12c62ea2f85aa0f006e0532e181706a4266fec2ef44cd444046e3e5303b61458

Sharing

Copy URL Twitter E-mail

General

Target

12c62ea2f85aa0f006e0532e181706a4266fec2ef44cd444046e3e5303b61458
Size

2.8MB
MD5

569e5d150514e15d1e3cf5459bbb781c
SHA1

4a87d6e68f64171eb66c7369784d545c4ea1086f
SHA256

12c62ea2f85aa0f006e0532e181706a4266fec2ef44cd444046e3e5303b61458
SHA512

b9ab5e2b60f20d9955d8f848f40a512b4e8612e91d2d6209e64da2b97b7887cfd0812472625f3463703a9c4948378e7c309a71d583e265b961849dd474eba543
SSDEEP

24576:YUE72XKd3/FQc+NgFB0CHidyhaabTWVVSTxO/FBovOi2xm8NczJaW2wEj9IP3xuH:YWuuVSTuu7taWTCIVCeTwlJT1FbWup

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12c62ea2f85aa0f006e0532e181706a4266fec2ef44cd444046e3e5303b61458

Files

12c62ea2f85aa0f006e0532e181706a4266fec2ef44cd444046e3e5303b61458
.exe windows:4 windows x86

a16f00f10bb5c2ee9d6b4b9bb7f98c46

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHAutoComplete
PathRemoveFileSpecA

kernel32

GetStringTypeW
SetConsoleCtrlHandler
IsBadReadPtr
IsBadCodePtr
SetStdHandle
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoW
CompareStringW
SetEnvironmentVariableA
CreateThread
WaitForSingleObject
Sleep
LCMapStringW
LCMapStringA
GetProfileStringA
VirtualFree
GetEnvironmentStringsW
VirtualAlloc
CloseHandle
EndUpdateResourceA
UpdateResourceA
BeginUpdateResourceA
ReadFile
GetFileSize
DeleteFileA
CreateFileA
OutputDebugStringA
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetFileType
GetStdHandle
SetHandleCount
UnhandledExceptionFilter
FatalAppExitA
FindClose
FindFirstFileA
CopyFileA
GetModuleFileNameA
GetTickCount
lstrlenA
GetDriveTypeA
GetDiskFreeSpaceExA
GetLogicalDriveStringsA
GetFileAttributesA
LocalFree
LocalAlloc
FindNextFileA
WriteFile
SetFilePointer
RemoveDirectoryA
MoveFileA
GetLastError
CreateDirectoryA
lstrcpyA
GetProcAddress
LoadLibraryA
SetUnhandledExceptionFilter
SizeofResource
LockResource
LoadResource
FindResourceA
GetCurrentDirectoryA
lstrcmpA
GetPrivateProfileStringA
GetPrivateProfileIntA
WritePrivateProfileStringA
CreateEventA
InitializeCriticalSection
LeaveCriticalSection
PostQueuedCompletionStatus
EnterCriticalSection
GetSystemInfo
CreateIoCompletionPort
IsBadWritePtr
HeapCreate
HeapDestroy
GetEnvironmentVariableA
HeapSize
HeapReAlloc
TerminateProcess
GetSystemTime
GetTimeZoneInformation
GetACP
ExitProcess
GetCommandLineA
GetStartupInfoA
RaiseException
ExitThread
HeapFree
HeapAlloc
RtlUnwind
lstrcpyW
FindResourceExA
SetErrorMode
GetProcessVersion
GlobalFlags
VirtualProtect
WaitForMultipleObjects
ReleaseMutex
CreateMutexA
ReleaseSemaphore
CreateSemaphoreA
SystemTimeToFileTime
LocalFileTimeToFileTime
GetProfileIntA
TlsGetValue
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
GetDiskFreeSpaceA
GetFileTime
SetFileTime
SuspendThread
GetCurrentThread
SetLastError
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
GetVolumeInformationA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrlenW
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpynA
lstrcmpiA
FormatMessageA
CompareStringA
GetTempPathA
GetTempFileNameA
GetPrivateProfileSectionNamesA
GetCurrentProcessId
EnumResourceLanguagesA
EnumResourceTypesA
MultiByteToWideChar
WideCharToMultiByte
EnumResourceNamesA
SetFileAttributesA
GetLocaleInfoA
GetLocalTime
GetDateFormatA
GetTimeFormatA
GetExitCodeThread
SetThreadPriority
ResetEvent
GetModuleHandleA
GetOEMCP
GetCPInfo
GetVersionExA
GetCurrentThreadId
FreeLibrary
InterlockedIncrement
MulDiv
ResumeThread
TerminateThread
GetVersion
LocalSize
LocalReAlloc
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetSystemDirectoryA
lstrcatA
DeleteCriticalSection
CancelIo
InterlockedExchange
SetEvent
GetQueuedCompletionStatus
InterlockedDecrement
GetStringTypeA

