a6011aca92946ad68d208fa456731a8b3dfd254126827e8656aa75d8bb0926e3

Sharing

Copy URL Twitter E-mail

General

Target

a6011aca92946ad68d208fa456731a8b3dfd254126827e8656aa75d8bb0926e3
Size

1.8MB
MD5

4514453b3e5fb2f619ce40a040f3b024
SHA1

62d131d5ced51dbba3bd551304f209596451bc52
SHA256

a6011aca92946ad68d208fa456731a8b3dfd254126827e8656aa75d8bb0926e3
SHA512

b4dac73395d1a591e87248cd75746381c68027aed12458f7777fde8f656f7779442c05e8a87e857efba856377ca6c96ba65fd2d5e268755dd8a80019be038394
SSDEEP

24576:ECCJPSU0fj5OhdjG+dpUlvA1ypRaUnDkWJOAXlVcv:mCEqI18AWsADc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6011aca92946ad68d208fa456731a8b3dfd254126827e8656aa75d8bb0926e3

Files

a6011aca92946ad68d208fa456731a8b3dfd254126827e8656aa75d8bb0926e3
.exe windows:4 windows x86 arch:x86

ea294c38640a656a8d3295e6c2b16d61

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiW
GetFileAttributesW
GetFileTime
GlobalFlags
SizeofResource
LocalAlloc
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GetProcessVersion
FindResourceExW
GetCurrentDirectoryW
SetErrorMode
GetStartupInfoW
HeapFree
HeapAlloc
RtlUnwind
CreateThread
ExitThread
HeapReAlloc
RaiseException
GetTimeZoneInformation
SetStdHandle
GetFileType
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetStdHandle
GetStartupInfoA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetFullPathNameW
SetEndOfFile
FindResourceA
GlobalAddAtomA
GetProfileStringA
InterlockedExchange
UnlockFile
LockFile
SetFilePointer
DuplicateHandle
lstrcmpW
GlobalAlloc
lstrcmpA
lstrcmpiA
GetCurrentThread
SuspendThread
SetThreadPriority
VirtualProtect
SetLastError
lstrcpynW
GetModuleHandleA
LoadLibraryA
lstrcatW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
lstrcpyW
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceW
LoadResource
lstrlenA
InterlockedDecrement
InterlockedIncrement
TerminateProcess
FlushFileBuffers
lstrlenW
FormatMessageW
LocalFree
ExitProcess
MulDiv
OutputDebugStringA
CreateFileA
QueryDosDeviceW
GetLogicalDrives
GetDriveTypeA
GetVolumeInformationW
GetDriveTypeW
GetDiskFreeSpaceExW
FileTimeToLocalFileTime
GetShortPathNameW
GetSystemTime
WriteFile
ReadFile
PurgeComm
GetCommState
SetCommState
GetCommTimeouts
SetCommTimeouts
EscapeCommFunction
GetCommandLineW
SetThreadLocale
CreateMutexW
GetVersion
FindFirstFileA
GetModuleFileNameA
MoveFileW
MultiByteToWideChar
WideCharToMultiByte
SetFileAttributesW
DeleteFileW
RemoveDirectoryW
CreateDirectoryW
GetModuleHandleW
GetCurrentProcess
GetSystemDirectoryW
DeviceIoControl
ResumeThread
LoadLibraryW
GetProcAddress
FreeLibrary
GetVersionExW
SetEvent
OutputDebugStringW
CreateEventW
GetFileSize
FindFirstFileW
FindNextFileW
FindClose
GetFileAttributesExW
CreateProcessW
GetLastError
ResetEvent
WaitForSingleObject
GetLocalTime
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
Sleep
CreateFileW
CloseHandle
GetModuleFileNameW
GetPrivateProfileIntW
GetTickCount
EnterCriticalSection
LeaveCriticalSection
GetThreadLocale
DeleteCriticalSection
InitializeCriticalSection
GetPrivateProfileStringW
GetEnvironmentStrings
WritePrivateProfileStringW

