0558508a0a9e863a3655ed47fc4e26c10259f0b59e019837177956d0ea2fe7a4

Sharing

Copy URL Twitter E-mail

General

Target

0558508a0a9e863a3655ed47fc4e26c10259f0b59e019837177956d0ea2fe7a4
Size

1.9MB
MD5

a2ca5914ba1a72ff0a351b7b811c5763
SHA1

f126c596672653fd2ed9f8d9b2fc67845c61b650
SHA256

0558508a0a9e863a3655ed47fc4e26c10259f0b59e019837177956d0ea2fe7a4
SHA512

569519945b25c9d7fc81a8f7d23089c7da8874a1540b0bfd8d47b30308f11c010843147239aa6b30549f646812a9e4e6a41adf4376cb87bb28882b1809bae589
SSDEEP

49152:NfT1cXEdzPXipVogpCA+oP0aqrI/NwelqtvpplfZyvBsD1l:pw4zPXi4gpCA+yzqrI/NwelqtnlYvBs7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0558508a0a9e863a3655ed47fc4e26c10259f0b59e019837177956d0ea2fe7a4

Files

0558508a0a9e863a3655ed47fc4e26c10259f0b59e019837177956d0ea2fe7a4
.exe windows:5 windows x86

08b0e11bbfc7000ceb9895f723259e48

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeResource
FindResourceA
GlobalFree
GetFileInformationByHandle
GlobalLock
lstrcmpW
SetLastError
DeactivateActCtx
ActivateActCtx
LoadLibraryA
LoadLibraryW
CompareStringA
GetProcAddress
FreeLibrary
GetModuleHandleA
GetVersionExA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
ReleaseActCtx
GetModuleFileNameW
GetModuleHandleW
GlobalAlloc
lstrcmpA
GetLocaleInfoA
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetCurrentThread
SetThreadPriority
ResumeThread
WaitForSingleObject
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetCurrentProcessId
MulDiv
lstrlenW
LocalFree
FormatMessageA
GlobalSize
CopyFileA
lstrcmpiA
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
GlobalFlags
GetACP
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GetCPInfo
GetOEMCP
InitializeCriticalSectionAndSpinCount
FileTimeToSystemTime
GetFileAttributesExA
FileTimeToLocalFileTime
GetFileSizeEx
GetFileTime
GetWindowsDirectoryA
GetNumberFormatA
GetTempFileNameA
GetTempPathA
SearchPathA
GetTickCount
GetProfileIntA
Sleep
VirtualProtect
FindResourceExW
HeapFree
EncodePointer
DecodePointer
ExitProcess
HeapAlloc
VirtualAlloc
GetSystemInfo
VirtualQuery
GetSystemTimeAsFileTime
GetCommandLineA
HeapSetInformation
RtlUnwind
RaiseException
ExitThread
CreateThread
HeapReAlloc
HeapQueryInformation
HeapSize
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
SetHandleCount
GetStdHandle
GetStartupInfoW
GetConsoleCP
GetConsoleMode
IsValidCodePage
GetTimeZoneInformation
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStringTypeW
LCMapStringW
CompareStringW
WriteConsoleW
CreateFileW
GetProcessHeap
SetEnvironmentVariableA
SleepEx
VerifyVersionInfoA
VerSetConditionMask
GetSystemDirectoryA
PeekNamedPipe
WaitForMultipleObjects
ExpandEnvironmentStringsA
GetDriveTypeA
FindFirstFileExA
GetCurrentDirectoryW
SetFileTime
WriteFile
CreateDirectoryA
GetFileAttributesA
LocalFileTimeToFileTime
lstrcatA
lstrcpyA
GetCurrentDirectoryA
SystemTimeToFileTime
ReadFile
CloseHandle
SetFilePointer
CreateFileA
InterlockedIncrement
InterlockedDecrement
GetLastError
lstrlenA
MultiByteToWideChar
InterlockedExchange
EnterCriticalSection
LeaveCriticalSection
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
GetModuleFileNameA
GlobalUnlock
DeleteFileA
GetDriveTypeW

