d00264cb074511becc9fb6e3781880c921be23b8b27bd291f98087675cc3d151

Sharing

Copy URL Twitter E-mail

General

Target

d00264cb074511becc9fb6e3781880c921be23b8b27bd291f98087675cc3d151
Size

568KB
MD5

d76e822782ac447b9e3a2e1207a3672a
SHA1

dccab6a3f3c6bccdbc160f1a740799842d4b2ddd
SHA256

d00264cb074511becc9fb6e3781880c921be23b8b27bd291f98087675cc3d151
SHA512

48619ef77d100077289b80417045197be21ed6144ca50f5e6228cb322cdf38ea60d667a9260a94016e058054c5b8cfc4fd19b1e96b18c4c46d3b61311f81092b
SSDEEP

12288:hGFZdE/FDu7Rc0EMmo8nZ1bBSNTNMDuGX6a5tsoe0wnwQG4QH91d:hGFk/RfPZ1bBSNTNMDuGX6a5tsoe0wnw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d00264cb074511becc9fb6e3781880c921be23b8b27bd291f98087675cc3d151

Files

d00264cb074511becc9fb6e3781880c921be23b8b27bd291f98087675cc3d151
.exe windows:6 windows x86

eb38ac075d49f0c7324b3bac6fda89a5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingW
FindNextFileW
FlushInstructionCache
SetLastError
GlobalReAlloc
WaitForSingleObject
GetPrivateProfileStringW
lstrcpynW
GetTempPathW
FreeResource
FindResourceExW
FindResourceW
LoadResource
SizeofResource
LockResource
GetDriveTypeW
DeviceIoControl
CreateThread
ResetEvent
ReleaseSemaphore
InitializeCriticalSection
SetEvent
lstrcmpA
FlushFileBuffers
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
LoadLibraryExW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
GetStdHandle
GetModuleHandleExW
ExitProcess
GetOEMCP
CreateFileW
IsValidCodePage
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
RaiseException
FindClose
CreateSemaphoreW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
CreateEventW
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
RtlUnwind
GetCommandLineW
VirtualQuery
VirtualProtect
GetSystemTimeAsFileTime
EncodePointer
GetStringTypeW
WideCharToMultiByte
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
OutputDebugStringW
IsDebuggerPresent
lstrcpyA
lstrcpynA
OpenFileMappingW
SetNamedPipeHandleState
WaitNamedPipeW
PeekNamedPipe
GlobalUnlock
lstrlenW
GetModuleFileNameW
MulDiv
LeaveCriticalSection
HeapDestroy
LoadLibraryW
HeapReAlloc
GlobalAlloc
WriteFile
GetProcessHeap
GetModuleHandleW
WritePrivateProfileStringW
ReadFile
CopyFileW
Sleep
UnmapViewOfFile
MapViewOfFile
FindFirstFileW
lstrcpyW
SetFileAttributesW
LocalFree
DeleteFileW
CloseHandle
GetCurrentThreadId
DeleteCriticalSection
lstrcatW
lstrcmpiW
GetSystemInfo
DecodePointer
GlobalFree
EnterCriticalSection
HeapSize
GetProcAddress
GetLastError
LCMapStringW
VerifyVersionInfoW
InitializeCriticalSectionEx
MultiByteToWideChar
lstrcmpW
GetLocaleInfoW
lstrcatA
GlobalLock
CreateDirectoryW
HeapFree
GetCurrentProcess
MoveFileExW
VerSetConditionMask
HeapAlloc
FreeLibrary
lstrlenA
SetFilePointer
GetFileSize
GetACP
ExitThread

user32

GetMonitorInfoW
SendMessageW
SwitchToThisWindow
GetSystemMetrics
MessageBoxW
GetWindowThreadProcessId
UnionRect
ToUnicode
GetKeyboardState
DrawTextW
MapVirtualKeyW
SetWindowTextW
GetWindowTextW
FindWindowW
LoadImageW
CreateWindowExW
GetDesktopWindow
MonitorFromWindow
ReleaseDC
SystemParametersInfoW
GetForegroundWindow
GetDC
wsprintfW
PtInRect
AttachThreadInput
SetParent
UnregisterClassW
MapDialogRect
DefWindowProcW
CallWindowProcW
IsWindow
ShowWindow
EndDialog
SetWindowLongW
GetWindowLongW
BeginPaint
GetClientRect
DialogBoxIndirectParamW
EndPaint
GetDlgCtrlID
SetDlgItemTextW
IsDlgButtonChecked
GetDlgItem
GetParent
EnableWindow
GetDlgItemTextW
CheckRadioButton
CheckDlgButton
SendDlgItemMessageW
PostMessageW
VkKeyScanW
GetWindow
SetScrollInfo
UpdateWindow
MapWindowPoints
ScrollWindowEx
GetActiveWindow
SetWindowPos
SetScrollPos
InvalidateRect
GetScrollInfo
DrawEdge
SetFocus
FillRect
GetWindowRect
DestroyWindow
RedrawWindow
SetRect
CreateDialogIndirectParamW
RegisterClassExW
GetClassInfoExW
LoadCursorW
InflateRect
GetWindowTextLengthW
GetSysColorBrush
GetSysColor
SetForegroundWindow

