1c8b8ab964632875d3f2b5529368051fd50bfbcb77511351caab1c92fd7dd458

Sharing

Copy URL Twitter E-mail

General

Target

1c8b8ab964632875d3f2b5529368051fd50bfbcb77511351caab1c92fd7dd458
Size

3.0MB
MD5

3414f6acbac2ceb90e0499e51e2bae10
SHA1

0f17e029eb8d0bfef2c165d0311873aad25cff3f
SHA256

1c8b8ab964632875d3f2b5529368051fd50bfbcb77511351caab1c92fd7dd458
SHA512

f0928abd104f1aaaf0104f61c0095119f6a21c5974d8957a20c24c86257bf1abeeaf7ce865cc4583d070b4f4805884bcda6af46dfeebf12fd478b97169ea014e
SSDEEP

49152:rmAL6BIpEcqGVdI7o2YdvhcBIHNlWi+pJHiPIbCDv2aMSDOxjnB5Y/ge8WPqGvIC:rmAL6BIpEmn9EY/ge8AvISOBM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c8b8ab964632875d3f2b5529368051fd50bfbcb77511351caab1c92fd7dd458

Files

1c8b8ab964632875d3f2b5529368051fd50bfbcb77511351caab1c92fd7dd458
.exe windows:6 windows x64 arch:x64

abb38dcbda4889ef4c7127da8e8b3027

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

DestroyCursor
GetComboBoxInfo
InvertRect
HideCaret
GetNextDlgGroupItem
CreateMenu
PostThreadMessageW
SubtractRect
GetUpdateRect
IsClipboardFormatAvailable
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
FrameRect
UpdateLayeredWindow
CharUpperBuffW
RegisterClipboardFormatW
MapVirtualKeyExW
GetKeyNameTextW
IsCharLowerW
ModifyMenuW
SetMenuDefaultItem
CopyIcon
GetIconInfo
GetDoubleClickTime
EnableScrollBar
UnionRect
MonitorFromPoint
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
GetMenuDefaultItem
ReuseDDElParam
UnpackDDElParam
LoadImageW
InsertMenuItemW
TranslateAcceleratorW
MapDialogRect
GetMenuItemInfoW
DestroyMenu
DestroyIcon
SetClassLongPtrW
LockWindowUpdate
CreatePopupMenu
BringWindowToTop
SetParent
SetRect
GetWindowRgn
SetCursorPos
NotifyWinEvent
IntersectRect
MessageBeep
GetSystemMenu
LoadMenuW
IsZoomed
TrackMouseEvent
CopyAcceleratorTableW
DestroyAcceleratorTable
CreateAcceleratorTableW
LoadAcceleratorsW
MapVirtualKeyW
GetKeyboardState
GetAsyncKeyState
CharUpperW
GetKeyboardLayout
ToUnicodeEx
DrawIconEx
IsRectEmpty
InflateRect
DrawFocusRect
SetWindowRgn
DrawStateW
DrawFrameControl
DrawEdge
OffsetRect
SendDlgItemMessageA
InvalidateRect
KillTimer
SetTimer
RealChildWindowFromPoint
DeleteMenu
CopyImage
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuState
GetMenuStringW
WindowFromPoint
SetCapture
WaitMessage
IsDialogMessageW
SetWindowTextW
CheckDlgButton
MoveWindow
ShowWindow
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
GetWindow
GetTopWindow
GetClassNameW
GetClassLongPtrW
SetWindowLongPtrW
GetWindowLongPtrW
SetWindowLongW
PtInRect
EqualRect
AdjustWindowRectEx
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
SetForegroundWindow
GetForegroundWindow
LoadIconW
TrackPopupMenu
GetMenuItemCount
GetMenuItemID
GetSubMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
RegisterClassW
CallWindowProcW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
FillRect
ScreenToClient
ClientToScreen
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
UnhookWindowsHookEx
GetLastActivePopup
GetWindowThreadProcessId
MessageBoxW
SetCursor
ShowOwnedPopups
CallNextHookEx
SetWindowsHookExW
GetCursorPos
ValidateRect
GetKeyState
IsWindowVisible
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
LoadBitmapW
ReleaseCapture
UpdateWindow
SendMessageW
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
EnableWindow
UnregisterClassW
PostMessageW
PostQuitMessage
IsWindow
DestroyWindow
CreateDialogIndirectParamW
EndDialog
GetDlgItem
GetNextDlgTabItem
GetActiveWindow
IsWindowEnabled
SetActiveWindow
GetWindowLongW
GetDesktopWindow
GetParent
DefWindowProcW
GetClassInfoW
SetLayeredWindowAttributes
MapWindowPoints
GetSysColor
GetSysColorBrush
SetRectEmpty
CopyRect
LoadCursorW
SystemParametersInfoW
GetMonitorInfoW
EnumDisplayMonitors
GetFocus
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW

