d7deff068bd0038b7507b65
SHA1

c68cee32d57f1329a6d222e373333e5d68bc608d
SHA256

525c3369d2da7ccfc214f4b9521ea635c3e74b86d0a5d92885605d96a0af84bc
SHA512

442415944189c88a45ad00d225db4b6a83700e8800101e561f093a5d7b25936c2f615b1b64da34566c08e97040b07ac6aacc4a6826f196f8f7db5922c7dac0d2
SSDEEP

98304:BV2aWOnjVBh47/tq32bGHU+1y+4SP0CaLupL:Gwt47/tH+vOXm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
525c3369d2da7ccfc214f4b9521ea635c3e74b86d0a5d92885605d96a0af84bc

Files

525c3369d2da7ccfc214f4b9521ea635c3e74b86d0a5d92885605d96a0af84bc
.exe windows:4 windows x86

52c921f6669dbfcd7898473d935c0be9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

gdiplus

GdipClosePathFigure
GdipSetImageAttributesColorMatrix
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipBitmapGetPixel
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipSaveImageToFile
GdipAddPathLineI
GdipSaveGraphics
GdipGetClipBoundsI
GdipResetClip
GdipSetClipRectI
GdipTransformPointsI
GdipGetWorldTransform
GdipCreateMetafileFromEmf
GdipGetMatrixElements
GdipAddPathArcI
GdipTranslateWorldTransform
GdipResetWorldTransform
GdipScaleWorldTransform
GdipDrawArcI
GdipDrawPieI
GdipDrawPath
GdipRestoreGraphics
GdipFillPath
GdipCreateMatrix
GdipGetMetafileHeaderFromMetafile
GdipDeleteMatrix
GdipCreateRegionHrgn
GdipFillRegion
GdipDeleteRegion
GdipFillEllipseI
GdipFillPolygonI
GdipDrawEllipseI
GdipDrawLineI
GdipDrawImageRectRectI
GdipSetCompositingQuality
GdipRecordMetafile
GdipSetImageAttributesWrapMode
GdipSetMetafileDownLevelRasterizationLimit
GdipGetHemfFromMetafile
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipSetInterpolationMode
GdipReleaseDC
GdipGetDC
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromHBITMAP
GdipCreatePathGradientFromPath
GdipAddPathEllipseI
GdipSetPathGradientSigmaBlend
GdipSetPathGradientBlend
GdipSetPathGradientGammaCorrection
GdipSetPathGradientCenterPointI
GdipSetPathGradientSurroundColorsWithCount
GdipGetPathGradientPointCount
GdipSetPathGradientCenterColor
GdipDeletePath
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipFillPieI
GdipDeleteGraphics
GdipCreateFromHDC
GdipFree
GdipAlloc
GdipDeleteBrush
GdipDisposeImage
GdipCreateBitmapFromScan0
GdipCreateHBITMAPFromBitmap
GdipCreateSolidFill
GdipGetImageGraphicsContext
GdipFillRectangleI
GdipCloneBrush
GdipCloneImage
GdipCreatePen1
GdipDeletePen
GdipSetPenDashCap197819
GdipSetPenLineJoin
GdipSetPenDashStyle
GdipSetPenDashArray
GdipSetSmoothingMode
GdipSetPageUnit
GdipDrawLinesI
GdipDrawPolygonI
GdipSetLineBlend
GdipCreateLineBrushFromRectWithAngleI
GdipGetImagePixelFormat
GdipDrawImageRectI
GdipCloneBitmapAreaI
GdiplusShutdown
GdiplusStartup
GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromResource
GdipDrawRectangleI
GdipSetLineGammaCorrection
GdipSetLineSigmaBlend
GdipCreatePath

kernel32

GetCurrentProcessId
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetThreadLocale
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
GetShortPathNameA
lstrcmpA
SetFileTime
GetFileTime
GetDiskFreeSpaceA
InterlockedIncrement
InterlockedDecrement
LoadLibraryExA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GlobalFlags
GetCPInfo
GetOEMCP
SetErrorMode
FindResourceExA
RtlUnwind
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
VirtualAlloc
GetSystemInfo
VirtualQuery
GetTimeFormatA
GetDateFormatA
RaiseException
GetCommandLineA
GetProcessHeap
GetStartupInfoA
SetStdHandle
GetFileType
ExitProcess
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
Sleep
VirtualFree
HeapDestroy
HeapCreate
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetConsoleCP
GetConsoleMode
GetDriveTypeA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetModuleFileNameW
FreeResource
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
RemoveDirectoryA
SetFileAttributesA
GetVolumeInformationA
MoveFileA
FormatMessageA
LocalFree
GlobalHandle
GetLocaleInfoA
GetTempPathA
CreateFileA
CloseHandle
DeleteFileA
GetVersionExA
GlobalReAlloc
SetLastError
GetModuleHandleA
FreeLibrary
GetCurrentDirectoryA
LoadLibraryA
GetProcAddress
GetFullPathNameA
GetTempFileNameA
GetFileAttributesA
lstrcpynA
GetModuleFileNameA
SetCurrentDirectoryA
MulDiv
GetStringTypeExA
lstrlenA
lstrcmpiA
CompareStringW
CompareStringA
lstrlenW
GetTickCount
GetVersion
GetLastError
InterlockedExchange
CopyFileA
MultiByteToWideChar
CreateDirectoryA
GlobalSize
GetCurrentThreadId
GlobalUnlock
GlobalAlloc
GlobalLock
GetProfileIntA
FindFirstFileA
FindNextFileA
FindClose
GlobalFree
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
VirtualProtect

