5f17a0bc35a63913b51ada61bda3a1abbb03a1bc48a731c0ed2dd1e2bc3cf5f9

Sharing

Copy URL Twitter E-mail

General

Target

5f17a0bc35a63913b51ada61bda3a1abbb03a1bc48a731c0ed2dd1e2bc3cf5f9
Size

3.8MB
MD5

4e868219d838758e65ddf7030439740f
SHA1

9043f1402f99cd0a4d7e45601ed9442f47c2950e
SHA256

5f17a0bc35a63913b51ada61bda3a1abbb03a1bc48a731c0ed2dd1e2bc3cf5f9
SHA512

a216034938ffe5bfbf14938ae66809127c59e6008a48eb175e34414888b5bd40cd3efc67c071953962aa38e1453ea5b4843c7c53037c223bfcd0e6a9989714bb
SSDEEP

98304:DnMNoYx+PmQZXx8yss2q+1y+QCNqMOlZk:gBWmux8lNBTNrWk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f17a0bc35a63913b51ada61bda3a1abbb03a1bc48a731c0ed2dd1e2bc3cf5f9

Files

5f17a0bc35a63913b51ada61bda3a1abbb03a1bc48a731c0ed2dd1e2bc3cf5f9
.exe windows:4 windows x86

80cbd62dfcaadaf74d928f7d247b222e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
MulDiv
SizeofResource
LockResource
LoadResource
FindResourceA
WideCharToMultiByte
GlobalFree
FindClose
FindNextFileA
FindFirstFileA
GetProfileIntA
GlobalLock
GlobalAlloc
GlobalUnlock
GetCurrentThreadId
GlobalSize
CreateDirectoryA
MultiByteToWideChar
CopyFileA
InterlockedExchange
GetLastError
GetVersion
GetTickCount
lstrlenW
CompareStringA
CompareStringW
lstrcmpiA
GetDriveTypeA
GetConsoleMode
GetConsoleCP
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStringTypeW
GetStringTypeA
HeapCreate
HeapDestroy
VirtualFree
GetTimeZoneInformation
SetHandleCount
lstrlenA
GetStringTypeExA
SetCurrentDirectoryA
GetModuleFileNameA
lstrcpynA
Sleep
LCMapStringW
LCMapStringA
IsValidCodePage
GetACP
GetStdHandle
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapSize
ExitProcess
GetFileType
SetStdHandle
GetStartupInfoA
GetProcessHeap
GetCommandLineA
RaiseException
GetDateFormatA
GetTimeFormatA
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapReAlloc
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
RtlUnwind
FindResourceExA
SetErrorMode
GetOEMCP
GetCPInfo
GlobalFlags
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
LoadLibraryExA
VirtualProtect
InterlockedIncrement
GetDiskFreeSpaceA
GetFileTime
SetFileTime
lstrcmpA
GetShortPathNameA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetFileAttributesA
GetCurrentProcessId
InterlockedDecrement
GetModuleFileNameW
FreeResource
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
RemoveDirectoryA
SetFileAttributesA
GetVolumeInformationA
MoveFileA
FormatMessageA
LocalFree
GlobalHandle
GetLocaleInfoA
GetTempPathA
CreateFileA
CloseHandle
DeleteFileA
GetVersionExA
GlobalReAlloc
SetLastError
GetModuleHandleA
FreeLibrary
GetCurrentDirectoryA
LoadLibraryA
GetProcAddress
GetFullPathNameA
GetTempFileNameA

