cdcdf370149435c82d4f98019b40f553a43de378ca9da454732bd122d1abe82f

Sharing

Copy URL Twitter E-mail

General

Target

cdcdf370149435c82d4f98019b40f553a43de378ca9da454732bd122d1abe82f
Size

2.3MB
MD5

3a3ea464fdc3923c3545a96e4283194f
SHA1

8ea30337a83f3356e350c2183bffb4be724bca7a
SHA256

cdcdf370149435c82d4f98019b40f553a43de378ca9da454732bd122d1abe82f
SHA512

0d52ebb051664ecab9af8c96258bba9c11bd6576488830f5ac8e8a32534d90286e8f1ecf9a8b0b36ff866806bb74807ff014e3e3f8f37d469cceb4b4601c50e3
SSDEEP

49152:5slIQUzdzzB7uHxl9UTr5MgIuVfPAfrhR2wAchiZ2Tx5:GIQUzdzkH+Tr5MgIuVHAfrhR2wACiZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cdcdf370149435c82d4f98019b40f553a43de378ca9da454732bd122d1abe82f

Files

cdcdf370149435c82d4f98019b40f553a43de378ca9da454732bd122d1abe82f
.exe windows:5 windows x86

b18d00e17475c2c52d059fd598322695

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapQueryInformation
GetCommandLineW
GetCommandLineA
FreeLibraryAndExitThread
ExitThread
CreateThread
GetModuleHandleExW
GetConsoleCP
VirtualQuery
VirtualAlloc
GetSystemInfo
RtlUnwind
QueryPerformanceFrequency
SetStdHandle
GetFileType
GetStdHandle
GetACP
GetStringTypeW
LCMapStringW
GetDriveTypeW
GetConsoleMode
SetFilePointerEx
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetTimeZoneInformation
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
GetTempFileNameW
GetTempPathW
GetProfileIntW
GetTickCount
SearchPathW
GetWindowsDirectoryW
FindResourceExW
SetErrorMode
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
VerifyVersionInfoW
VerSetConditionMask
GetCurrentDirectoryW
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GlobalFlags
GlobalGetAtomNameW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GetPrivateProfileIntW
lstrcmpA
GetCurrentThread
GetVersionExW
GetThreadLocale
lstrcmpiW
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
ResumeThread
SuspendThread
SetThreadPriority
SetEvent
GetCurrentProcessId
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryW
LoadLibraryA
LoadLibraryExW
GetModuleHandleA
FreeResource
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
OutputDebugStringA
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetProcAddress
FindNextFileW
FindFirstFileW
FindClose
FileTimeToLocalFileTime
WideCharToMultiByte
FormatMessageW
MulDiv
LocalFree
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
SetLastError
DeleteCriticalSection
RaiseException
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
DecodePointer
WaitForSingleObject
CreateFileW
OutputDebugStringW
CreateEventW
lstrcpyW
WinExec
ReadFile
GetModuleFileNameW
CreateMutexW
CloseHandle
CopyFileW
DeleteFileW
RemoveDirectoryW
InterlockedExchange
CreateDirectoryW
WritePrivateProfileStringW
GetSystemTime
Sleep
MultiByteToWideChar
GetPrivateProfileStringW
FindResourceW
GetModuleHandleW
SizeofResource
LoadResource
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetLastError
LockResource
ExitProcess
WriteConsoleW

user32

OffsetRect
SetRectEmpty
SendDlgItemMessageA
CopyImage
RealChildWindowFromPoint
LoadCursorW
GetSysColorBrush
GetKeyNameTextW
MapDialogRect
SetWindowContextHelpId
SetCursor
ShowOwnedPopups
PostQuitMessage
CharUpperW
TranslateMessage
GetMessageW
GetMenuItemInfoW
DestroyMenu
IntersectRect
GetWindowThreadProcessId
GetDesktopWindow
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
IsDialogMessageW
SetWindowTextW
IsWindowEnabled
CheckDlgButton
MoveWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
SetWindowLongW
GetWindowLongW
EqualRect
MapWindowPoints
MessageBoxW
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
GetForegroundWindow
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
SetFocus
GetDlgCtrlID
GetDlgItem
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
GetNextDlgGroupItem
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsMenu
DrawIconEx
RegisterClipboardFormatW
DrawEdge
PostMessageW
EnableWindow
GetDC
ReleaseDC
SetWindowRgn
IsWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
TrackMouseEvent
IsZoomed
SetCapture
ReleaseCapture
SetTimer
KillTimer
DeleteMenu
MessageBeep
WindowFromPoint
NotifyWinEvent
GetMenuDefaultItem
SetMenuDefaultItem
IsRectEmpty
UpdateLayeredWindow
EnableScrollBar
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
FillRect
UnionRect
MonitorFromPoint
SetLayeredWindowAttributes
EnumDisplayMonitors
WaitMessage
CharNextW
CopyAcceleratorTableW
GetPropW
InvalidateRect
GetWindowRect
PtInRect
GetParent
FindWindowW
SetWindowsHookExW
GetIconInfo
UnhookWindowsHookEx
SendMessageW
GetSubMenu
GetMenuItemID
GetMenuItemCount
ModifyMenuW
GetClientRect
CopyRect
InflateRect
UpdateWindow
SetForegroundWindow
InvalidateRgn
GetCursorPos
ShowWindow
RegisterDeviceNotificationW
IsIconic
GetAsyncKeyState
keybd_event
mouse_event
MapVirtualKeyW
GetSystemMetrics
LoadMenuW
GetSystemMenu
CreatePopupMenu
AppendMenuW
DrawIcon
ClientToScreen
LoadIconW
SystemParametersInfoW
LockWorkStation
DrawStateW
DestroyIcon
UnregisterClassW
GetMenuStringW
GetMenuState
InsertMenuW
RemoveMenu
DrawTextW
DrawFrameControl
DrawFocusRect
SetClassLongW
SetParent
SetRect
LoadImageW
OpenClipboard
CloseClipboard
EmptyClipboard
DrawTextExW
GrayStringW
TabbedTextOutW
GetWindowDC
BeginPaint
EndPaint
ScreenToClient
GetSysColor
SetClipboardData
CharUpperBuffW
LockWindowUpdate
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
LoadAcceleratorsW
CreateAcceleratorTableW
DestroyAcceleratorTable
BringWindowToTop
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
SetCursorPos
CopyIcon
FrameRect
PostThreadMessageW
GetWindowRgn
SubtractRect
CreateMenu
GetUpdateRect
GetComboBoxInfo
MapVirtualKeyExW
IsCharLowerW
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
DestroyCursor
GetDoubleClickTime
IsClipboardFormatAvailable
InvertRect
HideCaret
BeginDeferWindowPos

