5486a7d790e0772c44133ec3ae3ae112f270724cc78966b16db447a187f3eb60

Sharing

Copy URL Twitter E-mail

General

Target

5486a7d790e0772c44133ec3ae3ae112f270724cc78966b16db447a187f3eb60
Size

1.0MB
MD5

34aa23a77f7a12b3e8d6d815f157afd0
SHA1

a95a2b3354da2ca040e024be3da5a8a46a28ac77
SHA256

5486a7d790e0772c44133ec3ae3ae112f270724cc78966b16db447a187f3eb60
SHA512

53355002fde5fc295221cca58e8487b568124e9be84fe490f16c3958f486d4de07ca5bff5d5b58685dc1e73cd03919f048e75760f25b953d77244fc4bb95ef39
SSDEEP

24576:V4qK4WoKihYisM3TH7YNQyo999999999x:f7RBD7v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5486a7d790e0772c44133ec3ae3ae112f270724cc78966b16db447a187f3eb60

Files

5486a7d790e0772c44133ec3ae3ae112f270724cc78966b16db447a187f3eb60
.exe windows:4 windows x86

6efbf1dfd20ea2040351787d643f169d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

PtInRegion
LineTo
MoveToEx
IntersectClipRect
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
RestoreDC
SaveDC
PatBlt
SetBkColor
SetTextColor
GetClipBox
GetStockObject
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateBitmap
GetMapMode
DPtoLP
GetBkColor
LPtoDP
CreateDIBSection
SelectObject
ExtCreateRegion
DeleteDC
GetTextColor
CreatePen
GetPixel
ExcludeClipRect
DeleteObject
CreateRectRgn
CombineRgn
CreateSolidBrush
FillRgn
CreateCompatibleBitmap
BitBlt
CreateFontA
GetTextExtentPoint32A
CreateCompatibleDC
GetObjectA
StretchBlt
GetTextExtentPointA
CreateDIBitmap

msimg32

TransparentBlt

winmm

PlaySoundA

kernel32

TlsGetValue
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
SizeofResource
GetFileAttributesA
GetFileTime
SetErrorMode
RtlUnwind
RaiseException
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapAlloc
HeapFree
TerminateProcess
SetStdHandle
GetFileType
GetTimeZoneInformation
GetACP
HeapSize
HeapReAlloc
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
TlsSetValue
GetModuleHandleA
GetTickCount
OutputDebugStringA
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
ReleaseMutex
OpenMutexA
LoadLibraryA
FreeLibrary
MapViewOfFile
OpenFileMappingA
UnmapViewOfFile
WaitForSingleObject
SetFileAttributesA
CopyFileA
DeleteFileA
GlobalFree
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
ReadFile
GetFileSize
CreateFileA
GetPrivateProfileStringA
WritePrivateProfileStringA
WritePrivateProfileStructA
GetPrivateProfileStructA
GetPrivateProfileIntA
lstrlenA
GetCurrentThreadId
FindClose
FindFirstFileA
GetProcAddress
lstrcpyA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
lstrcatA
GetVersion
LockResource
LoadResource
FindResourceA
SetLastError
MulDiv
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
LocalFree
FormatMessageA
GetCurrentThread
lstrcmpA
LocalReAlloc
lstrcpynA
FileTimeToSystemTime
FileTimeToLocalFileTime
DuplicateHandle
GetCurrentProcess
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationA
GetFullPathNameA
GetThreadLocale
LocalAlloc
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
EnterCriticalSection
GetProfileStringA

user32

CreateDialogIndirectParamA
EndDialog
DestroyMenu
PostQuitMessage
ValidateRect
TranslateMessage
GetMessageA
SetWindowContextHelpId
MapDialogRect
CharUpperA
GetDesktopWindow
GetSysColorBrush
CharNextA
CopyAcceleratorTableA
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatA
GetMenuCheckMarkDimensions
PostThreadMessageA
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
IsChild
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
TrackPopupMenu
GetDlgItem
GetWindowTextLengthA
GetDlgCtrlID
GetKeyState
GetClassLongA
IsWindowEnabled
GetMessagePos
GetLastActivePopup
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowPos
IntersectRect
SystemParametersInfoA
GetWindowPlacement
SetDoubleClickTime
DefWindowProcA
wsprintfA
MapVirtualKeyA
InflateRect
GetClassNameA
SetPropA
CallNextHookEx
GetPropA
RemovePropA
CreateWindowExA
SetFocus
SetWindowLongA
GetWindowTextA
DestroyWindow
CallWindowProcA
TrackMouseEvent
GetSysColor
FillRect
GetFocus
AppendMenuA
CopyRect
GetMenuState
GetMenuItemInfoA
DestroyIcon
SetRect
PtInRect
KillTimer
FindWindowA
LoadCursorA
SetTimer
IsIconic
GetSystemMetrics
DrawIcon
LoadIconA
UnhookWindowsHookEx
SetWindowsHookExA
LoadBitmapA
ScreenToClient
ShowWindow
SetWindowTextA
MoveWindow
IsDialogMessageA
MessageBoxA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
AdjustWindowRectEx
IsWindowVisible
GetMessageTime
GetTopWindow
GetCursorPos
GetWindowRect
CreatePopupMenu
SetWindowRgn
LoadStringA
RedrawWindow
RegisterWindowMessageA
SetCursor
SetActiveWindow
GetDC
ReleaseDC
GetActiveWindow
GetCapture
SetCapture
ClientToScreen
WindowFromPoint
ReleaseCapture
InvalidateRect
GetWindowLongA
GetParent
PostMessageA
EnableWindow
LoadImageA
GetClientRect
IsWindow
ShowCaret
HideCaret
SendMessageA
OffsetRect
UnregisterClassA

comdlg32

ChooseColorA
GetOpenFileNameA
GetFileTitleA
GetSaveFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCreateKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA

shell32

ShellExecuteA

comctl32

_TrackMouseEvent
ImageList_Destroy
ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CreateStreamOnHGlobal
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord251
ord253

oleaut32

SysStringLen
SysAllocStringByteLen
SysAllocString
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString

Sections

.text
Size: 452KB - Virtual size: 448KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 472KB - Virtual size: 468KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6efbf1dfd20ea2040351787d643f169d

Headers

File Characteristics

Imports

gdi32

msimg32

winmm

kernel32

user32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 452KB - Virtual size: 448KB

.rdata Size: 88KB - Virtual size: 86KB

.data Size: 16KB - Virtual size: 267KB

.rsrc Size: 472KB - Virtual size: 468KB

.text
Size: 452KB - Virtual size: 448KB

.rdata
Size: 88KB - Virtual size: 86KB

.data
Size: 16KB - Virtual size: 267KB

.rsrc
Size: 472KB - Virtual size: 468KB