db329c350f71651d605aaaa0bc6ad7508b42a3890848e790692f1b78e1c19d5a

Sharing

Copy URL Twitter E-mail

General

Target

db329c350f71651d605aaaa0bc6ad7508b42a3890848e790692f1b78e1c19d5a
Size

771KB
MD5

77badb399d3d16fc16cd165a9b2198d3
SHA1

bf72a43296b40e275590056e5e5f42283113fb8c
SHA256

db329c350f71651d605aaaa0bc6ad7508b42a3890848e790692f1b78e1c19d5a
SHA512

bda49b574038263419d9d46b2a6e23f21354a50d5b7cd65a5ef0caed8e03aef41923e2dcf11cea1d0cf7e3435c683ebe4c05e38a75dea81dcf29bfdc72f10a42
SSDEEP

12288:01V4L4PCtGDtlLJgsGoE6gYAMkZ6XlwAcMs+50tgAakT7hs5fDDbbjmh8Q0uvjm9:01VUQDtlLJg3o+6XKAsCI7mnw92

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db329c350f71651d605aaaa0bc6ad7508b42a3890848e790692f1b78e1c19d5a

Files

db329c350f71651d605aaaa0bc6ad7508b42a3890848e790692f1b78e1c19d5a
.exe windows:5 windows x86 arch:x86

087cdb429a7615d6fc3179efa6e97910

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeW
GetDiskFreeSpaceExW
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetVersion
CreateEventW
WaitForSingleObject
SetEvent
WaitForMultipleObjects
LoadLibraryW
CreateFileA
ReadFile
DeleteFileW
GetCurrentThreadId
GetCurrentProcessId
WriteFile
GetCommandLineW
SetLastError
ResetEvent
RaiseException
InterlockedDecrement
InterlockedIncrement
lstrcmpiW
ExitProcess
CreateMutexW
MulDiv
DecodePointer
GetTempFileNameW
FindClose
InterlockedExchange
WritePrivateProfileStringW
DeviceIoControl
InitializeCriticalSection
GetPrivateProfileStringW
HeapDestroy
WriteConsoleW
SetStdHandle
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
GetSystemDirectoryW
FindFirstFileExW
GetTimeZoneInformation
ReadConsoleW
InterlockedCompareExchange
GetConsoleCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
HeapFree
GetFileType
GetACP
GetStdHandle
GetCommandLineA
FreeLibraryAndExitThread
ExitThread
CreateThread
RtlUnwind
GetModuleHandleExW
QueryPerformanceCounter
GetStartupInfoW
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
LocalFree
ReleaseMutex
OpenThread
HeapWalk
HeapUnlock
HeapLock
SetFilePointerEx
SetEndOfFile
LocalFileTimeToFileTime
SystemTimeToFileTime
LoadLibraryExA
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
OutputDebugStringW
IsDebuggerPresent
GetCPInfo
GetLogicalDriveStringsW
GetLongPathNameW
GetTempPathW
GetLongPathNameA
GetTempPathA
GetFileAttributesA
GetFileAttributesW
FindNextFileW
FindFirstFileW
CloseHandle
GetFileSizeEx
CreateFileW
FindResourceExW
GetProcessHeap
HeapAlloc
WideCharToMultiByte
Sleep
HeapReAlloc
GetVersionExW
GetSystemWindowsDirectoryW
GetModuleHandleW
GetCurrentProcess
LoadLibraryExW
FindResourceW
SizeofResource
LoadResource
LockResource
FreeResource
EnterCriticalSection
GetProcAddress
FreeLibrary
GetLocaleInfoW
LCMapStringW
CompareStringW
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SwitchToThread
EncodePointer
GetStringTypeW
GetDateFormatW
HeapSize
LeaveCriticalSection
GetModuleFileNameW
MultiByteToWideChar
GetConsoleMode

user32

GetWindowTextW
GetWindowRect
DrawTextW
SetCursor
GetParent
GetClientRect
EndPaint
BeginPaint
InvalidateRect
MessageBoxW
GetActiveWindow
ScreenToClient
SendMessageW
GetWindowTextLengthW
wsprintfW
FindWindowExW
PostMessageW
LoadCursorW
IntersectRect
RegisterClassW
GetClassInfoW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
SendMessageTimeoutW
FindWindowW
CharNextW
EndDialog
ReleaseDC
GetDC
CreateWindowExW
CreateDialogParamW
GetClassInfoExW
RegisterClassExW
DestroyWindow
DialogBoxParamW
IsIconic
UpdateWindow
MoveWindow
EnableWindow
IsDialogMessageW
IsWindowVisible
PostQuitMessage
GetSystemMetrics
SetWindowTextW
LoadImageW
UnregisterClassW
CallWindowProcW
GetWindow
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
GetDlgItem
SetWindowPos
ShowWindow
IsWindow
SetWindowLongW
GetWindowLongW
DefWindowProcW

gdi32

SetStretchBltMode
GetObjectW
CreateCompatibleDC
CreateDIBSection
ExtTextOutW
SetBkColor
GetDeviceCaps
GetTextExtentPointW
DeleteObject
SelectObject
SetTextColor
DeleteDC
CreateFontW

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegDeleteKeyW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegQueryValueExA
RegDeleteValueW
RegSetValueExW

shell32

ord165
ShellExecuteW
SHGetPathFromIDListW
DragQueryFileW
SHBrowseForFolderW
SHCreateDirectoryExW
SHGetSpecialFolderPathW

ole32

CoTaskMemFree
CoTaskMemRealloc
CoInitialize
CoUninitialize
CoCreateInstance
OleInitialize
CoTaskMemAlloc

oleaut32

VarUI4FromStr
SysFreeString
SysAllocString
SysStringByteLen
SysAllocStringByteLen
SysStringLen
VariantInit
VariantClear

version

VerQueryValueW

shlwapi

PathCombineW
PathFileExistsW
PathFindExtensionW
SHGetValueW
PathIsRelativeW
PathFindFileNameW
PathCanonicalizeW
PathRemoveFileSpecW
PathAppendW

comctl32

InitCommonControlsEx
ord17
_TrackMouseEvent

msimg32

AlphaBlend

gdiplus

GdiplusShutdown
GdiplusStartup

Sections

.text
Size: 443KB - Virtual size: 442KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 90KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

087cdb429a7615d6fc3179efa6e97910

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

version

shlwapi

comctl32

msimg32

gdiplus

Sections

.text Size: 443KB - Virtual size: 442KB

.rdata Size: 102KB - Virtual size: 102KB

.data Size: 14KB - Virtual size: 24KB

.rsrc Size: 104KB - Virtual size: 104KB

.reloc Size: 90KB - Virtual size: 92KB

.text
Size: 443KB - Virtual size: 442KB

.rdata
Size: 102KB - Virtual size: 102KB

.data
Size: 14KB - Virtual size: 24KB

.rsrc
Size: 104KB - Virtual size: 104KB

.reloc
Size: 90KB - Virtual size: 92KB