c38fa21f6900953ac4929e5e1b59b5840994a245d169c8ebcb4feb03c51c69cb

Sharing

Copy URL Twitter E-mail

General

Target

c38fa21f6900953ac4929e5e1b59b5840994a245d169c8ebcb4feb03c51c69cb
Size

1.0MB
MD5

c15391e1d4f3484b3f38cbfbd6a939ad
SHA1

88210e60ffb4a6d39916662dd99dd5b4106e80fa
SHA256

c38fa21f6900953ac4929e5e1b59b5840994a245d169c8ebcb4feb03c51c69cb
SHA512

d0431ec8ad50ca264d30680be51615b731d2ead430b9bbd7fe510c412cc9fa6f9bdd8b7946a83309a32182e2401010c9e2fd62e0755929cd7bb9f08622970e47
SSDEEP

24576:GqbgIKy8wXqKhBft8F2WzMAngWHdrBQCuDkQxQ:jhKypXb3l8FtXrBQCS2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c38fa21f6900953ac4929e5e1b59b5840994a245d169c8ebcb4feb03c51c69cb

Files

c38fa21f6900953ac4929e5e1b59b5840994a245d169c8ebcb4feb03c51c69cb
.exe windows:4 windows x86 arch:x86

b9c74d6f8d5959a43301f1c50cebb622

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx
ImageList_DragMove
ImageList_EndDrag
ImageList_GetImageCount
ImageList_BeginDrag
ImageList_Remove
_TrackMouseEvent
ImageList_LoadImageW
FlatSB_SetScrollProp
ImageList_DragLeave
ImageList_DragEnter
ImageList_Draw
ImageList_DragShowNolock
CreatePropertySheetPageW
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_GetIconSize
ImageList_Destroy
PropertySheetW
DestroyPropertySheetPage
ImageList_Create
ord8
ImageList_AddMasked

winmm

waveOutPause
waveOutGetVolume
waveOutGetPosition
waveOutRestart
waveOutReset
waveOutPrepareHeader
waveOutOpen
waveOutGetDevCapsW
waveOutWrite
waveOutClose
waveOutGetNumDevs
waveOutSetVolume
waveOutUnprepareHeader

wininet

InternetConnectW
InternetReadFileExA
InternetGetCookieW
InternetOpenW
InternetCrackUrlW
InternetCloseHandle
HttpOpenRequestW
HttpQueryInfoW
InternetSetOptionW
HttpSendRequestW
InternetSetStatusCallbackW
InternetReadFile

msvcrt

__wgetmainargs
_wcmdln
exit
_itoa
_stricmp
_strnicmp
_wcsupr
strstr
_itow
_initterm
_ultoa
_strlwr
strncpy
_atoi64
isalpha
isalnum
isspace
strncmp
strcpy
log10
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_mbsupr
_mbschr
fabs
wcspbrk
swprintf
sprintf
_mbscmp
_wcsdup
srand
rand
log
pow
isleadbyte
iswalnum
calloc
labs
swscanf
_mbsinc
floor
atoi
strchr
iswspace
strcmp
wcsncpy
_wtoi
memcmp
_mbsicmp
abs
_wcslwr
sscanf
vsprintf
_mbslwr
_mbsstr
_wcsnicmp
strrchr
wcsstr
??2@YAPAXI@Z
vswprintf
wcsncmp
_purecall
_beginthreadex
_wcsicmp
wcscpy
wcscmp
realloc
??3@YAXPAX@Z
memset
wcsrchr
wcslen
strlen
malloc
free
memmove
wcscat
wcschr
memcpy
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
?terminate@@YAXXZ
_except_handler3
atof
tan
towupper
sin
_clearfp
_controlfp
cos
__CxxFrameHandler
sqrt
_CxxThrowException

