82bf224749ad5d7299a0b9b1ee43c8077b49252b8ead53a9b421cf4ced7994ad

Sharing

Copy URL Twitter E-mail

General

Target

82bf224749ad5d7299a0b9b1ee43c8077b49252b8ead53a9b421cf4ced7994ad
Size

232KB
MD5

a82d73ea612e3b469bf7592e548f9dc4
SHA1

c4b4dd1519f7573f22306b7653696f45bc68c235
SHA256

82bf224749ad5d7299a0b9b1ee43c8077b49252b8ead53a9b421cf4ced7994ad
SHA512

695efcbb15c48faea9c0ac3504b96d8de1b28aaa703bddab0e7023721369c2e54427ad69265ac748b9e804970c422da2b9070b263f0b12e8b09810a838e1377e
SSDEEP

3072:Ysf/zKw2PqrvZ/2iVFkeiVvizf4V2/ott399BVbQ3We7aOLvaumzlLvpIGLREPgc:YWbnrvJ5jh4Z/b3VFB8w5ldEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82bf224749ad5d7299a0b9b1ee43c8077b49252b8ead53a9b421cf4ced7994ad

Files

82bf224749ad5d7299a0b9b1ee43c8077b49252b8ead53a9b421cf4ced7994ad
.exe windows:4 windows x86

08955ea8be38d203a80e9c93856a3e64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetFileType
TerminateProcess
HeapFree
RaiseException
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapReAlloc
HeapSize
SetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
RtlUnwind
VirtualFree
VirtualAlloc
IsBadWritePtr
CompareStringA
CompareStringW
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetStringTypeA
GetStringTypeW
GetDriveTypeA
GetACP
GetOEMCP
SetEnvironmentVariableA
ExitProcess
GetStartupInfoW
GetTickCount
SetErrorMode
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileSize
lstrcmpiW
GetThreadLocale
GetFullPathNameW
GetVolumeInformationW
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
LocalFree
FindNextFileW
FindFirstFileW
FindClose
lstrcpynW
MulDiv
SetLastError
GetModuleHandleA
LoadLibraryA
FreeLibrary
GetVersion
lstrcatW
GlobalAddAtomW
GlobalFindAtomW
lstrcpyW
GetModuleHandleW
GetProcAddress
lstrlenA
InterlockedDecrement
InterlockedIncrement
GlobalUnlock
GlobalFree
LockResource
FindResourceW
LoadResource
WaitForSingleObject
GlobalLock
lstrcmpW
GlobalAlloc
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
lstrlenW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetWindowsDirectoryW
GetSystemDirectoryW
FormatMessageW
GetLastError
CreateFileW
GetFileTime
CloseHandle
GetFileAttributesW
MultiByteToWideChar
WideCharToMultiByte
WritePrivateProfileStringW
GetModuleFileNameW
GetPrivateProfileStringW
HeapCreate
GetCurrentDirectoryW

user32

RegisterClipboardFormatW
PostThreadMessageW
GetSysColorBrush
PtInRect
GetClassNameW
LoadCursorW
GetDesktopWindow
CharUpperW
GrayStringW
DrawTextW
TabbedTextOutW
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
DestroyMenu
LoadStringW
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
UpdateWindow
SendDlgItemMessageW
SendDlgItemMessageA
MapWindowPoints
GetSysColor
SetFocus
AdjustWindowRectEx
GetTopWindow
IsChild
GetCapture
WinHelpW
GetClassInfoW
RegisterClassW
GetMenu
GetMenuItemCount
GetMenuItemID
GetWindowTextLengthW
GetWindowTextW
GetDlgCtrlID
CreateWindowExW
SetPropW
UnhookWindowsHookEx
GetPropW
CallWindowProcW
RemovePropW
DefWindowProcW
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongW
RegisterWindowMessageW
OffsetRect
SystemParametersInfoW
GetWindowPlacement
GetWindowRect
CopyRect
GetDC
ReleaseDC
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
wsprintfW
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamW
DestroyWindow
MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableW
CharNextW
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapW
GetMenuState
ModifyMenuW
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageW
GetCursorPos
SetWindowsHookExW
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongW
MessageBoxW
SetCursor
PostQuitMessage
PostMessageW
EnableWindow
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuW
SendMessageW
LoadIconW
GetSubMenu
UnregisterClassW

gdi32

PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
GetTextColor
GetBkColor
DPtoLP
GetMapMode
GetWindowExtEx
GetViewportExtEx
GetDeviceCaps
DeleteObject
LPtoDP
CreateBitmap
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
GetObjectW
SetBkColor
SetTextColor
GetClipBox

comdlg32

GetFileTitleW
GetOpenFileNameW
GetSaveFileNameW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegCloseKey

shell32

ShellExecuteW
SHBrowseForFolderW
SHGetPathFromIDListW
CommandLineToArgvW

comctl32

ord17
ImageList_Destroy

oledlg

OleUIBusyW

ole32

OleIsCurrentClipboard
OleFlushClipboard
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject

olepro32

ord253

oleaut32

SysStringLen
VariantChangeType
VariantCopy
VariantTimeToSystemTime
SysAllocStringLen
SysAllocString
SysFreeString
VariantClear

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

08955ea8be38d203a80e9c93856a3e64

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

version

Sections

.text Size: 140KB - Virtual size: 140KB

.rdata Size: 39KB - Virtual size: 39KB

.data Size: 17KB - Virtual size: 32KB

.rsrc Size: 34KB - Virtual size: 33KB

.text
Size: 140KB - Virtual size: 140KB

.rdata
Size: 39KB - Virtual size: 39KB

.data
Size: 17KB - Virtual size: 32KB

.rsrc
Size: 34KB - Virtual size: 33KB