user32

IsMenu
SetWindowRgn
MapWindowPoints
DrawEdge
GetSysColorBrush
GetClassLongA
EndPaint
ValidateRect
InvalidateRgn
GetScrollPos
AdjustWindowRect
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
RemoveMenu
GetWindow
wvsprintfA
MessageBoxA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetWindowPlacement
SetWindowPlacement
SetScrollInfo
GetScrollInfo
AdjustWindowRectEx
RegisterClassA
GetClassInfoA
GetClassInfoExA
GetScrollRange
SetScrollRange
TrackPopupMenu
ScrollWindow
GetMessagePos
GetMessageTime
GetTopWindow
DispatchMessageA
GetForegroundWindow
GetWindowTextA
GetWindowTextLengthA
RemovePropA
GetPropA
SetPropA
IsChild
WinHelpA
SendDlgItemMessageA
LoadIconA
SetDlgItemTextA
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
IsWindowEnabled
ScrollWindowEx
GetWindowDC
GetWindowThreadProcessId
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
GetActiveWindow
TranslateMDISysAccel
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamA
InSendMessage
SetParent
SetMenu
InsertMenuItemA
LoadMenuA
ReuseDDElParam
UnpackDDElParam
PostQuitMessage
DestroyIcon
SetWindowContextHelpId
GetNextDlgGroupItem
ShowOwnedPopups
TranslateMessage
GetMessageA
GetTabbedTextExtentA
CopyAcceleratorTableA
CreateMenu
PostThreadMessageA
WaitMessage
DeleteMenu
UnregisterClassA
CharNextA
LockWindowUpdate
DrawIcon
GetMenuStringA
BeginPaint
ClipCursor
CallWindowProcA
DefWindowProcA
IsIconic
CheckMenuItem
GetMenuState
GetClassNameA
RedrawWindow
FindWindowA
GetLastActivePopup
BringWindowToTop
RegisterClipboardFormatA
DestroyCursor
CharUpperA
LoadCursorA
GetFocus
SetActiveWindow
LoadAcceleratorsA
GetKeyState
GetDoubleClickTime
SetCursor
DestroyCaret
ShowCaret
HideCaret
SetCaretPos
CreateCaret
GetMenu
InvertRect
UnionRect
TranslateAcceleratorA
SetForegroundWindow
IsZoomed
IsWindowVisible
GetWindowLongA
MapDialogRect
SetRect
LoadBitmapA
FrameRect
GetDesktopWindow
GetCapture
GetClientRect
TrackPopupMenuEx
SetWindowsHookExA
CallNextHookEx
IsWindow
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
LoadStringA
GetParent
KillTimer
SetTimer
GetDCEx
UpdateWindow
PostMessageA
FillRect
WindowFromDC
OffsetRect
CopyRect
GetMenuItemCount
GetMenuItemID
GetMenuItemRect
CreateWindowExA
DestroyWindow
SetWindowPos
SetWindowLongA
UnhookWindowsHookEx
PeekMessageA
SetCursorPos
EnumClipboardFormats
GetClipboardData
EmptyClipboard
SetClipboardData
IsClipboardFormatAvailable
CloseClipboard
OpenClipboard
ClientToScreen
AppendMenuA
CreatePopupMenu
MessageBeep
ReleaseCapture
GetSystemMetrics
GetCursorPos
SetCapture
GetUpdateRect
ReleaseDC
GetDC
GetWindowRect
SendMessageA
SetRectEmpty
GetAsyncKeyState
EnableWindow
WindowFromPoint
InflateRect
GetSysColor
ScreenToClient
IntersectRect
PtInRect
IsRectEmpty
EqualRect
SetFocus
GetCursor
GetDlgCtrlID
EnableScrollBar
ShowScrollBar
SetScrollPos
SystemParametersInfoA
ModifyMenuA
GetSubMenu
SetMenuItemInfoA
GetMenuItemInfoA
EnableMenuItem
RegisterWindowMessageA
GetSystemMenu
DestroyMenu
InsertMenuA
InvalidateRect

