5be225446ed8bb5bed200559f1cb51efe80b77827f7ea833c5c3521db0094ad9

Sharing

Copy URL Twitter E-mail

General

Target

5be225446ed8bb5bed200559f1cb51efe80b77827f7ea833c5c3521db0094ad9
Size

5.3MB
MD5

ea685c3a737a73ccefb341e819ae8096
SHA1

9325ab9da8a59fc3947d152094dd7086fbaa5234
SHA256

5be225446ed8bb5bed200559f1cb51efe80b77827f7ea833c5c3521db0094ad9
SHA512

416498035245f76ea63d89f4d4f9aae44177e2c5a5e7957d171730020f4de21a4dbe829dae72a3ab65e835b27570cc78170be6349b8d77a33ae65dd0c90b651d
SSDEEP

98304:VwYT5EVth7QtVAnIVFuR36KnZvLS8nkudNqRj6t7YUUWVtZVwuD527BWG:VZkmAZUIvLS8Td+kMZuVQBWG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5be225446ed8bb5bed200559f1cb51efe80b77827f7ea833c5c3521db0094ad9

Files

5be225446ed8bb5bed200559f1cb51efe80b77827f7ea833c5c3521db0094ad9
.exe windows:6 windows x86 arch:x86

5eff0dc188d61b4a44a31255e311490c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx
_TrackMouseEvent

ws2_32

ntohl
recv
send
socket
ioctlsocket
setsockopt
htonl
gethostbyname
WSACleanup
WSAGetLastError
WSAStartup
connect
shutdown
select
closesocket
__WSAFDIsSet
htons

kernel32

GetFileType
GetStdHandle
FlushFileBuffers
QueryPerformanceCounter
FormatMessageA
GetSystemTimeAsFileTime
LockFileEx
LocalFree
CreateFileMappingA
UnlockFile
HeapCompact
DeleteFileA
GetVersionExA
WaitForSingleObjectEx
FlushViewOfFile
GetFileAttributesA
GetDiskFreeSpaceA
GetTempPathA
HeapValidate
UnlockFileEx
GetFullPathNameA
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
HeapCreate
TryEnterCriticalSection
AreFileApisANSI
CreateMutexA
InterlockedExchange
InterlockedCompareExchange
SetEndOfFile
GetPrivateProfileIntA
GetPrivateProfileStringA
CreateFileA
CreateDirectoryA
SleepEx
CreateEventW
K32GetModuleFileNameExA
VirtualQuery
SwitchToThread
GetSystemDefaultLangID
LoadLibraryA
lstrcmpiW
SetEvent
OpenFileMappingW
OpenEventW
InitializeCriticalSection
SetLastError
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GlobalReAlloc
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
lstrcpynW
CreateDirectoryW
GetWindowsDirectoryW
GetVersionExW
GetShortPathNameW
GetCurrentProcessId
GetTempFileNameW
GetTempPathW
FreeResource
GetEnvironmentVariableA
CreateMutexW
DecodePointer
RaiseException
ExpandEnvironmentStringsW
FormatMessageW
GetACP
GetUserDefaultUILanguage
GetFileSize
VirtualFree
VirtualAlloc
CopyFileW
MoveFileExW
