5a41effce66750dcda2fc35167d2f0dd27c1d8cc1ddc7f2cdcd90bfdea788ad7

Sharing

Copy URL Twitter E-mail

General

Target

5a41effce66750dcda2fc35167d2f0dd27c1d8cc1ddc7f2cdcd90bfdea788ad7
Size

4.3MB
MD5

47521fade407e4f1d6be29e41c6a0560
SHA1

c4c0c2692ca90bc954aab49bdf11376fe4852965
SHA256

5a41effce66750dcda2fc35167d2f0dd27c1d8cc1ddc7f2cdcd90bfdea788ad7
SHA512

9959c403bda082393151b0402b7396b999d462f290efa3aedca2353b84abd637ce227e7e00b67380e93acd07cb5b9142870af62859d2e25e3b8004986cd5f227
SSDEEP

12288:TuAmTD/2Aq1cnSlWdaarsI+x38Hhz9dDa/PwN0a:YTL2AimQ3u+x38Bx6PI0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a41effce66750dcda2fc35167d2f0dd27c1d8cc1ddc7f2cdcd90bfdea788ad7

Files

5a41effce66750dcda2fc35167d2f0dd27c1d8cc1ddc7f2cdcd90bfdea788ad7
.exe windows:4 windows x86 arch:x86

4f9082c52a0d5cfdf8c5d5c983e96014

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

mixerGetNumDevs
mixerSetControlDetails
mixerGetControlDetailsW
mixerOpen
waveOutClose
mixerGetID
waveOutOpen
mixerGetLineControlsW
mixerClose
mixerGetLineInfoW

shlwapi

PathFileExistsW
PathFindExtensionW
PathFindFileNameW
PathIsUNCW
PathStripToRootW

powrprof

CanUserWritePwrScheme

kernel32

GetFileAttributesW
GetFileTime
GetStartupInfoW
RtlUnwind
ExitProcess
ExitThread
CreateThread
HeapFree
HeapAlloc
HeapReAlloc
TerminateProcess
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
IsBadWritePtr
SetUnhandledExceptionFilter
GetTimeZoneInformation
GetOEMCP
GetCPInfo
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
SetStdHandle
GetDriveTypeA
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetErrorMode
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
GetCurrentDirectoryW
InterlockedIncrement
RaiseException
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
GlobalFlags
lstrcmpiW
GetTickCount
WritePrivateProfileStringW
GetCurrentThread
GetModuleFileNameW
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
FindClose
InterlockedDecrement
SetLastError
MulDiv
FormatMessageW
LocalFree
FreeResource
GetCurrentThreadId
GlobalFindAtomW
GlobalDeleteAtom
lstrlenA
GetModuleHandleA
LoadLibraryA
lstrcmpW
GetVersionExA
GetVersion
lstrcpynW
GlobalLock
GlobalUnlock
GlobalGetAtomNameW
GlobalAddAtomW
WideCharToMultiByte
lstrlenW
CreateEventW
GetCurrentProcessId
ProcessIdToSessionId
OpenEventW
WaitForMultipleObjects
Sleep
SetEvent
DeviceIoControl
LoadLibraryW
GetProcAddress
FreeLibrary
CreateProcessW
MultiByteToWideChar
GlobalAlloc
GlobalFree
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
ExpandEnvironmentStringsW
DeleteFileW
RemoveDirectoryW
lstrcpyW
CreateDirectoryW
GetModuleHandleW
lstrcatW
FindResourceW
LoadResource
LockResource
CreateFileW
SizeofResource
WriteFile
GetLastError
CloseHandle
FreeEnvironmentStringsW