kernel32

GetTempFileNameW
lstrlenA
lstrcpyA
lstrcatA
QueryPerformanceCounter
GetVersionExA
DeviceIoControl
GetCurrentThread
SearchPathW
GetVolumeInformationW
SetEndOfFile
GetSystemTimeAsFileTime
GetFileTime
CreateFileA
CreateFileMappingA
SetFileTime
GetFileAttributesA
GetVersion
GetStartupInfoW
GetLocaleInfoA
FindResourceW
LoadResource
InterlockedIncrement
InterlockedDecrement
CreateDirectoryW
InitializeCriticalSection
WideCharToMultiByte
SizeofResource
GetVersionExW
GetFileAttributesW
GetModuleFileNameW
GetACP
lstrlenW
RaiseException
InterlockedExchange
GetLastError
GetThreadLocale
LockResource
DeleteCriticalSection
HeapAlloc
GetCurrentProcess
HeapFree
WaitForSingleObject
SetEvent
GetTickCount
VirtualFree
GetProcessHeap
TlsSetValue
TerminateThread
LeaveCriticalSection
MulDiv
FlushInstructionCache
VirtualAlloc
EnterCriticalSection
ResetEvent
CreateEventW
GetSystemInfo
GetCurrentThreadId
CloseHandle
DeleteFileW
SuspendThread
ResumeThread
ExitProcess
TlsGetValue
FreeLibrary
SetUnhandledExceptionFilter
GetModuleHandleW
VirtualQueryEx
LoadLibraryW
LCMapStringW
GetProcAddress
GetModuleFileNameA
lstrcmpiW
ReadDirectoryChangesW
CreateFileW
GetOverlappedResult
WaitForMultipleObjects
GetFullPathNameW
GetEnvironmentVariableW
FindFirstFileW
SetEnvironmentVariableW
IsBadWritePtr
SetLastError
FindClose
lstrcatW
FindNextFileW
lstrcpyW
lstrcpynW
HeapReAlloc
GetFileSize
SetFilePointer
FreeResource
MapViewOfFile
UnmapViewOfFile
WriteFile
GetCPInfoExW
EnumSystemCodePagesW
CreateFileMappingW
EnumResourceLanguagesW
SetFileAttributesW
ReadFile
CreateThread
lstrcmpW
GlobalLock
IsBadReadPtr
GlobalAlloc
Sleep
GlobalUnlock
MoveFileW
CreateProcessW
LoadLibraryExW
CopyFileW
SetThreadPriority
GetLocalTime
GetCurrentProcessId
SetCurrentDirectoryW
MultiByteToWideChar
GetDriveTypeW
GetTempPathW
GlobalFree
DosDateTimeToFileTime
InterlockedExchangeAdd
CompareFileTime
InterlockedCompareExchange
GetCommandLineA
TlsAlloc
GetWindowsDirectoryW
TlsFree
SystemTimeToFileTime
FormatMessageW
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalFree

user32

SetClassLongW
BringWindowToTop
MessageBoxA
IntersectRect
CheckMenuRadioItem
GetMenuItemRect
GetForegroundWindow
LockWindowUpdate
GetIconInfo
CharLowerW
EnumWindows
GetClassLongW
DrawEdge
ExitWindowsEx
WindowFromPoint
CallNextHookEx
SetForegroundWindow
DrawIconEx
GetMenuItemID
IsIconic
GetWindowDC
PostQuitMessage
OpenIcon
IsMenu
GetSystemMenu
InvertRect
RegisterClipboardFormatW
InsertMenuItemW
GetMenuStringW
CheckRadioButton
GetKeyNameTextW
MapVirtualKeyW
OemToCharBuffW
CharNextA
GetSysColorBrush
GetDlgItemTextW
EndPaint
ClientToScreen
SetCursor
GetWindowTextLengthW
ScreenToClient
CharNextW
TrackPopupMenu
FillRect
SetCapture
DialogBoxIndirectParamW
GetFocus
DialogBoxParamW
CreateCursor
MessageBeep
IsWindowEnabled
SetFocus
BeginPaint
FrameRect
GetCapture
DrawFocusRect
LoadIconW
TrackPopupMenuEx
AppendMenuW
GetWindowTextW
DrawStateW
EndDialog
SendDlgItemMessageW
GetDesktopWindow
GetMenuItemInfoW
LoadStringW
CheckDlgButton
CreatePopupMenu
IsDlgButtonChecked
SetMenuDefaultItem
GetCursorPos
ReleaseCapture
UpdateWindow
SetWindowTextW
GetWindow
SetWindowRgn
GetSubMenu
DeleteMenu
GetParent
LoadCursorW
GetClassInfoExW
GetDC
RegisterClassExW
OffsetRect
UnionRect
LoadMenuW
ReleaseDC
GetActiveWindow
GetMenuItemCount
InsertMenuW
PostThreadMessageW
RegisterHotKey
EnableWindow
DestroyMenu
GetDlgCtrlID
FindWindowW
CallWindowProcW
DefWindowProcW
DestroyWindow
GetMessageA
GetWindowRect
GetMessageW
PostMessageW
DrawTextW
MsgWaitForMultipleObjects
GetClientRect
WindowFromDC
FindWindowExW
ShowScrollBar
SetWindowsHookExW
UnhookWindowsHookEx
SetMenuItemInfoW
GetMessagePos
CloseClipboard
TranslateAcceleratorW
GetDlgItemInt
DestroyAcceleratorTable
SetActiveWindow
IsChild
InvalidateRgn
SetParent
PtInRect
CreateAcceleratorTableW
DestroyIcon
UnregisterHotKey
GetSystemMetrics
SystemParametersInfoW
CheckMenuItem
SetRect
SetRectEmpty
UnregisterClassW
LoadImageW
RegisterWindowMessageW
DispatchMessageW
MapWindowPoints
SendMessageW
SetDlgItemTextW
IsWindowVisible
MessageBoxW
DispatchMessageA
CreateWindowExW
IsWindow
CreateDialogParamW
LoadBitmapW
ShowWindow
SetDlgItemInt
IsDialogMessageW
GetClassNameW
EnableMenuItem
EmptyClipboard
GetWindowRgn
OpenClipboard
DeferWindowPos
BeginDeferWindowPos
SetClipboardData
EndDeferWindowPos
DrawFrameControl
CopyRect
GetWindowThreadProcessId
MoveWindow
GetKeyState
DrawTextA
ModifyMenuW
GetSysColor
DestroyCursor
SetWindowPos
RedrawWindow
SetWindowLongW
GetDlgItem
IsWindowUnicode
PeekMessageW
GetWindowLongW
InvalidateRect
InflateRect
TranslateMessage
wsprintfW
KillTimer
IsRectEmpty
AdjustWindowRectEx
SetTimer