gdi32

ExtTextOutA
Escape
GetObjectA
EnumFontFamiliesExA
CreatePen
GetROP2
GetWindowOrgEx
DPtoLP
LPtoDP
Arc
Ellipse
Rectangle
TextOutA
SetStretchBltMode
CreateFontA
GetTextMetricsA
PatBlt
BeginPath
EndPath
ScaleViewportExtEx
OffsetViewportOrgEx
StartDocA
CreateRectRgn
RectVisible
PtVisible
StretchDIBits
GetCurrentObject
SelectClipRgn
SetTextAlign
MoveToEx
LineTo
Polygon
GetBkColor
CreateCompatibleBitmap
CreateFontIndirectA
CreateSolidBrush
CreateICA
CreatePolygonRgn
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
DeleteObject
Polyline
GetDeviceCaps
OffsetWindowOrgEx
GetTextFaceA
GetStretchBltMode
GetPolyFillMode
GetNearestColor
CreateEllipticRgn
UnrealizeObject
GetRgnBox
GetTextColor
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
SetBrushOrgEx
CombineRgn
SetRectRgn
CreateRectRgnIndirect
PlayMetaFile
GetObjectType
CreatePatternBrush
ExtSelectClipRgn
GetCurrentPositionEx
ScaleWindowExtEx
StrokePath
DeleteEnhMetaFile
GetStockObject
GetTextExtentPoint32A
GetMapMode
GetViewportExtEx
GetWindowExtEx
GetWinMetaFileBits
SetEnhMetaFileBits
GetEnhMetaFileBits
CreateDCA
CreateMetaFileA
CloseMetaFile
EnumMetaFile
DeleteMetaFile
SetWinMetaFileBits
SetPixel
GetPixel
GetDIBits
ExtFloodFill
CreateDIBSection
Chord
Pie
RoundRect
CreateBitmap
GetViewportOrgEx
ExtCreatePen
CreateRoundRectRgn
GetBkMode
OffsetRgn
GetTextAlign
GetCharWidthA
GetCharABCWidthsA
SetBkColor
SetMapMode
SetWindowExtEx
SetWindowOrgEx
SetViewportExtEx
SetViewportOrgEx
EnumFontFamiliesA
PlayEnhMetaFile
GetTextCharset
SetMetaFileBitsEx
GetMetaFileBitsEx
PlayMetaFileRecord
PlayEnhMetaFileRecord
EnumEnhMetaFile
GetClipBox
SetTextColor
CopyMetaFileA
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
ExcludeClipRect
IntersectClipRect
PtInRegion

comdlg32

CommDlgExtendedError
GetFileTitleA

winspool.drv

DocumentPropertiesA
DeviceCapabilitiesA
OpenPrinterA
ClosePrinter
GetJobA

advapi32

RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegSetValueA
RegOpenKeyA
RegDeleteValueA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyA
RegEnumKeyA
RegQueryValueA
RegCloseKey

shell32

SHGetFileInfoA
SHBrowseForFolderA
DragAcceptFiles
DragFinish
DragQueryFileA
ExtractIconA
SHGetPathFromIDListA
ShellExecuteExA
FindExecutableA

comctl32

InitCommonControlsEx
_TrackMouseEvent
ord17

shlwapi

PathIsUNCA
PathFindExtensionA
PathRemoveExtensionA
PathStripToRootA
PathFindFileNameA

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleInitialize
RegisterDragDrop
RevokeDragDrop
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleSetClipboard
OleIsCurrentClipboard
OleLockRunning
StgOpenStorageOnILockBytes
CoGetClassObject
CoRegisterMessageFilter
OleUninitialize
CLSIDFromString
CLSIDFromProgID
CoRevokeClassObject
CoRegisterClassObject
StgIsStorageFile
StgOpenStorage
StgCreateDocfile
CreateFileMoniker
OleRun
CoLockObjectExternal
GetRunningObjectTable
OleIsRunning
CreateGenericComposite
CreateItemMoniker
OleSaveToStream
WriteClassStm
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CreateOleAdviseHolder
CoDisconnectObject
OleRegGetMiscStatus
OleRegEnumVerbs
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
StringFromCLSID
OleRegGetUserType
WriteClassStg
CoTaskMemFree
OleFlushClipboard
CreateStreamOnHGlobal
CreateDataAdviseHolder

oleaut32

VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysStringLen
SysFreeString
SysAllocStringByteLen
SysStringByteLen
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysAllocString

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 376KB - Virtual size: 373KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 667KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

52c921f6669dbfcd7898473d935c0be9

Headers

File Characteristics

Imports

version

gdiplus

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 376KB - Virtual size: 373KB

.data Size: 172KB - Virtual size: 667KB

.rsrc Size: 1.6MB - Virtual size: 1.6MB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 376KB - Virtual size: 373KB

.data
Size: 172KB - Virtual size: 667KB

.rsrc
Size: 1.6MB - Virtual size: 1.6MB