1133081d58b3ce0f21346b64d9f6575ab818d075564b27e4357f7bad177f844b

Sharing

Copy URL

Twitter E-mail

General

Target

1133081d58b3ce0f21346b64d9f6575ab818d075564b27e4357f7bad177f844b
Size

3.1MB
MD5

a22e82cbcff29148a7eefddc1a46c1ce
SHA1

e44dc42570ab2b1b796b4d8b556c9d46671abb68
SHA256

1133081d58b3ce0f21346b64d9f6575ab818d075564b27e4357f7bad177f844b
SHA512

cf75c4f67930cfc554dd0bc89bcc0fc97f3f1fa6cf3897ff96682740b7ff4259971eb0f0d44ee38199f791eb7eb9c8270f080d6c466c949fcf1895e55bfd5e63
SSDEEP

98304:g2oOLjt7Os62ORUwBRk0wzU8LN+RhgXTbWngf0PAA0fp1LIyvuFE23d2qsND:gGli9dVgOnBv0RxXvuFE2t3MD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1133081d58b3ce0f21346b64d9f6575ab818d075564b27e4357f7bad177f844b

Files

1133081d58b3ce0f21346b64d9f6575ab818d075564b27e4357f7bad177f844b
.exe windows:5 windows x86

2ae38ea03162f35e3d6175bda981eec6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetCurrentDirectoryW
GetConsoleMode
GetFullPathNameA
WriteConsoleW
SetEnvironmentVariableA
GetConsoleCP
SetConsoleCtrlHandler
GetTimeZoneInformation
FatalAppExitA
IsProcessorFeaturePresent
LCMapStringW
GetStringTypeW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
QueryPerformanceCounter
HeapDestroy
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
SetUnhandledExceptionFilter
HeapSize
HeapQueryInformation
GetFileType
SetStdHandle
ExitProcess
HeapReAlloc
RaiseException
RtlUnwind
GetDateFormatW
GetTimeFormatW
GetSystemTimeAsFileTime
DecodePointer
EncodePointer
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapAlloc
HeapFree
CreateThread
ExitThread
GetStartupInfoW
HeapSetInformation
GetCommandLineW
LocalLock
LocalUnlock
FindResourceExW
VirtualProtect
SearchPathW
InitializeCriticalSectionAndSpinCount
GetDiskFreeSpaceW
ReplaceFileW
GetUserDefaultLCID
GetTempFileNameW
GetNumberFormatW
SetErrorMode
GetShortPathNameW
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
MoveFileW
GetStringTypeExW
GetCurrentDirectoryW
GetThreadLocale
GetAtomNameW
GlobalGetAtomNameW
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
TlsGetValue
LocalAlloc
GlobalFlags
GetProfileIntW
GetFileTime
GetFileSizeEx
GetFileAttributesW
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileAttributesW
GetFileAttributesExW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindFirstFileW
FindNextFileW
FindClose
CreateEventW
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
lstrlenA
lstrcmpA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringA
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
GetCurrentProcessId
CopyFileW
FormatMessageW
LocalFree
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
lstrcmpW
FreeResource
GetTickCount
WinExec
lstrcatW
lstrcpyW
FreeLibrary
GetWindowsDirectoryW
MulDiv
GlobalSize
GetVersionExW
MultiByteToWideChar
CreateDirectoryW
WideCharToMultiByte
lstrcmpiW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetDiskFreeSpaceExW
DeleteFileW
CloseHandle
CreateFileW
FindResourceW
LoadResource
LockResource
SizeofResource
GlobalFree
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
ActivateActCtx
GetProcAddress
GetModuleHandleW
LoadLibraryW
GetLastError
DeactivateActCtx
SetLastError
lstrlenW
GetTempPathW
GetPrivateProfileIntW
InterlockedExchange
Sleep
LeaveCriticalSection
EnterCriticalSection
GetPrivateProfileStringW
WritePrivateProfileStringW
GetModuleFileNameW
GetDriveTypeW