user32

WindowFromDC
PostThreadMessageA
GetWindowThreadProcessId
GetNextDlgGroupItem
MsgWaitForMultipleObjects
CreateMenu
RemoveMenu
InSendMessage
DefMDIChildProcA
TranslateMDISysAccel
DefFrameProcA
LoadStringA
EndPaint
BeginPaint
GetWindowDC
UnpackDDElParam
ReuseDDElParam
TranslateAcceleratorA
SetWindowContextHelpId
ValidateRect
ShowOwnedPopups
PostQuitMessage
DestroyMenu
wvsprintfA
OemToCharA
CharToOemA
GetMenuCheckMarkDimensions
ModifyMenuA
SetMenuItemBitmaps
SetWindowTextA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SendDlgItemMessageA
ScrollWindow
SetScrollInfo
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
WinHelpA
GetClassInfoA
RegisterClassA
SetWindowPlacement
CreateWindowExA
SetPropA
GetPropA
RemovePropA
GetMessageTime
GetMessagePos
GetWindowPlacement
EndDialog
CreateDialogIndirectParamA
GetTabbedTextExtentA
GetClipboardFormatNameA
GetAsyncKeyState
MapDialogRect
DestroyWindow
UnionRect
GetActiveWindow
CallWindowProcA
IsWindowUnicode
GetWindowLongW
SetWindowLongW
GetScrollInfo
GetDoubleClickTime
SetCursorPos
AdjustWindowRectEx
SetWindowRgn
GetCursor
LoadMenuIndirectA
GetMenuStringW
LookupIconIdFromDirectoryEx
CopyImage
BeginDeferWindowPos
EndDeferWindowPos
DeferWindowPos
CharUpperA
GetKeyboardLayoutList
GetKeyboardState
ToAsciiEx
GetKeyboardLayout
MapVirtualKeyExA
GetKeyNameTextA
IsCharLowerA
IsWindowEnabled
IsIconic
LoadAcceleratorsA
CopyAcceleratorTableA
GetWindowTextLengthA
GetWindowTextA
GetDialogBaseUnits
GetClassLongA
SendMessageTimeoutA
DefWindowProcA
DrawFrameControl
SetActiveWindow
DrawAnimatedRects
SetParent
FindWindowA
EnumChildWindows
InsertMenuA
BringWindowToTop
DrawFocusRect
MoveWindow
MapWindowPoints
SetFocus
LoadIconA
SendMessageA
EnableWindow
RegisterWindowMessageA
SetRect
UnregisterClassA
ExcludeUpdateRgn
DefDlgProcA
wsprintfA
LoadImageA
GetWindow
GetClientRect
EqualRect
GetClassNameA
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
ShowWindow
IsDialogMessageA
IsClipboardFormatAvailable
GetMenuStringA
GetDlgItem
WaitMessage
GetTopWindow
GetWindowRgn
GetDlgCtrlID
HideCaret
ShowCaret
IsChild
MapVirtualKeyA
IsMenu
LoadBitmapA
GrayStringA
TabbedTextOutA
DestroyIcon
CopyIcon
CreateIconIndirect
CreateIconFromResourceEx
RegisterClipboardFormatA
SystemParametersInfoA
GetMenuDefaultItem
LockWindowUpdate
GetDCEx
InvertRect
GetMenuItemInfoA
DrawEdge
GetNextDlgTabItem
CopyRect
GetForegroundWindow
GetLastActivePopup
SetWindowLongA
IsZoomed
SetWindowPos
GetWindowLongA
PeekMessageA
IsRectEmpty
DrawStateA
SetRectEmpty
GetSysColorBrush
FillRect
GetCapture
GetSysColor
GetMessageA
TranslateMessage
DispatchMessageA
SetMenuDefaultItem
PostMessageA
SetCapture
LoadCursorA
SetCursor
ScreenToClient
UpdateWindow
WindowFromPoint
ClientToScreen
ReleaseCapture
GetParent
IsWindowVisible
MessageBoxA
GetFocus
GetCursorPos
GetMenuItemCount
EnableMenuItem
DrawMenuBar
DeleteMenu
GetSubMenu
LoadMenuA
CharNextA
PtInRect
GetWindowRect
CheckMenuItem
AppendMenuA
CreatePopupMenu
RedrawWindow
GetDesktopWindow
OffsetRect
GetSystemMetrics
InflateRect
MessageBeep
GetSystemMenu
SetMenu
GetMenu
KillTimer
DestroyCursor
SetClassLongA
ReleaseDC
GetDC
GetIconInfo
CheckMenuRadioItem
IntersectRect
DrawIconEx
ShowScrollBar
GetMenuState
DrawTextA
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetClipboardData
GetKeyState
InvalidateRect
SetTimer
IsWindow
GetMenuItemID
TrackPopupMenu
SetForegroundWindow