user32

GetNextDlgGroupItem
SetWindowContextHelpId
DestroyIcon
PostQuitMessage
EqualRect
UnpackDDElParam
ReuseDDElParam
LoadMenuA
InsertMenuItemA
SetMenu
SetParent
InSendMessage
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
TranslateMDISysAccel
GetActiveWindow
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
GetWindowThreadProcessId
GetWindowDC
ScrollWindowEx
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
SetPropA
GetPropA
RemovePropA
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
DispatchMessageA
GetTopWindow
GetMessageTime
GetMessagePos
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
MessageBoxA
wvsprintfA
GetWindow
RemoveMenu
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
AdjustWindowRect
GetScrollPos
InvalidateRgn
ValidateRect
EndPaint
GetClassLongA
GetSysColorBrush
DrawEdge
MapWindowPoints
SetWindowRgn
IsMenu
ClipCursor
SetFocus
GetCursor
GetDlgCtrlID
EnableScrollBar
ShowScrollBar
ShowOwnedPopups
SystemParametersInfoA
ModifyMenuA
GetSubMenu
SetMenuItemInfoA
GetMenuItemInfoA
EnableMenuItem
RegisterWindowMessageA
GetSystemMenu
InsertMenuA
GetMenuStringA
BeginPaint
DestroyMenu
CallWindowProcA
DefWindowProcA
IsIconic
CheckMenuItem
GetMenuState
GetClassNameA
RedrawWindow
FindWindowA
GetLastActivePopup
BringWindowToTop
RegisterClipboardFormatA
DestroyCursor
CharUpperA
LoadCursorA
GetFocus
SetActiveWindow
LoadAcceleratorsA
GetKeyState
GetDoubleClickTime
SetCursor
DestroyCaret
ShowCaret
HideCaret
SetCaretPos
CreateCaret
GetMenu
InvertRect
UnionRect
TranslateAcceleratorA
SetForegroundWindow
IsZoomed
IsWindowVisible
GetWindowLongA
MapDialogRect
SetRect
LoadBitmapA
FrameRect
GetDesktopWindow
GetCapture
GetClientRect
TrackPopupMenuEx
SetWindowsHookExA
CallNextHookEx
IsWindow
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
LoadStringA
GetParent
KillTimer
SetTimer
GetDCEx
UpdateWindow
PostMessageA
FillRect
WindowFromDC
OffsetRect
CopyRect
GetMenuItemCount
GetMenuItemID
GetMenuItemRect
CreateWindowExA
DestroyWindow
SetWindowPos
SetWindowLongA
UnhookWindowsHookEx
InvalidateRect
PeekMessageA
TranslateMessage
GetMessageA
DrawIcon
LockWindowUpdate
CharNextA
UnregisterClassA
DeleteMenu
SetCursorPos
EnumClipboardFormats
GetClipboardData
EmptyClipboard
WaitMessage
PostThreadMessageA
CreateMenu
CopyAcceleratorTableA
SetScrollPos
GetTabbedTextExtentA
SetClipboardData
IsClipboardFormatAvailable
CloseClipboard
OpenClipboard
ClientToScreen
AppendMenuA
CreatePopupMenu
MessageBeep
ReleaseCapture
GetSystemMetrics
GetCursorPos
SetCapture
GetUpdateRect
ReleaseDC
GetDC
GetWindowRect
SendMessageA
SetRectEmpty
GetAsyncKeyState
EnableWindow
WindowFromPoint
InflateRect
GetSysColor
ScreenToClient
IntersectRect
PtInRect
IsRectEmpty
DeferWindowPos

gdi32

Escape
GetObjectA
EnumFontFamiliesExA
CreatePen
GetROP2
GetWindowOrgEx
DPtoLP
LPtoDP
Arc
Ellipse
Rectangle
StretchDIBits
SetStretchBltMode
CreateFontA
GetDeviceCaps
PatBlt
BeginPath
EndPath
StrokePath
DeleteEnhMetaFile
GetStockObject
GetTextExtentPoint32A
GetMapMode
GetViewportExtEx
GetWindowExtEx
GetWinMetaFileBits
SetEnhMetaFileBits
GetEnhMetaFileBits
CreateDCA
CreateMetaFileA
CloseMetaFile
EnumMetaFile
DeleteMetaFile
SetWinMetaFileBits
SetPixel
GetPixel
GetDIBits
ExtFloodFill
CreateDIBSection
Chord
Pie
RoundRect
CreateBitmap
GetViewportOrgEx
ExtCreatePen
CreateRoundRectRgn
GetBkMode
OffsetRgn
GetTextAlign
GetCharWidthA
GetCharABCWidthsA
SetBkColor
SetMapMode
SetWindowExtEx
SetWindowOrgEx
SetViewportExtEx
SetViewportOrgEx
EnumFontFamiliesA
ExtTextOutA
GetTextCharset
SetMetaFileBitsEx
GetMetaFileBitsEx
PlayMetaFileRecord
PlayEnhMetaFileRecord
EnumEnhMetaFile
GetClipBox
SetTextColor
CopyMetaFileA
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
SelectClipRgn
CreateRectRgn
StartDocA
OffsetViewportOrgEx
ScaleViewportExtEx
OffsetWindowOrgEx
ScaleWindowExtEx
GetCurrentPositionEx
ExtSelectClipRgn
CreatePatternBrush
GetObjectType
PlayMetaFile
CreateRectRgnIndirect
SetRectRgn
CombineRgn
SetBrushOrgEx
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
GetTextColor
GetRgnBox
UnrealizeObject
CreateEllipticRgn
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextFaceA
TextOutA
RectVisible
PtVisible
GetCurrentObject
GetTextMetricsA
Polygon
GetBkColor
CreateCompatibleBitmap
CreateFontIndirectA
CreateSolidBrush
CreateICA
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
DeleteObject
Polyline
PlayEnhMetaFile
CreatePolygonRgn
PtInRegion

comdlg32

CommDlgExtendedError
GetFileTitleA

winspool.drv

GetJobA
ClosePrinter
OpenPrinterA
DeviceCapabilitiesA
DocumentPropertiesA

advapi32

RegDeleteValueA
RegCloseKey
RegQueryValueExA
RegQueryValueA
RegEnumKeyA
RegCreateKeyA
GetFileSecurityA
SetFileSecurityA
RegDeleteKeyA
RegOpenKeyA
RegSetValueA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA

