f8a8c7f5bce0ad0016f44ebff6b6275a38e3afc7f93c1b6b803eb26afa696600

Sharing

Copy URL Twitter E-mail

General

Target

f8a8c7f5bce0ad0016f44ebff6b6275a38e3afc7f93c1b6b803eb26afa696600
Size

656KB
MD5

15a3defe25ebee3141e72c5f460ea98c
SHA1

8f56bbb3ff14f204e66b7d25b63ce2b5cf51d1e8
SHA256

f8a8c7f5bce0ad0016f44ebff6b6275a38e3afc7f93c1b6b803eb26afa696600
SHA512

865e0d67edd477549433394984b25526429f1a1a74e8e7fd94cf0acb3ceac2f9176786ebdab59be097eafac0bd9414f1600a2fa5961aa29b7f9a0d4f447629cb
SSDEEP

12288:VMpOnzp8JzebhrfezzP3zYEB1fHDJFIMMpxpm9Kk:AUzZbuzZfHMm0k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8a8c7f5bce0ad0016f44ebff6b6275a38e3afc7f93c1b6b803eb26afa696600

Files

f8a8c7f5bce0ad0016f44ebff6b6275a38e3afc7f93c1b6b803eb26afa696600
.exe windows:4 windows x86

0880a6a0be9e9b7787b25e5f7b015d77

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetLastError
MultiByteToWideChar
CompareStringW
GetStringTypeExW
GetThreadLocale
WideCharToMultiByte
LoadLibraryW
SetErrorMode
FreeLibrary
GetProcAddress
CloseHandle
CreateThread
TerminateThread
GetExitCodeThread
GlobalUnlock
WriteFile
CreateFileW
GlobalLock
Sleep
CreateMutexW
FormatMessageW
GetModuleFileNameW
LocalFree
LocalAlloc
GetCurrentDirectoryW
LockResource
SizeofResource
LoadResource
FindResourceExW
MulDiv
TerminateProcess
GetCurrentProcess
lstrlenW
GetFileAttributesW
GetFileSize
FindClose
GetTempPathW
ExpandEnvironmentStringsW
GetSystemDirectoryW
GetWindowsDirectoryW
SetFileAttributesW
CreateDirectoryW
WritePrivateProfileStringW
DeleteFileW
ReadFile
FlushFileBuffers
UnmapViewOfFile
SetFilePointer
GetFileInformationByHandle
SetEndOfFile
MapViewOfFile
CreateFileMappingW
OpenFileMappingW
SetFileTime
CreateEventW
SetEvent
ResetEvent
WaitForMultipleObjectsEx
GetTickCount
SetLastError
GetProcessHeap
HeapFree
GetSystemDefaultLangID
GetUserDefaultLangID
FileTimeToSystemTime
FileTimeToLocalFileTime
SystemTimeToFileTime
GetSystemTime
LocalFileTimeToFileTime
SetUnhandledExceptionFilter
GetThreadSelectorEntry
GetCurrentProcessId
GetVersionExA
GetCommandLineW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
QueryPerformanceFrequency
QueryPerformanceCounter
GetVersionExW
GetVolumeInformationW
GetPrivateProfileStringW
GetEnvironmentVariableW
GetModuleFileNameA
GlobalFree
GlobalAlloc
lstrcpyA
GetTimeZoneInformation
GetVersion
SetFileAttributesA
CreateFileA
GetVolumeInformationA
GetFullPathNameA
FindFirstFileA
FindNextFileA
SetVolumeLabelA
lstrlenA
GetDriveTypeA
GetLocaleInfoA
GetFileAttributesA
GetFileTime
FileTimeToDosDateTime
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapReAlloc
HeapAlloc
RaiseException
HeapSize
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
TlsSetValue
TlsAlloc
TlsGetValue
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
CompareStringA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
IsBadReadPtr
IsBadCodePtr
LoadLibraryA
SetStdHandle
SetEnvironmentVariableA
DeleteFileA
CreateDirectoryA
GetCurrentDirectoryA
GetModuleHandleW
GetCurrentThreadId
GetLocaleInfoW
GetLocalTime
GetDateFormatW
GetTimeFormatW
MoveFileW
InterlockedDecrement
InterlockedIncrement

