d214913a6cf59f19ca4e1c1b8e2349b0e5d11450b553ab30c151c38766c3bfb6

Sharing

Copy URL Twitter E-mail

General

Target

d214913a6cf59f19ca4e1c1b8e2349b0e5d11450b553ab30c151c38766c3bfb6
Size

5.3MB
MD5

c3c382e6ff3c1d8ebb6b349df710bfe7
SHA1

3c658fe7ff6e34a8b899d5b0e9a30f5d26888c3b
SHA256

d214913a6cf59f19ca4e1c1b8e2349b0e5d11450b553ab30c151c38766c3bfb6
SHA512

1c7a0460cb0b930d9080c1c0f8736b5bb1215a2bf11bb42ce51ed5f109b0a60d8ea3cc4448518d4e6daae455332faab75743a36b04ddd96bd00164aef09f0075
SSDEEP

98304:ussGBt0mOxnPl4LcElyasDgR/brdRjdP5RiXRPu5KPK2:ubGBtjORPl4AElyFDg5Z9dPHis+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d214913a6cf59f19ca4e1c1b8e2349b0e5d11450b553ab30c151c38766c3bfb6

Files

d214913a6cf59f19ca4e1c1b8e2349b0e5d11450b553ab30c151c38766c3bfb6
.exe windows:4 windows x64

cee3d70406b957e550803d0189a2fdb0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetDateFormatA
GetTimeZoneInformation
LCMapStringW
LCMapStringA
HeapCreate
HeapSetInformation
GetStartupInfoA
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
HeapSize
GetFileType
RtlPcToFileHeader
RaiseException
GetCurrentDirectoryA
HeapReAlloc
RtlUnwindEx
GetStartupInfoW
GetProcessHeap
HeapAlloc
HeapFree
VirtualQuery
GetSystemInfo
VirtualAlloc
GetTimeFormatA
FindResourceExW
GetProcessVersion
TlsFree
LocalReAlloc
GlobalReAlloc
GlobalFlags
GetProfileIntW
GlobalGetAtomNameW
lstrcpyW
UnlockFile
LockFile
VirtualProtect
GlobalAddAtomW
GlobalFindAtomW
lstrcatW
GetVersionExA
GetModuleHandleA
FreeResource
WritePrivateProfileStringW
lstrlenA
lstrcmpW
GlobalDeleteAtom
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
SetStdHandle
GetACP
GetOEMCP
GetCPInfo
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetDriveTypeA
CompareStringA
CompareStringW
lstrlenW
GetCurrentDirectoryW
GetFileInformationByHandle
MoveFileExW
TlsAlloc
DosDateTimeToFileTime
TlsSetValue
TlsGetValue
GetModuleHandleW
GetVersionExW
RemoveDirectoryW
GetSystemDirectoryW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
WinExec
CopyFileW
GetTempPathW
CreateDirectoryW
DuplicateHandle
GetModuleFileNameW
GetPrivateProfileIntW
GetPrivateProfileStringW
GlobalSize
SetCurrentDirectoryW
GetCurrentProcessId
OpenEventW
GetLongPathNameW
GetSystemWindowsDirectoryW
ExitThread
CreatePipe
CreateProcessW
GetExitCodeProcess
QueryPerformanceFrequency
QueryPerformanceCounter
GetFileTime
GlobalHandle
LoadLibraryExW
LoadLibraryA
FormatMessageW
GetCurrentProcess
GetVersion
GetFullPathNameW
DefineDosDeviceW
SetFileTime
ResetEvent
WriteFile
FlushFileBuffers
QueryDosDeviceW
SetFileAttributesW
CloseHandle
MoveFileW
SuspendThread
ResumeThread
FreeLibrary
lstrcmpiW
lstrcpynW
GetWindowsDirectoryW
GlobalFree
GetFileAttributesW
GetThreadPriority
GlobalAlloc
GlobalLock
GlobalUnlock
GetFileAttributesExW
GetLogicalDriveStringsW
GetTempFileNameW
SetThreadExecutionState
GetLogicalDrives
LocalAlloc
LocalFree
CreateEventA
DeviceIoControl
GetOverlappedResult
CreateEventW
CreateThread
SetEvent
EnterCriticalSection
LeaveCriticalSection
FindResourceW
LoadResource
LockResource
SizeofResource
MulDiv
GetSystemDefaultLangID
SetFilePointer
GetFileSize
GetCurrentThread
SetThreadPriority
SetEndOfFile
GetTickCount
GetLastError
SetLastError
ReadFile
MultiByteToWideChar
WideCharToMultiByte
FindNextFileW
WaitForSingleObject
Sleep
GetLocaleInfoW
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
LocalFileTimeToFileTime
FindFirstFileW
GetDriveTypeW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetLocalTime
FindClose
DeleteFileW
GetCurrentThreadId
ExitProcess
InitializeCriticalSection
LoadLibraryW
GetProcAddress
CreateMutexW
CreateFileW
GetVolumeInformationW
GetDiskFreeSpaceExW
DeleteCriticalSection
SetErrorMode
SetEnvironmentVariableA