TerminateProcess
OpenProcess
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
CreateProcessW
GetExitCodeProcess
WaitForSingleObject
GetCurrentThreadId
GetLocalTime
MoveFileW
GetCurrentDirectoryW
GetFullPathNameW
FindClose
FindNextFileW
RemoveDirectoryW
FindFirstFileW
GetFileAttributesExW
ReadFile
SetFilePointer
WriteFile
GetTickCount
WideCharToMultiByte
GetModuleFileNameA
SystemTimeToFileTime
GetSystemTime
EnterCriticalSection
LeaveCriticalSection
GetSystemDirectoryW
GetEnvironmentVariableW
GetLocaleInfoW
DeleteFileW
GetFileAttributesW
GetPrivateProfileSectionW
GetPrivateProfileIntW
GetPrivateProfileStringW
GetCommandLineW
GetModuleFileNameW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
MultiByteToWideChar
GetProcessHeap
GetModuleHandleA
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
LoadLibraryExW
OutputDebugStringW
GlobalMemoryStatusEx
GetSystemInfo
GetLastError
Sleep
GetDriveTypeW
GetLogicalDrives
CloseHandle
CreateFileW
GetDiskFreeSpaceExW
DeviceIoControl
GetCurrentProcess
GetModuleHandleW
FreeLibrary
GetProcAddress
LoadLibraryW
UnregisterWaitEx
QueryDepthSList
InterlockedPopEntrySList
ReleaseSemaphore
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SignalObjectAndWait
CreateTimerQueue
WriteConsoleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
EnumSystemLocalesW
IsValidLocale
GetConsoleCP
ReadConsoleW
SetEnvironmentVariableA
SetStdHandle
GetCommandLineA
HeapQueryInformation
SetConsoleMode
ReadConsoleInputA
GetConsoleMode
SetConsoleCtrlHandler
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
RtlUnwind
InterlockedFlushSList
InterlockedPushEntrySList
GetCPInfo
GetStringTypeW
LCMapStringW
SetFilePointerEx
FindFirstFileExW
QueryPerformanceFrequency
GetNativeSystemInfo
GetExitCodeThread
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ResetEvent
GetUserDefaultLCID
SearchPathW
GetProfileIntW
VerifyVersionInfoW
VerSetConditionMask
lstrcpyW
VirtualProtect
GlobalFindAtomW
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
FileTimeToLocalFileTime
GlobalDeleteAtom
GetCurrentThread
ResumeThread
SetThreadPriority
lstrcmpW
GlobalFlags
CompareStringW
EncodePointer
DuplicateHandle
GetVolumeInformationW
GlobalAddAtomW
FileTimeToSystemTime
GlobalGetAtomNameW
lstrcmpA
LocalReAlloc
LocalAlloc
GlobalHandle
MulDiv
GlobalSize
GlobalMemoryStatus
FlushConsoleInputBuffer
HeapAlloc

