a01d5f277d687577ad90fd986f1bcc6972cd2aa207611467f05552a79cd78cbd

Sharing

Copy URL Twitter E-mail

General

Target

a01d5f277d687577ad90fd986f1bcc6972cd2aa207611467f05552a79cd78cbd
Size

3.1MB
MD5

816148ea271b99bc54bb9d2b7016ade3
SHA1

f62b0006a9c5b74c34f6fb274528ddf19760051b
SHA256

a01d5f277d687577ad90fd986f1bcc6972cd2aa207611467f05552a79cd78cbd
SHA512

9e33feedd7eab31952978473555ec657873c271942e75484379b81a338ed0b1226f3cc92ba7e73ecb706e81dda2aa96d6365d67665acb85efa02f4e647774b3c
SSDEEP

49152:1XmVno6Brz+S5ezqXr00dNwE9x58JG8jOfh:FmH9h70gA7j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a01d5f277d687577ad90fd986f1bcc6972cd2aa207611467f05552a79cd78cbd

Files

a01d5f277d687577ad90fd986f1bcc6972cd2aa207611467f05552a79cd78cbd
.exe windows:5 windows x86

d674d250aadf6f98e83b01f1b0f6c594

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointerEx
GetConsoleMode
GetConsoleCP
SetStdHandle
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileW
FindNextFileA
FindFirstFileExW
FindFirstFileExA
GetTimeZoneInformation
GetStringTypeW
EnumSystemLocalesW
IsValidLocale
LCMapStringW
GetTimeFormatW
GetDateFormatW
ReadConsoleW
ExitProcess
VirtualAlloc
WriteConsoleW
GetFileType
GetStdHandle
HeapQueryInformation
FreeLibraryAndExitThread
ExitThread
CreateThread
GetCommandLineW
GetCommandLineA
GetSystemInfo
HeapValidate
GetModuleHandleExW
GetModuleFileNameA
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
CreateFileA
SetCommState
GetCommState
CancelIo
OutputDebugStringW
GetTickCount
SetConsoleCtrlHandler
LocalReAlloc
CloseHandle
GetCommTimeouts
PurgeComm
SetCommTimeouts
CreateEventW
CreateFileW
DecodePointer
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
RaiseException
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
MultiByteToWideChar
LockResource
Sleep
LoadResource
SizeofResource
GetModuleFileNameW
FindResourceW
GetFileAttributesW
GetUserDefaultUILanguage
WideCharToMultiByte
GetACP
OutputDebugStringA
GetModuleHandleA
GetModuleHandleW
GetProcAddress
LoadLibraryW
GetCurrentThread
GetCurrentThreadId
GetVersionExW
FreeLibrary
LoadLibraryExW
GlobalAlloc
GlobalLock
GlobalDeleteAtom
lstrcmpA
lstrcmpW
CompareStringA
FreeResource
GlobalUnlock
GlobalFree
SetEvent
WaitForSingleObject
SuspendThread
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
GlobalAddAtomW
GetCurrentProcessId
LoadLibraryA
SetErrorMode
GlobalSize
LocalFree
MulDiv
FormatMessageW
CopyFileW
DeleteFileW
FindClose
FindFirstFileW
FlushFileBuffers
GetFileSize
GetFullPathNameW
GetShortPathNameW
GetVolumeInformationW
LockFile
ReadFile
SetEndOfFile
SetFilePointer
UnlockFile
DuplicateHandle
GetHandleInformation
GetCurrentProcess
lstrcmpiW
MoveFileW
GetStringTypeExW
GetThreadLocale
EncodePointer
GetSystemDirectoryW
GlobalFindAtomW
GlobalGetAtomNameW
SetThreadPriority
GetThreadPriority
ResumeThread
InitializeCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalAlloc
WriteFile
GetCurrentDirectoryW
CompareStringW
GetLocaleInfoW
GetSystemDefaultUILanguage
GlobalFlags
GetAtomNameW
GetProfileIntW
VirtualProtect
FileTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
GetFileAttributesExW
GetFileSizeEx
GetFileTime
LocalFileTimeToFileTime
SetFileAttributesW
SetFileTime
SystemTimeToTzSpecificLocalTime
GetDiskFreeSpaceW
GetTempFileNameW
ReplaceFileW
GetUserDefaultLCID
FindResourceExW
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
VirtualQuery