user32

AppendMenuA
GetMenuStringA
FillRect
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
InflateRect
GetMenuItemInfoA
DestroyMenu
CharUpperA
IntersectRect
RealChildWindowFromPoint
GetSysColorBrush
SetCapture
WindowFromPoint
LoadCursorW
ReleaseCapture
WaitMessage
DeleteMenu
InvalidateRect
SetTimer
KillTimer
SetRectEmpty
SetLayeredWindowAttributes
PostThreadMessageA
CopyAcceleratorTableA
ToAsciiEx
MapVirtualKeyA
GetKeyboardLayout
GetKeyboardState
GetAsyncKeyState
DestroyAcceleratorTable
LoadAcceleratorsW
CreateAcceleratorTableA
SetWindowRgn
NotifyWinEvent
CreatePopupMenu
SetParent
SetClassLongA
TranslateAcceleratorA
BringWindowToTop
InsertMenuItemA
LoadAcceleratorsA
DestroyIcon
LoadImageA
LoadMenuA
ReuseDDElParam
UnpackDDElParam
MonitorFromPoint
GetSystemMenu
IsMenu
IsRectEmpty
LockWindowUpdate
EnumChildWindows
RegisterClipboardFormatA
DrawStateA
CopyImage
LoadImageW
GetMenuDefaultItem
InvertRect
DrawFocusRect
HideCaret
EnableScrollBar
GetIconInfo
GetNextDlgGroupItem
DrawIconEx
DrawEdge
DrawFrameControl
SetRect
SetCursorPos
UnionRect
UpdateLayeredWindow
SetMenuDefaultItem
IsCharLowerA
MessageBeep
MapVirtualKeyExA
IsClipboardFormatAvailable
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
FrameRect
GetUpdateRect
CharUpperBuffA
CopyIcon
SubtractRect
CreateMenu
GetDoubleClickTime
MapDialogRect
GetWindowRgn
DestroyCursor
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
InsertMenuA
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
PtInRect
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
GetWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
EnableWindow
LoadIconW
RedrawWindow
IsZoomed
PostQuitMessage
SetMenuItemBitmaps
SendMessageA
GetSystemMetrics
GetWindowRect
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
GetMenuItemCount
CheckDlgButton
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
OffsetRect
GetDC
EnumDisplayMonitors
IsIconic
GetClientRect
DrawIcon
IsWindowVisible
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
LoadMenuW
GetSubMenu
GetCursorPos
GetDesktopWindow
ReleaseDC
SetCursor
LoadCursorA
wsprintfA
TrackPopupMenu
GetKeyState
SetMenu
RemoveMenu
GetWindowThreadProcessId
ShowOwnedPopups
GetMessageA
TranslateMessage
ValidateRect
AdjustWindowRectEx
SystemParametersInfoA
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
UpdateWindow
PostMessageA
GetKeyNameTextA
GetMenuItemID

gdi32

SetBkColor
CreateRectRgn
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
DeleteObject
GetObjectA
CreateDIBSection
SelectObject
Rectangle
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetPixelV
GetTextFaceA
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreateDCA
CopyMetaFileA
GetDeviceCaps
SetPaletteEntries
ExtFloodFill
GetViewportOrgEx
GetBoundsRect
FrameRgn
FillRgn
PtInRegion
LPtoDP
GetWindowOrgEx
EnumFontFamiliesExA
Polygon
Ellipse
Polyline
CreateEllipticRgn
CreatePolygonRgn
GetSystemPaletteEntries
GetNearestPaletteIndex
GetPaletteEntries
CreatePalette
GetBkColor
SetPixel
StretchBlt
RealizePalette
GetDIBits
SetDIBColorTable
GetTextColor
CreateRoundRectRgn
GetRgnBox
OffsetRgn
GetTextCharsetInfo
EnumFontFamiliesA
CreateDIBitmap
GetTextMetricsA
DPtoLP
PatBlt
CombineRgn
SetRectRgn
CreateRectRgnIndirect
GetTextExtentPoint32A
CreateFontIndirectA
CreateHatchBrush
CreateSolidBrush
CreatePen
GetObjectType
SelectPalette
GetStockObject
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
CreateBitmap
SetTextColor
RectVisible
PtVisible
GetPixel
GetViewportExtEx
GetWindowExtEx

shell32

SHAppBarMessage
DragQueryFileA
DragFinish
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHGetFileInfoA
ShellExecuteA
SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA

oleaut32

SysStringLen
SysAllocString
VarBstrFromDate
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
VariantTimeToSystemTime
SystemTimeToVariantTime
SysFreeString

msimg32

TransparentBlt
AlphaBlend

comctl32

ImageList_GetIconSize

shlwapi

PathFindExtensionA
PathFindFileNameA
PathRemoveFileSpecW
PathStripToRootA
PathIsUNCA

gdiplus

GdiplusShutdown
GdipDisposeImage
GdipFree
GdipAlloc
GdipCloneImage
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdiplusStartup
GdipDeleteGraphics
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromStream
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdipDrawImageI
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI

wldap32

ord33
ord79
ord35
ord32
ord200
ord30
ord26
ord50
ord60
ord143
ord211
ord22
ord27
ord41
ord46
ord301

ws2_32

bind
ntohs
htons
WSAIoctl
send
recv
select
WSAGetLastError
__WSAFDIsSet
WSASetLastError
WSAStartup
WSACleanup
getsockopt
getpeername
closesocket
socket
connect
freeaddrinfo
getaddrinfo
sendto
recvfrom
accept
listen
ioctlsocket
gethostname
htonl
ntohl
setsockopt
getsockname

crypt32

CertFreeCertificateContext

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

comdlg32

GetFileTitleA

advapi32

RegDeleteKeyA
CryptGetHashParam
CryptDestroyKey
CryptEncrypt
CryptImportKey
CryptHashData
CryptCreateHash
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
RegEnumKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
CryptDestroyHash
RegEnumKeyA
RegQueryValueA
RegEnumValueA

ole32

RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CoCreateGuid
CoUninitialize
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleGetClipboard
DoDragDrop
OleLockRunning
CreateStreamOnHGlobal
CoInitialize
CoInitializeEx
CoCreateInstance

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 309KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

08b0e11bbfc7000ceb9895f723259e48

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

oleaut32

msimg32

comctl32

shlwapi

gdiplus

wldap32

ws2_32

crypt32

oleacc

imm32

winmm

winspool.drv

comdlg32

advapi32

ole32

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 309KB - Virtual size: 308KB

.data Size: 23KB - Virtual size: 53KB

.rsrc Size: 10KB - Virtual size: 12KB

.reloc Size: 175KB - Virtual size: 175KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 309KB - Virtual size: 308KB

.data
Size: 23KB - Virtual size: 53KB

.rsrc
Size: 10KB - Virtual size: 12KB

.reloc
Size: 175KB - Virtual size: 175KB