b37d1f5577c25e21fbe8fcf044b3f22d8e027287adf58007014ac170c768a12f

Sharing

Copy URL Twitter E-mail

General

Target

b37d1f5577c25e21fbe8fcf044b3f22d8e027287adf58007014ac170c768a12f
Size

1.5MB
MD5

6c18815e3e52777fec76bf8417941ec1
SHA1

39cde6fb800189e461b741c35bbf6f829f8944c2
SHA256

b37d1f5577c25e21fbe8fcf044b3f22d8e027287adf58007014ac170c768a12f
SHA512

0dfc7082322ea457738adcda4a7a59f1e8936334f1642bf9a4e813f6086a3329e7db696cce2b8a9d3e373b2042297f8d683ae7789c4504ff91187b6507b2dbaf
SSDEEP

49152:hqn4Lveb29o3YX2wPjDdQCzdY57w/n83O9:1Lv+3YlPj9zdYpUr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b37d1f5577c25e21fbe8fcf044b3f22d8e027287adf58007014ac170c768a12f

Files

b37d1f5577c25e21fbe8fcf044b3f22d8e027287adf58007014ac170c768a12f
.exe windows:4 windows x86 arch:x86

829939ec470ba097956cb1c2bb1f5124

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

commdll

ClxCommInit

kernel32

CreateDirectoryA
RaiseException
GetTimeZoneInformation
GetSystemTime
GetLocalTime
SetEnvironmentVariableA
RtlUnwind
ExitThread
SetStdHandle
GetFileType
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
SetUnhandledExceptionFilter
GetCurrentDirectoryA
FindResourceExA
SetErrorMode
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsBadReadPtr
IsBadCodePtr
HeapDestroy
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
TlsAlloc
GlobalFlags
SystemTimeToFileTime
LocalFileTimeToFileTime
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFileAttributesA
ReleaseMutex
VirtualFree
HeapCreate
CreateMutexA
_lclose
_lcreat
lstrcatA
lstrlenA
WinExec
lstrcpyA
GetWindowsDirectoryA
CreateThread
GetTickCount
WaitForSingleObject
GetExitCodeThread
GetTempPathA
GetTempFileNameA
MultiByteToWideChar
WideCharToMultiByte
CreateFileA
DeviceIoControl
CloseHandle
FreeLibrary
LoadLibraryA
GetProcAddress
GetSystemInfo
GetLogicalDriveStringsA
GetDriveTypeA
GetVersionExA
_llseek
_lwrite
GetVolumeInformationA
DeleteFileA
MoveFileA
OutputDebugStringA
GlobalAlloc
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
GetModuleFileNameA
InterlockedExchange
GetStringTypeExA
GetShortPathNameA
GetThreadLocale
LockFile
GetFullPathNameA
UnlockFile
DuplicateHandle
FlushFileBuffers
GetCurrentProcess
FileTimeToSystemTime
FileTimeToLocalFileTime
lstrcpynA
InterlockedIncrement
SetLastError
InterlockedDecrement
GlobalAddAtomA
GetCurrentThreadId
GlobalGetAtomNameA
GetModuleHandleA
GlobalFindAtomA
GlobalDeleteAtom
CreateFileMappingA
FlushViewOfFile
UnmapViewOfFile
GlobalMemoryStatus
MapViewOfFile
GetFileSize
QueryPerformanceCounter
GetVersion
QueryPerformanceFrequency
SetFilePointer
SetEndOfFile
HeapSize
ReadFile
HeapReAlloc
HeapAlloc
HeapFree
GetProcessHeap
GetCurrentThread
SetCurrentDirectoryA
FormatMessageA
FindFirstFileA
InterlockedExchangeAdd
CopyFileA
WritePrivateProfileSectionA
FindNextFileA
FindClose
GetSystemDefaultLangID
TerminateProcess
GetLastError
LocalAlloc
GetCurrentProcessId
GetPrivateProfileIntA
LocalFree
LocalLock
LocalUnlock
MulDiv
GetSystemDirectoryA
GetACP
WritePrivateProfileStringA
GetCommandLineA
GetPrivateProfileStringA
lstrcmpiA
GetStartupInfoA
LoadResource
WriteFile
FindResourceA
ExitProcess
SizeofResource
LockResource
Sleep
OpenProcess
CreateProcessA
EnterCriticalSection
lstrcmpA
LeaveCriticalSection
_lopen
DeleteCriticalSection
InitializeCriticalSection
CompareStringA
_lread
CompareStringW
GetEnvironmentVariableA

