08057e209c69fd4f6dd51bc9eb15230c5959d9688c87ae446638bdba7f58b194

Sharing

Copy URL Twitter E-mail

General

Target

08057e209c69fd4f6dd51bc9eb15230c5959d9688c87ae446638bdba7f58b194
Size

804KB
MD5

c96a7b12e52ec96e144dacfb515c448d
SHA1

2a6c4bd64ef32c47a9c2da14c6703ac243008c36
SHA256

08057e209c69fd4f6dd51bc9eb15230c5959d9688c87ae446638bdba7f58b194
SHA512

a39e2ea85683255aeb553e87eb29a1e0d8a4579cd2ea890e88e572e4d6fc54ee762cc5e07f2bd9f4f4a2705f59cc4db05cedec2c207315d940f85bb6ead98110
SSDEEP

6144:nCs5XapMUkF8ixk3FaAY0RzX67xUaElqmHjSKXWFSzkPDNGEfhJBp9AD:L1apMUkuixqY2zqNUaElDHBXMykLlpi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08057e209c69fd4f6dd51bc9eb15230c5959d9688c87ae446638bdba7f58b194

Files

08057e209c69fd4f6dd51bc9eb15230c5959d9688c87ae446638bdba7f58b194
.exe windows:4 windows x86

599273547ed56c713a4ad6ec4c624f98

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
HeapAlloc
HeapFree
TerminateProcess
CreateThread
ExitThread
RaiseException
HeapReAlloc
HeapSize
GetACP
GetTimeZoneInformation
GetSystemTime
GetLocalTime
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapCreate
RtlUnwind
VirtualAlloc
IsBadWritePtr
FatalAppExitA
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sleep
IsBadReadPtr
IsBadCodePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetConsoleCtrlHandler
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
CopyFileA
GetProfileStringA
GlobalSize
FormatMessageA
SetFileAttributesA
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileTime
GetFileSize
GetFileAttributesA
GetTickCount
FileTimeToLocalFileTime
FileTimeToSystemTime
GetStringTypeExA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
DuplicateHandle
SetErrorMode
GetOEMCP
GetCPInfo
GetThreadLocale
SizeofResource
GetProcessVersion
GetCurrentDirectoryA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
TlsAlloc
LocalFree
LocalAlloc
lstrcpynA
GetLastError
MulDiv
SetLastError
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
InterlockedDecrement
InterlockedIncrement
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
WaitForSingleObject
CloseHandle
GlobalDeleteAtom
GetCurrentThread
GetCurrentProcess
FlushInstructionCache
lstrcmpA
GlobalLock
GlobalUnlock
EnterCriticalSection
LeaveCriticalSection
GlobalAlloc
FindResourceA
LoadResource
LockResource
GlobalHandle
GlobalFree
FreeResource
WideCharToMultiByte
lstrcatA
lstrcpyA
FreeLibrary
lstrlenW
MultiByteToWideChar
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
lstrlenA
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
ExitProcess
LoadLibraryA
GetProcAddress
GetCurrentThreadId
GetCommandLineA
VirtualFree
lstrcmpiA