user32

GetMenuItemInfoW
SetMenuItemInfoW
GetMenuDefaultItem
SetMenuDefaultItem
DrawIcon
DrawTextW
DrawTextExW
GrayStringW
DrawStateW
GetTabbedTextExtentW
WindowFromDC
ExcludeUpdateRgn
ScrollDC
SetMenuContextHelpId
GetMenuContextHelpId
GetSysColorBrush
DrawFocusRect
FillRect
FrameRect
UnionRect
IsRectEmpty
ReuseDDElParam
GetMenuBarInfo
LoadImageW
IntersectRect
TranslateAcceleratorW
DestroyIcon
UnpackDDElParam
GetClipboardFormatNameW
GetClipboardFormatNameA
GetDialogBaseUnits
GetAsyncKeyState
InflateRect
SetRect
DestroyMenu
LoadAcceleratorsW
RealChildWindowFromPoint
SystemParametersInfoW
CopyImage
ReleaseCapture
WaitMessage
NotifyWinEvent
ArrangeIconicWindows
DlgDirSelectComboBoxExW
DlgDirListComboBoxW
DlgDirSelectExW
DlgDirListW
LoadCursorW
FindWindowExW
FindWindowW
SetParent
ChildWindowFromPointEx
ChildWindowFromPoint
WindowFromPoint
GetCaretPos
SetCaretPos
ShowCaret
HideCaret
CreateCaret
GetWindowContextHelpId
SetWindowContextHelpId
EnableScrollBar
ShowScrollBar
InsertMenuItemW
RedrawWindow
ValidateRgn
InvalidateRgn
InvalidateRect
GetWindowRgn
SetWindowRgn
GetUpdateRgn
GetUpdateRect
GetDCEx
SetForegroundWindow
GetForegroundWindow
UpdateWindow
DragDetect
GetSystemMenu
DrawMenuBar
HiliteMenuItem
KillTimer
SetTimer
SetCapture
GetOpenClipboardWindow
ChangeClipboardChain
GetClipboardViewer
PostQuitMessage
InsertMenuW
OpenClipboard
GetNextDlgTabItem
GetNextDlgGroupItem
IsZoomed
BringWindowToTop
IsIconic
IsWindowVisible
CloseWindow
OpenIcon
ShowOwnedPopups
FlashWindow
PostThreadMessageW
SendNotifyMessageW
DrawAnimatedRects
DrawCaption
IsDialogMessageW
SetWindowTextW
ScrollWindowEx
SendDlgItemMessageW
IsDlgButtonChecked
RegisterDeviceNotificationW
CheckMenuRadioItem
GetDC
GetWindowDC
CheckRadioButton
CheckDlgButton
GetDlgItemTextW
SetDlgItemTextW
GetDlgItemInt
SetDlgItemInt
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
LoadIconW
UnhookWindowsHookEx
DeleteMenu
ModifyMenuW
EnableMenuItem
CheckMenuItem
CreatePopupMenu
CreateMenu
LoadMenuIndirectW
LoadMenuW
GetTopWindow
GetClassNameW
DrawFrameControl
DrawEdge
UnregisterClassW
wsprintfW
GetSystemMetrics
LockWindowUpdate
PeekMessageA
ReleaseDC
BeginPaint
EndPaint
ClientToScreen
ScreenToClient
GetSysColor
SetFocus
SetScrollPos
GetScrollPos
GetWindowTextW
GetWindowTextLengthW
GetWindow
RegisterWindowMessageW
GetMessagePos
GetMessageTime
DefWindowProcW
CallWindowProcW
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
IsChild
SetWindowPos
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetDlgCtrlID
GetCapture
GetMenu
SetMenu
TrackPopupMenu
TrackPopupMenuEx
ScrollWindow
SetScrollRange
GetScrollRange
SendDlgItemMessageA
SetRectEmpty
OffsetRect
GetParent
UnregisterClassA
PeekMessageW
SendMessageW
PostMessageW
IsWindow
TabbedTextOutW
MapDialogRect
GetFocus
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
DestroyWindow
CreateDialogIndirectParamW
EndDialog
GetDlgItem
GetActiveWindow
EnableWindow
IsWindowEnabled
SetActiveWindow
GetWindowLongW
GetDesktopWindow
GetMessageW
TranslateMessage
DispatchMessageW
GetKeyState
ValidateRect
GetCursorPos
SetWindowsHookExW
CallNextHookEx
SetCursor
MessageBoxW
GetWindowThreadProcessId
GetLastActivePopup
GetKeyNameTextW
MapVirtualKeyW
CopyRect
IsMenu
GetMenuStringW
SetPropW
GetPropW
RemovePropW
GetClientRect
GetWindowRect
AdjustWindowRectEx
MapWindowPoints
EqualRect
GetMenuState
GetSubMenu
GetMenuItemID
SetClipboardViewer
GetMenuItemCount
PtInRect
SetWindowLongW
GetClassLongW
AppendMenuW
RemoveMenu
GetClipboardOwner
CharUpperW
InvertRect