user32

DrawFocusRect
DrawTextW
FillRect
BeginPaint
RemovePropW
GetSysColorBrush
GetSysColor
ReleaseDC
PtInRect
GetCursorPos
SetPropW
GetPropW
CallWindowProcW
LoadStringW
RegisterWindowMessageW
PostMessageW
DialogBoxParamW
DialogBoxIndirectParamW
CreateDialogParamW
CreateDialogIndirectParamW
DestroyWindow
EndDialog
FindWindowExW
DrawEdge
RegisterClipboardFormatW
FrameRect
MoveWindow
AdjustWindowRectEx
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetCapture
ReleaseCapture
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
SetMenuItemInfoW
GetMenuItemInfoW
GetMenuItemCount
CopyRect
DrawMenuBar
SetMenu
RemoveMenu
GetWindowDC
GetMenu
GetWindowTextW
GetSubMenu
LoadMenuW
LoadMenuIndirectW
EndPaint
TrackPopupMenu
WindowFromPoint
LoadBitmapW
CreateWindowExW
GetKeyState
InflateRect
GetWindowTextLengthW
OemToCharA
CharToOemA
wsprintfW
SetWindowTextW
GetSystemMetrics
LoadImageW
GetWindowThreadProcessId
AttachThreadInput
GetForegroundWindow
GetDC
CreateIconFromResourceEx
DestroyIcon
CharNextW
SetCursor
DrawIconEx
SetWindowPos
GetClientRect
CallNextHookEx
DispatchMessageW
TranslateMessage
ShowWindow
LoadIconW
SendMessageW
SetFocus
GetWindow
IsWindowVisible
GetDlgCtrlID
MapDialogRect
BringWindowToTop
keybd_event
SetActiveWindow
IsWindow
SetWindowPlacement
GetWindowPlacement
MessageBoxW
PeekMessageW
PostQuitMessage
GetParent
ScreenToClient
CheckRadioButton
IsDlgButtonChecked
CheckDlgButton
EnableWindow
GetDlgItem
InvalidateRect
MapWindowPoints
GetDlgItemTextW
UpdateWindow
SetTimer
SetWindowsHookExW
UnhookWindowsHookEx
SetDlgItemTextW
SendDlgItemMessageW
DrawAnimatedRects
GetWindowRect
SystemParametersInfoW
LoadCursorW
DestroyMenu
SetWindowLongW
KillTimer
GetWindowLongW
SetForegroundWindow

gdi32

SaveDC
CreateFontIndirectW
GetTextExtentPoint32W
CreateFontW
GetTextMetricsW
SelectObject
SetBkMode
SetTextColor
RestoreDC
GetStockObject
GetObjectW
GetDeviceCaps
EnumFontFamiliesExW
CreateHatchBrush
SetROP2
Rectangle
SetBkColor
RoundRect
GdiFlush
GetPixel
CreatePen
Ellipse
SetStretchBltMode
StretchBlt
BitBlt
CreateCompatibleDC
CreateDIBSection
CreateCompatibleBitmap
DeleteDC
CreateSolidBrush
DeleteObject

shell32

Shell_NotifyIconW
DragQueryFileW
SHAppBarMessage
SHGetDesktopFolder
SHBrowseForFolderW
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ShellExecuteExW
SHGetFileInfoW
ShellExecuteW

ole32

CreateStreamOnHGlobal
OleSetContainedObject
OleDraw
OleSetMenuDescriptor
OleSave
CoInitialize
OleRun
CLSIDFromProgID
CoUninitialize
ReleaseStgMedium
CoCreateInstance
CoTaskMemFree
OleUninitialize
OleInitialize

oleaut32

SysFreeString
SafeArrayCreate
SafeArrayPtrOfIndex
VariantInit
VariantClear
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
SysAllocString

winmm

timeGetTime
PlaySoundW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

comctl32

ImageList_DrawEx
ImageList_ReplaceIcon
ImageList_Destroy
ord17
ImageList_Create

ws2_32

WSAStartup
WSACleanup

wininet

HttpSendRequestW
InternetReadFileExA
InternetWriteFile
HttpSendRequestExW
HttpEndRequestW
HttpOpenRequestW
HttpQueryInfoW
InternetOpenW
InternetSetStatusCallbackW
InternetSetOptionW
InternetConnectW
InternetCloseHandle
HttpAddRequestHeadersW

crypt32

CertFreeCertificateContext
CertEnumCertificatesInStore
CertOpenSystemStoreW

comdlg32

CommDlgExtendedError
GetSaveFileNameW
GetOpenFileNameW

advapi32

QueryServiceStatus
CryptReleaseContext
CryptAcquireContextW
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptDestroyKey
EnumDependentServicesW
StartServiceW
OpenServiceW
ControlService
OpenSCManagerW
CloseServiceHandle
CryptEncrypt
CryptDeriveKey
CryptDecrypt
GetUserNameW
RegSetKeySecurity
RegEnumValueW
RegEnumKeyExW
RegDeleteKeyW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegCreateKeyW
RegCreateKeyExW

Sections

.text
Size: 388KB - Virtual size: 386KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0880a6a0be9e9b7787b25e5f7b015d77

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

oleaut32

winmm

version

comctl32

ws2_32

wininet

crypt32

comdlg32

advapi32

Sections

.text Size: 388KB - Virtual size: 386KB

.rdata Size: 60KB - Virtual size: 56KB

.data Size: 52KB - Virtual size: 72KB

.rsrc Size: 152KB - Virtual size: 148KB

.text
Size: 388KB - Virtual size: 386KB

.rdata
Size: 60KB - Virtual size: 56KB

.data
Size: 52KB - Virtual size: 72KB

.rsrc
Size: 152KB - Virtual size: 148KB