shell32

SHGetFileInfoA
SHBrowseForFolderA
DragAcceptFiles
DragFinish
DragQueryFileA
ExtractIconA
SHGetPathFromIDListA
ShellExecuteExA
FindExecutableA

comctl32

ord17
InitCommonControlsEx
_TrackMouseEvent

shlwapi

PathIsUNCA
PathFindExtensionA
PathRemoveExtensionA
PathStripToRootA
PathFindFileNameA

oledlg

ord8

ole32

StgCreateDocfile
CreateStreamOnHGlobal
OleFlushClipboard
CoTaskMemFree
WriteClassStg
OleRegGetUserType
StringFromCLSID
CreateBindCtx
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
OleRegEnumVerbs
OleRegGetMiscStatus
CoDisconnectObject
CreateOleAdviseHolder
CreateDataAdviseHolder
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
WriteClassStm
OleSaveToStream
CreateItemMoniker
CreateGenericComposite
OleIsRunning
GetRunningObjectTable
CoLockObjectExternal
OleRun
CoRegisterMessageFilter
CoGetClassObject
CreateFileMoniker
StgOpenStorageOnILockBytes
OleLockRunning
OleIsCurrentClipboard
OleSetClipboard
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
RevokeDragDrop
RegisterDragDrop
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
CLSIDFromProgID
CoRevokeClassObject
CoRegisterClassObject
StgIsStorageFile
StgOpenStorage

oleaut32

VariantClear
SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SysStringByteLen
SysAllocStringByteLen
SysFreeString
SysStringLen
SysAllocStringLen
VariantInit
VariantChangeType

gdiplus

GdipTranslateWorldTransform
GdipResetWorldTransform
GdipAddPathArcI
GdipAddPathLineI
GdipClosePathFigure
GdipSetImageAttributesColorMatrix
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipBitmapGetPixel
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipSaveImageToFile
GdipRestoreGraphics
GdipSaveGraphics
GdipGetClipBoundsI
GdipResetClip
GdipSetClipRectI
GdipTransformPointsI
GdipGetWorldTransform
GdipCreateMetafileFromEmf
GdipGetMatrixElements
GdipCreateMatrix
GdipGetMetafileHeaderFromMetafile
GdipDeleteMatrix
GdipCreateRegionHrgn
GdipFillRegion
GdipDeleteRegion
GdipFillEllipseI
GdipFillPolygonI
GdipDrawEllipseI
GdipDrawLineI
GdipDrawImageRectRectI
GdipScaleWorldTransform
GdipRecordMetafile
GdipSetImageAttributesWrapMode
GdipSetMetafileDownLevelRasterizationLimit
GdipGetHemfFromMetafile
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipSetInterpolationMode
GdipReleaseDC
GdipGetDC
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromHBITMAP
GdipCreatePathGradientFromPath
GdipAddPathEllipseI
GdipSetPathGradientSigmaBlend
GdipSetPathGradientBlend
GdipSetPathGradientGammaCorrection
GdipSetPathGradientCenterPointI
GdipSetPathGradientSurroundColorsWithCount
GdipGetPathGradientPointCount
GdipSetPathGradientCenterColor
GdipDeletePath
GdipCreatePath
GdipSetLineSigmaBlend
GdipSetLineGammaCorrection
GdipDrawRectangleI
GdipCreateBitmapFromResource
GdipGetImageHeight
GdipGetImageWidth
GdiplusStartup
GdiplusShutdown
GdipCloneBitmapAreaI
GdipDrawArcI
GdipDrawPieI
GdipDrawPath
GdipFillPieI
GdipFillPath
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipSetCompositingQuality
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipCreateFromHDC
GdipFree
GdipAlloc
GdipDeleteBrush
GdipDisposeImage
GdipCreateBitmapFromScan0
GdipCreateHBITMAPFromBitmap
GdipCreateSolidFill
GdipFillRectangleI
GdipCloneBrush
GdipCloneImage
GdipCreatePen1
GdipDeletePen
GdipSetPenDashCap197819
GdipSetPenLineJoin
GdipSetPenDashStyle
GdipSetPenDashArray
GdipSetSmoothingMode
GdipSetPageUnit
GdipDrawLinesI
GdipDrawPolygonI
GdipSetLineBlend
GdipCreateLineBrushFromRectWithAngleI
GdipGetImagePixelFormat
GdipDrawImageRectI

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 376KB - Virtual size: 375KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 180KB - Virtual size: 678KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

80cbd62dfcaadaf74d928f7d247b222e

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

gdiplus

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 376KB - Virtual size: 375KB

.data Size: 180KB - Virtual size: 678KB

.rsrc Size: 1.6MB - Virtual size: 1.6MB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 376KB - Virtual size: 375KB

.data
Size: 180KB - Virtual size: 678KB

.rsrc
Size: 1.6MB - Virtual size: 1.6MB