kernel32

OutputDebugStringW
RtlUnwindEx
CreateThread
ExitThread
FreeLibraryAndExitThread
GetCommandLineA
GetCommandLineW
HeapQueryInformation
GetSystemInfo
VirtualAlloc
VirtualQuery
SetStdHandle
GetFileType
GetStdHandle
ExitProcess
GetConsoleOutputCP
GetConsoleMode
LCMapStringW
IsValidLocale
EnumSystemLocalesW
ReadConsoleW
GetTimeZoneInformation
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
WriteConsoleW
LoadLibraryExA
FindClose
GetCPInfo
GetStringTypeW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
LCMapStringEx
QueryPerformanceFrequency
RtlPcToFileHeader
GetFileInformationByHandleEx
AreFileApisANSI
SetFilePointerEx
GetFileInformationByHandle
FindNextFileW
FindFirstFileExW
CreateDirectoryW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
LoadLibraryA
GetProcAddress
WideCharToMultiByte
GetShortPathNameA
GetModuleFileNameA
SetWaitableTimer
TlsSetValue
SetLastError
EnterCriticalSection
TerminateProcess
GetModuleFileNameW
WaitForMultipleObjects
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetQueuedCompletionStatus
GetEnvironmentVariableA
WaitForSingleObject
lstrcatA
OpenProcess
PostQueuedCompletionStatus
CreateToolhelp32Snapshot
CreateEventW
FormatMessageW
GetLastError
Process32NextW
SetEvent
TerminateThread
TlsAlloc
lstrcpyA
Process32FirstW
CloseHandle
QueueUserAPC
LocalFree
DeleteCriticalSection
VerSetConditionMask
SleepEx
VerifyVersionInfoW
TlsGetValue
TlsFree
FormatMessageA
CreateIoCompletionPort
HeapFree
InitializeCriticalSectionEx
HeapSize
HeapReAlloc
RaiseException
HeapAlloc
DecodePointer
GetProcessHeap
OutputDebugStringA
GetCurrentThread
GetCurrentThreadId
GetVersionExW
FreeLibrary
GetModuleHandleExW
LoadLibraryExW
LoadResource
LockResource
SizeofResource
FindResourceW
LoadLibraryW
GlobalAlloc
GlobalLock
GlobalDeleteAtom
lstrcmpA
lstrcmpW
CreateActCtxW
ActivateActCtx
DeactivateActCtx
FindActCtxSectionStringW
QueryActCtxW
MultiByteToWideChar
GetModuleHandleW
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
GlobalUnlock
GlobalFree
lstrcpyW
SetThreadPriority
ResumeThread
GlobalAddAtomW
GetCurrentProcessId
MulDiv
EncodePointer
GetSystemDirectoryW
GlobalFindAtomW
CompareStringW
GlobalSize
CopyFileW
InitializeCriticalSection
GlobalReAlloc
GlobalHandle
LocalAlloc
LocalReAlloc
GetCurrentDirectoryW
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GlobalFlags
DeleteFileW
CreateFileW
SetFilePointer
GetTempPathW
RtlUnwind
FindFirstFileW
FlushFileBuffers
GetFileSize
GetFullPathNameW
GetVolumeInformationW
LockFile
ReadFile
SetEndOfFile
UnlockFile
WriteFile
DuplicateHandle
GetCurrentProcess
lstrcmpiW
GlobalGetAtomNameW
VirtualProtect
FileTimeToSystemTime
SetErrorMode
FileTimeToLocalFileTime
GetFileAttributesW
GetFileAttributesExW
GetFileSizeEx
GetFileTime
SystemTimeToTzSpecificLocalTime
GetWindowsDirectoryW
GetTempFileNameW
GetUserDefaultLCID
GetTickCount
GetProfileIntW
SearchPathW
Sleep
FindResourceExW
ResetEvent
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime

