209d02af40d8099554974338d2687232127f30a20fb5f963001261a6f4f9c816

Sharing

Copy URL Twitter E-mail

General

Target

209d02af40d8099554974338d2687232127f30a20fb5f963001261a6f4f9c816
Size

2.1MB
MD5

b0213307a7c24037547411d0c17890e0
SHA1

6d9775ac7a3ec088517fd3697a7f5b44cffe2ad6
SHA256

209d02af40d8099554974338d2687232127f30a20fb5f963001261a6f4f9c816
SHA512

f07ff69f828823204327393d1c9ceb394ed7db78fd5b8010b5d6fe3e679c10981d74c91259082cffb93e64c45b910ed4e0bcfb91b6cfdd9a5c9ead1f9ec045ae
SSDEEP

24576:LyORakfSnKfqy5RkPClBuaCE+iWDBV54tyLNcwoOSMAHjZaNbxCTKX4Q6RD3xvkt:LuKObh03xuTohMMKfxRTmMdT9X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
209d02af40d8099554974338d2687232127f30a20fb5f963001261a6f4f9c816

Files

209d02af40d8099554974338d2687232127f30a20fb5f963001261a6f4f9c816
.exe windows:4 windows x86

56a8a1344eb625cc7ad8005458bc6070

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
GlobalAlloc
ResetEvent
GlobalLock
GlobalUnlock
RemoveDirectoryA
DeleteFileA
CopyFileA
CreateDirectoryA
GetModuleHandleA
GlobalMemoryStatus
GetLocalTime
FindNextFileA
GetVersionExA
GetTempFileNameA
SetThreadIdealProcessor
GetExitCodeProcess
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
GetSystemDefaultLangID
GetUserDefaultLangID
GetSystemInfo
CreateEventA
HeapAlloc
HeapFree
HeapReAlloc
SetFilePointer
ReadFile
ExitProcess
TerminateProcess
GetCurrentProcess
InterlockedDecrement
InterlockedIncrement
GetFileType
CreateFileA
ResumeThread
CreateThread
TlsSetValue
ExitThread
GetTimeZoneInformation
GetSystemTime
GetCurrentThreadId
GetCommandLineA
GetVersion
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
FindClose
RtlUnwind
SetStdHandle
SetHandleCount
GetStdHandle
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
TlsAlloc
SetLastError
TlsGetValue
WriteFile
HeapSize
SetEndOfFile
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeA
GetStringTypeW
FlushFileBuffers
RaiseException
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetCurrentProcessId
GetProcessHeap
IsProcessorFeaturePresent
lstrcmpiA
GetFullPathNameA
InterlockedCompareExchange
InterlockedExchange
CreateFileW
GetFileSize
OutputDebugStringA
GetStartupInfoA
CreateProcessA
FindFirstFileA
GlobalFree
lstrcpyA
LoadLibraryA
GetProcAddress
WaitForMultipleObjects
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
FindResourceA
SizeofResource
LoadResource
LockResource
FreeResource
GetLastError
GetModuleFileNameA
GetFileAttributesA
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
WaitForSingleObject
SetEvent
SetCurrentDirectoryA
CreateMutexA
CloseHandle
Sleep
ReleaseMutex
DeleteCriticalSection
InitializeCriticalSection
IsBadWritePtr

user32

CreateIconIndirect
OpenIcon
AdjustWindowRectEx
SetRect
GetWindowLongA
SetWindowLongA
RegisterClassExA
SetWindowRgn
GetClassNameA
SendMessageTimeoutA
IsWindowVisible
SetWindowPlacement
EnableWindow
MoveWindow
DestroyIcon
PostQuitMessage
DefWindowProcA
SetFocus
ChangeDisplaySettingsExA
GetSystemMetrics
EnumDisplaySettingsA
DrawMenuBar
InsertMenuItemA
CreateMenu
DialogBoxParamA
SystemParametersInfoA
ChangeDisplaySettingsA
SetCursorPos
SetMenu
ShowCursor
DestroyMenu
DestroyWindow
LoadCursorA
SetClassLongA
ClientToScreen
SetCursor
GetWindowTextA
DeleteMenu
GetSystemMenu
LoadIconA
GetWindowRect
CreateWindowExA
RegisterClassA
FindWindowA
SetForegroundWindow
GetDC
ReleaseDC
GetMessageA
TranslateMessage
DispatchMessageA
GetDlgItem
SetWindowTextA
GetWindowPlacement
EndDialog
PeekMessageA
GetKeyboardState
SetKeyboardState
GetCursorPos
ScreenToClient
PostMessageA
ShowWindow
GetSubMenu
TrackPopupMenu
RedrawWindow
MessageBoxA
IsIconic
SendMessageA
GetClipboardData
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
GetClientRect
SetWindowPos
UpdateWindow
EnumWindows

gdi32

SelectObject
TextOutA
CreateCompatibleDC
CreateFontIndirectA
SetBkMode
SetTextColor
CreateBitmap
ExtCreateRegion
GetDIBits
GetObjectA
GetDeviceCaps
DeleteObject
DeleteDC
GetStockObject
SetStretchBltMode
StretchDIBits
CreateDIBSection
EnumFontFamiliesExA

shell32

DragQueryFileA
DragAcceptFiles
Shell_NotifyIconA
FindExecutableA
ShellExecuteExA
SHGetSpecialFolderPathA
DragFinish

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA

comctl32

ord17

ole32

CoInitializeEx
CoCreateInstance
CoUninitialize

winmm

waveInGetNumDevs
timeGetTime
joyGetPosEx
mciSendStringA
waveInGetDevCapsA
mmioStringToFOURCCA
mmioOpenA
waveOutGetDevCapsA
waveOutGetNumDevs
timeGetDevCaps
timeBeginPeriod
joyGetNumDevs
timeEndPeriod
mmioClose
mciSendCommandA
mmioAscend
mmioDescend
mmioRead

msacm32

acmStreamOpen
acmStreamSize
acmStreamPrepareHeader
acmStreamConvert
acmStreamUnprepareHeader
acmStreamClose
acmFormatSuggest

imm32

ImmAssociateContext

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

d3d9

Direct3DCreate9

dsound

ord1

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 158KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 117KB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data1
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 283KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

56a8a1344eb625cc7ad8005458bc6070

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

winmm

msacm32

imm32

version

d3d9

dsound

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 158KB - Virtual size: 158KB

.data Size: 117KB - Virtual size: 2.3MB

_RDATA Size: 24KB - Virtual size: 24KB

.data1 Size: 512B - Virtual size: 224B

.sxdata Size: 512B - Virtual size: 8B

.rsrc Size: 283KB - Virtual size: 282KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 158KB - Virtual size: 158KB

.data
Size: 117KB - Virtual size: 2.3MB

_RDATA
Size: 24KB - Virtual size: 24KB

.data1
Size: 512B - Virtual size: 224B

.sxdata
Size: 512B - Virtual size: 8B

.rsrc
Size: 283KB - Virtual size: 282KB