user32

DrawEdge
OffsetRect
DrawStateW
GetClassNameW
GetIconInfo
ShowWindow
GetDCEx
BeginDeferWindowPos
GetKeyState
GetCapture
GetDesktopWindow
WindowFromPoint
TrackPopupMenuEx
GetWindowDC
GetMessagePos
RegisterClipboardFormatW
IsZoomed
SetMenu
IsRectEmpty
IntersectRect
CreateCaret
SetCaretPos
HideCaret
ShowCaret
GetKeyboardLayout
DestroyCaret
DrawIconEx
MessageBoxIndirectW
CharUpperW
CreateIconIndirect
LoadImageW
ShowScrollBar
FindWindowW
InsertMenuW
RemoveMenu
BroadcastSystemMessage
GetSystemMenu
GetClipboardData
IsClipboardFormatAvailable
EqualRect
ModifyMenuW
EndDeferWindowPos
UnregisterClassW
LoadStringW
SetRect
SetParent
UnpackDDElParam
SystemParametersInfoW
SetFocus
GrayStringW
TabbedTextOutW
RedrawWindow
DestroyIcon
IsWindow
PtInRect
ReleaseCapture
GetFocus
SetCapture
SetMenuDefaultItem
ClientToScreen
CheckMenuRadioItem
GetMenuItemID
EnableMenuItem
CreatePopupMenu
SetWindowsHookExW
CallNextHookEx
SetDlgItemTextW
UnhookWindowsHookEx
GetWindowPlacement
MessageBoxW
MoveWindow
CopyRect
GetClassInfoExW
RegisterClassExW
CreateWindowExW
SetPropW
SetWindowLongPtrW
RemovePropW
GetDlgItem
SetWindowPos
GetParent
InflateRect
DrawFrameControl
GetSysColorBrush
FrameRect
GetSysColor
DrawTextW
DrawFocusRect
GetWindowLongPtrW
GetPropW
CallWindowProcW
InvalidateRgn
DefWindowProcW
MessageBeep
SetForegroundWindow
PostMessageW
IsWindowVisible
GetClientRect
IsIconic
DrawIcon
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetSystemMetrics
LockWindowUpdate
LoadBitmapW
FillRect
GetWindowLongW
SetWindowLongW
GetCursorPos
ScreenToClient
SetCursor
LoadCursorW
KillTimer
SetTimer
EnableWindow
GetWindowRect
GetMenuStringW
LoadMenuW
GetMenuItemInfoW
SetMenuItemInfoW
GetDlgCtrlID
SetWindowTextW
EnumChildWindows
GetWindowTextW
InvalidateRect
GetSubMenu
GetMenuItemCount
CheckMenuItem
GetDC
ReleaseDC
MessageBoxA
LoadIconW
SendMessageW
UpdateWindow
PostThreadMessageW
PostQuitMessage
ShowOwnedPopups
IsWindowEnabled
GetLastActivePopup
PeekMessageW
ValidateRect
DispatchMessageW
TranslateMessage
GetMessageW
GetActiveWindow
GetMenuCheckMarkDimensions
GetMenuState
GetNextDlgTabItem
SetMenuItemBitmaps
CheckRadioButton
SendDlgItemMessageW
IsDlgButtonChecked
IsDialogMessageW
GetWindowTextLengthW
wsprintfW
EndDialog
DestroyWindow
CreateDialogIndirectParamW
SetActiveWindow
DestroyMenu
BeginPaint
EndPaint
GetWindow
SystemParametersInfoA
RegisterClassW
GetClassInfoW
SetScrollInfo
GetScrollInfo
DeferWindowPos
AdjustWindowRectEx
GetMenu
MapWindowPoints
GetForegroundWindow
GetScrollPos
SetScrollPos
GetScrollRange
SetScrollRange
TrackPopupMenu
GetTopWindow
ScrollWindow
GetMessageTime
IsChild
SendDlgItemMessageA
WinHelpW
RegisterWindowMessageW
wvsprintfW
SetRectEmpty
GetAsyncKeyState
MapDialogRect
SetCursorPos
DestroyCursor
TranslateAcceleratorW
BringWindowToTop
LoadAcceleratorsW
ReuseDDElParam

