01707019a6ec4ec69cfe7df5e82a97cd5ea16a41af292f70ef3285349053de15

Sharing

Copy URL Twitter E-mail

General

Target

01707019a6ec4ec69cfe7df5e82a97cd5ea16a41af292f70ef3285349053de15
Size

4.0MB
MD5

92b3abf983f1d5872962f6537d6827cb
SHA1

ebd701d552c3dea403fa2c0099c17e740082b636
SHA256

01707019a6ec4ec69cfe7df5e82a97cd5ea16a41af292f70ef3285349053de15
SHA512

deccaca05ddc14e4389f1fe1c5f089b81ce5ec2134ab868b948505a2b35bd652727db6d3d616fdccba9dbca7b44bdab3e816a6201a3f751b669945e9138c5284
SSDEEP

98304:96V46MmD+WQw+z+EFLOAkGkzdnEVomFHKnP:f6NQw+z9FLOyomFHKnP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01707019a6ec4ec69cfe7df5e82a97cd5ea16a41af292f70ef3285349053de15

Files

01707019a6ec4ec69cfe7df5e82a97cd5ea16a41af292f70ef3285349053de15
.exe windows:6 windows x64 arch:x64

32ea77c6aea60db52a0eba6c1273893c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SignalObjectAndWait
CreateTimerQueue
WriteConsoleW
GetStringTypeW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
VirtualFree
LCMapStringW
ExitProcess
GetStdHandle
GetFileType
SetStdHandle
HeapQueryInformation
VirtualQuery
VirtualAlloc
GetSystemInfo
GetCommandLineW
GetCommandLineA
FreeLibraryAndExitThread
ExitThread
CreateThread
InterlockedFlushSList
InterlockedPushEntrySList
RtlPcToFileHeader
RtlUnwindEx
GetExitCodeThread
SwitchToThread
QueryPerformanceFrequency
TryEnterCriticalSection
OutputDebugStringW
ReleaseSemaphore
InterlockedPopEntrySList
QueryDepthSList
GetThreadTimes
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WaitForSingleObjectEx
ResetEvent
GetTempFileNameW
FindResourceExW
GetWindowsDirectoryW
SystemTimeToTzSpecificLocalTime
UnregisterWaitEx
GetFileTime
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
SetErrorMode
SearchPathW
GetProfileIntW
GetTickCount
GetTempPathW
VirtualProtect
FileTimeToSystemTime
GlobalGetAtomNameW
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
FlushFileBuffers
FindFirstFileW
FindClose
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GetCurrentDirectoryW
GetFileSize
VerifyVersionInfoW
VerSetConditionMask
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
CompareStringW
GlobalFindAtomW
GetSystemDirectoryW
EncodePointer
FormatMessageW
MulDiv
LocalFree
GlobalSize
GlobalFree
GlobalUnlock
FreeResource
GlobalAddAtomW
lstrcmpW
lstrcmpA
GlobalDeleteAtom
GlobalLock
GlobalAlloc
LoadLibraryExW
GetVersionExW
GetCurrentThread
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
GetModuleHandleExW
InitializeCriticalSectionAndSpinCount
SetLastError
OutputDebugStringA
ResumeThread
SetThreadPriority
GetCurrentThreadId
WaitForSingleObject
SetEvent
MoveFileW
lstrcmpiW
lstrcpyW
WideCharToMultiByte
CopyFileW
FreeLibrary
GetModuleHandleW
CreateProcessW
GetCurrentProcessId
MoveFileExW
GetProcAddress
LoadLibraryW
Process32FirstW
DeleteFileW
lstrcatW
Process32NextW
Sleep
GetPrivateProfileStringW
MultiByteToWideChar
CreateToolhelp32Snapshot
GetLogicalDriveStringsW
SetFileAttributesW
OpenProcess
GetModuleHandleA
K32GetProcessImageFileNameW
GetFileAttributesW
GetModuleFileNameW
RemoveDirectoryW
ReadFile
TerminateProcess
GetPrivateProfileIntW
lstrlenW
GetCurrentProcess
WritePrivateProfileStringW
QueryDosDeviceW
CreateDirectoryW
FindResourceW
LoadResource
LockResource
SizeofResource
CreateEventW
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
CloseHandle
HeapReAlloc
GetLastError
HeapSize
CreateFileW
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
HeapFree
GetTimeZoneInformation

