e8020f8d6bc6ae4c61bd7974b7a6343e6b40a335eba9577fe9bf1c125b92d132

Sharing

Copy URL

Twitter E-mail

General

Target

e8020f8d6bc6ae4c61bd7974b7a6343e6b40a335eba9577fe9bf1c125b92d132
Size

2.8MB
MD5

3347d4b790d457b5260f228a7bedfbcb
SHA1

8c0c5e970481620a0b5022b9d391269ed05123c3
SHA256

e8020f8d6bc6ae4c61bd7974b7a6343e6b40a335eba9577fe9bf1c125b92d132
SHA512

030778d16e55260327b553e50209274b079f7b23ce22c27332f57d41bc74ad524cb0d39ac376b35dd4d787877e4377c0e748e482d11bd9a3951a5341914c5581
SSDEEP

49152:tm9MYtVOpEAKarUhajqMtWwT8IzlWTiyxC1ZDCDgtFpwrrqQAwgQARpAP:tm9MYtVOpEN8WwT8+VCDgtFpGrqQAwgP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8020f8d6bc6ae4c61bd7974b7a6343e6b40a335eba9577fe9bf1c125b92d132

Files

e8020f8d6bc6ae4c61bd7974b7a6343e6b40a335eba9577fe9bf1c125b92d132
.exe windows:4 windows x86 arch:x86

003d9e5e5e064a07bab670d0feecd82c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

pcomm

ord5
ord3
ord7
ord26
ord6
ord8
ord4
ord20
ord2
ord19

kernel32

GetCPInfo
GetOEMCP
SizeofResource
GetCurrentDirectoryA
RtlUnwind
ExitProcess
TerminateProcess
RaiseException
IsBadReadPtr
CreateThread
ExitThread
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetStartupInfoA
GetCommandLineA
GetACP
HeapSize
HeapReAlloc
SetStdHandle
GetFileType
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
LCMapStringA
LCMapStringW
GlobalFlags
GetStringTypeW
GetDriveTypeA
IsBadCodePtr
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
InterlockedCompareExchange
GetSystemInfo
VirtualQuery
GetSystemDirectoryA
FindClose
CreateDirectoryA
FindFirstFileA
GetModuleFileNameA
DeleteFileA
WritePrivateProfileStringA
GetPrivateProfileStringA
MoveFileA
CloseHandle
GetLastError
CreateMutexA
CopyFileA
SetFileAttributesA
GetFileAttributesA
HeapFree
HeapAlloc
GetProcessHeap
Beep
Sleep
InterlockedExchange
InitializeCriticalSection
WaitForSingleObject
GetExitCodeThread
GetDiskFreeSpaceExA
LeaveCriticalSection
EnterCriticalSection
ResumeThread
SetThreadPriority
SetPriorityClass
GetCurrentProcess
CreateFileA
DeviceIoControl
TlsFree
GlobalHandle
TlsAlloc
SetErrorMode
DeleteCriticalSection
GetCurrentThread
VirtualProtect
GlobalReAlloc
lstrcmpA
FindResourceA
LoadResource
LockResource
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
lstrlenW
GlobalLock
GlobalUnlock
SuspendThread
GetCurrentThreadId
SetEvent
GetFileTime
GetFileSize
lstrcmpiA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
GetVolumeInformationA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
DuplicateHandle
FindNextFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
WideCharToMultiByte
InterlockedIncrement
MultiByteToWideChar
lstrlenA
LocalAlloc
InterlockedDecrement
GetLocaleInfoA
lstrcpynA
lstrcpyA
WinExec
GetTickCount
MulDiv
SetLastError
GlobalAlloc
GlobalFree
GetProfileStringA
GetVersion
GetCurrentProcessId
SetLocalTime
BuildCommDCBA
SetupComm
WaitCommEvent
GetCommMask
CreateEventA
ClearCommError
ResetEvent
GetOverlappedResult
WaitForMultipleObjects
LoadLibraryA
GetProcAddress
FreeLibrary
WriteFile
ReadFile
SetCommMask
PurgeComm
GetCommState
SetCommState
GetCommTimeouts
SetCommTimeouts
FormatMessageA
LocalFree
GetStringTypeA

