b28c0687bda31dd5d8fe7c41ad25175e7ee3d24696cf7f7ad4b42034ef64cbc8

Sharing

Copy URL Twitter E-mail

General

Target

b28c0687bda31dd5d8fe7c41ad25175e7ee3d24696cf7f7ad4b42034ef64cbc8
Size

7.8MB
MD5

c2251edf885eebccb8bfaf3410de669b
SHA1

cbcee55cde5dc9e68be12f542cea718d05aaac7c
SHA256

b28c0687bda31dd5d8fe7c41ad25175e7ee3d24696cf7f7ad4b42034ef64cbc8
SHA512

64fb3e3a78d7f3ac9ef86e5152d02dd69382da45707328267b418258499218aa6386926aea2015ea3a6b5949e3f2ac89f32e6309df5f41843a933f9d304d8968
SSDEEP

98304:L0KkSR2l8Lly6y5hYAD8MWHZKDoq1CZvOoxIBwYL5/49Yxo+YhoojrFbVG4lz:2XLZbaZfop59Sph3rF5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b28c0687bda31dd5d8fe7c41ad25175e7ee3d24696cf7f7ad4b42034ef64cbc8

Files

b28c0687bda31dd5d8fe7c41ad25175e7ee3d24696cf7f7ad4b42034ef64cbc8
.exe windows:5 windows x86

00f67530d588bb0a8b368338c768bf67

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeW
GetStringTypeA
GetLocaleInfoA
GetTimeZoneInformation
GetConsoleMode
GetConsoleCP
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
InitializeCriticalSection
VirtualFree
HeapCreate
GetStartupInfoA
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
GetFileType
SetStdHandle
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapSize
RaiseException
CreateThread
ExitThread
ExitProcess
RtlUnwind
HeapReAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
FindResourceExW
VirtualProtect
GetFileTime
WriteConsoleA
SearchPathW
SetErrorMode
GlobalGetAtomNameW
GetFullPathNameW
GetVolumeInformationW
DuplicateHandle
UnlockFile
LockFile
FlushFileBuffers
MoveFileW
GetThreadLocale
lstrlenA
lstrcpyW
InterlockedIncrement
LocalReAlloc
GlobalHandle
GlobalReAlloc
GlobalFlags
GetCurrentDirectoryW
GlobalSize
FormatMessageW
MulDiv
InterlockedDecrement
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
GlobalAddAtomW
CreateEventW
SuspendThread
SetEvent
SetThreadPriority
GlobalUnlock
WritePrivateProfileStringW
GetPrivateProfileIntW
FreeResource
GlobalFree
GlobalDeleteAtom
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
LoadLibraryExW
CompareStringA
InterlockedExchange
GlobalLock
lstrcmpW
GlobalAlloc
GlobalMemoryStatus
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetProfileIntW
TlsFree
TlsAlloc
InterlockedExchangeAdd
InitializeCriticalSectionAndSpinCount
TlsSetValue
TlsGetValue
SetLastError
DeleteFileA
SetFileAttributesA
CopyFileA
SetEndOfFile
OpenFileMappingA
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
FileTimeToLocalFileTime
FileTimeToSystemTime
GetSystemTimeAsFileTime
GetSystemTime
GetSystemDirectoryA
GetModuleFileNameA
FindNextFileA
FindFirstFileA
GetFileSizeEx
CreateDirectoryA
CreateFileA
ReleaseMutex
CreateMutexA
OpenMutexA
GetCurrentProcessId
GetCurrentThreadId
GetVersionExW
GetTickCount
QueryPerformanceCounter
GetSystemDefaultLangID
Sleep
InterlockedCompareExchange
GetFileAttributesW
GetFileAttributesA
LoadLibraryW
GetModuleHandleW
FreeLibrary
WriteFile
HeapFree
GetProcessHeap
HeapAlloc
MultiByteToWideChar
WideCharToMultiByte
ResumeThread
GetWindowsDirectoryW
GetShortPathNameW
SetCurrentDirectoryW
GetLongPathNameW
GetTempPathW
lstrlenW
GetSystemDirectoryW
CreateProcessW
SetPriorityClass
lstrcmpA
GetEnvironmentVariableW
GetCommandLineW
LocalFree
CloseHandle
GetModuleHandleA
LocalAlloc
GetProcAddress
CreateFileW
ReadFile
TerminateProcess
GetExitCodeProcess
OpenProcess
GetCurrentThread
WaitForSingleObject
GetCurrentProcess
SetFilePointer
GetFileSize
SetFileAttributesW
DeleteFileW
FindNextFileW
RemoveDirectoryW
FindClose
GetLastError
GetModuleFileNameW
CopyFileW
CreateDirectoryW
GetSystemWindowsDirectoryW
MoveFileExW
FindFirstFileW
GetTempFileNameW
FindResourceW
LoadResource
LockResource
SizeofResource
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection

