8e1e3f5808ce7bf97c0dbc1838f938aaa599fa05895ff516f2a7a39e26a3d47a

Sharing

Copy URL Twitter E-mail

General

Target

8e1e3f5808ce7bf97c0dbc1838f938aaa599fa05895ff516f2a7a39e26a3d47a
Size

732KB
MD5

6438ce07ece436b64b8a0080f3f30c09
SHA1

f3f118e3afc1eee19672df5b506eeea64c8eca92
SHA256

8e1e3f5808ce7bf97c0dbc1838f938aaa599fa05895ff516f2a7a39e26a3d47a
SHA512

6cfd38db67e312475f9b9ea86cd0cda79294d438104ff223aaeb96cc5d269ad0dbcf7904f1c835f8b90a261f7acecf5d127971e2fcda4462ee226b27cc2d6b99
SSDEEP

12288:xqcfIA8qbXGc4hgsWPLBphR4R2awqir6r1I3h:xxIANWufPLBpzuwZuri

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e1e3f5808ce7bf97c0dbc1838f938aaa599fa05895ff516f2a7a39e26a3d47a

Files

8e1e3f5808ce7bf97c0dbc1838f938aaa599fa05895ff516f2a7a39e26a3d47a
.exe windows:4 windows x86

f9d1660430bdbb3e951c237f6f06cfc8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

cfgmgr32

CM_Get_Parent
CM_Get_Device_IDA

kernel32

GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GetProcessVersion
GetCPInfo
SetErrorMode
RtlUnwind
GetStartupInfoA
ExitProcess
RaiseException
HeapAlloc
HeapFree
SetStdHandle
GetFileType
GetTimeZoneInformation
GetSystemTime
GetACP
HeapReAlloc
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetModuleFileNameA
GetTempPathA
GetPrivateProfileIntA
GetProfileStringA
InterlockedExchange
GetWindowsDirectoryA
GetSystemDirectoryA
WinExec
CreateToolhelp32Snapshot
Process32First
Process32Next
GetOEMCP
GetLastError
CreateEventA
Sleep
GetTickCount
CloseHandle
CreateProcessA
CopyFileA
DeleteFileA
SetFileAttributesA
GetDriveTypeA
GetCommandLineA
WaitForSingleObject
GetVersionExA
CreateThread
GetLogicalDrives
CreateMutexA
FlushFileBuffers
CreateFileA
WideCharToMultiByte
MultiByteToWideChar
GetDiskFreeSpaceExA
ReleaseMutex
GetCurrentProcess
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeviceIoControl
ResetEvent
FreeLibrary
GetProcAddress
LoadLibraryA
CreateDirectoryA
GetVolumeInformationA
GetDiskFreeSpaceA
InterlockedIncrement
InterlockedDecrement
GetLocalTime
GetFileSize
GetPrivateProfileStringA
WritePrivateProfileStringA
GetModuleHandleA
GetFileAttributesA
TerminateProcess
FileTimeToDosDateTime
SystemTimeToFileTime
DosDateTimeToFileTime
IsDBCSLeadByte
LoadResource
FindResourceA
LockResource
GlobalFree
GlobalUnlock
GlobalLock
lstrcpyA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
GetCurrentThreadId
lstrcatA
GetVersion
lstrlenA
GetCurrentThread
lstrcmpA
GlobalAlloc
LocalFree
FormatMessageA
SetLastError
MulDiv
FileTimeToSystemTime
FileTimeToLocalFileTime
DuplicateHandle
ReadFile
WriteFile
SetFilePointer
LockFile
UnlockFile
SetEndOfFile
FindClose
FindFirstFileA
lstrcpynA
GetFullPathNameA
GetThreadLocale
GetFileTime
GlobalFlags
TlsAlloc
SizeofResource
LocalAlloc

user32

LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
CopyRect
IsWindowVisible
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuCheckMarkDimensions
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
InvalidateRect
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
GetWindowPlacement
EnableWindow
MessageBoxA
LoadIconA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
GetWindowRect
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetParent
GetWindowLongA
GetDlgItem
IsWindowEnabled
CharUpperA
SystemParametersInfoA
GetTopWindow
IsWindow
PostMessageA
GetClassNameA
GetWindow
PostQuitMessage
PostThreadMessageA
RegisterClipboardFormatA
InflateRect
GetMenuItemID
GetCursorPos
CreatePopupMenu
DrawFocusRect
DefDlgProcA
IsWindowUnicode
DrawIcon
GetClientRect
GetSystemMetrics
SendMessageA
IsIconic
SetWindowPos
SetForegroundWindow
AppendMenuA
MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
CharNextA
GetSysColorBrush
LoadCursorA
GetDesktopWindow
PtInRect
CallWindowProcA
LoadStringA
DestroyMenu
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
MapDialogRect
SetWindowContextHelpId
GetMessageA
TranslateMessage
ValidateRect
SetCursor
GetKeyState

gdi32

CreateCompatibleDC
BitBlt
GetTextExtentPointA
PatBlt
GetMapMode
LPtoDP
DPtoLP
GetBkColor
GetTextColor
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateSolidBrush
GetWindowExtEx
GetViewportExtEx
GetDeviceCaps
DeleteObject
IntersectClipRect
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateDIBitmap

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegOpenKeyA
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
RegCloseKey
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA

shell32

SHChangeNotify
ShellExecuteA
Shell_NotifyIconA

comctl32

ord17

oledlg

ord8

ole32

OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

VariantChangeType
SysAllocStringByteLen
SysAllocString
VariantCopy
VariantClear
SysAllocStringLen
SysFreeString
VariantTimeToSystemTime
SysStringLen

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

setupapi

SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA

Sections

.text
Size: 328KB - Virtual size: 327KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 324KB - Virtual size: 324KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f9d1660430bdbb3e951c237f6f06cfc8

Headers

File Characteristics

Imports

cfgmgr32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

version

setupapi

Sections

.text Size: 328KB - Virtual size: 327KB

.rdata Size: 48KB - Virtual size: 47KB

.data Size: 28KB - Virtual size: 217KB

.rsrc Size: 324KB - Virtual size: 324KB

.text
Size: 328KB - Virtual size: 327KB

.rdata
Size: 48KB - Virtual size: 47KB

.data
Size: 28KB - Virtual size: 217KB

.rsrc
Size: 324KB - Virtual size: 324KB