user32

GetMenuStringA
GetSysColorBrush
GetDialogBaseUnits
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
CharUpperA
InflateRect
RegisterClipboardFormatA
RemoveMenu
wvsprintfA
PostThreadMessageA
DestroyIcon
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetDlgCtrlID
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
UnhookWindowsHookEx
MapDialogRect
SetWindowContextHelpId
SetActiveWindow
CreateDialogIndirectParamA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
CallNextHookEx
DeleteMenu
DestroyMenu
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
SetCursor
ShowOwnedPopups
PostQuitMessage
wsprintfA
GetClassNameA
GetDlgItem
GetParent
IsChild
SetCapture
RedrawWindow
InvalidateRgn
InvalidateRect
SetWindowPos
LoadIconA
CreateWindowExA
CallWindowProcA
DestroyWindow
ReleaseCapture
CreateAcceleratorTableA
GetDC
ReleaseDC
GetDesktopWindow
IsWindow
BeginPaint
FillRect
EndPaint
GetFocus
SetFocus
GetSysColor
EndDialog
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
SetWindowLongA
GetWindow
GetWindowLongA
CharNextA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
GetSystemMetrics
DefWindowProcA
RegisterWindowMessageA
GetClassInfoExA
LoadCursorA
RegisterClassExA
DialogBoxIndirectParamA
EnableWindow
GetClientRect
IsIconic
GetSystemMenu
PostMessageA
SendMessageA
AppendMenuA
InsertMenuA
PtInRect
WindowFromPoint
GetWindowThreadProcessId
ValidateRect
WaitMessage
GetActiveWindow
DrawIcon
GrayStringA
DrawTextA
TabbedTextOutA
GetWindowDC
ClientToScreen
LoadStringA
OemToCharA
CharToOemA
ShowWindow
MoveWindow
IsDialogMessageA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
WinHelpA
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsWindowVisible
GetCapture
ScrollWindow

gdi32

StartDocA
SaveDC
RestoreDC
SelectPalette
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetCurrentPositionEx
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
SetBkColor
CreateRectRgn
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
GetViewportExtEx
GetWindowExtEx
CreatePen
ExtCreatePen
CreateHatchBrush
CreatePatternBrush
CreateDIBPatternBrushPt
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextExtentPoint32A
GetTextMetricsA
CreateFontIndirectA
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
PatBlt
SetRectRgn
CombineRgn
CreateRectRgnIndirect
CopyMetaFileA
CreateDCA
SetTextColor
GetClipBox
GetDCOrgEx
CreateBitmap
GetStockObject
GetObjectA
GetDeviceCaps
CreateSolidBrush
DeleteObject
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
BitBlt
GetClipRgn
CreateDIBitmap
GetTextExtentPointA
DeleteDC

comdlg32

GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegDeleteKeyA
RegCreateKeyA
RegEnumKeyA
RegQueryValueA
RegSetValueA
RegOpenKeyA
RegCloseKey
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA

shell32

SHGetFileInfoA
DragQueryFileA
DragFinish
DragAcceptFiles
ExtractIconA

comctl32

ord17

oledlg

ord8

ole32

OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateBindCtx
OleDuplicateData
CoFreeUnusedLibraries
CoDisconnectObject
OleRun
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
ReadFmtUserTypeStg
CoTaskMemFree
OleLockRunning
CoTaskMemAlloc
CLSIDFromString
CLSIDFromProgID
OleInitialize
CreateStreamOnHGlobal
OleUninitialize
CoCreateInstance
CoRevokeClassObject
CoRegisterClassObject
CoInitialize
CoUninitialize
ReadClassStg
CoTreatAsClass
ReleaseStgMedium
CoRegisterMessageFilter
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
StringFromCLSID

olepro32

ord253

oleaut32

SafeArrayCreate
SysFreeString
LoadTypeLi
SysAllocString
RegisterTypeLi
SysAllocStringLen
SysStringLen
VariantClear
LoadRegTypeLi
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysReAllocStringLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayRedim
SysAllocStringByteLen
SysStringByteLen
VarCyFromStr
VarBstrFromCy
VarDateFromStr
VarBstrFromDate
SafeArrayCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor

Sections

.text
Size: 448KB - Virtual size: 445KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 212KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

599273547ed56c713a4ad6ec4c624f98

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 448KB - Virtual size: 445KB

.rdata Size: 60KB - Virtual size: 58KB

.data Size: 212KB - Virtual size: 229KB

.idata Size: 16KB - Virtual size: 15KB

.rsrc Size: 36KB - Virtual size: 32KB

.reloc Size: 28KB - Virtual size: 26KB

.text
Size: 448KB - Virtual size: 445KB

.rdata
Size: 60KB - Virtual size: 58KB

.data
Size: 212KB - Virtual size: 229KB

.idata
Size: 16KB - Virtual size: 15KB

.rsrc
Size: 36KB - Virtual size: 32KB

.reloc
Size: 28KB - Virtual size: 26KB