user32

ReleaseCapture
GetClassNameA
GetSysColorBrush
SetRect
WindowFromPoint
LoadStringA
DestroyMenu
SetWindowContextHelpId
PostQuitMessage
EndDialog
CreateDialogIndirectParamA
MapDialogRect
GetAsyncKeyState
SetRectEmpty
GrayStringA
TabbedTextOutA
EndPaint
BeginPaint
ClientToScreen
InflateRect
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
MoveWindow
IsDialogMessageA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
ShowWindow
FindWindowA
SetCursorPos
GetCursorPos
GetNextDlgGroupItem
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
SetActiveWindow
IsWindow
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
SetCapture
CharNextA
SetDlgItemTextA
CopyAcceleratorTableA
GetMenuItemID
TrackPopupMenu
GetDlgItem
DefWindowProcA
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
PostMessageA
GetSysColor
SetWindowLongA
GetWindowLongA
GetDCEx
RegisterClipboardFormatA
SetParent
PostThreadMessageA
UnregisterClassA
GetKeyState
SendMessageA
CopyRect
GetClientRect
InvalidateRect
LockWindowUpdate
RedrawWindow
IsWindowVisible
GetParent
EnableWindow
SetWindowTextA
wsprintfA
ExitWindowsEx
SendMessageTimeoutA
LoadIconA
GetDlgCtrlID
GetFocus
GetWindowRect
GetSubMenu
LoadMenuA
GetSystemMetrics
DrawIcon
IsIconic
KillTimer
SetForegroundWindow
GetWindow
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
GetMessageA
TranslateMessage
GetActiveWindow
ValidateRect
CharUpperA
GetLastActivePopup
IsWindowEnabled
LoadBitmapA
LoadCursorA
SetCursor
SetWindowPos
DrawFrameControl
DrawTextA
DrawFocusRect
CallWindowProcA
MessageBeep
GetDesktopWindow
GetSystemMenu
AppendMenuA
MessageBoxA
BringWindowToTop
GetDC
InsertMenuA
GetMenuItemCount
DeleteMenu
ReleaseDC
GetWindowDC
FillRect
MsgWaitForMultipleObjects
LoadImageA
SetTimer
PeekMessageA
DispatchMessageA
SetWindowsHookExA
CallNextHookEx
UnhookWindowsHookEx
ScreenToClient
PtInRect

gdi32

CreateCompatibleDC
CreateCompatibleBitmap
GetCharWidthA
LPtoDP
StretchDIBits
GetTextColor
GetBkColor
Escape
RectVisible
PtVisible
CreateSolidBrush
CreatePen
GetWindowExtEx
GetViewportExtEx
LineTo
GetViewportOrgEx
GetWindowOrgEx
PatBlt
SetPixelV
CreateRectRgnIndirect
GetClipBox
CreateBitmap
CreatePatternBrush
SetRectRgn
BitBlt
CombineRgn
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
GetStockObject
DPtoLP
CreateRectRgn
TextOutA
GetDeviceCaps
DeleteDC
DeleteObject
EndDoc
EndPage
RestoreDC
SaveDC
StartPage
StartDocA
SetTextAlign
SelectObject
CreateFontA
CreateDCA
GetTextMetricsA
GetMapMode
GetObjectA
ExtTextOutA
SetTextColor
SetBkMode
GetTextExtentPointA
CreateDIBitmap
CreateFontIndirectA
SetBkColor
MoveToEx

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

GetPrinterA
ClosePrinter
DocumentPropertiesA
SetPrinterA
OpenPrinterA

advapi32

RegSetValueExA
RegOpenKeyExA
FreeSid
RegSetKeySecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAce
InitializeAcl
GetLengthSid
AllocateAndInitializeSid
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
OpenProcessToken

comctl32

ImageList_AddMasked
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
ord17
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA

oledlg

ord8

ole32

StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoTaskMemAlloc
CoTaskMemFree
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
OleRun
CoUninitialize
CoInitialize

olepro32

ord253

oleaut32

VariantClear
VariantCopy
VariantInit
SysFreeString
SafeArrayCreateVector
SafeArrayGetUBound
SysAllocString
SysAllocStringByteLen
GetErrorInfo
SysStringByteLen
VariantChangeType
SysAllocStringLen
VarBstrFromCy
VarDateFromStr
VarBstrFromDate
SysStringLen
VariantTimeToSystemTime

urlmon

CreateURLMoniker

odbc32

ord5
ord16
ord61
ord13
ord18
ord11
ord3
ord14
ord9
ord15
ord51
ord45
ord50
ord23
ord1
ord2
ord41
ord43
ord68
ord12
ord46
ord19
ord44
ord8
ord59
ord17
ord20
ord49
ord48
ord10

wsock32

WSAStartup
WSAGetLastError
htonl
listen
accept
setsockopt
recv
send
socket
htons
ioctlsocket
connect
closesocket
sendto
bind
WSACleanup

wininet

InternetGetLastResponseInfoA
FtpPutFileA
InternetConnectA
InternetSetStatusCallback
InternetCloseHandle
InternetOpenA

rasapi32

RasHangUpA
RasEnumEntriesA
RasGetErrorStringA
RasDialA
RasCreatePhonebookEntryA
RasEditPhonebookEntryA
RasGetProjectionInfoA

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 248KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 192KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 588KB - Virtual size: 586KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

003d9e5e5e064a07bab670d0feecd82c

Headers

File Characteristics

Imports

pcomm

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

oledlg

ole32

olepro32

oleaut32

urlmon

odbc32

wsock32

wininet

rasapi32

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 248KB - Virtual size: 245KB

.data Size: 192KB - Virtual size: 220KB

.rsrc Size: 588KB - Virtual size: 586KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 248KB - Virtual size: 245KB

.data
Size: 192KB - Virtual size: 220KB

.rsrc
Size: 588KB - Virtual size: 586KB