gdi32

GetClipBox
GetTextExtentPoint32W
ExtTextOutW
GetCharWidthA
GetCurrentPositionEx
IntersectClipRect
GetClipRgn
ExtSelectClipRgn
SetBrushOrgEx
GetDCOrgEx
StartDocA
SaveDC
RestoreDC
SelectPalette
SetPolyFillMode
SetROP2
SetMapMode
SetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
OffsetClipRgn
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
SelectClipPath
GetBitmapBits
GetObjectType
EnumMetaFile
PlayMetaFile
ExtCreatePen
CreateHatchBrush
CreateDIBPatternBrushPt
OffsetViewportOrgEx
SetRectRgn
DPtoLP
CopyMetaFileA
CreateDCA
LPtoDP
AbortDoc
EndDoc
EndPage
StartPage
SetAbortProc
DeleteMetaFile
CloseMetaFile
CreateMetaFileA
EnumFontFamiliesExA
CreatePen
ExtCreateRegion
GetCurrentObject
GetWindowOrgEx
CreateRectRgnIndirect
GetTextColor
GetStockObject
CreateRectRgn
PtInRegion
PatBlt
GetPixel
SetPixel
GetDIBits
Escape
RectVisible
PtVisible
CreateFontIndirectA
GetTextExtentPoint32A
GetTextAlign
Polygon
GetTextMetricsA
SetBkMode
DeleteObject
SelectObject
CreateDIBSection
CreateCompatibleDC
StretchDIBits
BitBlt
ExtTextOutA
BeginPath
PolyBezierTo
LineTo
MoveToEx
CloseFigure
EndPath
StrokeAndFillPath
FillPath
StrokePath
GetWindowExtEx
GetViewportExtEx
Ellipse
ExtFloodFill
RoundRect
CreatePolygonRgn
GetRgnBox
Rectangle
CombineRgn
GetViewportOrgEx
Polyline
CreateFontA
GetBkColor
GetMapMode
CreatePatternBrush
SetTextColor
SetBkColor
GetDeviceCaps
SetStretchBltMode
DeleteDC
CreateCompatibleBitmap
CreateBitmap
CreateSolidBrush
TextOutA
GetObjectA
PlayMetaFileRecord
GetTextExtentPointA
CreateDIBitmap
StretchBlt

comdlg32

PrintDlgA
PageSetupDlgA
ChooseColorA
CommDlgExtendedError
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

SetFileSecurityA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumValueA
RegCreateKeyA
RegSetValueA
GetFileSecurityA
RegCloseKey
RegEnumKeyA
RegQueryValueA
RegOpenKeyA
RegEnumKeyExA

shell32

ord71
ExtractIconA
Shell_NotifyIconA
SHAppBarMessage
SHGetPathFromIDListA
ShellExecuteA
SHGetMalloc
DragAcceptFiles
DragFinish
DragQueryFileA
SHGetFileInfoA
SHGetSpecialFolderLocation

comctl32

DestroyPropertySheetPage
PropertySheetA
ImageList_Write
ImageList_Read
ImageList_Merge
ImageList_LoadImageA
ord14
ord13
ord17
ImageList_Remove
ImageList_Draw
ImageList_Create
ImageList_GetImageInfo
ImageList_Add
ImageList_GetIcon
ImageList_DrawEx
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_Destroy
_TrackMouseEvent
ImageList_AddMasked
ImageList_ReplaceIcon
CreatePropertySheetPageA

