8936c0dab06b330394e33a053ee5398c5f387d426895d967fe05b448fb6941cc

Sharing

Copy URL

Twitter E-mail

General

Target

8936c0dab06b330394e33a053ee5398c5f387d426895d967fe05b448fb6941cc
Size

3.2MB
MD5

1889151f5b1f754acb0fc4e46e6746db
SHA1

75ac04c39734231ac0d71708fad62200b15306a4
SHA256

8936c0dab06b330394e33a053ee5398c5f387d426895d967fe05b448fb6941cc
SHA512

73d3be2115c9c29f824c429c5cf28ab40d7193751c45dc8a47e1a9d1f88b52f2a180b14c3eadb7780d03a523b16416ae16dbcb5ef6df02bd386a5b5a863ee995
SSDEEP

98304:fCo71qYy6D/yUklU3wvpWvBM/x/FLOAkGkzdnEVomFHKnPSS:gxIdBM/x/FLOyomFHKnPN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8936c0dab06b330394e33a053ee5398c5f387d426895d967fe05b448fb6941cc

Files

8936c0dab06b330394e33a053ee5398c5f387d426895d967fe05b448fb6941cc
.exe windows:6 windows x86

5e6d49033b1cb71a43e7b87f9367bafd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
OutputDebugStringW
IsValidCodePage
LCMapStringW
WriteConsoleW
SetEnvironmentVariableA
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStartupInfoW
GetStdHandle
GetFileType
SetStdHandle
VirtualQuery
VirtualAlloc
GetSystemInfo
GetSystemTimeAsFileTime
HeapQueryInformation
IsProcessorFeaturePresent
HeapReAlloc
IsDebuggerPresent
ExitThread
CreateThread
GetModuleHandleExW
ExitProcess
GetCommandLineW
FindResourceExW
VirtualProtect
GetProfileIntW
GetTickCount
SearchPathW
GetWindowsDirectoryW
GetTempPathW
GetTempFileNameW
SetErrorMode
GetFileTime
GetFileSizeEx
FileTimeToLocalFileTime
GetFileAttributesW
GetCurrentDirectoryW
FileTimeToSystemTime
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GetCPInfo
GetOEMCP
RtlUnwind
GetACP
GlobalGetAtomNameW
VerifyVersionInfoW
VerSetConditionMask
GetThreadLocale
lstrcmpiW
GetCurrentProcess
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
FindClose
DeleteFileW
SetThreadPriority
SetEvent
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcpyW
lstrcmpA
GetVersionExW
GetCurrentThread
WideCharToMultiByte
MultiByteToWideChar
CopyFileW
FormatMessageW
MulDiv
LocalFree
GlobalSize
GlobalAlloc
GetCurrentProcessId
GlobalFree
GlobalUnlock
GlobalLock
GlobalFindAtomW
GlobalAddAtomW
LoadLibraryA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetModuleHandleA
GetModuleFileNameW
GetSystemDirectoryW
GetCurrentThreadId
SetLastError
EncodePointer
OutputDebugStringA
InitializeCriticalSectionAndSpinCount
DeviceIoControl
GetProcAddress
LoadLibraryW
FreeLibrary
GetSystemDefaultLangID
ReadFile
CancelIo
WriteFile
CreateEventW
SuspendThread
FreeResource
GetModuleHandleW
GetFileAttributesExW
CreateFileW
ResumeThread
WaitForSingleObject
Sleep
FindResourceW
LoadResource
LockResource
SizeofResource
CloseHandle
ReleaseMutex
CreateMutexW
OpenMutexW
DeleteCriticalSection
DecodePointer
EnterCriticalSection
HeapSize
GetLastError
RaiseException
InitializeCriticalSectionEx
LeaveCriticalSection
GetProcessHeap
HeapFree
HeapAlloc