user32

CharUpperW
CharNextW
CopyAcceleratorTableW
InvalidateRgn
SetCapture
GetNextDlgGroupItem
MessageBeep
PostThreadMessageW
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
ClientToScreen
FillRect
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
SetWindowTextW
IsDialogMessageW
GetClassInfoExW
GetClassLongW
SetPropW
GetPropW
RemovePropW
SendDlgItemMessageW
SendDlgItemMessageA
IsChild
GetWindowTextLengthW
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenu
AdjustWindowRectEx
ScreenToClient
DeferWindowPos
RegisterClassW
UnregisterClassW
CallWindowProcW
SystemParametersInfoA
GetWindowPlacement
PtInRect
RegisterWindowMessageW
LoadMenuW
GetClassNameW
WinHelpW
SetFocus
GetActiveWindow
EqualRect
GetDlgItem
SetWindowLongW
GetDlgCtrlID
GetMenu
UnpackDDElParam
ReuseDDElParam
GetClassInfoW
SetCursor
GetCapture
ReleaseCapture
LoadAcceleratorsW
GetParent
SetActiveWindow
IsIconic
InsertMenuItemW
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreatePopupMenu
IntersectRect
OffsetRect
SetRectEmpty
CopyRect
GetLastActivePopup
BringWindowToTop
SetMenu
GetWindowLongW
IsWindowEnabled
TranslateAcceleratorW
RegisterClassExW
CreateWindowExW
ShowWindow
DestroyWindow
GetDesktopWindow
MoveWindow
SetRect
MessageBoxW
SendMessageTimeoutW
ChangeDisplaySettingsExW
ChangeDisplaySettingsW
GetForegroundWindow
GetWindow
GetDC
EnumDisplaySettingsW
GetSysColor
LoadCursorW
PeekMessageW
PostQuitMessage
GetSystemMetrics
RedrawWindow
GrayStringW
DrawTextExW
TabbedTextOutW
DrawFocusRect
FindWindowW
IsRectEmpty
GetSysColorBrush
SystemParametersInfoW
GetMenuItemInfoW
InflateRect
UpdateWindow
SetForegroundWindow
IsWindow
DrawTextW
GetFocus
IsWindowVisible
InvalidateRect
GetClientRect
GetWindowRect
SetWindowRgn
SendMessageW
LoadBitmapW
EnableWindow
DefWindowProcW
LoadIconW
KillTimer
SetTimer
wsprintfW
LoadStringW
SetWindowsHookExW
UnhookWindowsHookEx
GetKeyState
PostMessageW
CallNextHookEx
RegisterClipboardFormatW
SetWindowContextHelpId
MapDialogRect
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
DestroyMenu
ShowOwnedPopups
SetWindowPos
GetWindowTextW

gdi32

SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
CreateSolidBrush
GetTextExtentPoint32W
GetTextColor
GetRgnBox
SetMapMode
RestoreDC
SaveDC
GetDeviceCaps
GetClipBox
CreateRectRgnIndirect
CombineRgn
CreateFontIndirectW
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
CreateCompatibleBitmap
CreateBitmap
SetTextColor
SetBkColor
SelectObject
BitBlt
DeleteDC
SetBkMode
DeleteObject
StretchBlt
CreateCompatibleDC
CreateRoundRectRgn
GetObjectW
CreateFontW
GetStockObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetPixel
LPtoDP
DPtoLP
GetWindowExtEx
GetViewportExtEx
GetMapMode
GetBkColor

comdlg32

GetFileTitleW
GetSaveFileNameW
GetOpenFileNameW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegQueryValueW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegOpenKeyW
RegQueryValueExW
RegEnumKeyW
RegDeleteKeyW

shell32

ShellExecuteW
DragFinish
DragQueryFileW
ExtractIconW
SHGetSpecialFolderPathW
Shell_NotifyIconW

comctl32

ImageList_ReplaceIcon
ord17
ImageList_Draw
ImageList_GetImageInfo
ImageList_Destroy
ImageList_Create

oledlg

OleUIBusyW

ole32

OleFlushClipboard
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
CoCreateInstance
OleIsCurrentClipboard
CLSIDFromProgID
CLSIDFromString
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRegisterMessageFilter
CoRevokeClassObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject

oleaut32

SysFreeString
SysAllocString
SystemTimeToVariantTime
SafeArrayDestroy
VariantCopy
OleCreateFontIndirect
SysStringLen
VariantChangeType
SysAllocStringLen
VariantInit
VariantClear

Sections

.text
Size: 252KB - Virtual size: 250KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Shared
Size: 4KB - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4f9082c52a0d5cfdf8c5d5c983e96014

Headers

File Characteristics

Imports

winmm

shlwapi

powrprof

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

oleaut32

Sections

.text Size: 252KB - Virtual size: 250KB

.rdata Size: 68KB - Virtual size: 64KB

.data Size: 12KB - Virtual size: 23KB

.Shared Size: 4KB - Virtual size: 40B

.rsrc Size: 3.9MB - Virtual size: 3.9MB

.text
Size: 252KB - Virtual size: 250KB

.rdata
Size: 68KB - Virtual size: 64KB

.data
Size: 12KB - Virtual size: 23KB

.Shared
Size: 4KB - Virtual size: 40B

.rsrc
Size: 3.9MB - Virtual size: 3.9MB