user32

CheckDlgButton
UpdateWindow
SendDlgItemMessageW
SendDlgItemMessageA
MapWindowPoints
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
IsWindowVisible
GetTopWindow
IsChild
GetCapture
WinHelpW
GetClassInfoW
RegisterClassW
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthW
GetDlgCtrlID
GetKeyState
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
SetPropW
UnhookWindowsHookEx
GetPropW
CallWindowProcW
RemovePropW
DefWindowProcW
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongW
OffsetRect
IntersectRect
SystemParametersInfoW
GetWindowPlacement
GetWindowRect
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
LoadStringW
GetParent
GetLastActivePopup
IsWindowEnabled
IsDlgButtonChecked
FillRect
GrayStringW
DrawTextW
SendMessageW
EnableWindow
UnregisterClassW
GetWindowTextLengthA
HideCaret
ShowCaret
ExcludeUpdateRgn
GetWindowTextA
EqualRect
CopyRect
GetSysColor
RegisterWindowMessageW
BroadcastSystemMessageW
MessageBoxW
ExitWindowsEx
LoadBitmapW
IsWindow
GetDlgItemTextW
SetDlgItemTextW
PeekMessageW
DispatchMessageW
TranslateMessage
GetDesktopWindow
IsDialogMessageW
SetWindowTextW
MoveWindow
ShowWindow
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuW
GetDC
GetMenuState
GetMenuCheckMarkDimensions
GetWindow
GetWindowTextW
wsprintfW
UnregisterDeviceNotification
LoadImageW
RedrawWindow
RegisterDeviceNotificationW
GetWindowModuleFileNameW
GetSystemMenu
AppendMenuW
SetWindowPos
PostMessageW
IsIconic
DrawTextA
DrawFocusRect
GetClassInfoA
DefDlgProcA
DefWindowProcA
CharNextA
CallWindowProcA
RemovePropA
SetWindowsHookExA
GetWindowLongA
SendMessageA
IsWindowUnicode
GetClassNameA
SetWindowLongA
SetPropA
GetPropA
LoadIconW
SetTimer
InvalidateRect
KillTimer
DrawIcon
GetClientRect
GetSystemMetrics
PostThreadMessageW
SetParent
RegisterClipboardFormatW
LockWindowUpdate
GetDCEx
MessageBeep
GetNextDlgGroupItem
CopyAcceleratorTableW
TabbedTextOutW
CharNextW
SetCapture
SetRect
WindowFromPoint
ReleaseCapture
GetSysColorBrush
LoadCursorW
PtInRect
GetClassNameW
CharUpperW
SetWindowContextHelpId
SetCursor
ReleaseDC
DestroyMenu
IsZoomed
SetRectEmpty
GetMessageW
ValidateRect
GetCursorPos
InflateRect
MapDialogRect
GetAsyncKeyState
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GetWindowLongW
PostQuitMessage

gdi32

SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
SetBkColor
CreateRectRgn
SetMapMode
GetWindowExtEx
CreatePen
CreatePatternBrush
GetMapMode
SetRectRgn
CombineRgn
DPtoLP
GetTextMetricsW
EnumFontFamiliesExW
GetTextColor
GetBkColor
LPtoDP
SetTextColor
GetClipBox
GetStockObject
CreateDCW
GetDeviceCaps
DeleteDC
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
CreateCompatibleBitmap
BitBlt
GetTextExtentPoint32W
CreateSolidBrush
CreateCompatibleDC
SetBkMode
SelectObject
RestoreDC
SaveDC
CreateRectRgnIndirect
PatBlt
GetViewportExtEx
CreateBitmap
GetObjectW
DeleteObject
CreateDIBitmap
ExtTextOutA
GetTextExtentPointA
CreateFontIndirectW

comdlg32

GetOpenFileNameW
GetSaveFileNameW
GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegCreateKeyExW
LookupPrivilegeValueW
RegOpenKeyExW
AdjustTokenPrivileges
RegOpenKeyW
RegQueryValueExW
RegCloseKey
RegSetValueExW
RegFlushKey
OpenProcessToken

shell32

ShellExecuteExW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
SHGetSpecialFolderPathW
StrChrA
StrStrIW
StrStrIA

comctl32

DestroyPropertySheetPage
PropertySheetW
ImageList_Destroy
ord17
CreatePropertySheetPageW

oledlg

OleUIBusyW

ole32

OleUninitialize
OleInitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoFreeUnusedLibraries
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
CLSIDFromProgID
StringFromGUID2
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter

olepro32

ord253

oleaut32

SysStringLen
VariantTimeToSystemTime
SysAllocStringLen
SysFreeString
VariantChangeType
SysAllocString
VariantCopy
VariantClear

iphlpapi

GetAdaptersAddresses

wsock32

send
recv
WSAStartup
socket
WSACleanup
gethostname
htons
ioctlsocket
connect
closesocket

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

msimg32

TransparentBlt

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW
SetupDiGetDeviceRegistryPropertyW
SetupDiChangeState
SetupDiSetClassInstallParamsW
SetupDiEnumDeviceInfo

cfgmgr32

CM_Get_Parent
CM_Get_DevNode_Registry_PropertyW

Sections

.text
Size: 944KB - Virtual size: 943KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 724KB - Virtual size: 785KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ea294c38640a656a8d3295e6c2b16d61

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

iphlpapi

wsock32

version

msimg32

setupapi

cfgmgr32

Sections

.text Size: 944KB - Virtual size: 943KB

.rdata Size: 80KB - Virtual size: 78KB

.data Size: 724KB - Virtual size: 785KB

.tls Size: 4KB - Virtual size: 12B

.rsrc Size: 80KB - Virtual size: 76KB

.text
Size: 944KB - Virtual size: 943KB

.rdata
Size: 80KB - Virtual size: 78KB

.data
Size: 724KB - Virtual size: 785KB

.tls
Size: 4KB - Virtual size: 12B

.rsrc
Size: 80KB - Virtual size: 76KB