user32

DestroyMenu
SetRectEmpty
SendDlgItemMessageA
IsDialogMessageW
SetWindowTextW
CheckDlgButton
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
GetWindow
GetTopWindow
GetClassLongPtrW
SetWindowLongPtrW
GetWindowLongPtrW
SetWindowLongW
EqualRect
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
SetForegroundWindow
GetForegroundWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetMenuItemInfoW
SetWindowPos
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CopyIcon
GetMenuDefaultItem
SetMenuDefaultItem
UnregisterClassW
EnableWindow
IsIconic
KillTimer
AppendMenuW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
GetClassNameW
InvalidateRect
UpdateWindow
LoadBitmapW
ModifyMenuW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
TrackMouseEvent
BeginPaint
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
CopyRect
ReleaseDC
GetDC
MapVirtualKeyW
IsZoomed
CharUpperW
GetAsyncKeyState
SetCapture
ReleaseCapture
LoadMenuW
DeleteMenu
MessageBeep
WindowFromPoint
GetIconInfo
NotifyWinEvent
SetCursorPos
SetRect
UnionRect
BringWindowToTop
SystemParametersInfoW
IntersectRect
SetLayeredWindowAttributes
LoadCursorW
EnumDisplayMonitors
SetParent
MonitorFromPoint
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DestroyIcon
LoadImageW
GetWindowPlacement
CopyImage
GetClientRect
LoadIconW
SetTimer
DrawIcon
GetSystemMetrics
SendMessageW
GetSystemMenu
FindWindowW
PostMessageW
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
IsWindowVisible
GetActiveWindow
GetKeyState
ValidateRect
GetCursorPos
SetWindowsHookExW
CallNextHookEx
RegisterWindowMessageW
DrawEdge
DrawFrameControl
GetFocus
DrawStateW
SetWindowRgn
RedrawWindow
GetWindowRect
MapWindowPoints
GetSysColor
GetSysColorBrush
DrawFocusRect
FillRect
InflateRect
OffsetRect
IsRectEmpty
GetParent
DrawIconEx
PostQuitMessage
ShowOwnedPopups
SetCursor
IsWindowEnabled
MessageBoxW
GetWindowLongW
GetWindowThreadProcessId
GetLastActivePopup
IsWindow
DestroyWindow
CreateDialogIndirectParamW
EndDialog
GetDlgItem
GetNextDlgTabItem
SetActiveWindow
GetDesktopWindow
ClientToScreen
ScreenToClient
PtInRect
UnhookWindowsHookEx
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
DestroyAcceleratorTable
SetClassLongPtrW
GetUpdateRect
RealChildWindowFromPoint
CreatePopupMenu
LockWindowUpdate
EnableScrollBar
GetDoubleClickTime
RemoveMenu
GetKeyNameTextW
EndPaint
WaitMessage
UpdateLayeredWindow
MapDialogRect
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
LoadAcceleratorsW
CreateAcceleratorTableW
CopyAcceleratorTableW
SubtractRect
RegisterClipboardFormatW
CharUpperBuffW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
FrameRect
IsClipboardFormatAvailable
PostThreadMessageW
GetNextDlgGroupItem
IsCharLowerW
MapVirtualKeyExW
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
GetComboBoxInfo
HideCaret
InvertRect
CreateMenu
DestroyCursor
GetWindowRgn
SetMenuItemInfoW

gdi32

CreatePen
CreatePatternBrush
DeleteObject
Escape
GetClipBox
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
GetObjectW
MoveToEx
TextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectW
SetRectRgn
DPtoLP
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
RealizePalette
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateRoundRectRgn
Rectangle
GetRgnBox
OffsetRgn
RoundRect
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
EnumFontFamiliesExW
LPtoDP
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
SetPixelV
GetTextFaceW
CreateCompatibleDC
CreateBitmap
BitBlt
GetDeviceCaps
CreateDCW
CopyMetaFileW
GetTextMetricsW
Polyline
Polygon
CreatePolygonRgn
ExtTextOutW
PatBlt
GetTextExtentPoint32W
GetTextColor
GetBkColor
Ellipse
CreateSolidBrush
CreateRectRgnIndirect
CreateRectRgn
CreateHatchBrush
CreateEllipticRgn
CombineRgn
SetWindowOrgEx
ExcludeClipRect
DeleteDC

msimg32

AlphaBlend
TransparentBlt

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
LookupPrivilegeValueW
AdjustTokenPrivileges
QueryServiceStatus
CloseServiceHandle
OpenSCManagerW
ControlService
OpenProcessToken
OpenServiceW

shell32

DragFinish
DragQueryFileW
ShellExecuteW
SHGetFileInfoW
SHAppBarMessage
SHGetDesktopFolder
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
ord165
SHFileOperationW

shlwapi

PathStripToRootW
PathIsUNCW
PathIsDirectoryW
PathFindExtensionW
PathCanonicalizeW
PathAddExtensionW
PathFileExistsW
PathAddBackslashW
PathRemoveFileSpecW
PathFindFileNameW
PathCombineW
StrFormatKBSizeW

uxtheme

DrawThemeBackground
GetThemeColor
GetCurrentThemeName
IsAppThemed
DrawThemeParentBackground
DrawThemeText
GetWindowTheme
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
OpenThemeData
CloseThemeData

ole32

IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CoDisconnectObject
CreateStreamOnHGlobal
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoCreateGuid
CoUninitialize
CoInitialize
CoInitializeEx

oleaut32

VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysAllocString
VariantCopy
VarBstrFromDate
LoadTypeLi
SysFreeString

gdiplus

GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCreateBitmapFromStream
GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 677KB - Virtual size: 677KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

32ea77c6aea60db52a0eba6c1273893c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

shlwapi

uxtheme

ole32

oleaut32

gdiplus

oleacc

imm32

winmm

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.rdata Size: 677KB - Virtual size: 677KB

.data Size: 34KB - Virtual size: 66KB

.pdata Size: 92KB - Virtual size: 92KB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.reloc Size: 61KB - Virtual size: 60KB

.text
Size: 1.9MB - Virtual size: 1.9MB

.rdata
Size: 677KB - Virtual size: 677KB

.data
Size: 34KB - Virtual size: 66KB

.pdata
Size: 92KB - Virtual size: 92KB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

.reloc
Size: 61KB - Virtual size: 60KB