gdi32

Rectangle
CreatePen
CreateDIBSection
StretchBlt
SetBrushOrgEx
SetBkColor
SetDIBColorTable
GetDIBColorTable
SetStretchBltMode
CreateSolidBrush
EnumFontFamiliesW
SetTextColor
SetBkMode
GetStockObject
BitBlt
SetViewportOrgEx
DeleteObject
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
CreateFontIndirectW
GetDeviceCaps
SelectObject
GetTextExtentPointW
GetObjectW
GetTextExtentPoint32W

comdlg32

GetOpenFileNameW
GetSaveFileNameW
ChooseFontW
ChooseColorW

advapi32

RegSetValueExW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegDeleteKeyW
RegQueryValueExW
RegQueryValueExA
RegCreateKeyExW

shell32

CommandLineToArgvW
SHGetPathFromIDListW
ShellExecuteW
ord75
SHBrowseForFolderW
ShellExecuteExW

ole32

CoUninitialize
CreateStreamOnHGlobal
CoInitializeEx
CoTaskMemFree
CoInitialize
CLSIDFromString

shlwapi

StrChrW
PathFileExistsW
PathAppendW
PathStripPathW
PathRemoveFileSpecW
StrToIntW
PathFindFileNameW

gdiplus

GdipCreateFontFromLogfontW
GdipSaveImageToFile
GdipGetDC
GdipSetInterpolationMode
GdipAddPathArc
GdipAddPathLine
GdipCreatePath
GdipSaveImageToStream
GdipGetDpiY
GdipGetDpiX
GdipDrawImageRectRectI
GdipReleaseDC
GdipSetPageUnit
GdipGetCompositingQuality
GdipCloneBitmapArea
GdipImageRotateFlip
GdiplusShutdown
GdipGetImageHeight
GdipGetInterpolationMode
GdipGetPageUnit
GdipDrawString
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipDeleteStringFormat
GdipCloneStringFormat
GdipStringFormatGetGenericTypographic
GdipGetLogFontW
GdipMeasureString
GdipGetTextRenderingHint
GdipDeletePath
GdipDrawPath
GdipFillPath
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipSetPixelOffsetMode
GdipSetSmoothingMode
GdipGetPixelOffsetMode
GdipGetSmoothingMode
GdipDeletePen
GdipDrawLineI
GdipCreatePen1
GdipSetTextRenderingHint
GdipCreateFromHDC
GdipCreateBitmapFromFile
GdiplusStartup
GdipCloneImage
GdipBitmapLockBits
GdipGetImagePaletteSize
GdipDisposeImage
GdipDrawImageI
GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipCreateBitmapFromScan0
GdipGetImagePixelFormat
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipCreateFontFamilyFromName
GdipGetGenericFontFamilySansSerif
GdipCreateFont
GdipAlloc
GdipDeleteFontFamily
GdipDeleteFont
GdipFree
GdipGetImageWidth
GdipSetCompositingQuality

msimg32

TransparentBlt
AlphaBlend

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

comctl32

_TrackMouseEvent

wininet

DeleteUrlCacheEntryW

urlmon

URLDownloadToFileW

Sections

.text
Size: 390KB - Virtual size: 389KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb38ac075d49f0c7324b3bac6fda89a5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

shlwapi

gdiplus

msimg32

version

comctl32

wininet

urlmon

Sections

.text Size: 390KB - Virtual size: 389KB

.rdata Size: 92KB - Virtual size: 91KB

.data Size: 11KB - Virtual size: 21KB

.rsrc Size: 48KB - Virtual size: 48KB

.reloc Size: 25KB - Virtual size: 25KB

.text
Size: 390KB - Virtual size: 389KB

.rdata
Size: 92KB - Virtual size: 91KB

.data
Size: 11KB - Virtual size: 21KB

.rsrc
Size: 48KB - Virtual size: 48KB

.reloc
Size: 25KB - Virtual size: 25KB