gdi32

CreateRectRgnIndirect
TextOutW
CopyMetaFileW
CreateBitmap
CreateHatchBrush
CreatePen
CreatePatternBrush
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
MoveToEx
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
GetTextExtentPoint32W
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectW
GetMapMode
PatBlt
SetRectRgn
DPtoLP
GetTextMetricsW
CreateRoundRectRgn
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetTextColor
GetRgnBox
EnumFontFamiliesExW
RealizePalette
SetPixel
OffsetRgn
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
LPtoDP
ExtFloodFill
SetPaletteEntries
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
SetPixelV
GetTextFaceW
GetBkColor
GetDIBColorTable
AddFontResourceExW
CreateDCW
CreateSolidBrush
Rectangle
GetObjectW
SetDIBColorTable
CreateDIBSection
StretchBlt
SelectObject
GetTextExtentPointW
GetPixel
DeleteObject
DeleteDC
CreateRectRgn
CreateCompatibleDC
CombineRgn
SetWindowOrgEx
GetDeviceCaps
BitBlt

msimg32

AlphaBlend
TransparentBlt

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegQueryValueW
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegEnumKeyExW
RegEnumValueW
RegCloseKey
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW

shell32

Shell_NotifyIconW
SHGetFileInfoW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHAppBarMessage
SHBrowseForFolderW
DragFinish
DragQueryFileW
ShellExecuteW

comctl32

ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_GetIconSize
InitCommonControlsEx

shlwapi

PathFindExtensionW
PathIsUNCW
PathRemoveFileSpecW
StrFormatKBSizeW
PathFindFileNameW
PathStripToRootW

uxtheme

GetThemePartSize
GetThemeSysColor
IsAppThemed
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetCurrentThemeName
IsThemeBackgroundPartiallyTransparent
GetWindowTheme
GetThemeColor

ole32

OleTranslateAccelerator
IsAccelerator
CoRevokeClassObject
CoRegisterMessageFilter
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CreateStreamOnHGlobal
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CLSIDFromProgID
CLSIDFromString
CoInitialize
CoCreateGuid
CoCreateInstance
CoInitializeEx
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc

oleaut32

VariantInit
SysAllocStringLen
SysFreeString
VariantTimeToSystemTime
SafeArrayDestroy
VariantClear
VariantCopy
VarBstrFromDate
OleCreateFontIndirect
VariantChangeType
SysAllocString
LoadTypeLi
SysStringLen
SystemTimeToVariantTime

oledlg

OleUIBusyW

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromStream
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0

hid

HidP_GetCaps
HidD_GetAttributes
HidD_GetHidGuid
HidD_GetPreparsedData
HidD_FreePreparsedData
HidD_GetFeature
HidD_SetFeature

setupapi

SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

winmm

PlaySoundW

imm32

ImmGetContext
ImmReleaseContext
ImmGetOpenStatus

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 360KB - Virtual size: 359KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 321KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b18d00e17475c2c52d059fd598322695

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

hid

setupapi

oleacc

winmm

imm32

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 360KB - Virtual size: 359KB

.data Size: 23KB - Virtual size: 321KB

.rsrc Size: 101KB - Virtual size: 101KB

.reloc Size: 156KB - Virtual size: 156KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 360KB - Virtual size: 359KB

.data
Size: 23KB - Virtual size: 321KB

.rsrc
Size: 101KB - Virtual size: 101KB

.reloc
Size: 156KB - Virtual size: 156KB