user32

DestroyMenu
GetMenuItemInfoW
ShowOwnedPopups
GetMessageW
ValidateRect
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
GetWindowThreadProcessId
EndPaint
BeginPaint
MapVirtualKeyW
GetKeyNameTextW
GetMenuStringW
InsertMenuW
RemoveMenu
ScrollWindowEx
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
GetMenuItemID
GetMenuItemCount
MessageBoxW
CreateWindowExW
GetClassInfoExW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
CallWindowProcW
CreateMenu
SetWindowPos
RegisterClipboardFormatW
LoadMenuW
GetSubMenu
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetWindowLongW
IsWindowEnabled
GetNextDlgTabItem
EndDialog
WindowFromPoint
ClientToScreen
IsWindowVisible
IsRectEmpty
GetDoubleClickTime
RegisterWindowMessageW
OffsetRect
RedrawWindow
CopyIcon
MessageBeep
SetWindowLongW
DestroyCursor
GetCapture
ClipCursor
InvertRect
PtInRect
GetFocus
GetMessagePos
IsClipboardFormatAvailable
ScreenToClient
GetCursorPos
IntersectRect
DefWindowProcW
GetClassInfoW
LoadCursorW
SetCursor
InflateRect
DrawEdge
FrameRect
GetSysColor
GetDC
SystemParametersInfoW
DrawIcon
DispatchMessageW
TranslateMessage
PeekMessageW
InSendMessage
TranslateMDISysAccel
DrawMenuBar
GetDlgCtrlID
UpdateWindow
EnableWindow
KillTimer
SendMessageW
IsWindow
DefMDIChildProcW
GetWindowRect
AppendMenuW
GetSystemMenu
GetDlgItem
LoadIconW
SetWindowRgn
FillRect
SetRect
CopyRect
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetKeyState
GetParent
RealChildWindowFromPoint
GetDialogBaseUnits
GetSysColorBrush
UnregisterClassW
WaitMessage
DeleteMenu
SetRectEmpty
EnumDisplayMonitors
SetLayeredWindowAttributes
CharNextW
GetTabbedTextExtentW
GetWindowRgn
WindowFromDC
PostMessageW
SetCapture
LoadBitmapW
ReleaseCapture
InvalidateRect
DrawFocusRect
ReleaseDC
GetWindowDC
GetClientRect
GetSystemMetrics
IsIconic
SetTimer
EnumChildWindows
GetDCEx
SubtractRect
CharUpperBuffW
GetUpdateRect
SendNotifyMessageW
GetWindow
SetMenuDefaultItem
DefFrameProcW
IsMenu
MonitorFromPoint
UpdateLayeredWindow
MapVirtualKeyExW
IsCharLowerW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
UnionRect
LockWindowUpdate
SetCursorPos
CreateAcceleratorTableW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
DrawFrameControl
DrawStateW
SetClassLongW
DestroyAcceleratorTable
SetParent
IsZoomed
DrawIconEx
CopyImage
GetIconInfo
NotifyWinEvent
EnableScrollBar
HideCaret
GetAsyncKeyState
GetMenuDefaultItem
UnpackDDElParam
ReuseDDElParam
GetMenuBarInfo
LoadImageW
LoadAcceleratorsW
InsertMenuItemW
CreatePopupMenu
BringWindowToTop
TranslateAcceleratorW
PostThreadMessageW
CharUpperW
DestroyIcon
GetNextDlgGroupItem
InvalidateRgn
GetMenu
CopyAcceleratorTableW

gdi32

CombineRgn
CreateFontIndirectW
GetStockObject
GetTextExtentPoint32W
GetCurrentObject
GetDeviceCaps
StartDocW
StartPage
EndPage
EndDoc
AbortDoc
CreateFontW
GetViewportOrgEx
SetViewportOrgEx
Rectangle
Polygon
GetTextMetricsW
PatBlt
SetTextColor
SetBkColor
CopyMetaFileW
CreateDCW
CreateRectRgnIndirect
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
LineTo
MoveToEx
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetLayout
SetLayout
SetArcDirection
SetColorAdjustment
SelectClipRgn
GetClipRgn
CreateRectRgn
SelectClipPath
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
ExtCreateRegion
ScaleWindowExtEx
GetCurrentPositionEx
ArcTo
PolyDraw
PolylineTo
PolyBezierTo
ExtSelectClipRgn
CreateDIBPatternBrushPt
CreatePatternBrush
SelectPalette
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
ExtCreatePen
CreateHatchBrush
SetRectRgn
SetAbortProc
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetTextColor
GetRgnBox
GetCharWidthW
StretchDIBits
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
Polyline
Ellipse
GetDIBits
SetPixel
OffsetRgn
EnumFontFamiliesExW
RoundRect
GetWindowOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceW
CreateMetaFileW
CloseMetaFile
DeleteMetaFile
CreateEllipticRgn
CreatePolygonRgn
CreateRoundRectRgn
CreateSolidBrush
CreatePen
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetPixel
CreateBitmap
GetBkColor
BitBlt
DPtoLP
GetViewportExtEx
GetWindowExtEx
GetMapMode
CreateCompatibleBitmap
LPtoDP
GetObjectW
SetDIBColorTable
GetDIBColorTable
StretchBlt
DeleteObject
CreateDIBSection
CreateCompatibleDC
SetWindowExtEx
SelectObject
DeleteDC

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW
GetJobW

advapi32

SetFileSecurityW
RegQueryValueExW
RegCloseKey
RegQueryValueW
RegSetValueW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyW
RegEnumValueW
GetFileSecurityW
RegOpenKeyExW
RegEnumKeyExW

