c0e1d2884a9ac1f9ae09bc3255a5ad34a3eb15b66ffc18338114d91bc87caa4f

Sharing

Copy URL Twitter E-mail

General

Target

c0e1d2884a9ac1f9ae09bc3255a5ad34a3eb15b66ffc18338114d91bc87caa4f
Size

2.8MB
MD5

b4819643530a7328c297774b0ff0dd54
SHA1

fb0a2abbcf847e506cc75a7cf17f005b80678aa5
SHA256

c0e1d2884a9ac1f9ae09bc3255a5ad34a3eb15b66ffc18338114d91bc87caa4f
SHA512

a57d1962432977fae8ec66712657c07691aedd16df0fd28361085a7784f8132e9f426576f5eb9072904a519662ff152c21396da9b9db1e7333b57b1fe99511ef
SSDEEP

49152:/yeHJg3MGYdo123BcUz/58JHZr1LY7BEzpP7isljirM1LvteLOFyXAxZkKtN/RlU:6eHJMYd623BcC/58J5r1LgBEzgsljiri

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0e1d2884a9ac1f9ae09bc3255a5ad34a3eb15b66ffc18338114d91bc87caa4f

Files

c0e1d2884a9ac1f9ae09bc3255a5ad34a3eb15b66ffc18338114d91bc87caa4f
.exe windows:6 windows x86 arch:x86

2db5104718a05785ac3c7b8ba318a067

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToLocalFileTime
FindNextFileA
SystemTimeToTzSpecificLocalTime
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalAlloc
LocalReAlloc
GlobalFlags
GetLocaleInfoW
GetUserDefaultUILanguage
VirtualProtect
GetOEMCP
GetCPInfo
GetACP
FlushFileBuffers
LockFile
SetEndOfFile
UnlockFile
GetVolumeInformationA
DuplicateHandle
GetCurrentProcess
lstrcmpiA
GetFileAttributesExA
GetFileSizeEx
lstrcpyA
FindResourceExW
GetWindowsDirectoryA
SetErrorMode
VerSetConditionMask
VerifyVersionInfoA
GetTickCount64
GetProfileIntA
GetTempPathA
SearchPathA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
RaiseException
LCMapStringEx
GetStringTypeW
RtlUnwind
GetSystemInfo
VirtualQuery
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
GetFullPathNameW
HeapQueryInformation
QueryPerformanceFrequency
SetStdHandle
GetFileType
GetStdHandle
CompareStringW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
ReadConsoleW
GetDriveTypeW
GetTimeZoneInformation
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetCurrentDirectoryW
CreateFileW
WriteConsoleW
GetCurrentProcessId
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpA
GetModuleFileNameA
GetVersionExA
GetCurrentThread
ResumeThread
SetThreadPriority
WaitForSingleObject
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
lstrcmpW
GlobalDeleteAtom
LoadLibraryW
LoadLibraryExW
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
OutputDebugStringA
CopyFileA
FormatMessageA
MulDiv
LocalFree
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalAlloc
SetLastError
GetUserDefaultLCID
GetTempFileNameA
GetFullPathNameA
VirtualAlloc
GetFileTime
MultiByteToWideChar
FindFirstFileA
FindClose
FileTimeToSystemTime
UnmapViewOfFile
GetFileSize
SystemTimeToFileTime
SetFileTime
SetFilePointer
ReadFile
LocalFileTimeToFileTime
GetFileAttributesA
CreateDirectoryA
GetCurrentDirectoryA
Sleep
WideCharToMultiByte
FindResourceA
LoadLibraryA
FindResourceW
SizeofResource
LockResource
LoadResource
GetProcAddress
GetModuleHandleA
CreateThread
ExitProcess
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
GetLastError
CloseHandle
DecodePointer
WriteFile
DeleteFileA
GetSystemDefaultUILanguage
CreateFileA

