50d2de734fe9a82315c7506be10aa9615fc7e22df8f84421593c756f09d2eec6

Sharing

Copy URL Twitter E-mail

General

Target

50d2de734fe9a82315c7506be10aa9615fc7e22df8f84421593c756f09d2eec6
Size

1.8MB
MD5

1f340ed8b6476bda5fa97fd3ae24f7f1
SHA1

0f9cd6955b3c1c38d48b807b38b682a628912b7c
SHA256

50d2de734fe9a82315c7506be10aa9615fc7e22df8f84421593c756f09d2eec6
SHA512

b4932b3ba4a917e97ad9318186262ad6da89f8968aceec1c94eeaa6a1cc2640a1e054f0ae123c26be7219989636cede75a420bb86d90f00ebe3f5e2746dfa7a7
SSDEEP

49152:3vfGLta3oRvhPXMS47p0/lIKpXP7tYDC:3v+L2GvdCUXPBGC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50d2de734fe9a82315c7506be10aa9615fc7e22df8f84421593c756f09d2eec6

Files

50d2de734fe9a82315c7506be10aa9615fc7e22df8f84421593c756f09d2eec6
.exe windows:6 windows x64

5428f511885a61b63fe144d7685fcef5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

shlwapi

PathIsDirectoryW
PathIsRelativeW
PathCanonicalizeW
PathIsRootW
SHDeleteKeyW
PathAppendW
PathRemoveFileSpecW
PathUnquoteSpacesW
SHAutoComplete
PathCompactPathExW
StrFormatByteSizeW
AssocQueryStringW
StrCmpLogicalW
PathIsURLW
PathFileExistsW
PathRelativePathToW
SHSetValueW
SHGetValueW

uxtheme

BufferedPaintSetAlpha
EndBufferedPaint
BeginBufferedPaint
CloseThemeData
SetWindowTheme
OpenThemeData
GetThemeColor
GetThemeInt
GetThemeBackgroundContentRect
DrawThemeBackground

kernel32

GlobalAddAtomW
DeleteAtom
lstrlenW
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
GetCurrentThreadId
GetFullPathNameW
GetLongPathNameW
GetShortPathNameW
GetModuleFileNameW
CreateFileW
CloseHandle
CreateDirectoryW
GetCurrentDirectoryW
Sleep
SetCurrentDirectoryW
FormatMessageW
GetTickCount64
GetWindowsDirectoryW
GetCurrentProcess
GetFileTime
WriteFile
SetFileTime
GetFileSizeEx
GlobalMemoryStatusEx
ReadFile
WideCharToMultiByte
GetFileSize
FlushFileBuffers
SetFilePointer
SetEndOfFile
SetDllDirectoryW
CreateMutexW
SystemTimeToFileTime
SetErrorMode
GetUserDefaultLCID
GetStringTypeExW
LCMapStringW
ExpandEnvironmentStringsW
OutputDebugStringW
QueryPerformanceCounter
QueryPerformanceFrequency
GetStringTypeExA
LCMapStringA
GetSystemTime
FileTimeToSystemTime
CreateThread
CreateProcessW
GetFileInformationByHandle
CompareFileTime
CopyFileW
GetFileAttributesW
SetFileAttributesW
MoveFileExA
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
GetDateFormatW
GetTimeFormatW
CreateFileA
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
lstrcpyW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
HeapReAlloc
GlobalFree
IsValidLocale
GetLocaleInfoW
CompareStringW
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
SetFilePointerEx
GetFileType
HeapAlloc
HeapFree
GetStdHandle
SetEnvironmentVariableW
ExitProcess
RtlUnwind
LoadLibraryExW
TlsFree
GlobalLock
TlsGetValue
TlsAlloc
RtlUnwindEx
CreateFileMappingA
GetModuleHandleA
MapViewOfFileEx
InitializeSListHead
GetCurrentProcessId
GetStartupInfoW
IsDebuggerPresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
GetCPInfo
CompareStringEx
GetSystemTimeAsFileTime
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
LCMapStringEx
DecodePointer
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
GetLocaleInfoEx
RaiseException
RtlPcToFileHeader
IsProcessorFeaturePresent
GetModuleHandleExW
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
InitOnceBeginInitialize
InitOnceComplete
GetNativeSystemInfo
WaitForSingleObjectEx
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
GetStringTypeW
FormatMessageA
GlobalAlloc
FindNextFileW
FindClose
FindFirstFileW
FindFirstFileExW
lstrcpynW
LoadLibraryA
GetModuleHandleW
MulDiv
GetLastError
GetProcAddress
FreeLibrary
LoadLibraryW
SetLastError
VerifyVersionInfoW
VerSetConditionMask
LocalFree
LocalAlloc
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
WriteConsoleW
GlobalUnlock
EnumSystemLocalesW
TlsSetValue

