4edbd44e24ae08b8c3466ad3522cb73ade37df9528864a238b643050914c1217

Sharing

Copy URL

Twitter E-mail

General

Target

4edbd44e24ae08b8c3466ad3522cb73ade37df9528864a238b643050914c1217
Size

2.7MB
MD5

f1548fa91906e9a0c2a121041db32833
SHA1

6d4b3857817ccc324358b72f1a371f4da1141db4
SHA256

4edbd44e24ae08b8c3466ad3522cb73ade37df9528864a238b643050914c1217
SHA512

38ba001f9f44d1fc017e7c124c1210c9f710cc435cb5a376b8deae7d4cfb4d930e17c6d496c4ea1b056ebcb18d4d739ee59adbb0776396067330fd3cd00ff8cd
SSDEEP

49152:MOprpVWuoKMJaNJjdqn4dwH5MalHX8va6:NpVrLMJaNJjdqn4dwH5M8Aa6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4edbd44e24ae08b8c3466ad3522cb73ade37df9528864a238b643050914c1217

Files

4edbd44e24ae08b8c3466ad3522cb73ade37df9528864a238b643050914c1217
.exe windows:4 windows x86

c74f04dfb57dc4567a87c7f713089392

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundW
waveInStop

msvcrt

__set_app_type
_except_handler3
_exit
_XcptFilter
_adjust_fdiv
__p__commode
__p__fmode
exit
_acmdln
__getmainargs
_initterm
_controlfp
__setusermatherr

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

comctl32

_TrackMouseEvent
InitCommonControlsEx

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

kernel32

GetACP
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCPInfo
GetDateFormatA
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableW
GetExitCodeThread
GetFileAttributesW
GetFileSize
GetFileTime
GetFileType
GetFullPathNameW
GetLastError
GetLocaleInfoA
GetLocaleInfoW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetPrivateProfileSectionW
GetPrivateProfileStringW
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemInfo
GetThreadLocale
GetTimeFormatA
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExA
FormatMessageW
GetVolumeInformationW
GlobalAddAtomW
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomW
GlobalFlags
GlobalFree
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsValidLocale
LCMapStringA
LCMapStringW
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LocalReAlloc
LockFile
LockResource
FreeResource
lstrcmpW
lstrlenA
lstrlenW
MulDiv
MultiByteToWideChar
OutputDebugStringW
RaiseException
ReadFile
SetEndOfFile
SetEnvironmentVariableA
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnlockFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
WritePrivateProfileStringW
WriteProcessMemory
FlushFileBuffers
FindResourceW
FindResourceExW
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
EnumSystemLocalesA
EnumResourceLanguagesW
DuplicateHandle
DeleteCriticalSection
CreateProcessW
CreateFileW
CreateFileA
CreateDirectoryW
ConvertDefaultLocale
CompareStringW
CompareStringA
CloseHandle
SetErrorMode
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
IsValidCodePage
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
GetTickCount
ExitProcess
LeaveCriticalSection
LoadLibraryA
FreeLibrary
FreeEnvironmentStringsW
lstrcmpA
FreeEnvironmentStringsA
GetVersionExW