user32

UnhookWindowsHookEx
SetWindowLongW
GetDlgItem
LoadCursorW
RegisterClassExW
PtInRect
CreateWindowExW
IntersectRect
SetCapture
ReleaseCapture
GetCapture
GetKeyState
SetTimer
KillTimer
DispatchMessageW
ShowWindow
UpdateWindow
SetRect
PostMessageW
SetWindowsHookExW
GetClassInfoW
CallNextHookEx
IsWindow
CallWindowProcW
GetWindowLongW
SendMessageTimeoutW
LoadImageW
SendMessageW
OffsetRect
PostQuitMessage
TranslateMessage
GetMessageW
GetSystemMetrics
GetClientRect
CopyRect
EqualRect
RegisterWindowMessageW
UnionRect
InvalidateRect
IsRectEmpty
BeginPaint
UpdateLayeredWindow
FindWindowExW
IsWindowVisible
GetWindowRect
EndPaint
EnumDisplayDevicesW
wsprintfW
HideCaret
SetCursor
SetFocus
ClientToScreen
WindowFromPoint
GetMenuStringW
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
GetMonitorInfoW
RemoveMenu
GetSysColor
GetSysColorBrush
IsWindowEnabled
MessageBoxW
GetLastActivePopup
GetWindowTextLengthW
DestroyIcon
GetDlgCtrlID
GetFocus
SetWindowTextW
RealChildWindowFromPoint
ValidateRect
SetScrollPos
GetScrollPos
MoveWindow
CheckDlgButton
IsDialogMessageW
IsIconic
SetForegroundWindow
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadBitmapW
GetMessagePos
GetMessageTime
RegisterClassW
IsMenu
IsChild
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetMenu
SetMenu
TrackPopupMenu
SetActiveWindow
GetForegroundWindow
ScrollWindow
SetScrollRange
GetScrollRange
ShowScrollBar
SetPropW
GetPropW
RemovePropW
AdjustWindowRectEx
GetClassLongW
GetTopWindow
LoadIconW
SetScrollInfo
GetScrollInfo
WinHelpW
DrawTextExW
GrayStringW
TabbedTextOutW
GetWindowDC
CopyImage
ShowOwnedPopups
DeleteMenu
CreateDialogIndirectParamW
EndDialog
GetNextDlgTabItem
DestroyMenu
GetMenuItemInfoW
SendDlgItemMessageA
SetRectEmpty
GetAsyncKeyState
MapDialogRect
TrackMouseEvent
CreatePopupMenu
GetMenuDefaultItem
GetNextDlgGroupItem
GetIconInfo
MessageBeep
EnableScrollBar
InvertRect
NotifyWinEvent
MapVirtualKeyW
GetKeyNameTextW
LoadMenuW
SetLayeredWindowAttributes
EnumDisplayMonitors
SetClassLongW
SetParent
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
DrawEdge
DrawFrameControl
BringWindowToTop
SetCursorPos
CopyIcon
FrameRect
DrawIcon
MonitorFromPoint
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
PostThreadMessageW
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
IsClipboardFormatAvailable
GetUpdateRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SubtractRect
CreateMenu
GetWindowRgn
DestroyCursor
MonitorFromWindow
CreateWindowExA
RegisterClassExA
DefWindowProcW
DestroyWindow
ReleaseDC
GetDC
AppendMenuW
MessageBoxA
GetUserObjectInformationW
GetProcessWindowStation
GetWindowThreadProcessId
CharUpperW
FindWindowA
DrawTextW
FillRect
MapWindowPoints
GetWindow
PeekMessageW
InflateRect
DrawFocusRect
GetParent
SetWindowPos
EnableWindow
GetDesktopWindow
SystemParametersInfoW
IsZoomed
SetWindowRgn
GetActiveWindow
RedrawWindow
GetWindowTextW
GetSystemMenu
GetMenuState
DrawIconEx
GetClassInfoExW
GetClassNameW
GetCursorPos
ScreenToClient

gdi32

Escape
CreatePatternBrush
CreateBitmap
CreateDCW
CopyMetaFileW
GetObjectType
CreateHatchBrush
GetPixel
SetTextColor
CreateSolidBrush
GetObjectA
CombineRgn
ExtCreateRegion
StretchBlt
GetObjectW
Rectangle
LineTo
MoveToEx
ExtTextOutW
SetBkColor
CreateRectRgn
ExcludeClipRect
BitBlt
CreateCompatibleBitmap
GetClipBox
RoundRect
CreatePen
GetTextExtentPoint32W
DeleteDC
SelectObject
CreateDIBSection
CreateCompatibleDC
DeleteObject
CreateFontIndirectW
GetStockObject
SetBkMode
GetDeviceCaps
SetPixelFormat
ChoosePixelFormat
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
TextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
PatBlt
SetRectRgn
DPtoLP
GetTextMetricsW
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetPixel
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
GetRgnBox
OffsetRgn
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceW

advapi32

CryptGenRandom
RegOpenKeyExW
RegQueryValueExW
RegEnumKeyExW
RegCreateKeyExW
RegSetValueExW
RegQueryInfoKeyW
OpenProcessToken
GetTokenInformation
LookupPrivilegeNameW
LookupPrivilegeValueW
AdjustTokenPrivileges
RegQueryValueExA
OpenSCManagerW
ReportEventA
RegisterEventSourceA
DeregisterEventSource
CryptReleaseContext
RegCloseKey
CryptAcquireContextW
RegOpenKeyExA
RegDeleteKeyW
RegEnumKeyW
RegDeleteValueW
CloseServiceHandle
DeleteService
ControlService
OpenServiceW

