751b65741ab9cbfc1beb6071cabd9a19266293a8596aee314ff3566b8d5a3e29

Sharing

Copy URL Twitter E-mail

General

Target

751b65741ab9cbfc1beb6071cabd9a19266293a8596aee314ff3566b8d5a3e29
Size

531KB
MD5

f60ab53d170046df7268e99c0ec8e490
SHA1

bf5a9492650c44e799dcc0238269f3237d1482cd
SHA256

751b65741ab9cbfc1beb6071cabd9a19266293a8596aee314ff3566b8d5a3e29
SHA512

6f4ae5172dfe5a88c9f7982d83657e5db3514aa3c04b0576a074e7e26154c79f3689a62c879b1b53a5b613688fbb083e05356a001f21cd1b46c51d4ff743ea96
SSDEEP

6144:uHsDSc5h8uUltZXnuR3KeNmR/9YExcQmoyRHR921XXQH9f+9tN:Lh8uULZXCQR/9YEx6Ry1wl+9tN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
751b65741ab9cbfc1beb6071cabd9a19266293a8596aee314ff3566b8d5a3e29

Files

751b65741ab9cbfc1beb6071cabd9a19266293a8596aee314ff3566b8d5a3e29
.exe windows:5 windows x86

2291513c2a2212daaeb78b9f95b47a91

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wtsapi32

WTSRegisterSessionNotification

advapi32

RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
GetNamedSecurityInfoA
SetEntriesInAclA
SetNamedSecurityInfoA
AllocateAndInitializeSid
FreeSid
RegEnumKeyA
RegOpenKeyA
RegQueryValueA
RegDeleteKeyA

kernel32

DuplicateHandle
GetVolumeInformationA
GetFullPathNameA
CreateFileA
GetModuleHandleW
SetErrorMode
GetTickCount
GetFileAttributesA
GetFileSizeEx
GetFileTime
GetCommandLineA
GetStartupInfoA
HeapAlloc
HeapFree
RtlUnwind
RaiseException
Sleep
ExitProcess
ExitThread
CreateThread
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
IsValidCodePage
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetFileSize
GetTimeZoneInformation
GetDriveTypeA
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
OpenMutexA
CreateMutexA
SetPriorityClass
GetCurrentProcess
InitializeCriticalSection
WTSGetActiveConsoleSessionId
GetVersionExA
EnterCriticalSection
LeaveCriticalSection
CreateEventA
SetThreadPriority
SetEvent
LoadLibraryA
GetProcAddress
GetUserDefaultUILanguage
WaitForMultipleObjects
CloseHandle
SetCurrentDirectoryA
WideCharToMultiByte
SizeofResource
LockResource
LoadResource
FindResourceA
OpenEventA
DeleteCriticalSection
FreeLibrary
GetWindowsDirectoryA
LocalFree
FreeResource
GlobalFree
GlobalUnlock
GlobalLock
lstrlenA
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
lstrcmpW
MultiByteToWideChar
SetLastError
GetLastError
CompareStringA
GlobalDeleteAtom
GlobalFindAtomA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
GetCurrentDirectoryA
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GlobalFlags
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalAddAtomA
FindNextFileA
FindClose
InterlockedDecrement
GetModuleFileNameW
FormatMessageA
MulDiv
GetCurrentProcessId
SuspendThread
WaitForSingleObject
ResumeThread
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetModuleFileNameA
GetLocaleInfoA
InterlockedExchange
lstrcmpA
GlobalAlloc
GetCurrentThreadId
GlobalGetAtomNameA

user32

UnregisterClassA
RegisterClipboardFormatA
PostThreadMessageA
DestroyMenu
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetWindowThreadProcessId
GetMessageA
TranslateMessage
ValidateRect
SetWindowContextHelpId
MapDialogRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
CharUpperA
SetPropA
GetPropA
RemovePropA
GetLastActivePopup
DispatchMessageA
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
TrackPopupMenu
GetKeyState
SetMenu
IsWindowVisible
UpdateWindow
GetMenuItemID
GetMenuItemCount
MessageBoxA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
EqualRect
CopyRect
DefWindowProcA
CallWindowProcA
PtInRect
GetMenu
OffsetRect
IntersectRect
GetWindowPlacement
GetWindowRect
GetFocus
SetWindowPos
SetFocus
ShowWindow
MoveWindow
SetWindowLongA
GetDlgCtrlID
SetWindowTextA
IsDialogMessageA
MessageBeep
GetNextDlgGroupItem
ReleaseCapture
SetCapture
InvalidateRgn
InvalidateRect
SetRect
IsRectEmpty
CopyAcceleratorTableA
CharNextA
GetSysColorBrush
GetClassLongA
SendDlgItemMessageA
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
GetWindow
GetWindowTextA
SystemParametersInfoA
SetForegroundWindow
GetSubMenu
LoadMenuA
PostMessageA
GetClassNameA
GetForegroundWindow
LoadCursorA
KillTimer
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
SetTimer
SendMessageA
PostQuitMessage
LoadIconA
RegisterWindowMessageA
EnableWindow
SetCursor
GetCursorPos
CreateWindowExA

gdi32

SaveDC
RestoreDC
SetMapMode
DeleteObject
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
CreateBitmap
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
GetStockObject
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
ScaleViewportExtEx
GetDeviceCaps
GetObjectA
SetBkColor
SetTextColor
GetClipBox
ExtTextOutA

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

shell32

ShellExecuteExA
Shell_NotifyIconA

shlwapi

PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
StrStrIA

oledlg

ord8

ole32

CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

SysStringLen
VariantCopy
SysAllocString
SafeArrayDestroy
SystemTimeToVariantTime
VariantTimeToSystemTime
OleCreateFontIndirect
SysAllocStringByteLen
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysFreeString

Sections

.text
Size: 239KB - Virtual size: 238KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 178KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2291513c2a2212daaeb78b9f95b47a91

Headers

DLL Characteristics

File Characteristics

Imports

wtsapi32

advapi32

kernel32

user32

gdi32

comdlg32

winspool.drv

shell32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 239KB - Virtual size: 238KB

.rdata Size: 64KB - Virtual size: 64KB

.data Size: 10KB - Virtual size: 27KB

.rsrc Size: 178KB - Virtual size: 177KB

.reloc Size: 38KB - Virtual size: 37KB

.text
Size: 239KB - Virtual size: 238KB

.rdata
Size: 64KB - Virtual size: 64KB

.data
Size: 10KB - Virtual size: 27KB

.rsrc
Size: 178KB - Virtual size: 177KB

.reloc
Size: 38KB - Virtual size: 37KB