gdi32

EnumFontFamiliesExW
CreateDIBSection
StretchDIBits
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
PolylineTo
PolyBezierTo
MoveToEx
SetArcDirection
SelectClipPath
PolyDraw
ArcTo
SetColorAdjustment
ModifyWorldTransform
SetWorldTransform
EnumMetaFile
PlayMetaFileRecord
SetTextJustification
SetTextAlign
SetTextColor
SetTextCharacterExtra
SetStretchBltMode
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetGraphicsMode
SetMapperFlags
SetBkMode
SetBkColor
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
PlayMetaFile
OffsetClipRgn
LineTo
IntersectClipRect
GetClipRgn
GetClipBox
ExcludeClipRect
DeleteObject
UnrealizeObject
GetKerningPairsW
GetTextFaceW
SetBrushOrgEx
SetBitmapDimensionEx
PolyBezier
Polyline
Polygon
LPtoDP
DPtoLP
CreatePolygonRgn
TextOutW
GetObjectW
GetArcDirection
GetMiterLimit
ExtCreatePen
WidenPath
StrokePath
StrokeAndFillPath
SetMiterLimit
PathToRegion
GetPath
FlattenPath
FillPath
EndPath
CloseFigure
BeginPath
AbortPath
SetAbortProc
AbortDoc
EndPage
StartPage
EndDoc
StartDocW
CreateHalftonePalette
GetColorAdjustment
GetWorldTransform
PolyPolyline
AngleArc
GetTextMetricsW
GdiComment
PlayEnhMetaFile
UpdateColors
SetRectRgn
StretchBlt
SetPixelV
SetPixel
SetPaletteEntries
SetBoundsRect
SetBitmapBits
SelectObject
ResizePalette
RoundRect
RealizePalette
ResetDCW
Rectangle
RectVisible
RectInRegion
PtVisible
PtInRegion
PolyPolygon
PaintRgn
Pie
PatBlt
OffsetRgn
PlgBlt
MaskBlt
InvertRgn
GetWindowOrgEx
GetWindowExtEx
GetViewportOrgEx
GetViewportExtEx
GetCharacterPlacementW
GetFontLanguageInfo
GetTextExtentPoint32W
GetTextColor
GetTextAlign
GetTextCharacterExtra
GetStretchBltMode
GetStockObject
GetRgnBox
GetRegionData
GetPolyFillMode
GetPixel
GetPaletteEntries
GetOutlineTextMetricsW
GetObjectType
GetNearestPaletteIndex
GetNearestColor
GetMapMode
GetGraphicsMode
GetGlyphOutlineW
GetFontData
GetCurrentPositionEx
GetCurrentObject
GetCharABCWidthsFloatW
GetCharABCWidthsW
GetCharWidthFloatW
GetCharWidthW
GetBrushOrgEx
GetBoundsRect
GetBitmapDimensionEx
GetBitmapBits
GetBkMode
GetBkColor
GetAspectRatioFilterEx
GetROP2
FrameRgn
FloodFill
FillRgn
ExtFloodFill
ExtCreateRegion
ExtEscape
Escape
EqualRgn
EnumObjects
Ellipse
DrawEscape
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgnIndirect
CreateRectRgn
CreatePatternBrush
CreatePolyPolygonRgn
CreatePenIndirect
CreatePen
CreatePalette
CreateICW
CreateHatchBrush
CreateFontW
CreateFontIndirectW
CreateEllipticRgnIndirect
CreateEllipticRgn
CreateDIBPatternBrushPt
CreateCompatibleDC
CreateDiscardableBitmap
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmapIndirect
CombineRgn
Chord
BitBlt
Arc
AnimatePalette
GetDeviceCaps
CreateDCW
CopyMetaFileW
CreateBitmap
ExtTextOutW
CreateEnhMetaFileW
CloseEnhMetaFile
CreateMetaFileW
CloseMetaFile
DeleteDC

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

SystemFunction036
RegOpenKeyExW
RegQueryValueExW
RegEnumKeyExW
SetFileSecurityW
GetFileSecurityW
RegEnumValueW
RegSetValueW
RegQueryValueW
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey

shell32

ShellExecuteW
DragFinish
SHGetFileInfoW
DragAcceptFiles
SHAddToRecentDocs
ExtractIconW
DragQueryFileW