user32

ReuseDDElParam
InsertMenuItemW
TranslateAcceleratorW
UnregisterClassW
GetNextDlgGroupItem
InvalidateRgn
SetRect
CharNextW
EmptyClipboard
CloseClipboard
SetClipboardData
LoadImageW
DestroyIcon
CopyImage
OpenClipboard
DrawStateW
RegisterClipboardFormatW
EnumChildWindows
LockWindowUpdate
BringWindowToTop
IsRectEmpty
KillTimer
SetTimer
InvalidateRect
IsMenu
SetClassLongW
SetParent
CreatePopupMenu
NotifyWinEvent
SetWindowRgn
CreateAcceleratorTableW
LoadAcceleratorsW
DestroyAcceleratorTable
CharUpperW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
CopyAcceleratorTableW
PostThreadMessageW
LoadMenuW
GetSysColorBrush
SetRectEmpty
DeleteMenu
WaitMessage
ReleaseCapture
LoadCursorW
WindowFromPoint
SetCapture
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
InsertMenuW
RemoveMenu
GetMenuStringW
DestroyMenu
GetMenuItemInfoW
InflateRect
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
UnpackDDElParam
CheckDlgButton
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
IsChild
DestroyCursor
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
UpdateWindow
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
PtInRect
GetMenu
SetWindowLongW
IntersectRect
DrawIconEx
DrawEdge
DrawFrameControl
DrawFocusRect
SetCursorPos
UnionRect
EnableScrollBar
UpdateLayeredWindow
SetMenuDefaultItem
GetMenuDefaultItem
IsCharLowerW
MapVirtualKeyExW
IsClipboardFormatAvailable
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetLastActivePopup
ShowOwnedPopups
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
TranslateMDISysAccel
FrameRect
GetUpdateRect
CharUpperBuffW
CopyIcon
SubtractRect
GetIconInfo
GetDoubleClickTime
GetWindowRgn
CreateMenu
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
MapVirtualKeyW
GetKeyNameTextW
ReleaseDC
GetDC
CopyRect
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
SetWindowContextHelpId
GetParent
MapDialogRect
SetWindowPos
WinHelpW
SystemParametersInfoW
OffsetRect
MessageBeep
RedrawWindow
IsZoomed
PostQuitMessage
GetTopWindow
GetWindowThreadProcessId
GetWindow
PostMessageW
GetFocus
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
SendMessageW
AppendMenuW
GetSystemMenu
LoadIconW
EnableWindow
MessageBoxW
GetAsyncKeyState