user32

ReleaseCapture
GetClassNameW
InvalidateRgn
BeginPaint
GetClientRect
GetWindowLongPtrW
SendMessageW
GetWindowTextLengthW
GetWindowTextW
EndPaint
DrawTextW
InflateRect
GetWindowRect
GetCursorPos
PtInRect
GetFocus
GetSystemMetrics
IntersectRect
MapWindowPoints
GetParent
GetDC
ReleaseDC
ScreenToClient
SystemParametersInfoW
DialogBoxParamW
CreateDialogParamW
EnableWindow
ShowWindow
BringWindowToTop
SetForegroundWindow
LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
IsDialogMessageW
TranslateMessage
DispatchMessageW
PostQuitMessage
DestroyWindow
EndDialog
SetFocus
GetSysColor
PostMessageW
GetKeyState
RedrawWindow
CreatePopupMenu
CheckMenuItem
CreateDialogIndirectParamW
GetWindowPlacement
GetDesktopWindow
CopyRect
CheckRadioButton
SendDlgItemMessageW
AppendMenuW
InsertMenuW
DestroyMenu
GetDCEx
LoadStringA
SetTimer
KillTimer
IsDlgButtonChecked
EnumWindows
RegisterWindowMessageW
TrackPopupMenu
GetSubMenu
LoadMenuW
ClientToScreen
LoadStringW
SetDlgItemTextW
DrawIconEx
GetSysColorBrush
SetClipboardData
EmptyClipboard
OpenClipboard
CloseClipboard
EnumDisplayMonitors
GetMonitorInfoW
SetWindowTextW
SetMenuItemInfoW
GetMenuItemInfoW
GetMenuItemCount
GetSystemMenu
EnumThreadWindows
EnumChildWindows
CloseWindow
LoadCursorW
SetCursor
SetCapture
CheckDlgButton
DrawFocusRect
RemovePropW
GetPropW
SetPropW
RegisterClipboardFormatW
IsZoomed
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
InvalidateRect
SetWindowRgn
CallWindowProcW
SetWindowPlacement
MoveWindow
GetWindowDC
SetLayeredWindowAttributes
MessageBoxW
SetCursorPos
GetDlgItemTextW
DefDlgProcW
CreateWindowExW
SetWindowLongPtrW
GetDlgItem
LoadImageW
SetWindowPos
OffsetRect

gdi32

PatBlt
SelectObject
GetDeviceCaps
SetBkColor
ExtTextOutW
GetObjectW
SetBkMode
DeleteObject
SetTextColor
EnumFontsW
CreateSolidBrush
CreateRectRgn
CreateFontIndirectW
SetRectRgn
CreateRectRgnIndirect
CombineRgn

comdlg32

GetOpenFileNameW

advapi32

CryptReleaseContext
CryptCreateHash
CryptHashData
CryptDestroyHash
RegOpenKeyW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegDeleteValueW
RegCloseKey
RegOpenKeyExW
CryptGetHashParam
CryptAcquireContextW

shell32

SHGetDesktopFolder
ord701
DragQueryFileW
SHGetFolderPathW
SHGetFileInfoW
ShellExecuteW
ShellExecuteExW
SHGetKnownFolderPath
SHCreateItemFromParsingName

ole32

OleInitialize
CoInitializeEx
OleUninitialize
RegisterDragDrop
DoDragDrop
ReleaseStgMedium
CoGetApartmentType
CoGetObjectContext
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
CoTaskMemFree
OleDuplicateData

gdiplus

GdipDrawPath
GdipDrawRectangleI
GdipDeleteGraphics
GdipCreateFromHDC
GdipAddPathArcI
GdipClosePathFigure
GdipResetPath
GdipDeletePath
GdipCreatePath
GdipSetPenDashStyle
GdipDeletePen
GdipCreatePen1
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipStartPathFigure

comctl32

ord413
InitCommonControlsEx
ord410
ord412
ord381
ImageList_GetImageCount
ImageList_GetImageInfo

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 202KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 174KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5428f511885a61b63fe144d7685fcef5

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

uxtheme

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

gdiplus

comctl32

version

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 202KB - Virtual size: 201KB

.data Size: 21KB - Virtual size: 30KB

.pdata Size: 41KB - Virtual size: 40KB

_RDATA Size: 512B - Virtual size: 348B

.rsrc Size: 174KB - Virtual size: 174KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 202KB - Virtual size: 201KB

.data
Size: 21KB - Virtual size: 30KB

.pdata
Size: 41KB - Virtual size: 40KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 174KB - Virtual size: 174KB

.reloc
Size: 6KB - Virtual size: 5KB