user32

CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
GetUpdateRect
SetClassLongW
DestroyAcceleratorTable
ModifyMenuW
CopyIcon
GetIconInfo
GetDoubleClickTime
LockWindowUpdate
BringWindowToTop
SetCursorPos
LoadImageW
DestroyIcon
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
SetParent
GetNextDlgGroupItem
SetRect
InvalidateRgn
CopyAcceleratorTableW
CharNextW
WaitMessage
MonitorFromPoint
UnionRect
EnableScrollBar
UpdateLayeredWindow
IsMenu
SetMenuDefaultItem
GetMenuDefaultItem
CreatePopupMenu
NotifyWinEvent
WindowFromPoint
MessageBeep
DeleteMenu
GetSystemMenu
KillTimer
SetTimer
ReleaseCapture
SetCapture
GetAsyncKeyState
IsZoomed
TrackMouseEvent
RealChildWindowFromPoint
CopyImage
GetMenuItemInfoW
DestroyMenu
EnumDisplayMonitors
SystemParametersInfoW
LoadCursorW
SetRectEmpty
SetLayeredWindowAttributes
CharUpperW
ShowOwnedPopups
TranslateMessage
GetMessageW
DrawIconEx
IsRectEmpty
OffsetRect
DrawFocusRect
GetSysColorBrush
SetWindowRgn
DrawFrameControl
DrawEdge
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
IntersectRect
InflateRect
MapVirtualKeyW
GetKeyNameTextW
SendDlgItemMessageA
GetCursorPos
ClientToScreen
EndPaint
BeginPaint
RegisterClipboardFormatW
InvertRect
GetDC
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuState
GetMenuStringW
GetWindowThreadProcessId
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
LoadMenuW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
IsDialogMessageW
SetWindowTextW
IsWindowEnabled
CheckDlgButton
MoveWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetTopWindow
GetParent
GetClassLongW
SetWindowLongW
GetWindowLongW
PtInRect
EqualRect
CopyRect
MapWindowPoints
ScreenToClient
MessageBoxW
AdjustWindowRectEx
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
RemovePropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
GetForegroundWindow
SetActiveWindow
TrackPopupMenu
GetMenuItemCount
GetMenuItemID
GetSubMenu
SetMenu
GetMenu
GetCapture
GetKeyState
GetFocus
SetFocus
GetDlgCtrlID
GetDlgItem
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
CharUpperBuffW
TranslateAcceleratorW
GetWindowRgn
DestroyCursor
CreateMenu
GetComboBoxInfo
TranslateMDISysAccel
BeginDeferWindowPos
SetWindowPlacement
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
MapVirtualKeyExW
IsCharLowerW
IsClipboardFormatAvailable
ReleaseDC
SubtractRect
GetWindowPlacement
SetWindowPos
DestroyWindow
HideCaret
FrameRect
ReuseDDElParam
UnpackDDElParam
GetWindowDC
InsertMenuItemW
IsChild
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
LoadBitmapW
GetClassNameW
FillRect
UpdateWindow
DrawStateW
PostMessageW
PostThreadMessageW
DrawIcon
GetSystemMetrics
SetPropW
LoadIconW
GetLastActivePopup
SetForegroundWindow
ShowWindow
IsIconic
GetPropW
GetDesktopWindow
GetWindow
GrayStringW
DrawTextExW
TabbedTextOutW
RedrawWindow
IsWindow
DrawTextW
GetClientRect
InvalidateRect
GetSysColor
UnregisterClassW
SendMessageW
EnableWindow
SetCursor

gdi32

SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
PatBlt
CombineRgn
CreateFontIndirectW
GetMapMode
SetRectRgn
DPtoLP
CreateEllipticRgn
Ellipse
GetBkColor
GetTextColor
GetTextExtentPoint32W
CreatePolygonRgn
Polygon
Polyline
GetTextMetricsW
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
CreateRoundRectRgn
CreateDIBSection
GetRgnBox
RealizePalette
SetPixel
StretchBlt
SetDIBColorTable
Rectangle
OffsetRgn
RoundRect
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
ExtFloodFill
SetPaletteEntries
EnumFontFamiliesExW
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetViewportOrgEx
LPtoDP
GetWindowOrgEx
SetPixelV
GetTextFaceW
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
MoveToEx
SetROP2
SetTextAlign
CreatePalette
DeleteDC
SetBkMode
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
CreatePatternBrush
CreatePen
CreateHatchBrush
GetDeviceCaps
CreateDCW
CopyMetaFileW
CreateBitmap
SetTextColor
SetBkColor
GetObjectW
GetStockObject
DeleteObject
CreateSolidBrush
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
CreateRectRgn
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC

msimg32

AlphaBlend
TransparentBlt

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegDeleteKeyW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteValueW
RegOpenKeyW
RegCreateKeyExW
RegOpenKeyExW
RegCreateKeyW
RegSetValueExW
RegCloseKey
RegQueryValueExW

shell32

DragQueryFileW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetDesktopFolder
SHGetFileInfoW
DragFinish
SHGetMalloc
ShellExecuteW
SHAppBarMessage

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameW
PathIsUNCW
PathStripToRootW
PathRemoveFileSpecW
PathFindExtensionW
StrFormatKBSizeW

uxtheme

GetCurrentThemeName
GetWindowTheme
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
IsAppThemed
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
DrawThemeParentBackground
DrawThemeText
GetThemePartSize

ole32

DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CoInitializeEx
CoInitialize
CoCreateInstance
CLSIDFromString
CoCreateGuid
CoFreeUnusedLibraries
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
OleInitialize
OleUninitialize
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
CoUninitialize
CoRegisterMessageFilter
CoRevokeClassObject
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CLSIDFromProgID
OleLockRunning

oleaut32

SysAllocStringLen
OleCreateFontIndirect
VarBstrFromDate
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
LoadTypeLi
SysStringLen
SysAllocString
SysFreeString
VariantChangeType
VariantClear
VariantInit

oledlg

OleUIBusyW

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipDrawImageRectI

setupapi

SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 328KB - Virtual size: 328KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5e6d49033b1cb71a43e7b87f9367bafd

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

setupapi

oleacc

imm32

winmm

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 328KB - Virtual size: 328KB

.data Size: 26KB - Virtual size: 57KB

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.reloc Size: 120KB - Virtual size: 120KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 328KB - Virtual size: 328KB

.data
Size: 26KB - Virtual size: 57KB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

.reloc
Size: 120KB - Virtual size: 120KB