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameW
PathRemoveExtensionW
PathIsUNCW
PathStripToRootW
PathFindExtensionW
PathRemoveFileSpecW

uxtheme

DrawThemeParentBackground
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
DrawThemeBackground
CloseThemeData
OpenThemeData
DrawThemeText

ole32

OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
WriteClassStg
ReadClassStg
CreateBindCtx
CoTreatAsClass
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CoInitialize
CoCreateInstance
ReleaseStgMedium
CoUninitialize
CoInitializeEx
CoDisconnectObject
StringFromGUID2
CLSIDFromString
PropVariantCopy
CoRegisterClassObject
CoRevokeClassObject
CLSIDFromProgID
OleRun
CreateStreamOnHGlobal
CoCreateGuid
OleRegGetUserType
SetConvertStg

oleaut32

SafeArrayDestroy
SysAllocString
SysStringByteLen
SysAllocStringByteLen
VarDecFromStr
VarBstrFromDec
VarBstrFromDate
VarBstrFromCy
VarCyFromStr
VarDateFromStr
VariantCopy
SafeArrayPtrOfIndex
SafeArrayCopy
SafeArrayPutElement
SafeArrayGetElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayUnlock
SafeArrayLock
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayRedim
SysFreeString
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SafeArrayCreate
SafeArrayAllocData
SafeArrayAllocDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysReAllocStringLen
RegisterTypeLi
LoadRegTypeLi
LoadTypeLi
SafeArrayGetElemsize
SafeArrayGetDim
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen

gdiplus

GdiplusShutdown

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

ws2_32

ioctlsocket
__WSAFDIsSet
closesocket
htons
recv
select
send
setsockopt
socket
WSAStartup
WSACleanup
connect

oleacc

LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow

iphlpapi

GetIpNetTable
FlushIpNetTable

setupapi

SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces

Exports

Exports

?AddUsbVid@@YGHPAD@Z
?ClearRecBuffer@@YGHHH@Z
?CloseCom@@YGHG@Z
?CloseNetPor@@YGHH@Z
?CloseNetServ@@YGHXZ
?CloseUsb@@YGHH@Z
?ConnectNetPort@@YGHHHH@Z
?ConnectNetPortEx@@YGHHHHHHH@Z
?InitNetSev@@YGHXZ
?Netportwrite@@YGHHHHHPAD@Z
?OpenCOM@@YGHHHH@Z
?OpenComA@@YGPAXPBDK@Z
?OpenComW@@YGHPADIEEEE@Z
?OpenUsb@@YGHXZ
?OpenUsbEx@@YGHHH@Z
?OpenUsbTO@@YGHH@Z
?ReadCom@@YGHGPADG@Z
?ReadFromNetPort@@YGHHPADH@Z
?ReadUsb@@YGHHPADH@Z
?WriteCom@@YGHGPADK@Z
?WriteToNetPort@@YGHHPADH@Z
?WriteUsb@@YGHHPADH@Z
?comportwrite@@YGHPADIEEEEI0@Z
?usbportwrite@@YGHPAD0I0@Z

Sections

.textbss
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 409KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 777B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 180KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d674d250aadf6f98e83b01f1b0f6c594

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

gdiplus

version

ws2_32

oleacc

iphlpapi

setupapi

Exports

Exports

Sections

.textbss Size: - Virtual size: 1.1MB

.text Size: 2.4MB - Virtual size: 2.4MB

.rdata Size: 409KB - Virtual size: 408KB

.data Size: 14KB - Virtual size: 42KB

.idata Size: 23KB - Virtual size: 22KB

.tls Size: 1024B - Virtual size: 777B

.00cfg Size: 512B - Virtual size: 260B

.rsrc Size: 180KB - Virtual size: 179KB

.reloc Size: 108KB - Virtual size: 107KB

.textbss
Size: - Virtual size: 1.1MB

.text
Size: 2.4MB - Virtual size: 2.4MB

.rdata
Size: 409KB - Virtual size: 408KB

.data
Size: 14KB - Virtual size: 42KB

.idata
Size: 23KB - Virtual size: 22KB

.tls
Size: 1024B - Virtual size: 777B

.00cfg
Size: 512B - Virtual size: 260B

.rsrc
Size: 180KB - Virtual size: 179KB

.reloc
Size: 108KB - Virtual size: 107KB