e45c33f7ee347e4daa3d6de0337afe641d9db58c447d3e4ba21cedc776083abc

Sharing

Copy URL Twitter E-mail

General

Target

e45c33f7ee347e4daa3d6de0337afe641d9db58c447d3e4ba21cedc776083abc
Size

4.5MB
MD5

587cdacd18c69446c0f3433a8002c343
SHA1

2f8407ee5699cbf6ec85d2e4fdeef9f9c7e3458f
SHA256

e45c33f7ee347e4daa3d6de0337afe641d9db58c447d3e4ba21cedc776083abc
SHA512

1b5fac2c6650ed68a35fde9a22e971558b5ae7507c681ebbdec032b396d74db542b7f7a60c3395dd8d64dcf02a19185566f913bc61c8b14c5a8ea55906ddbc91
SSDEEP

98304:pFaypNFYEFAumC4QxuZgeFjOt8UpBf2AIzOetwYszCL0KQnE+eD7CcZ:GENFYEFA7CXP8OQshKQnE+Y7CcZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e45c33f7ee347e4daa3d6de0337afe641d9db58c447d3e4ba21cedc776083abc

Files

e45c33f7ee347e4daa3d6de0337afe641d9db58c447d3e4ba21cedc776083abc
.exe windows:5 windows x86

dc716fc04ef6bf5686f25ebc6218623b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

pdflib

PDF_get_errnum
PDF_get_apiname
pdf_catch
PDF_end_document
PDF_delete_table
PDF_end_page_ext
PDF_fit_table
PDF_stroke
PDF_rect
PDF_show_xy
PDF_setfont
PDF_begin_page_ext
PDF_add_table_cell
PDF_load_font
PDF_set_info
PDF_get_errmsg
PDF_begin_document
PDF_set_parameter
pdf_jbuf
PDF_delete
PDF_new

kernel32

IsValidCodePage
IsProcessorFeaturePresent
GetTimeZoneInformation
GetLocaleInfoW
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
SetHandleCount
LCMapStringW
HeapCreate
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetDriveTypeW
CompareStringW
GetConsoleCP
GetConsoleMode
IsDebuggerPresent
WriteConsoleW
CreateFileW
SetEnvironmentVariableA
GetSystemDirectoryA
GetPrivateProfileSectionNamesA
EnumResourceTypesA
EnumResourceNamesA
EnumResourceLanguagesA
GetExitCodeThread
TerminateThread
lstrcpynA
GetDateFormatA
GetTimeFormatA
UnhandledExceptionFilter
HeapSize
GetCurrentDirectoryW
HeapQueryInformation
WideCharToMultiByte
SizeofResource
LockResource
LoadResource
FindResourceW
SetLastError
DeactivateActCtx
GetLastError
LoadLibraryA
GetModuleHandleA
GetProcAddress
ActivateActCtx
Sleep
DeleteFileA
CreateDirectoryA
AllocConsole
GetStdHandle
CreateThread
MultiByteToWideChar
GetCurrentDirectoryA
OutputDebugStringA
CloseHandle
WaitForMultipleObjects
ResetEvent
CopyFileA
InterlockedIncrement
InterlockedDecrement
GetWindowsDirectoryA
GetModuleFileNameA
SetUnhandledExceptionFilter
InitializeCriticalSection
DeleteCriticalSection
GetLocalTime
GetCurrentThread
GetCurrentProcess
CreateFileA
GetCurrentThreadId
EnterCriticalSection
GetCurrentProcessId
LeaveCriticalSection
TerminateProcess
MulDiv
DeviceIoControl
SetEvent
CreateEventA
SetCommTimeouts
SetCommMask
GetCommState
BuildCommDCBA
SetCommState
PurgeComm
WaitCommEvent
ClearCommError
GetCommMask
ResumeThread
SuspendThread
FormatMessageA
LocalFree
WriteFile
GetOverlappedResult
ReadFile
GetPrivateProfileStringA
WritePrivateProfileStringA
CreateActCtxW
ReleaseActCtx
GetModuleFileNameW
FreeLibrary
FreeResource
FindResourceA
GlobalFree
GlobalUnlock
GlobalLock
lstrcmpW
LoadLibraryW
CompareStringA
GetVersionExA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
lstrlenA
lstrlenW
GlobalAlloc
GlobalSize
FileTimeToSystemTime
SystemTimeToFileTime
FindClose
FindNextFileA
FindFirstFileA
FileTimeToLocalFileTime
GetStringTypeExA
GetThreadLocale
lstrcmpiA
MoveFileA
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetVolumeInformationA
GetFullPathNameA
GetShortPathNameA
lstrcmpA
GetModuleHandleW
InterlockedExchange
GetLocaleInfoA
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GlobalReAlloc
GetTickCount
GetPrivateProfileIntA
SetThreadPriority
WaitForSingleObject
GetUserDefaultLCID
GetFileAttributesA
ReplaceFileA
SetFileTime
GetFileTime
GetTempFileNameA
GetDiskFreeSpaceA
LocalAlloc
TlsGetValue
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetACP
GetCPInfo
GetOEMCP
lstrcpyA
SetErrorMode
GetFileAttributesExA
SetFileAttributesA
LocalFileTimeToFileTime
GetFileSizeEx
GetNumberFormatA
GetTempPathA
InitializeCriticalSectionAndSpinCount
GetProfileIntA
SearchPathA
VirtualProtect
FindResourceExW
EncodePointer
DecodePointer
SetStdHandle
GetFileType
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
ExitProcess
HeapReAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RtlUnwind
RaiseException
VirtualAlloc
GetSystemInfo
VirtualQuery
ExitThread

