f583bbbc5eff5c25affb669945ba0ea287ee53a3abca2789eaa1bd823dfa48c5

Sharing

Copy URL Twitter E-mail

General

Target

f583bbbc5eff5c25affb669945ba0ea287ee53a3abca2789eaa1bd823dfa48c5
Size

1.9MB
MD5

2e65959ad9735bd04c8a0ab041af3fae
SHA1

590bdce7f6a2d9410d1ecd54df843fb098c3abd9
SHA256

f583bbbc5eff5c25affb669945ba0ea287ee53a3abca2789eaa1bd823dfa48c5
SHA512

8cb265644b698cfb0c5726eb715a433910bb18c9eb767e6ea478174e8a93bbce60d8579fa378a354b606f234847a91086927f51ca3eb385bb6eb5983e2aff7a7
SSDEEP

12288:xHAXbPjjdl6cRY5r4BjV3hyB3cLVYctGCAr7gjivzodJKVrAxXkdt:xHAXbP1lK0jhhaL3HgjivEAGxXkdt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f583bbbc5eff5c25affb669945ba0ea287ee53a3abca2789eaa1bd823dfa48c5

Files

f583bbbc5eff5c25affb669945ba0ea287ee53a3abca2789eaa1bd823dfa48c5
.exe windows:4 windows x86

f9f3149ce1dd34f7671e24351a1dd866

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
ConvertDefaultLocale
GetCurrentThread
LocalFileTimeToFileTime
SetFileTime
GlobalFlags
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
SetErrorMode
GetCurrentDirectoryW
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
GetSystemTimeAsFileTime
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetEnvironmentVariableW
RtlUnwind
RaiseException
SetStdHandle
GetFileType
ExitThread
ExitProcess
EnumResourceLanguagesW
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCPInfo
IsValidCodePage
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
GetCurrentDirectoryA
GetDriveTypeA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
GetLocaleInfoW
CompareStringA
SetThreadPriority
lstrlenA
lstrcmpA
InterlockedIncrement
InterlockedDecrement
GetFullPathNameW
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
WriteFile
ReadFile
GetThreadLocale
DeleteFileW
MoveFileW
FileTimeToLocalFileTime
FindNextFileW
LocalFree
GetCurrentProcessId
MulDiv
GetModuleHandleA
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
SetLastError
lstrcmpW
GetVersionExA
GetDiskFreeSpaceW
SetVolumeLabelW
SetFilePointer
GetTickCount
GetFileAttributesW
SetFileAttributesW
GetDriveTypeW
GetCurrentProcess
ResumeThread
SuspendThread
CreateThread
ResetEvent
SetEvent
CreateEventW
SystemTimeToFileTime
GetLocalTime
GetPrivateProfileIntW
Sleep
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFileTime
CreateProcessW
GetProcAddress
GetModuleHandleW
InterlockedExchange
FindClose
FindFirstFileW
SetCurrentDirectoryW
GlobalFree
TerminateProcess
OpenProcess
UnmapViewOfFile
ReleaseMutex
MapViewOfFile
CreateFileMappingW
WaitForSingleObject
CreateMutexW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetModuleFileNameW
FreeResource
CreateDirectoryW
GetCurrentThreadId
FormatMessageW
GetLastError
GetACP
lstrcpyW
FreeLibrary
LoadLibraryW
GetWindowsDirectoryW
WinExec
lstrlenW
lstrcatW
CloseHandle
DeviceIoControl
CreateFileW
GetVolumeInformationW
GetSystemDirectoryW
GetVersionExW
GlobalAlloc
WideCharToMultiByte
GetOEMCP
GlobalSize
GlobalUnlock
GlobalLock
MultiByteToWideChar
GetTempPathW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
lstrcpynW
InitializeCriticalSection
FindResourceW
LoadResource
LockResource
HeapSize
SizeofResource

