0790ced6c955588036f0b8d4319d649dcf0ecd50e2525014f01e83744abdd547

Sharing

Copy URL Twitter E-mail

General

Target

0790ced6c955588036f0b8d4319d649dcf0ecd50e2525014f01e83744abdd547
Size

2.4MB
MD5

1089c10deccbe74f096b37e95e58b6a9
SHA1

d929f373692703c7238b4c96220868f166cca381
SHA256

0790ced6c955588036f0b8d4319d649dcf0ecd50e2525014f01e83744abdd547
SHA512

03aecff61cfd295deaa96e15c653a9adb22308a631babcc1d7801de5fa2e56564304fe0b94002f16e1bedbeafd404c48db2ff3322f13268ed540016b479e4280
SSDEEP

49152:b/MLkTXtkJinLyWBb+5rPaeWuL7ILhn47Lk0Cix7nEPsU:QOXtUi7+5rPaZufILt47Lk0Cix7nEPs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0790ced6c955588036f0b8d4319d649dcf0ecd50e2525014f01e83744abdd547

Files

0790ced6c955588036f0b8d4319d649dcf0ecd50e2525014f01e83744abdd547
.exe windows:6 windows x86

73eef0e512f6a61678a9685fd8ad97ae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

sqlite3

sqlite3_close
sqlite3_errmsg
sqlite3_open
sqlite3_exec

kernel32

SetStdHandle
HeapQueryInformation
FreeLibraryAndExitThread
ExitThread
GetCommandLineW
GetCommandLineA
VirtualQuery
GetStdHandle
GetSystemInfo
QueryPerformanceFrequency
GetModuleHandleExW
ExitProcess
RtlUnwind
OutputDebugStringW
GetFileType
GetStringTypeW
VirtualAlloc
WriteConsoleW
CreateFileW
WideCharToMultiByte
SizeofResource
CompareStringW
LCMapStringW
LockResource
LoadResource
FindResourceW
MultiByteToWideChar
GetModuleFileNameA
WinExec
GetVolumeInformationA
GetTempPathA
Sleep
DeleteFileA
CreateThread
HeapFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
HeapSize
GetLastError
HeapReAlloc
RaiseException
HeapAlloc
DecodePointer
DeleteCriticalSection
GetProcessHeap
GetLogicalDriveStringsA
OutputDebugStringA
SetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
LoadLibraryW
GlobalUnlock
GlobalLock
GlobalFree
FindResourceA
GetCurrentProcessId
GlobalAlloc
GlobalSize
LocalFree
MulDiv
GetTimeZoneInformation
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
FormatMessageA
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
CreateEventW
WaitForSingleObjectEx
ResetEvent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CopyFileA
GetCurrentThreadId
EncodePointer
GetTempFileNameA
FindResourceExW
GetProfileIntA
GetTickCount
SearchPathA
GetWindowsDirectoryA
SetErrorMode
GetCPInfo
GetOEMCP
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GetCurrentDirectoryA
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GlobalFlags
GetACP
VerifyVersionInfoA
lstrcpyA
VerSetConditionMask
InitializeCriticalSectionAndSpinCount
GetThreadLocale
lstrcmpiA
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
FindFirstFileA
FindClose
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetFileAttributesA
FileTimeToLocalFileTime
CreateFileA
ResumeThread
SetThreadPriority
WaitForSingleObject
SetEvent
CloseHandle
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpA
GetCurrentThread
GetVersionExA
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
lstrcmpW
GlobalDeleteAtom
LoadLibraryA
LoadLibraryExW
FreeLibrary
GetSystemDirectoryW

user32

ModifyMenuA
CharUpperBuffA
RegisterClipboardFormatA
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
SetClassLongA
LockWindowUpdate
SetParent
SetCursorPos
DestroyAcceleratorTable
CreateAcceleratorTableA
LoadAcceleratorsW
ToAsciiEx
GetKeyboardState
GetKeyboardLayout
DrawIconEx
DrawFocusRect
DrawFrameControl
DrawEdge
LoadImageW
ReuseDDElParam
UnpackDDElParam
InsertMenuItemA
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
BringWindowToTop
DestroyIcon
GetNextDlgGroupItem
SetRect
InvalidateRgn
CopyAcceleratorTableA
CharNextA
CopyImage
MonitorFromPoint
UnionRect
EnableScrollBar
UpdateLayeredWindow
IsRectEmpty
SetMenuDefaultItem
GetMenuDefaultItem
CreatePopupMenu
NotifyWinEvent
MessageBeep
SetWindowRgn
DeleteMenu
GetAsyncKeyState
IsZoomed
TrackMouseEvent
IntersectRect
RealChildWindowFromPoint
EnumDisplayMonitors
LoadCursorW
LoadCursorA
GetSysColorBrush
SetLayeredWindowAttributes
CharUpperA
SystemParametersInfoA
InflateRect
GetMenuItemInfoA
DestroyMenu
SetRectEmpty
MapVirtualKeyA
GetKeyNameTextA
SetCursor
ShowOwnedPopups
TranslateMessage
GetMessageA
MapDialogRect
SetWindowContextHelpId
KillTimer
SetTimer
WaitMessage
PostQuitMessage
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
FrameRect
GetTopWindow
GetClassLongA
EqualRect
CopyRect
MapWindowPoints
AdjustWindowRectEx
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
PostThreadMessageA
GetIconInfo
HideCaret
CopyIcon
SendMessageA
ScrollWindow
RedrawWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
InvertRect
GetDoubleClickTime
IsCharLowerA
MapVirtualKeyExA
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
IsClipboardFormatAvailable
GetUpdateRect
SubtractRect
CreateMenu
GetWindowPlacement
IsChild
IsMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
DestroyCursor
GetComboBoxInfo
GetWindowRgn
EnableWindow
GetParent
GetClientRect
OffsetRect
GetSysColor
DrawTextA
LoadIconW
GetSystemMenu
AppendMenuA
LoadImageA
IsIconic
GetSystemMetrics
DrawIcon
FindWindowA
GetDlgItem
PostMessageA
LoadMenuW
GetSubMenu
GetCursorPos
GetDesktopWindow
SetCapture
ClientToScreen
ReleaseCapture
WindowFromPoint
ScreenToClient
GetWindowRect
InvalidateRect
PeekMessageA
UnregisterClassA
DrawStateA
UpdateWindow
FillRect
GetClassNameA
LoadBitmapW
IsWindow
DestroyWindow
CreateDialogIndirectParamA
EndDialog
GetNextDlgTabItem
GetActiveWindow
IsWindowEnabled
SetActiveWindow
GetWindowLongA
MessageBoxA
GetWindowThreadProcessId
GetLastActivePopup
GetMenuStringA
LoadIconA
GetMenuState
GetMenuItemID
GetMenuItemCount
InsertMenuA
RemoveMenu
DrawTextExA
GrayStringA
TabbedTextOutA
GetDC
GetWindowDC
ReleaseDC
BeginPaint
EndPaint
GetFocus
PtInRect
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
ShowWindow
MoveWindow
SetWindowPos
SetDlgItemInt
GetDlgItemInt
SetDlgItemTextA
GetDlgItemTextA
CheckDlgButton
SendDlgItemMessageA
GetDlgCtrlID
SetFocus
SetWindowTextA
GetWindowTextA
GetWindowTextLengthA
SetWindowLongA
GetWindow
IsDialogMessageA
RegisterWindowMessageA
DispatchMessageA
GetMessagePos