shell32

SHFileOperationW
ShellExecuteW
SHGetMalloc
SHGetSpecialFolderLocation
ShellExecuteExW
SHGetFolderPathA
CommandLineToArgvW
SHAppBarMessage
SHGetSpecialFolderPathW
SHCreateDirectoryExW
SHGetFileInfoW
SHGetDesktopFolder
SHBrowseForFolderW
DragQueryFileW
SHGetPathFromIDListW
DragFinish

ole32

OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CoDisconnectObject
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CreateStreamOnHGlobal
CoInitializeEx
CoUninitialize
CoCreateInstance
CoInitialize
ReleaseStgMedium
CoCreateGuid

oleaut32

VariantClear
VariantCopy
VariantChangeType
VarBstrFromDate
SysAllocString
VariantInit
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocStringLen
LoadTypeLi
SysFreeString

msimg32

TransparentBlt
AlphaBlend

shlwapi

PathRemoveFileSpecW
PathAddBackslashW
PathRemoveFileSpecA
PathIsDirectoryW
StrCmpW
StrStrIW
PathFileExistsA
SHDeleteKeyW
PathAppendW
PathFindFileNameW
PathIsUNCW
PathStripToRootW
PathFindExtensionW
StrFormatKBSizeW
PathFileExistsW

uxtheme

IsAppThemed
GetWindowTheme
GetCurrentThemeName
GetThemeColor
DrawThemeBackground
CloseThemeData
OpenThemeData
DrawThemeParentBackground
DrawThemeText
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
GetThemePartSize

d3d9

Direct3DCreate9

opengl32

wglGetProcAddress
glGetString
wglMakeCurrent
wglCreateContext
wglDeleteContext

wininet

DeleteUrlCacheEntryW

gdiplus

GdipGetImageHeight
GdipCreateMatrix
GdipDeleteMatrix
GdipTranslateMatrix
GdipRotateMatrix
GdipDisposeImage
GdipCreateFromHDC
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipGetImageWidth
GdipGraphicsClear
GdipDrawImageRectI
GdiplusShutdown
GdiplusStartup
GdipSetWorldTransform
GdipFree
GdipAlloc
GdipDrawImageRectRectI
GdipCloneImage
GdipGetImagePixelFormat
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipSetInterpolationMode
GdipDrawString
GdipSetTextRenderingHint
GdipSetStringFormatTrimming
GdipSetStringFormatLineAlign
GdipMeasureString
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipDeleteStringFormat
GdipCreateStringFormat
GdipCreateSolidFill
GdipDeleteBrush
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCloneBitmapAreaI
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromScan0

netapi32

Netbios

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundW

urlmon

URLDownloadToFileW

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 652KB - Virtual size: 651KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.giats
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.QMGuid
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 804KB - Virtual size: 803KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 752KB - Virtual size: 756KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5eff0dc188d61b4a44a31255e311490c

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

ws2_32

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

msimg32

shlwapi

uxtheme

d3d9

opengl32

wininet

gdiplus

netapi32

oleacc

imm32

winmm

urlmon

winspool.drv

Sections

.text Size: 3.0MB - Virtual size: 3.0MB

.rdata Size: 652KB - Virtual size: 651KB

.data Size: 70KB - Virtual size: 108KB

.gfids Size: 106KB - Virtual size: 106KB

.giats Size: 512B - Virtual size: 16B

.tls Size: 512B - Virtual size: 9B

.QMGuid Size: 512B - Virtual size: 20B

.rsrc Size: 804KB - Virtual size: 803KB

.reloc Size: 752KB - Virtual size: 756KB

.text
Size: 3.0MB - Virtual size: 3.0MB

.rdata
Size: 652KB - Virtual size: 651KB

.data
Size: 70KB - Virtual size: 108KB

.gfids
Size: 106KB - Virtual size: 106KB

.giats
Size: 512B - Virtual size: 16B

.tls
Size: 512B - Virtual size: 9B

.QMGuid
Size: 512B - Virtual size: 20B

.rsrc
Size: 804KB - Virtual size: 803KB

.reloc
Size: 752KB - Virtual size: 756KB