user32

AppendMenuA
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
DeleteMenu
TranslateAcceleratorA
LoadAcceleratorsA
WaitMessage
CharNextA
CharUpperA
MapDialogRect
GetAsyncKeyState
IsZoomed
DestroyMenu
GetMessageA
ValidateRect
GrayStringA
EndPaint
BeginPaint
wvsprintfA
GetMenuCheckMarkDimensions
GetMenuState
SetMenuItemBitmaps
ShowWindow
IsDlgButtonChecked
SetDlgItemTextA
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SendDlgItemMessageA
MapWindowPoints
SetFocus
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
WinHelpA
GetWindowTextLengthA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SystemParametersInfoA
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
GetDlgItem
IsWindowEnabled
EnumWindows
RegisterClassA
DrawIconEx
WindowFromPoint
EnableScrollBar
GetFocus
DrawFrameControl
GetCaretPos
DeferWindowPos
GetSysColorBrush
GetDlgCtrlID
IsDialogMessageA
wsprintfA
LoadStringA
UnionRect
GetWindowDC
DlgDirListA
GetNextDlgGroupItem
InsertMenuA
GetMenuItemID
GetMenuItemCount
ModifyMenuA
GetMenuStringA
GetKeyboardState
GetSystemMenu
SetWindowPos
GetClassNameA
SetForegroundWindow
SetActiveWindow
IsWindowVisible
FlashWindow
SetMenu
GetMenu
GetWindowThreadProcessId
FindWindowA
GetClassInfoA
DefWindowProcA
SetParent
FrameRect
UnregisterHotKey
RegisterHotKey
GetKeyNameTextA
LoadImageA
CopyIcon
GetMessagePos
PeekMessageA
TranslateMessage
DispatchMessageA
CreateWindowExA
SetWindowTextA
GetWindowLongA
SetWindowLongA
MoveWindow
DestroyCursor
DestroyWindow
AdjustWindowRectEx
DestroyIcon
EqualRect
EnableMenuItem
CheckMenuItem
TrackPopupMenu
SetRectEmpty
GetSysColor
MessageBoxA
MessageBeep
PostQuitMessage
ShowOwnedPopups
SetWindowContextHelpId
RegisterClipboardFormatA
GetDCEx
LockWindowUpdate
CopyAcceleratorTableA
GetTabbedTextExtentA
InvertRect
RegisterWindowMessageA
IsIconic
GetSystemMetrics
DrawIcon
LoadIconA
GetKeyState
PostMessageA
GetCursorPos
ScreenToClient
KillTimer
DrawTextA
IsWindow
GetDC
ReleaseDC
GetWindowRect
CopyRect
InflateRect
IntersectRect
InvalidateRect
IsRectEmpty
LoadMenuA
RemoveMenu
GetSubMenu
ClientToScreen
PtInRect
GetCapture
OffsetRect
LoadCursorA
SetCursor
ReleaseCapture
SetCapture
DrawFocusRect
GetDesktopWindow
SetRect
FillRect
UpdateWindow
GetClientRect
LoadBitmapA
GetParent
SetTimer
EnableWindow
GetWindow
SendMessageA
PostThreadMessageA
ToAscii
RedrawWindow
SetWindowRgn
GetWindowTextA
TabbedTextOutA
UnregisterClassA