gdi32

StretchDIBits
RealizePalette
ExtCreateRegion
GetDIBits
SetDIBitsToDevice
RestoreDC
GetStockObject
IntersectClipRect
SelectPalette
OffsetWindowOrgEx
SaveDC
DPtoLP
SetPixel
GetDeviceCaps
CreateFontIndirectW
LPtoDP
SetWindowOrgEx
CreatePen
Polygon
GetPixel
CreateDIBSection
LineTo
MoveToEx
CreateSolidBrush
SetStretchBltMode
PtInRegion
CreateBitmap
StretchBlt
CreatePatternBrush
CreateRoundRectRgn
OffsetRgn
CombineRgn
CreateRectRgnIndirect
GetRegionData
ExcludeClipRect
SetBrushOrgEx
FrameRgn
PatBlt
GetWindowOrgEx
GetTextMetricsW
GetObjectW
BitBlt
SetTextColor
GetCurrentObject
SetBkColor
SetBkMode
DeleteObject
SelectObject
SelectClipRgn
CreateCompatibleDC
CreateCompatibleBitmap
ExtTextOutW
CreateRectRgn
GetClipBox
DeleteDC

comdlg32

GetOpenFileNameW
ChooseFontW
ChooseColorW
GetSaveFileNameW

advapi32

RegOpenKeyExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumValueW
RegEnumKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegQueryValueExW

shell32

ord155
SHGetPathFromIDListW
SHGetMalloc
SHGetFileInfoW
SHGetSpecialFolderLocation
SHAddToRecentDocs
SHBrowseForFolderW
SHGetDesktopFolder
SHChangeNotify
Shell_NotifyIconW
DragQueryFileW
SHFileOperationW
ShellExecuteW
SHGetSpecialFolderPathW
ExtractIconExW
ShellExecuteA

ole32

OleUninitialize
CoGetClassObject
RegisterDragDrop
ReleaseStgMedium
DoDragDrop
OleDuplicateData
OleSetClipboard
OleInitialize
CoTaskMemRealloc
RevokeDragDrop
CoTaskMemAlloc
CoInitialize
CoUninitialize
CoTaskMemFree
StringFromGUID2
CreateStreamOnHGlobal
CLSIDFromString
OleGetClipboard
OleLockRunning
StringFromCLSID
CoCreateInstance
ProgIDFromCLSID
CoFreeUnusedLibraries
CLSIDFromProgID

oleaut32

VarUI4FromStr
LoadRegTypeLi
SysStringByteLen
OleCreateFontIndirect
SysAllocStringLen
VariantInit
LoadTypeLi
VariantClear
SysStringLen
DispCallFunc
SysAllocString
VarDecFromStr
VarDecCmp
VarR8FromStr
VarI4FromStr
VarDateFromStr
OleLoadPicture
SysFreeString

ttpcomm

ord91
ord92
ord206
ord202
ord205
ord204
ord101
ord80
ord81
ord82
ord105
ord102
ord90
ord4
ord93
ord106
ord59
ord73
ord61
ord58
ord50
ord71
ord64
ord76
ord55
ord67
ord56
ord72
ord69
ord74
ord57
ord66
ord65
ord79
ord70
ord68
ord54
ord53
ord62
ord60
ord75
ord78
ord51
ord13
ord52
ord11
ord14
ord12
ord10
ord401
ord400
ord302
ord201
ord3
ord200
ord1
ord104
ord103
ord100

msvfw32

DrawDibClose
DrawDibOpen
DrawDibDraw

msacm32

acmStreamUnprepareHeader
acmStreamClose
acmStreamPrepareHeader
acmStreamConvert
acmStreamOpen
acmStreamReset
acmStreamSize

Exports

Exports

CreateSoundBuffer
CreateStdContent
CreateStreamOnFile
CreateStreamOnInet
GetSoundCodecName
_set_security_error_handler

Sections

.text
Size: 828KB - Virtual size: 827KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 82KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b9c74d6f8d5959a43301f1c50cebb622

Headers

File Characteristics

Imports

comctl32

winmm

wininet

msvcrt

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

ttpcomm

msvfw32

msacm32

Exports

Exports

Sections

.text Size: 828KB - Virtual size: 827KB

.rdata Size: 114KB - Virtual size: 114KB

.data Size: 20KB - Virtual size: 26KB

.rsrc Size: 82KB - Virtual size: 103KB

.text
Size: 828KB - Virtual size: 827KB

.rdata
Size: 114KB - Virtual size: 114KB

.data
Size: 20KB - Virtual size: 26KB

.rsrc
Size: 82KB - Virtual size: 103KB