user32

GetWindowRgn
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
GrayStringW
InflateRect
IntersectRect
InvalidateRect
InvalidateRgn
IsChild
IsDialogMessageW
IsIconic
IsRectEmpty
IsWindowEnabled
IsWindowVisible
KillTimer
LoadBitmapW
LoadCursorFromFileW
LoadCursorW
LoadIconW
LoadImageW
LoadMenuW
MapDialogRect
MapWindowPoints
MessageBeep
MessageBoxW
ModifyMenuW
MoveWindow
OffsetRect
PeekMessageW
PostMessageW
PostQuitMessage
PostThreadMessageW
PtInRect
RegisterClassW
RegisterClipboardFormatW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemovePropW
ScreenToClient
ScrollWindow
SendDlgItemMessageA
SendDlgItemMessageW
SendMessageW
SetActiveWindow
SetCapture
SetCursor
SetFocus
SetForegroundWindow
SetMenuItemBitmaps
SetPropW
SetRect
SetRectEmpty
SetScrollInfo
SetTimer
SetWindowContextHelpId
SetWindowLongW
SetWindowPos
SetWindowRgn
SetWindowsHookExW
SetWindowTextW
ShowWindow
SystemParametersInfoA
SystemParametersInfoW
TabbedTextOutW
TrackPopupMenu
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UnregisterClassW
UpdateWindow
ValidateRect
WindowFromPoint
WinHelpW
GetWindowRect
GetWindowPlacement
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSysColorBrush
GetSubMenu
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetNextDlgTabItem
GetNextDlgGroupItem
GetMessageW
GetMessageTime
GetMessagePos
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenuCheckMarkDimensions
GetMenu
GetLastActivePopup
GetKeyState
GetForegroundWindow
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetClassInfoExW
GetCapture
GetActiveWindow
FindWindowW
FillRect
EqualRect
EndPaint
EndDialog
EnableWindow
EnableMenuItem
DrawTextW
DrawTextExW
DispatchMessageW
DestroyWindow
DestroyMenu
DefWindowProcW
CreateWindowExW
CreatePopupMenu
CreateDialogIndirectParamW
CopyRect
CopyAcceleratorTableW
ClientToScreen
CheckMenuItem
CharUpperW
CharNextW
CallWindowProcW
CallNextHookEx
BeginPaint
AppendMenuW
AdjustWindowRectEx
GetWindowLongW
GetWindowTextLengthA
DestroyIcon

gdi32

FrameRgn
GetBkColor
GetClipBox
ExtTextOutW
RectVisible
RestoreDC
SaveDC
ScaleViewportExtEx
ExtSelectClipRgn
GetDeviceCaps
ExtCreateRegion
GetMapMode
GetObjectW
GetRegionData
GetRgnBox
Escape
SelectClipRgn
SelectObject
SetBkColor
SetBkMode
SetDIBColorTable
SetMapMode
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
StretchBlt
OffsetViewportOrgEx
OffsetRgn
GetWindowExtEx
GetViewportExtEx
GetTextExtentPoint32W
GetTextColor
GetStockObject
DPtoLP
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgnIndirect
CreateFontIndirectW
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
ScaleWindowExtEx
CombineRgn
PtVisible

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

comdlg32

GetFileTitleW

advapi32

RegQueryValueW
RegQueryValueExW
RegOpenKeyW
RegOpenKeyExW
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegSetValueExW

shell32

ShellExecuteExW
Shell_NotifyIconW
CommandLineToArgvW

ole32

OleInitialize
OleIsCurrentClipboard
OleFlushClipboard
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
StringFromIID
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
CoRevokeClassObject
CoRegisterMessageFilter
CoGetClassObject
CoFreeUnusedLibraries
CLSIDFromString
CLSIDFromProgID
OleUninitialize

shlwapi

PathIsUNCW
PathIsDirectoryW
PathFindFileNameW
PathFindExtensionW
PathAddBackslashW
PathAppendW
PathRemoveFileSpecW
PathStripToRootW
PathFileExistsW

Sections

.text
Size: 404KB - Virtual size: 402KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.cd3d42
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dd3d43
Size: 4KB - Virtual size: 14.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ed3d44
Size: 4KB - Virtual size: 30B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.act29
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c74f04dfb57dc4567a87c7f713089392

Headers

File Characteristics

Imports

winmm

msvcrt

imm32

comctl32

version

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

shlwapi

Sections

.text Size: 404KB - Virtual size: 402KB

.cd3d42 Size: 12KB - Virtual size: 10KB

.dd3d43 Size: 4KB - Virtual size: 14.0MB

.ed3d44 Size: 4KB - Virtual size: 30B

.rsrc Size: 116KB - Virtual size: 116KB

.act29 Size: 2.1MB - Virtual size: 2.1MB

.text
Size: 404KB - Virtual size: 402KB

.cd3d42
Size: 12KB - Virtual size: 10KB

.dd3d43
Size: 4KB - Virtual size: 14.0MB

.ed3d44
Size: 4KB - Virtual size: 30B

.rsrc
Size: 116KB - Virtual size: 116KB

.act29
Size: 2.1MB - Virtual size: 2.1MB