advapi32

RegEnumKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegEnumValueW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
GetTokenInformation
OpenProcessToken
RegSetValueW
LookupAccountNameW
AdjustTokenPrivileges
LookupPrivilegeValueW
SetNamedSecurityInfoW
SetEntriesInAclW
BuildExplicitAccessWithNameW
GetNamedSecurityInfoW
DeleteAce
EqualSid
GetAce
GetAclInformation
RegUnLoadKeyW
RegLoadKeyW

shell32

SHChangeNotify
ShellExecuteExW
SHGetMalloc
SHGetDesktopFolder
DragQueryFileW
DragFinish
Shell_NotifyIconW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
SHGetSpecialFolderPathW
SHGetSpecialFolderLocation
DragAcceptFiles

gdi32

GetTextMetricsW
GetBkColor
GetTextColor
SetBkColor
SetTextColor
ExtTextOutW
CreateDIBSection
GetObjectW
CreateCompatibleBitmap
StretchBlt
BitBlt
SelectObject
CreateCompatibleDC
DeleteObject
CreateICW
DeleteDC
CreateFontIndirectW
GetDeviceCaps
GetTextExtentPoint32W
CreateBitmap
CreateSolidBrush
Ellipse
CreateRectRgn
RoundRect
PtVisible
RectVisible
TextOutW
Escape
SetDIBits
GetDIBits
LineTo
MoveToEx
CreateRectRgnIndirect
SetRectRgn
CreateFontW
SetBoundsRect
TranslateCharsetInfo
CopyMetaFileW
EnumFontFamiliesExW
LPtoDP
CombineRgn
GetCharWidthW
StretchDIBits
CreatePatternBrush
GetPixel
SetPixel
SetStretchBltMode
PatBlt
CreatePen
GetStockObject
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetBkMode
RestoreDC
SaveDC
Rectangle

comdlg32

GetOpenFileNameW
GetSaveFileNameW
GetFileTitleW

winmm

mciSendCommandW
mciGetErrorStringW
waveOutOpen
waveOutGetDevCapsW
waveOutWrite
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutReset
mixerGetDevCapsW
mixerOpen
mixerGetNumDevs
mixerClose
mixerGetLineControlsW
mixerGetLineInfoW
mixerGetControlDetailsW
mixerSetControlDetails
waveOutClose

rpcrt4

UuidFromStringW

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

comctl32

ImageList_Add
CreatePropertySheetPageW
DestroyPropertySheetPage
PropertySheetW
ord17
ImageList_AddMasked
_TrackMouseEvent
ImageList_Create
ImageList_Destroy
ImageList_SetBkColor
ImageList_ReplaceIcon

oledlg

OleUIBusyW

ole32

OleSetClipboard
CoTaskMemFree
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
PropVariantClear
CoCreateGuid
ReleaseStgMedium
CreateStreamOnHGlobal
CoCreateInstance
CoUninitialize
CoInitialize
OleIsCurrentClipboard
OleFlushClipboard
CoLockObjectExternal
DoDragDrop
RevokeDragDrop
CoRegisterMessageFilter
CoTaskMemAlloc
OleDuplicateData
RegisterDragDrop
OleGetClipboard

oleaut32

OleLoadPicture
SysStringByteLen
SysFreeString
SysAllocString
VariantClear

wininet

HttpQueryInfoW
InternetReadFile
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestW
InternetCloseHandle
InternetOpenW
InternetConnectW
InternetAttemptConnect

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

TEXT
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 878KB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 158KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 510KB - Virtual size: 509KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cee3d70406b957e550803d0189a2fdb0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

gdi32

comdlg32

winmm

rpcrt4

winspool.drv

comctl32

oledlg

ole32

oleaut32

wininet

Sections

.text Size: 2.1MB - Virtual size: 2.1MB

TEXT Size: 4KB - Virtual size: 3KB

.rdata Size: 1.7MB - Virtual size: 1.7MB

.data Size: 878KB - Virtual size: 2.3MB

.pdata Size: 158KB - Virtual size: 158KB

.rsrc Size: 510KB - Virtual size: 509KB

.text
Size: 2.1MB - Virtual size: 2.1MB

TEXT
Size: 4KB - Virtual size: 3KB

.rdata
Size: 1.7MB - Virtual size: 1.7MB

.data
Size: 878KB - Virtual size: 2.3MB

.pdata
Size: 158KB - Virtual size: 158KB

.rsrc
Size: 510KB - Virtual size: 509KB