gdi32

BitBlt
StretchBlt
GetDeviceCaps
GetObjectA
DeleteDC
CreateRectRgn
CombineRgn
SetDIBits
RealizePalette
GetPixel
CreatePalette
RectVisible
SelectPalette
TextOutA
IntersectClipRect
RestoreDC
GetTextExtentPointA
FrameRgn
SaveDC
GetClipBox
CreatePolygonRgn
SetPolyFillMode
SetROP2
StartDocA
SetViewportOrgEx
OffsetViewportOrgEx
SetStretchBltMode
SetWindowOrgEx
ScaleViewportExtEx
SelectClipRgn
ExcludeClipRect
ScaleWindowExtEx
MoveToEx
LineTo
SetTextAlign
GetCurrentPositionEx
GetMapMode
PtVisible
CreatePatternBrush
Escape
AbortDoc
ExtTextOutA
EndPage
StartPage
EndDoc
CreateDCA
SetRectRgn
SetAbortProc
StretchDIBits
GetCharWidthA
GetBkColor
GetNearestColor
GetStretchBltMode
EnumFontFamiliesExA
GetTextAlign
GetBkMode
GetPolyFillMode
GetTextFaceA
GetWindowOrgEx
GetROP2
SetMapMode
SetViewportExtEx
GetWindowExtEx
GetViewportExtEx
CreateFontA
CreateRoundRectRgn
SetWindowExtEx
SetPixel
SetBkColor
GetTextColor
DeleteObject
Ellipse
GetViewportOrgEx
CreatePen
PatBlt
CreatePenIndirect
GetStockObject
Rectangle
CreateFontIndirectA
SetBkMode
SetTextColor
GetTextExtentPoint32A
Polygon
SelectObject
LPtoDP
DPtoLP
CreateCompatibleDC
CreateCompatibleBitmap
CreateRectRgnIndirect
SetBrushOrgEx
CreateSolidBrush
UnrealizeObject
CreateBitmap
GetSystemPaletteEntries
GetTextMetricsA

comdlg32

GetFileTitleA
PrintDlgA
GetOpenFileNameA
CommDlgExtendedError
GetSaveFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCreateKeyA
RegCloseKey
RegQueryValueExA
RegSetValueA
RegDeleteKeyA
RegDeleteValueA
GetFileSecurityA
RegQueryValueA
RegOpenKeyExA
SetFileSecurityA
RegOpenKeyA
RegSetValueExA
RegEnumKeyA
GetUserNameA
RegCreateKeyExA

shell32

DragFinish
ExtractIconA
DragQueryFileA
ShellExecuteA
SHGetFileInfoA
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA

comctl32

ImageList_DrawEx
ImageList_GetIconSize
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ImageList_Draw
ImageList_AddMasked
ImageList_GetImageCount
_TrackMouseEvent
ord17
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA

netapi32

Netbios

wininet

HttpSendRequestA
InternetErrorDlg
HttpOpenRequestA
InternetGetLastResponseInfoA
InternetGetConnectedState
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetSetOptionExA
InternetOpenA
InternetSetOptionA
InternetQueryOptionA
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetQueryDataAvailable
InternetSetStatusCallback
InternetSetFilePointer
InternetWriteFile
InternetConnectA

oledlg

ord8

ole32

OleUninitialize
CLSIDFromString
OleInitialize
CoFreeUnusedLibraries
CreateILockBytesOnHGlobal
CLSIDFromProgID
CoTaskMemFree
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoTaskMemAlloc
CoUninitialize
CoInitialize
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CreateStreamOnHGlobal

olepro32

ord253
ord251

oleaut32

VariantTimeToSystemTime
SysStringLen
SysAllocStringByteLen
SafeArrayCreate
SafeArrayGetElemsize
SysAllocStringLen
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocString
VariantChangeType
VariantCopy
VariantClear
SysFreeString

rpcrt4

UuidCreate

shlwapi

PathMatchSpecA

wsock32

bind
connect
sendto
recvfrom
socket
inet_ntoa
WSAAsyncSelect
send
recv
gethostbyname
closesocket
htonl
setsockopt
ioctlsocket
accept
WSASetLastError
WSAStartup
WSACleanup
htons
WSAGetLastError

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 200KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 240KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

829939ec470ba097956cb1c2bb1f5124

Headers

File Characteristics

Imports

winmm

version

commdll

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

netapi32

wininet

oledlg

ole32

olepro32

oleaut32

rpcrt4

shlwapi

wsock32

Sections

.text Size: 1.0MB - Virtual size: 1.0MB

.rdata Size: 200KB - Virtual size: 200KB

.data Size: 60KB - Virtual size: 83KB

.rsrc Size: 240KB - Virtual size: 240KB

.text
Size: 1.0MB - Virtual size: 1.0MB

.rdata
Size: 200KB - Virtual size: 200KB

.data
Size: 60KB - Virtual size: 83KB

.rsrc
Size: 240KB - Virtual size: 240KB