gdi32

PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
MoveToEx
TextOutA
ExtTextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
PatBlt
CreateCompatibleBitmap
CreateFontA
GetCharWidthA
StretchDIBits
CreateFontIndirectA
GetTextExtentPoint32A
CreateDIBitmap
EnumFontFamiliesA
GetTextMetricsA
CombineRgn
GetMapMode
SetRectRgn
DPtoLP
CreateRoundRectRgn
CreateDIBSection
GetBkColor
GetTextColor
GetRgnBox
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
RealizePalette
SetPixel
StretchBlt
SetDIBColorTable
OffsetRgn
Rectangle
EnumFontFamiliesExA
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
LPtoDP
RoundRect
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetWindowOrgEx
GetViewportOrgEx
SetPixelV
GetTextFaceA
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
CreateRectRgn
CreatePatternBrush
CreatePen
SelectObject
DeleteDC
CreateSolidBrush
DeleteObject
GetStockObject
GetObjectA
CopyMetaFileA
CreateDCA
GetDeviceCaps
BitBlt
CreateBitmap
CreateCompatibleDC
CreateHatchBrush
GetTextCharsetInfo

msimg32

TransparentBlt
AlphaBlend

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegEnumKeyA
RegQueryValueA
RegEnumValueA
RegCloseKey
RegEnumKeyExA

shell32

ShellExecuteA
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHGetDesktopFolder
SHGetFileInfoA
SHAppBarMessage
DragFinish
DragQueryFileA
SHGetSpecialFolderPathA

comctl32

InitCommonControlsEx
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_BeginDrag
ImageList_DragEnter
ImageList_DragMove
ImageList_DragShowNolock
ImageList_DragLeave
ImageList_EndDrag

shlwapi

PathRemoveFileSpecW
PathFindExtensionA
PathStripToRootA
StrFormatKBSizeA
PathIsUNCA
PathFindFileNameA

uxtheme

GetThemePartSize
GetCurrentThemeName
GetWindowTheme
IsAppThemed
DrawThemeParentBackground
DrawThemeText
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor

ole32

OleLockRunning
CoInitializeEx
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
CoRevokeClassObject
CoRegisterMessageFilter
OleInitialize
CoFreeUnusedLibraries
CreateStreamOnHGlobal
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CoInitialize
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
CoCreateInstance
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
OleUninitialize

oleaut32

SysAllocStringByteLen
SysAllocStringLen
VariantInit
VariantChangeType
SysStringLen
LoadTypeLi
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
VarBstrFromDate
OleCreateFontIndirect
VariantClear
SysFreeString
SysAllocString

oledlg

ord8

gdiplus

GdipDrawImageI
GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetInterpolationMode
GdipDrawImageRectI
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits

ws2_32

WSASetLastError
WSAStartup
closesocket
select
connect
ioctlsocket
inet_addr
gethostbyname
htons
socket
WSACleanup
inet_ntoa

crypt32

CryptProtectData

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundA

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 329KB - Virtual size: 329KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 354KB - Virtual size: 354KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

73eef0e512f6a61678a9685fd8ad97ae

Headers

DLL Characteristics

File Characteristics

Imports

sqlite3

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

ws2_32

crypt32

oleacc

imm32

winmm

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 329KB - Virtual size: 329KB

.data Size: 23KB - Virtual size: 40KB

.rsrc Size: 354KB - Virtual size: 354KB

.reloc Size: 141KB - Virtual size: 140KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 329KB - Virtual size: 329KB

.data
Size: 23KB - Virtual size: 40KB

.rsrc
Size: 354KB - Virtual size: 354KB

.reloc
Size: 141KB - Virtual size: 140KB