user32

CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
LoadIconA
SendDlgItemMessageA
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
DispatchMessageA
GetTopWindow
GetMessageTime
GetMessagePos
PeekMessageA
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetForegroundWindow
ShowScrollBar
IsWindowVisible
GetMenuItemID
GetMenuItemCount
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
GetWindowTextLengthA
GetScrollPos
SetScrollPos
SetFocus
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
UnhookWindowsHookEx
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
GetClassNameA
RegisterWindowMessageA
GetDCEx
GetWindow
ReleaseDC
GetClassLongA
FillRect
GetWindowLongA
IsRectEmpty
EndDeferWindowPos
BeginDeferWindowPos
IsChild
GetKeyState
SetDlgItemTextA
InflateRect
CopyRect
LoadStringA
GetClipboardData
SendMessageTimeoutA
IsWindowUnicode
GetParent
LoadIconW
GetWindowTextA
DrawEdge
MessageBoxA
RemoveMenu
GetSystemMenu
GetFocus
GetUpdateRect
SystemParametersInfoA
IsZoomed
PtInRect
DrawFocusRect
LoadCursorW
KillTimer
GetClassInfoA
RedrawWindow
SetCursor
LoadCursorA
GetSystemMetrics
IsDialogMessageA
SetWindowTextA
MoveWindow
InsertMenuA
AppendMenuA
GetMenuStringA
GetKeyNameTextA
MapVirtualKeyA
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
GetWindowDC
BeginPaint
EndPaint
GetSysColorBrush
GetWindowRect
GetWindowLongW
IntersectRect
TranslateAcceleratorA
BringWindowToTop
SetRectEmpty
CreatePopupMenu
InsertMenuItemA
IsIconic
SetWindowLongW
LoadAcceleratorsA
DestroyIcon
CopyAcceleratorTableA
LoadImageA
DestroyMenu
LoadMenuA
ReuseDDElParam
GetCursor
GetMenuStringW
LoadBitmapA
LookupIconIdFromDirectoryEx
mouse_event
ShowCaret
GetKeyboardLayoutList
OpenInputDesktop
GetUserObjectInformationA
CloseDesktop
CreateIconFromResourceEx
CreateIconIndirect
EnableWindow
SendMessageA
SetTimer
InvalidateRect
GetDC
GetClientRect
PostMessageA
OffsetRect
ShowWindow
LoadBitmapW
GetSysColor
GetCursorPos
LoadMenuW
GetSubMenu
SetCapture
ClientToScreen
WindowFromPoint
ReleaseCapture
UpdateWindow
UnpackDDElParam
CharUpperA
GetMenuItemInfoA
PostQuitMessage
RegisterClipboardFormatA
MapDialogRect
SetWindowContextHelpId
ValidateRect
TranslateMessage
GetMessageA
ShowOwnedPopups
SetRect
DestroyCursor
WaitMessage
DrawStateA
DeleteMenu
SetParent
UnregisterClassA
RealChildWindowFromPoint
EnumDisplayMonitors
SetLayeredWindowAttributes
UnionRect
PostThreadMessageA
CharNextA
GetTabbedTextExtentA
GetWindowRgn
SubtractRect
GetDoubleClickTime
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
MapVirtualKeyExA
IsCharLowerA
CharUpperBuffA
CopyIcon
FrameRect
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
IsClipboardFormatAvailable
SetCursorPos
CreateAcceleratorTableA
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
DrawFrameControl
SetClassLongA
DestroyAcceleratorTable
DrawIconEx
CopyImage
GetIconInfo
HideCaret
InvertRect
LockWindowUpdate
GetMenuDefaultItem
SetMenuDefaultItem
IsMenu
MonitorFromPoint
UpdateLayeredWindow
EnableScrollBar
GetAsyncKeyState
NotifyWinEvent
GetTabbedTextExtentW
CreateMenu
SetWindowRgn
DrawIcon
LoadAcceleratorsW
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
wsprintfA

