801bdf99d8f7c1a0809530b9181c2c41bf2261bdb612a7bbbbdd920d449dea93

Sharing

Copy URL Twitter E-mail

General

Target

801bdf99d8f7c1a0809530b9181c2c41bf2261bdb612a7bbbbdd920d449dea93
Size

5.9MB
MD5

7fe4cc0053630210708cbb785a3b7f4c
SHA1

ff72a087988ccaa61a24711a926489f93b063ac9
SHA256

801bdf99d8f7c1a0809530b9181c2c41bf2261bdb612a7bbbbdd920d449dea93
SHA512

c791c6d3552be27584b7ba58690b0b7e5027da35a9126fd3682d0c4c9eb9448fe77e414a3fd43d9ea4cad326c5d0f71bbc3fee8688740f4e9e94afa856c06525
SSDEEP

98304:e1TcTjOiaulCk0HgZmw80NcKeo5234899IAG2BUdgOG2Y+BwgIr+MfF3:71CeZF8vv9VG22ds2LBIrV3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
801bdf99d8f7c1a0809530b9181c2c41bf2261bdb612a7bbbbdd920d449dea93

Files

801bdf99d8f7c1a0809530b9181c2c41bf2261bdb612a7bbbbdd920d449dea93
.exe windows:5 windows x86 arch:x86

2ed3979d44e42fcdf9036fa4fa7e7558

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHSetValueW
SHGetValueW
PathFindFileNameW
PathAppendW
PathRemoveFileSpecW
PathRemoveBackslashW
PathCanonicalizeW
PathIsRootW
PathRemoveExtensionW
PathFileExistsW
PathFileExistsA
PathIsDirectoryA

advapi32

RegCloseKey
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExW
RegOpenKeyExW
RegisterEventSourceA
ReportEventA
DeregisterEventSource

kernel32

LoadResource
FindResourceW
FindResourceExW
GetModuleHandleW
GetCurrentProcess
GetCurrentProcessId
CreateProcessW
CreateFileW
WriteFile
GetTempPathW
GetFileAttributesW
FindFirstFileW
RemoveDirectoryW
SetFileAttributesW
FindNextFileW
FindClose
CopyFileW
GetDiskFreeSpaceExW
GetTickCount
GetSystemDirectoryW
MoveFileExW
DeleteFileW
InterlockedCompareExchange
CreateMutexW
GetLastError
GetCommandLineW
CreateEventW
GetNativeSystemInfo
GetCurrentThreadId
GetUserDefaultUILanguage
FreeResource
QueryPerformanceCounter
QueryPerformanceFrequency
ReadFile
SetFilePointer
SystemTimeToFileTime
CreateDirectoryW
GetCurrentDirectoryW
LocalFileTimeToFileTime
InterlockedIncrement
InterlockedDecrement
ExitProcess
lstrlenA
lstrlenW
InitializeCriticalSection
LeaveCriticalSection
LockResource
DeleteCriticalSection
OutputDebugStringA
Sleep
InitializeCriticalSectionAndSpinCount
GlobalMemoryStatus
GetVersion
GetModuleHandleA
SetEnvironmentVariableA
CompareStringW
SetEndOfFile
WriteConsoleW
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
SetConsoleCtrlHandler
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapCreate
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetLocaleInfoW
GetStdHandle
GetTimeZoneInformation
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
LCMapStringW
GetDateFormatA
GetTimeFormatA
RtlUnwind
GetStartupInfoW
HeapSetInformation
InterlockedExchange
DecodePointer
EncodePointer
RaiseException
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
SizeofResource
GetFileSizeEx
MultiByteToWideChar
WideCharToMultiByte
GetVersionExW
lstrcmpW
WaitForSingleObject
TerminateProcess
Process32NextW
OpenProcess
Process32FirstW
CreateToolhelp32Snapshot
GetModuleFileNameW
FreeLibrary
GetProcAddress
LoadLibraryW
GetComputerNameExW
CloseHandle
CreateThread
LoadLibraryA
FlushConsoleInputBuffer
ReadConsoleInputA
SetConsoleMode
EnterCriticalSection
GetSystemTimeAsFileTime
CreateFileA
CreateDirectoryA