gdi32

Polygon
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBitmap
CreateFontIndirectW
CreatePen
CreatePatternBrush
CreateRectRgnIndirect
CreateSolidBrush
DeleteObject
EnumFontFamiliesW
GetDeviceCaps
GetStockObject
GetTextCharsetInfo
GetTextMetricsW
GetObjectW
CreateBitmap
CreateHatchBrush
CreateRectRgn
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
GetTextFaceW
SetPixelV
GetViewportOrgEx
GetWindowOrgEx
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
SetPaletteEntries
ExtFloodFill
LPtoDP
GetSystemPaletteEntries
GetNearestPaletteIndex
EnumFontFamiliesExW
GetPaletteEntries
CreatePalette
RoundRect
OffsetRgn
GetRgnBox
Rectangle
SetDIBColorTable
StretchBlt
SetPixel
RealizePalette
DPtoLP
SetRectRgn
CreateDIBSection
CreateRoundRectRgn
Polyline
DeleteDC
CreatePolygonRgn
PatBlt
GetTextColor
GetBkColor
Ellipse
CreateEllipticRgn
CombineRgn
GetTextExtentPoint32W
CreateDCW
CopyMetaFileW
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutW
TextOutW
MoveToEx
SetTextAlign
SetTextColor
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SetBkColor
SelectPalette

msimg32

AlphaBlend
TransparentBlt

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

uxtheme

DrawThemeParentBackground
DrawThemeText
OpenThemeData
CloseThemeData
DrawThemeBackground
IsAppThemed
GetThemeColor
GetCurrentThemeName
GetThemeSysColor
GetWindowTheme
GetThemePartSize
IsThemeBackgroundPartiallyTransparent

gdiplus

GdipCreateBitmapFromHBITMAP
GdipDeleteGraphics
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipSetInterpolationMode
GdipDrawImageRectI
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipDrawImageI
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateFromHDC
GdipDisposeImage

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 584KB - Virtual size: 583KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 228KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

abb38dcbda4889ef4c7127da8e8b3027

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

gdi32

msimg32

winspool.drv

uxtheme

gdiplus

imm32

winmm

Sections

.text Size: 2.0MB - Virtual size: 2.0MB

.rdata Size: 584KB - Virtual size: 583KB

.data Size: 36KB - Virtual size: 68KB

.pdata Size: 92KB - Virtual size: 91KB

_RDATA Size: 512B - Virtual size: 244B

.rsrc Size: 228KB - Virtual size: 232KB

.reloc Size: 60KB - Virtual size: 60KB

.text
Size: 2.0MB - Virtual size: 2.0MB

.rdata
Size: 584KB - Virtual size: 583KB

.data
Size: 36KB - Virtual size: 68KB

.pdata
Size: 92KB - Virtual size: 91KB

_RDATA
Size: 512B - Virtual size: 244B

.rsrc
Size: 228KB - Virtual size: 232KB

.reloc
Size: 60KB - Virtual size: 60KB