user32

MapDialogRect
SetTimer
KillTimer
CharUpperA
LoadAcceleratorsW
LoadMenuW
SetCapture
DrawIcon
SetWindowRgn
WindowFromPoint
PostThreadMessageA
CopyAcceleratorTableA
CreateMenu
GetKeyNameTextA
MapVirtualKeyA
UnionRect
LockWindowUpdate
TrackMouseEvent
LoadImageW
GetMenuDefaultItem
WaitMessage
IsClipboardFormatAvailable
GetNextDlgGroupItem
DrawFocusRect
DrawIconEx
GetIconInfo
MessageBeep
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
SetLayeredWindowAttributes
EnumDisplayMonitors
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateA
SetClassLongA
DrawEdge
DrawFrameControl
SetCursorPos
CopyIcon
FrameRect
RegisterClipboardFormatA
UpdateLayeredWindow
MonitorFromPoint
GetComboBoxInfo
GetKeyboardLayout
IsCharLowerA
MapVirtualKeyExA
GetKeyboardState
ToAsciiEx
CreateAcceleratorTableA
DestroyAcceleratorTable
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuA
CharUpperBuffA
GetUpdateRect
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
SubtractRect
GetWindowRgn
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
ReleaseCapture
BringWindowToTop
DestroyCursor
LoadCursorW
LoadCursorA
OffsetRect
SetRect
InvalidateRect
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
SetRectEmpty
ReleaseDC
GetDC
GetWindowThreadProcessId
SetCursor
ShowOwnedPopups
PostQuitMessage
GetCursorPos
TranslateMessage
GetMessageA
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
IsDialogMessageA
SetWindowTextA
IsWindowEnabled
GetAsyncKeyState
CheckDlgButton
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconW
LoadIconA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameA
GetClassLongA
SetWindowLongA
GetWindowLongA
PtInRect
EqualRect
CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
MessageBoxA
AdjustWindowRectEx
GetWindowRect
GetClientRect
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
SetFocus
GetDlgCtrlID
GetDlgItem
IsIconic
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsMenu
IsWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
PostMessageA
GetMessageTime
GetMessagePos
PeekMessageA
DispatchMessageA
RegisterWindowMessageA
LoadBitmapW
GetParent
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
SendMessageA
RemoveMenu
AppendMenuA
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringA
UnregisterClassA
EnableWindow
UpdateWindow
FillRect
wsprintfA
GetDesktopWindow
CopyImage
InflateRect
GetMenuItemInfoA
RealChildWindowFromPoint
GetSysColorBrush
GetSystemMetrics
IsZoomed
SetParent
SystemParametersInfoA
IsRectEmpty
DeleteMenu
GetSystemMenu
ReuseDDElParam
UnpackDDElParam
LoadImageA
DestroyIcon
IntersectRect
InsertMenuItemA
DestroyMenu
SendDlgItemMessageA
CreatePopupMenu
ClientToScreen

gdi32

SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
DPtoLP
GetViewportOrgEx
PatBlt
Rectangle
GetTextExtentPoint32A
GetTextMetricsA
CombineRgn
CreateRectRgnIndirect
SetRectRgn
CreateEllipticRgn
CreateDCA
GetDeviceCaps
CreateBitmap
SetBkColor
SetTextColor
GetObjectA
CreateCompatibleBitmap
CreateCompatibleDC
CreatePen
TextOutA
Ellipse
CreateFontIndirectA
BitBlt
CreateHatchBrush
CreatePatternBrush
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
ExtTextOutA
MoveToEx
RoundRect
SetPolyFillMode
SetROP2
CreateDIBSection
LPtoDP
GetBkColor
CopyMetaFileA
SetPixelV
GetTextColor
GetWindowOrgEx
GetTextFaceA
EnumFontFamiliesExA
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
SetPixel
StretchBlt
SetDIBColorTable
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
GetRgnBox
OffsetRgn
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetTextAlign

msimg32

AlphaBlend
TransparentBlt

shlwapi

PathRemoveFileSpecW
PathStripToRootA
PathIsUNCA
PathFindFileNameA
PathFindExtensionA
StrFormatKBSizeA

uxtheme

GetWindowTheme
GetCurrentThemeName
GetThemeColor
IsAppThemed
GetThemePartSize
GetThemeSysColor
OpenThemeData
DrawThemeText
DrawThemeParentBackground
IsThemeBackgroundPartiallyTransparent
DrawThemeBackground
CloseThemeData

gdiplus

GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipDrawImageI
GdipDeleteGraphics
GdipDrawImageRectI
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipSetInterpolationMode
GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegEnumKeyA
RegQueryValueA
RegEnumValueA
RegEnumKeyExA

shell32

SHGetPathFromIDListA
DragFinish
DragQueryFileA
SHGetSpecialFolderLocation
SHGetDesktopFolder
ShellExecuteA
SHBrowseForFolderA
SHAppBarMessage
SHGetFileInfoA

ole32

CoLockObjectExternal
OleLockRunning
DoDragDrop
RegisterDragDrop
RevokeDragDrop
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
CoTaskMemAlloc
CoTaskMemFree
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoInitializeEx
CreateStreamOnHGlobal
CoDisconnectObject
CoInitialize
CoCreateInstance
CoCreateGuid
CoUninitialize
ReleaseStgMedium
OleDuplicateData

oleaut32

VariantClear
VariantChangeType
LoadTypeLi
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantInit
VariantCopy
SysAllocStringLen
SysFreeString
SysAllocStringByteLen
VarBstrFromDate
SysAllocString

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 320KB - Virtual size: 319KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 810KB - Virtual size: 810KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2db5104718a05785ac3c7b8ba318a067

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

shlwapi

uxtheme

gdiplus

oleacc

imm32

winmm

winspool.drv

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 320KB - Virtual size: 319KB

.data Size: 22KB - Virtual size: 39KB

.rsrc Size: 810KB - Virtual size: 810KB

.reloc Size: 135KB - Virtual size: 135KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 320KB - Virtual size: 319KB

.data
Size: 22KB - Virtual size: 39KB

.rsrc
Size: 810KB - Virtual size: 810KB

.reloc
Size: 135KB - Virtual size: 135KB