b76ef24331950303979590f9ec3798feb4e2a97fcaf7d342a5771a1b72e693c6

Sharing

Copy URL Twitter E-mail

General

Target

b76ef24331950303979590f9ec3798feb4e2a97fcaf7d342a5771a1b72e693c6
Size

2.7MB
MD5

3bfa2a5614bf46d97c4de6c144d75ce1
SHA1

d1735b177509d949bed2a150117247f08f5071cf
SHA256

b76ef24331950303979590f9ec3798feb4e2a97fcaf7d342a5771a1b72e693c6
SHA512

2fe3e5fdb3887890b0055dc4c2b40936b1e90bb34b2e398bdd277a8045fb95f7a1255d08a6f298c4570062cda3c60da158e190da34ad309f53e8b982512f0a69
SSDEEP

49152:sM4OSqcjnyy4a1s0V5Cv4Ao4Di54rv8l6D9LJ1EdfquRwFpsp:srQjeCJ1EdquGs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b76ef24331950303979590f9ec3798feb4e2a97fcaf7d342a5771a1b72e693c6

Files

b76ef24331950303979590f9ec3798feb4e2a97fcaf7d342a5771a1b72e693c6
.exe windows:6 windows x64

2095594d8791fbb0e04a77c19f6a6df5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

kernel32

MultiByteToWideChar
CopyFileA
FormatMessageA
MulDiv
GlobalSize
WideCharToMultiByte
FindResourceW
SizeofResource
LockResource
LoadResource
GetModuleFileNameA
GetCurrentProcessId
LocalFree
LocalReAlloc
LocalAlloc
OutputDebugStringA
GlobalUnlock
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalAlloc
TlsSetValue
TlsGetValue
TlsAlloc
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
SetLastError
GetLastError
GetModuleFileNameW
GetModuleHandleExW
CreateActCtxW
LoadLibraryW
ActivateActCtx
DeactivateActCtx
FindActCtxSectionStringW
QueryActCtxW
CloseHandle
WaitForSingleObject
Sleep
GetCurrentThreadId
SetThreadPriority
ResumeThread
GetModuleHandleA
GetModuleHandleW
GetProcAddress
CompareStringA
lstrcmpA
GlobalGetAtomNameA
FileTimeToSystemTime
InitializeCriticalSectionAndSpinCount
FreeLibrary
FreeResource
LoadLibraryExW
GlobalDeleteAtom
lstrcmpW
FindResourceA
GlobalAddAtomA
GlobalFindAtomA
CreateFileA
FindClose
FindFirstFileA
FlushFileBuffers
GetFileSize
GetFullPathNameA
LockFile
ReadFile
SetEndOfFile
SetFilePointer
UnlockFile
WriteFile
DuplicateHandle
GetCurrentProcess
lstrcmpiA
GetVolumeInformationA
GlobalFlags
GetVersionExA
GetOEMCP
GetCPInfo
FileTimeToLocalFileTime
GetFileAttributesA
GetFileAttributesExA
GetFileSizeEx
GetFileTime
GetACP
GetCurrentDirectoryA
lstrcpyA
GetWindowsDirectoryA
VerSetConditionMask
VerifyVersionInfoA
GetTempPathA
GetTempFileNameA
GetTickCount
GetProfileIntA
SearchPathA
VirtualProtect
FindResourceExW
GetUserDefaultUILanguage
GetCommandLineA
HeapFree
HeapAlloc
EncodePointer
DecodePointer
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
SetThreadStackGuarantee
GetSystemInfo
VirtualAlloc
VirtualQuery
HeapReAlloc
CreateThread
ExitThread
IsDebuggerPresent
IsProcessorFeaturePresent
HeapSize
HeapQueryInformation
ExitProcess
GetSystemTimeAsFileTime
SetStdHandle
GetFileType
GetStdHandle
GetProcessHeap
InitOnceExecuteOnce
GetStartupInfoW
QueryPerformanceCounter
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
TerminateProcess
GetTimeZoneInformation
GetStringTypeW
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
OutputDebugStringW
CompareStringEx
LCMapStringEx
WriteConsoleW
CreateFileW
SetEnvironmentVariableA
GlobalFree
InitializeCriticalSectionEx