oledlg

ord8
ord4
ord9
ord5
ord1
ord3
ord7
ord6

ole32

OleGetClipboard
ReleaseStgMedium
CoTaskMemFree
OleDuplicateData
CreateBindCtx
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
ReadClassStg
StringFromCLSID
CoTreatAsClass
OleSave
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleQueryCreateFromData
OleQueryLinkFromData
OleLoad
CreateFileMoniker
CreateItemMoniker
CreateGenericComposite
GetClassFile
OleLockRunning
OleSetContainedObject
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreateFromFile
OleCreateLinkToFile
OleCreate
GetRunningObjectTable
IsAccelerator
CoDisconnectObject
CLSIDFromProgID
CoCreateInstance
OleRun
OleUninitialize
OleInitialize
CoUninitialize
CoInitialize
StgCreateDocfile
StgOpenStorage
StgIsStorageFile
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CreateStreamOnHGlobal
OleIsRunning
OleTranslateAccelerator
CreateDataAdviseHolder
OleRegGetMiscStatus
CreateOleAdviseHolder
OleRegEnumVerbs
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoGetMalloc
CoRevokeClassObject
CoRegisterClassObject
CoRegisterMessageFilter
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CoFreeUnusedLibraries
OleSetMenuDescriptor
OleSaveToStream
WriteClassStm
OleGetIconOfClass
GetHGlobalFromILockBytes
CoTaskMemAlloc
CLSIDFromString

olepro32

ord253

oleaut32

SafeArrayCreate
SafeArrayRedim
VariantCopy
SysAllocStringByteLen
VariantChangeType
SysStringByteLen
VarCyFromStr
VarBstrFromCy
VarDateFromStr
VarBstrFromDate
SafeArrayCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayGetDim
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SysAllocStringLen
SysReAllocStringLen
VariantTimeToSystemTime
SysStringLen
LoadTypeLi
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayCreateVector
VariantChangeTypeEx
VariantClear
SysFreeString
OleLoadPicturePath
SafeArrayGetElement
GetErrorInfo
SetErrorInfo
CreateErrorInfo
SysAllocString
VariantInit

ws2_32

getsockname
ntohs
inet_addr
recv
__WSAFDIsSet
send
WSAIoctl
WSACloseEvent
setsockopt
WSASend
WSARecv
accept
WSAGetLastError
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
WSASocketA
WSACreateEvent
WSAEventSelect
bind
listen
gethostname
socket
ioctlsocket
gethostbyname
htons
connect
select
WSACleanup
closesocket
getpeername
inet_ntoa
WSAStartup

avifil32

AVIFileExit
AVIStreamSetFormat
AVIFileCreateStreamA
AVIFileOpenA
AVIStreamWrite
AVIStreamRelease
AVIFileRelease
AVIFileInit

msvfw32

DrawDibDraw
ICSeqCompressFrameEnd
ICCompressorFree
ICClose
ICOpen
ICSendMessage
ICSeqCompressFrameStart
ICDecompress
DrawDibOpen
DrawDibClose

winmm

PlaySoundA
waveOutGetNumDevs
waveOutOpen
waveOutPrepareHeader
waveInGetNumDevs
waveInOpen
waveInPrepareHeader
waveInAddBuffer
waveInStart
waveOutWrite
waveInStop
waveInReset
waveInUnprepareHeader
waveInClose
waveOutReset
waveOutUnprepareHeader
waveOutClose

pdh

PdhCollectQueryData
PdhGetFormattedCounterValue
PdhOpenQueryA
PdhAddCounterA
PdhCloseQuery

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 332KB - Virtual size: 331KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 176KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 396KB - Virtual size: 394KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a16f00f10bb5c2ee9d6b4b9bb7f98c46

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

ws2_32

avifil32

msvfw32

winmm

pdh

Sections

.text Size: 2.0MB - Virtual size: 2.0MB

.rdata Size: 332KB - Virtual size: 331KB

.data Size: 176KB - Virtual size: 207KB

.rsrc Size: 396KB - Virtual size: 394KB

.text
Size: 2.0MB - Virtual size: 2.0MB

.rdata
Size: 332KB - Virtual size: 331KB

.data
Size: 176KB - Virtual size: 207KB

.rsrc
Size: 396KB - Virtual size: 394KB