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
ShellExecuteW
DragQueryFileW
SHAddToRecentDocs
ExtractIconW
ShellExecuteExW
SHAppBarMessage
SHBrowseForFolderW
SHGetDesktopFolder
DragFinish
SHGetFileInfoW

comctl32

_TrackMouseEvent
InitCommonControlsEx
ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Create
ImageList_GetImageCount
ImageList_Destroy
ImageList_AddMasked
ImageList_Remove
ImageList_DrawEx

shlwapi

PathFindExtensionW
PathRemoveExtensionW
PathFindFileNameW
PathRemoveFileSpecW
PathStripToRootW
PathFileExistsW
PathIsUNCW

ole32

OleCreateLinkToFile
OleCreateFromFile
OleSetContainedObject
OleGetIconOfClass
OleLoad
OleCreate
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleSaveToStream
WriteClassStm
CreateItemMoniker
CreateGenericComposite
OleRegEnumVerbs
OleRegGetMiscStatus
OleQueryCreateFromData
OleQueryLinkFromData
OleIsRunning
GetRunningObjectTable
CoGetMalloc
CreateOleAdviseHolder
CreateDataAdviseHolder
StgIsStorageFile
StgOpenStorage
CreateFileMoniker
StgCreateDocfile
PropVariantCopy
OleRun
CoRegisterMessageFilter
CoRevokeClassObject
CoRegisterClassObject
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
ReadClassStg
CreateBindCtx
ReleaseStgMedium
CoTaskMemAlloc
StringFromCLSID
CoTreatAsClass
OleDuplicateData
CoCreateGuid
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
OleGetClipboard
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CoDisconnectObject
StringFromGUID2
CoInitialize
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
GetHGlobalFromILockBytes
CreateStreamOnHGlobal
CoTaskMemFree
CoUninitialize
CoInitializeEx
OleSave
OleSetMenuDescriptor
OleCreateMenuDescriptor

oleaut32

SysAllocStringByteLen
SysStringByteLen
SysAllocString
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
VariantInit
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SysStringLen
VarDateFromStr
SysReAllocStringLen
VarCyFromStr
VarBstrFromCy
VarBstrFromDec
VarDecFromStr
VarBstrFromDate
OleCreateFontIndirect
VariantChangeType
VariantClear
SysFreeString
SysAllocStringLen
VarUdateFromDate
SafeArrayCopy
VariantTimeToSystemTime
SystemTimeToVariantTime

oledlg

OleUIBusyW

urlmon

URLDownloadToFileW

avcodec-58

av_init_packet
av_packet_rescale_ts
av_packet_unref
avcodec_alloc_context3
avcodec_close
avcodec_find_decoder
avcodec_find_encoder
avcodec_free_context
avcodec_open2
avcodec_parameters_copy
avcodec_parameters_from_context
avcodec_parameters_to_context
avcodec_receive_frame
avcodec_receive_packet
avcodec_send_frame
avcodec_send_packet
avpicture_fill

avformat-58

av_dump_format
av_guess_frame_rate
av_interleaved_write_frame
av_read_frame
av_register_all
av_write_trailer
avformat_alloc_output_context2
avformat_close_input
avformat_find_stream_info
avformat_free_context
avformat_new_stream
avformat_open_input
avformat_write_header
avio_closep
avio_open

avutil-56

av_audio_fifo_alloc
av_audio_fifo_free
av_audio_fifo_read
av_audio_fifo_realloc
av_audio_fifo_size
av_audio_fifo_write
av_dict_copy
av_dict_free
av_dict_set
av_frame_alloc
av_frame_free
av_frame_get_buffer
av_free
av_get_default_channel_layout
av_malloc
av_mallocz_array
av_opt_set_int
av_opt_set_sample_fmt
av_rescale_q
av_rescale_q_rnd
av_samples_alloc
av_samples_get_buffer_size

swresample-3

swr_alloc
swr_convert
swr_free
swr_init

swscale-5

sws_freeContext
sws_getContext
sws_scale

gdiplus

GdipCloneImage
GdipGetImageGraphicsContext
GdipDisposeImage
GdipGetImageWidth
GdipDrawImageI
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromFileICM
GdipFree
GdipAlloc
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipGetImageHeight
GdiplusStartup
GdiplusShutdown
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 482KB - Virtual size: 482KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 319KB - Virtual size: 319KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2ae38ea03162f35e3d6175bda981eec6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

urlmon

avcodec-58

avformat-58

avutil-56

swresample-3

swscale-5

gdiplus

oleacc

imm32

winmm

Sections

.text Size: 2.1MB - Virtual size: 2.1MB

.rdata Size: 482KB - Virtual size: 482KB

.data Size: 35KB - Virtual size: 65KB

.rsrc Size: 319KB - Virtual size: 319KB

.reloc Size: 182KB - Virtual size: 182KB

.text
Size: 2.1MB - Virtual size: 2.1MB

.rdata
Size: 482KB - Virtual size: 482KB

.data
Size: 35KB - Virtual size: 65KB

.rsrc
Size: 319KB - Virtual size: 319KB

.reloc
Size: 182KB - Virtual size: 182KB