gdi32

StrokeAndFillPath
EndPath
CloseFigure
BeginPath
GetBitmapBits
ExtCreateRegion
ExtTextOutW
StrokePath
ResetDCA
SetPixelV
GetBoundsRect
FrameRgn
FillRgn
PtInRegion
SetPaletteEntries
ExtFloodFill
RoundRect
EnumFontFamiliesExA
SetPixel
StretchBlt
GetDIBits
SetDIBColorTable
OffsetRgn
Polygon
Polyline
CreatePolygonRgn
GetCurrentObject
GetSystemPaletteEntries
RealizePalette
GetNearestPaletteIndex
GetPaletteEntries
CreatePalette
CreateRoundRectRgn
GetWindowOrgEx
GetTextExtentPoint32W
GetTextExtentPointA
GetTextFaceA
GetTextAlign
GetStretchBltMode
GetROP2
GetPolyFillMode
GetBkMode
GetNearestColor
Ellipse
LPtoDP
CreateEllipticRgn
GetRgnBox
StretchDIBits
GetCharWidthA
GetTextCharsetInfo
CreateDIBitmap
GetTextMetricsA
GetBkColor
Rectangle
GetViewportOrgEx
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
GetTextExtentPoint32A
DPtoLP
GetMapMode
CombineRgn
SetRectRgn
CreateHatchBrush
CreatePen
GetObjectType
SelectPalette
GetStockObject
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
PolyBezierTo
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
StartDocA
GetPixel
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
GetClipRgn
SelectClipRgn
DeleteObject
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreateRectRgnIndirect
CopyMetaFileA
CreateBitmap
SetBkColor
SetTextColor
PatBlt
GetTextColor
EnumFontFamiliesA
CreateFontA
CreateDIBSection
CreateICA
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
GetDeviceCaps
CreateDCA
CreateFontIndirectA
GetObjectA
FillPath

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

GetJobA
OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

OpenProcessToken
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
OpenThreadToken
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
SetFileSecurityA
GetFileSecurityA
RegEnumValueA
RegEnumKeyExA
RegSetValueA
AdjustTokenPrivileges
RegOpenKeyExW
LookupPrivilegeValueA

shell32

SHBrowseForFolderA
SHGetPathFromIDListA
SHCreateDirectoryExA
ShellExecuteA
SHGetMalloc
SHAppBarMessage
SHGetSpecialFolderLocation
SHGetDesktopFolder
ExtractIconA
SHAddToRecentDocs
SHGetFileInfoA
DragQueryFileA
DragFinish
DragAcceptFiles

comctl32

_TrackMouseEvent
ImageList_GetIconSize
ImageList_Draw
ImageList_Create
ImageList_GetImageCount
ImageList_Destroy
ImageList_AddMasked
ImageList_DrawEx
InitCommonControlsEx

shlwapi

PathRemoveExtensionA
PathFindExtensionA
PathStripToRootA
PathRemoveFileSpecW
PathFileExistsA
PathFindFileNameA
PathIsUNCA

ole32

CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleLockRunning
CoLockObjectExternal
RevokeDragDrop
RegisterDragDrop
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleGetClipboard
DoDragDrop
CoGetClassObject
CoInitialize
CoDisconnectObject
CoInitializeEx
CoUninitialize
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoCreateGuid
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
OleRun
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
StringFromCLSID
CoTaskMemFree

oleaut32

OleCreateFontIndirect
VariantTimeToSystemTime
VariantClear
VariantCopy
VariantInit
SysAllocStringLen
SystemTimeToVariantTime
SysFreeString
VariantChangeType
SysAllocStringByteLen
SysStringByteLen
VarDateFromStr
SysStringLen
LoadTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayDestroy
VarBstrFromDate
SysAllocString
OleLoadPicturePath
VarUdateFromDate
VariantChangeTypeEx

oledlg

ord8
ord1

odbc32

ord17
ord41
ord10
ord61
ord3
ord16
ord2
ord1
ord23
ord15
ord9
ord14
ord20
ord8
ord48
ord49
ord11
ord19
ord12
ord46
ord18
ord13
ord59
ord43
ord68
ord44
ord45
ord50
ord51
ord5

gdiplus

GdipDrawImageI
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDrawRectangleI
GdipFillPolygon
GdipDrawLineI
GdipDeletePen
GdipCreatePen1
GdipFillRectangle
GdipDrawString
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipFillRectangleI
GdipCloneBrush
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetPageUnit
GdipCreateSolidFill
GdipDeleteBrush
GdipFree
GdipAlloc

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 693KB - Virtual size: 692KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 24.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 499KB - Virtual size: 499KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dc716fc04ef6bf5686f25ebc6218623b

Headers

DLL Characteristics

File Characteristics

Imports

pdflib

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

odbc32

gdiplus

oleacc

imm32

winmm

Sections

.text Size: 3.3MB - Virtual size: 3.3MB

.rdata Size: 693KB - Virtual size: 692KB

.data Size: 55KB - Virtual size: 24.1MB

.rsrc Size: 499KB - Virtual size: 499KB

.text
Size: 3.3MB - Virtual size: 3.3MB

.rdata
Size: 693KB - Virtual size: 692KB

.data
Size: 55KB - Virtual size: 24.1MB

.rsrc
Size: 499KB - Virtual size: 499KB