user32

CheckDlgButton
GrayStringW
DrawTextExW
TabbedTextOutW
RegisterWindowMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetMessageTime
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetClassInfoExW
GetClassInfoW
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
SystemParametersInfoA
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
OemToCharBuffA
CharToOemBuffA
CharUpperW
SetDlgItemTextW
SendDlgItemMessageW
DispatchMessageW
TranslateMessage
PeekMessageW
GetCapture
LoadBitmapW
UpdateWindow
IsDlgButtonChecked
GetWindowPlacement
LoadAcceleratorsW
PostQuitMessage
DrawMenuBar
EqualRect
SetWindowPlacement
EnableMenuItem
LoadIconW
DrawIcon
GetLastActivePopup
SetForegroundWindow
GetWindowThreadProcessId
LoadImageW
SetWindowPos
GetDlgCtrlID
ModifyMenuW
GetMenuState
SetWindowsHookExW
CallNextHookEx
MoveWindow
GetWindow
GetTopWindow
UnhookWindowsHookEx
SetParent
TranslateAcceleratorW
GetFocus
CopyIcon
GetMessagePos
MessageBeep
InsertMenuW
SetCaretPos
RegisterClipboardFormatW
SetClipboardData
EmptyClipboard
GetAsyncKeyState
GetCursorPos
FrameRect
DrawTextW
SetTimer
MessageBoxW
IntersectRect
KillTimer
CopyRect
IsDialogMessageW
PostThreadMessageW
LockWindowUpdate
GetDCEx
GetMenuItemID
UnionRect
GetSubMenu
GetMenuItemCount
HideCaret
GetMenu
AppendMenuW
ShowCaret
CreatePopupMenu
DestroyCaret
RedrawWindow
CreateMenu
CreateCaret
GetKeyState
CloseClipboard
GetNextDlgGroupItem
GetClipboardData
OpenClipboard
InvalidateRgn
IsRectEmpty
CopyAcceleratorTableW
GetSysColorBrush
IsZoomed
SetWindowContextHelpId
MapDialogRect
GetMessageW
ValidateRect
SetRectEmpty
CharNextW
DestroyMenu
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
CheckMenuItem
GetMenuStringW
IsIconic
IsClipboardFormatAvailable
InflateRect
LoadCursorW
SetCursor
UnregisterClassW
DestroyWindow
SetCapture
GetDC
FillRect
DestroyCursor
RegisterClassW
DefWindowProcW
ShowWindow
CreateCursor
EndPaint
CreateWindowExW
DrawFocusRect
SetRect
SetWindowTextW
PtInRect
GetClientRect
BeginPaint
ScreenToClient
ReleaseCapture
ReleaseDC
GetSysColor
GetParent
GetWindowDC
PostMessageW
WindowFromPoint
ClientToScreen
SetWindowLongW
GetWindowLongW
GetWindowRect
IsWindow
SetWindowRgn
GetSystemMetrics
OffsetRect
SendMessageW
InvalidateRect
EnableWindow
IsWindowVisible
CallWindowProcW
UnregisterClassA

gdi32

ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
CreateBitmap
CreatePen
SetViewportExtEx
SetRectRgn
GetMapMode
GetBkColor
GetTextColor
GetCharWidthW
StretchDIBits
GetTextMetricsW
GetRgnBox
IntersectClipRect
OffsetViewportOrgEx
SetViewportOrgEx
Escape
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
GetTextExtentPoint32W
ExcludeClipRect
SetMapMode
SetBkMode
RestoreDC
SaveDC
SetTextColor
GetClipBox
CreateRectRgnIndirect
PatBlt
SetDIBColorTable
CreateDIBSection
GetDIBColorTable
DeleteDC
StretchBlt
GetObjectW
BitBlt
FrameRgn
CombineRgn
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
Rectangle
LineTo
MoveToEx
GetDeviceCaps
SelectObject
GetStockObject
DeleteObject
TextOutW
CreateFontIndirectW
GetPixel
ExtTextOutW
SetBkColor
CreateRectRgn
CreateFontW

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegSetValueExW
RegEnumKeyW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyExW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyW
RegCloseKey
RegQueryValueW

shell32

ShellExecuteW
DragFinish
DragAcceptFiles
DragQueryFileW

comctl32

InitCommonControlsEx

shlwapi

PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathIsUNCW

oledlg

OleUIBusyW

ole32

CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoCreateInstance
CoInitialize
CreateStreamOnHGlobal
OleIsCurrentClipboard
OleFlushClipboard
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
CoRegisterMessageFilter

oleaut32

SysAllocString
SafeArrayDestroy
VarDateFromStr
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SysStringLen
SysFreeString
OleCreateFontIndirect
VariantCopy

gdiplus

GdipGetImageGraphicsContext
GdipGetImagePixelFormat
GdipCreateBitmapFromScan0
GdipBitmapUnlockBits
GdiplusStartup
GdipDeleteGraphics
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipFree
GdipGetImageWidth
GdipGetImageHeight
GdipDrawImageI
GdipCloneImage
GdipGetImagePaletteSize
GdipAlloc
GdiplusShutdown
GdipDisposeImage
GdipBitmapLockBits

netapi32

Netbios

skyprousb

ord39
ord8
ord9
ord10
ord38
ord12
ord13
ord14
ord15
ord37
ord36
ord35
ord30
ord28
ord29
ord27
ord23
ord7
ord6
ord4
ord11
ord1
ord25
ord31
ord32
ord33
ord34
ord20
ord2

winmm

timeGetTime
sndPlaySoundW

wininet

HttpQueryInfoW
InternetCloseHandle
InternetOpenUrlW
InternetSetStatusCallbackW
InternetOpenW
InternetGetConnectedState
InternetReadFileExA

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

Sections

.text
Size: 856KB - Virtual size: 853KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 196KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SkyPRO-D
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 844KB - Virtual size: 843KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f9f3149ce1dd34f7671e24351a1dd866

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

gdiplus

netapi32

skyprousb

winmm

wininet

version

Sections

.text Size: 856KB - Virtual size: 853KB

.rdata Size: 196KB - Virtual size: 194KB

.data Size: 20KB - Virtual size: 82KB

SkyPRO-D Size: 4KB - Virtual size: 4B

.rsrc Size: 844KB - Virtual size: 843KB

.text
Size: 856KB - Virtual size: 853KB

.rdata
Size: 196KB - Virtual size: 194KB

.data
Size: 20KB - Virtual size: 82KB

SkyPRO-D
Size: 4KB - Virtual size: 4B

.rsrc
Size: 844KB - Virtual size: 843KB