user32

GetDesktopWindow
MessageBoxA
GetProcessWindowStation
GetUserObjectInformationW
GetMessageW
PostThreadMessageW
wsprintfW
FindWindowW
SendMessageW
PostQuitMessage
IsWindow
CreateWindowExW
SetFocus
SetWindowTextW
ShowWindow
MoveWindow
SetCursor
LoadCursorW
EnableWindow
MessageBoxW
GetClassInfoExW
RegisterClassExW
SetWindowLongW
HideCaret
GetFocus
ShowCaret
GetSysColor
CreateCaret
SetCaretPos
SystemParametersInfoW
GetDC
GetSystemMetrics
SetRectEmpty
SetTimer
KillTimer
DrawTextW
DrawFocusRect
IntersectRect
PostMessageW
ClientToScreen
SetWindowRgn
ScreenToClient
SetActiveWindow
LoadImageW
SetCapture
IsZoomed
GetKeyState
IsWindowEnabled
TranslateMessage
OffsetRect
BringWindowToTop
PeekMessageW
ReleaseDC
GetCursorPos
GetActiveWindow
ReleaseCapture
MapWindowPoints
UpdateWindow
CallWindowProcW
GetWindow
DispatchMessageW
GetParent
PtInRect
GetWindowRect
EndPaint
UpdateLayeredWindow
GetClientRect
BeginPaint
MonitorFromWindow
GetMonitorInfoW
SetWindowPos
DestroyWindow
InvalidateRect
DefWindowProcW
GetWindowLongW

gdi32

SetBkColor
GetObjectW
CreateFontIndirectW
GetDeviceCaps
SetTextColor
SetBkMode
SelectClipRgn
CreateRectRgnIndirect
ExtTextOutW
GetClipBox
ExtSelectClipRgn
GetTextColor
BitBlt
SetRectRgn
CombineRgn
CreateCompatibleBitmap
OffsetRgn
CreateRectRgn
DeleteDC
DeleteObject
SelectObject
CreateDIBSection
CreateCompatibleDC

shell32

SHGetSpecialFolderPathW
ShellExecuteW
SHGetPathFromIDListW
SHGetMalloc
ord165
SHBrowseForFolderW

ole32

CoCreateInstance
CoInitialize
OleInitialize
CoUninitialize
CoCreateGuid

oleaut32

SysFreeString

comctl32

ord17
_TrackMouseEvent

msimg32

GradientFill
AlphaBlend

riched20

ord4

winhttp

WinHttpCloseHandle
WinHttpConnect
WinHttpSendRequest
WinHttpOpen
WinHttpQueryHeaders
WinHttpReceiveResponse
WinHttpAddRequestHeaders
WinHttpReadData
WinHttpCrackUrl
WinHttpOpenRequest
WinHttpSetTimeouts
WinHttpQueryDataAvailable

Sections

.text
Size: 890KB - Virtual size: 889KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 269KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23.1MB - Virtual size: 23.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2ed3979d44e42fcdf9036fa4fa7e7558

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

advapi32

kernel32

user32

gdi32

shell32

ole32

oleaut32

comctl32

msimg32

riched20

winhttp

Sections

.text Size: 890KB - Virtual size: 889KB

.rdata Size: 269KB - Virtual size: 269KB

.data Size: 14KB - Virtual size: 33KB

.rsrc Size: 23.1MB - Virtual size: 23.1MB

.reloc Size: 116KB - Virtual size: 115KB

.text
Size: 890KB - Virtual size: 889KB

.rdata
Size: 269KB - Virtual size: 269KB

.data
Size: 14KB - Virtual size: 33KB

.rsrc
Size: 23.1MB - Virtual size: 23.1MB

.reloc
Size: 116KB - Virtual size: 115KB