user32

TrackMouseEvent
LoadMenuW
GetComboBoxInfo
IsZoomed
GetSystemMenu
GetKeyNameTextA
GetWindowLongA
GetParent
GetWindowThreadProcessId
GetLastActivePopup
GetMenuStringA
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuA
AppendMenuA
RemoveMenu
GetMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
IsWindowVisible
GetActiveWindow
GetKeyState
ValidateRect
GetCursorPos
SetWindowsHookExA
CallNextHookEx
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
LoadCursorA
GetWindowTextA
GetWindowTextLengthA
GetFocus
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoA
LoadBitmapW
RegisterWindowMessageA
GetMessagePos
GetMessageTime
PostMessageA
DefWindowProcA
CallWindowProcA
PostThreadMessageA
GetClassInfoA
GetClassInfoExA
CreateWindowExA
IsWindow
IsChild
DestroyWindow
SetWindowPos
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetDlgItem
GetDlgCtrlID
SetFocus
GetCapture
GetMenu
SetMenu
TrackPopupMenu
UpdateWindow
SetActiveWindow
GetForegroundWindow
SetForegroundWindow
RedrawWindow
ScrollWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
SetPropA
GetPropA
RemovePropA
GetClientRect
GetWindowRect
AdjustWindowRectEx
ScreenToClient
MapWindowPoints
CopyRect
EqualRect
PtInRect
SetWindowLongA
GetWindowLongPtrA
SetWindowLongPtrA
GetClassLongA
GetClassLongPtrA
GetClassNameA
GetTopWindow
GetWindow
LoadIconA
LoadIconW
SetScrollInfo
GetScrollInfo
WaitMessage
GetKeyboardLayout
IsCharLowerA
MapVirtualKeyExA
GetKeyboardState
ToAsciiEx
LoadAcceleratorsW
CreateAcceleratorTableA
DestroyAcceleratorTable
MessageBoxA
IsWindowEnabled
EnableWindow
SendMessageA
UnhookWindowsHookEx
CopyAcceleratorTableA
SetCursorPos
SetRect
SetParent
LockWindowUpdate
SetClassLongPtrA
ChangeWindowMessageFilter
GetDoubleClickTime
CopyIcon
SetMenuDefaultItem
ModifyMenuA
RegisterClipboardFormatA
CharUpperBuffA
FrameRect
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
IsClipboardFormatAvailable
GetUpdateRect
SubtractRect
CreateMenu
MapDialogRect
DestroyCursor
GetWindowRgn
DrawIcon
WinHelpA
MonitorFromWindow
GetMonitorInfoA
ShowWindow
MoveWindow
CheckDlgButton
SendDlgItemMessageA
SetWindowTextA
IsDialogMessageA
DestroyIcon
CharUpperA
ClientToScreen
GetDesktopWindow
RealChildWindowFromPoint
DrawTextA
DrawTextExA
GrayStringA
TabbedTextOutA
RegisterClassA
ReuseDDElParam
UnpackDDElParam
InsertMenuItemA
GetWindowDC
BeginPaint
EndPaint
FillRect
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
BringWindowToTop
MonitorFromPoint
UpdateLayeredWindow
IsMenu
UnionRect
SetWindowRgn
DrawFrameControl
DrawEdge
LoadImageW
DrawStateA
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
MapVirtualKeyA
GetMenuDefaultItem
CreatePopupMenu
NotifyWinEvent
LoadCursorW
InvertRect
HideCaret
EnableScrollBar
GetAsyncKeyState
MessageBeep
GetIconInfo
DrawIconEx
LoadImageA
IsRectEmpty
OffsetRect
SetRectEmpty
DrawFocusRect
WindowFromPoint
ReleaseCapture
SetCapture
GetNextDlgGroupItem
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
InvalidateRect
KillTimer
SetTimer
DeleteMenu
SetCursor
ShowOwnedPopups
IntersectRect
IsIconic
PostQuitMessage
CopyImage
SystemParametersInfoA
InflateRect
GetMenuItemInfoA
DestroyMenu

gdi32

GetTextCharsetInfo
EnumFontFamiliesA
CreateDIBitmap
GetTextMetricsA
GetBkColor
RealizePalette
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
DPtoLP
SetRectRgn
PatBlt
CreateRectRgnIndirect
CombineRgn
GetTextExtentPoint32A
CreateFontIndirectA
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutA
TextOutA
MoveToEx
SetTextAlign
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
CreateCompatibleBitmap
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
BitBlt
DeleteObject
GetObjectA
SetTextColor
SetBkColor
CreateBitmap
GetDeviceCaps
CreateDCA
CopyMetaFileA
CreateRoundRectRgn
RoundRect
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
GetWindowOrgEx
LPtoDP
GetViewportOrgEx
GetTextFaceA
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
Rectangle
EnumFontFamiliesExA
GetRgnBox
OffsetRgn

msimg32

TransparentBlt
AlphaBlend

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegEnumKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey

shell32

SHGetDesktopFolder
SHAppBarMessage
SHBrowseForFolderA
DragFinish
SHGetFileInfoA
SHCreateItemFromParsingName
ShellExecuteA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
DragQueryFileA

shlwapi

PathStripToRootA
PathFindExtensionA
PathRemoveFileSpecW
StrFormatKBSizeA
PathIsUNCA
PathFindFileNameA

uxtheme

GetCurrentThemeName
BufferedPaintUnInit
BeginBufferedPaint
EndBufferedPaint
OpenThemeData
CloseThemeData
DrawThemeParentBackground
DrawThemeTextEx
GetThemePartSize
GetWindowTheme
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
IsAppThemed
DrawThemeBackground
GetThemeColor
BufferedPaintInit

dwmapi

DwmDefWindowProc
DwmSetWindowAttribute
DwmIsCompositionEnabled

ole32

RevokeDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
DoDragDrop
CreateStreamOnHGlobal
CoInitializeEx
CoInitialize
CoUninitialize
CoCreateInstance
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
RegisterDragDrop

oleaut32

VariantInit
VarBstrFromDate
VariantChangeType
VariantClear
SysAllocString
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocStringLen
SysStringLen
SysFreeString

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

gdiplus

GdipFree
GdiplusShutdown
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdiplusStartup
GdipAlloc

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundA

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 550KB - Virtual size: 550KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 276KB - Virtual size: 275KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2095594d8791fbb0e04a77c19f6a6df5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

shlwapi

uxtheme

dwmapi

ole32

oleaut32

oleacc

gdiplus

imm32

winmm

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 550KB - Virtual size: 550KB

.data Size: 44KB - Virtual size: 92KB

.pdata Size: 76KB - Virtual size: 75KB

.rsrc Size: 276KB - Virtual size: 275KB

.reloc Size: 165KB - Virtual size: 165KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 550KB - Virtual size: 550KB

.data
Size: 44KB - Virtual size: 92KB

.pdata
Size: 76KB - Virtual size: 75KB

.rsrc
Size: 276KB - Virtual size: 275KB

.reloc
Size: 165KB - Virtual size: 165KB