gdi32

GetNearestPaletteIndex
GetSystemPaletteEntries
EnumFontFamiliesExW
SetPaletteEntries
GetTextFaceW
SetPixelV
GetPixel
GetWindowExtEx
GetViewportExtEx
ExtFloodFill
LPtoDP
GetViewportOrgEx
GetBoundsRect
FrameRgn
FillRgn
PtInRegion
GetWindowOrgEx
GetPaletteEntries
CreatePalette
RoundRect
Rectangle
Polygon
Ellipse
Polyline
CreatePolygonRgn
CreateEllipticRgn
DPtoLP
GetMapMode
SetRectRgn
GetBkColor
CreateDIBSection
SetPixel
StretchBlt
CombineRgn
RealizePalette
GetDIBits
SetDIBColorTable
GetTextColor
CreateRoundRectRgn
GetTextCharsetInfo
EnumFontFamiliesW
GetTextMetricsW
CreateCompatibleBitmap
CreateDIBitmap
GetRgnBox
OffsetRgn
CreateHatchBrush
CreateSolidBrush
CreatePen
GetObjectType
SelectPalette
GetStockObject
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutW
RectVisible
CreateRectRgn
SelectClipRgn
DeleteObject
CreateRectRgnIndirect
PatBlt
CreateBitmap
GetDCOrgEx
GetClipBox
SetTextColor
SetBkColor
GetObjectW
CreateFontIndirectW
CreateCompatibleDC
BitBlt
ExtTextOutW
GetTextExtentPoint32W
GetDeviceCaps
CopyMetaFileW
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
ExcludeClipRect
IntersectClipRect
SetTextAlign
MoveToEx
LineTo
PtVisible

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

AddAccessAllowedAce
OpenProcessToken
OpenThreadToken
SetSecurityDescriptorGroup
AccessCheck
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
ImpersonateSelf
InitializeAcl
AllocateAndInitializeSid
RevertToSelf
FreeSid
IsValidSecurityDescriptor
GetLengthSid
RegDeleteValueW
RegOpenKeyExW
RegCreateKeyExW
RegQueryValueExW
RegDeleteKeyW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
CryptGenRandom
CryptReleaseContext
CryptAcquireContextW
CreateWellKnownSid
GetSecurityDescriptorSacl
SetSecurityInfo
RegSetValueExW
RegCloseKey
AdjustTokenPrivileges
RegEnumKeyExW
LookupPrivilegeValueW
SetSecurityDescriptorOwner

shell32

SHGetFileInfoW
SHGetSpecialFolderPathW
ShellExecuteExW
SHGetFolderPathW
CommandLineToArgvW
ShellExecuteW
DragQueryFileW
DragFinish
SHChangeNotify
SHAppBarMessage
SHBrowseForFolderW
SHGetPathFromIDListW

comctl32

InitCommonControlsEx
ImageList_GetIconSize

shlwapi

PathFileExistsW
PathStripPathW
PathIsDirectoryEmptyW
PathRemoveFileSpecW
PathFindFileNameW
PathFindExtensionW
PathStripToRootW
PathIsUNCW

oledlg

OleUIBusyW

ole32

CoInitializeEx
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleGetClipboard
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleCreateMenuDescriptor
OleLockRunning
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoGetClassObject
CreateStreamOnHGlobal
OleDuplicateData
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CLSIDFromString
CoRegisterMessageFilter
CLSIDFromProgID
CoInitialize
CoUninitialize
CoCreateInstance
CoRevokeClassObject
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
StgOpenStorageOnILockBytes

oleaut32

SysFreeString
VariantCopy
SafeArrayDestroy
SystemTimeToVariantTime
VariantTimeToSystemTime
OleCreateFontIndirect
SysAllocString
SysStringLen
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen

gdiplus

GdipAlloc
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipFree

crypt32

CertEnumCertificatesInStore
CertGetCertificateContextProperty
CertCloseStore
CertAddCertificateContextToStore
CertFreeCertificateContext
CertOpenStore
CertCreateCertificateContext
CertDeleteCertificateFromStore

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

psapi

EnumProcesses
GetModuleFileNameExW

rpcrt4

UuidToStringA
RpcStringFreeA
UuidCreate

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundW

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 341KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.9MB - Virtual size: 5.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

00f67530d588bb0a8b368338c768bf67

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

gdiplus

crypt32

version

psapi

rpcrt4

imm32

winmm

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 341KB - Virtual size: 340KB

.data Size: 26KB - Virtual size: 57KB

.rsrc Size: 5.9MB - Virtual size: 5.9MB

.reloc Size: 166KB - Virtual size: 166KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 341KB - Virtual size: 340KB

.data
Size: 26KB - Virtual size: 57KB

.rsrc
Size: 5.9MB - Virtual size: 5.9MB

.reloc
Size: 166KB - Virtual size: 166KB