13f0fe9abe0f5f3554ed3010fbe4929db729f886a00d8d97ca1bd247ea21508d

Sharing

Copy URL Twitter E-mail

General

Target

13f0fe9abe0f5f3554ed3010fbe4929db729f886a00d8d97ca1bd247ea21508d
Size

708KB
MD5

dea6dd1f0cf1abb62245901f65cccd35
SHA1

de91435a51f759e0775f852bc373d1aa9c90e996
SHA256

13f0fe9abe0f5f3554ed3010fbe4929db729f886a00d8d97ca1bd247ea21508d
SHA512

9bf93877e78404eb0ca00230dbdfc211f466583e7d1eac987581feb0e08fff30438d9372f531008fa5d46409bc0b28602fcbfddcc055f881442c52de68d02e8e
SSDEEP

12288:8v7nVD0H8QZE2Gvaxi90fRH7+Ciyj/Z7ypSFgTDieVwTvqvJ:8fRvvaxi9u9FypSFoDhqTyvJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13f0fe9abe0f5f3554ed3010fbe4929db729f886a00d8d97ca1bd247ea21508d

Files

13f0fe9abe0f5f3554ed3010fbe4929db729f886a00d8d97ca1bd247ea21508d
.exe windows:4 windows x86 arch:x86

329872982732b3950b1f2b3330c0a37a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime

kernel32

GetFileAttributesW
GetFileTime
SetErrorMode
GetTickCount
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
ExitThread
CreateThread
RtlUnwind
HeapReAlloc
HeapSize
SetStdHandle
GetFileType
VirtualProtect
VirtualAlloc
VirtualQuery
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GlobalGetAtomNameW
InterlockedIncrement
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
TlsGetValue
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
UnlockFile
LockFile
FlushFileBuffers
GetThreadLocale
InterlockedDecrement
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
MulDiv
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
LoadLibraryW
FreeLibrary
CompareStringW
LoadLibraryA
SetLastError
lstrcmpW
GetVersionExA
GetFileSizeEx
CreateFileW
FindClose
ReadFile
WriteFile
SetFilePointer
UnmapViewOfFile
MapViewOfFile
GetModuleHandleA
GetDiskFreeSpaceA
CreateFileMappingW
FindFirstFileA
FindFirstFileW
GetFileSize
SetEndOfFile
CreateFileA
GetSystemInfo
GetModuleHandleW
GetProcAddress
GetDiskFreeSpaceW
lstrlenW
SetFileAttributesA
GetFileAttributesA
OpenProcess
CreateProcessW
GetCurrentProcessId
DeleteFileW
DeleteFileA
WritePrivateProfileStringW
lstrcpyW
CreateDirectoryA
GetPrivateProfileStringW
WideCharToMultiByte
InterlockedExchange
GetExitCodeThread
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetEvent
DeleteCriticalSection
CreateEventW
FormatMessageW
lstrcatW
LocalFree
RaiseException
LoadResource
GlobalAlloc
MultiByteToWideChar
GlobalLock
GlobalReAlloc
FindResourceW
SizeofResource
GlobalFree
GlobalUnlock
lstrlenA
LockResource
CloseHandle
CreateMutexW
GetLastError
WaitForSingleObject
CopyFileW
Sleep
GetModuleFileNameW
GetCommandLineA

user32

ReuseDDElParam
UnpackDDElParam
RegisterClipboardFormatW
PostThreadMessageW
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableW
CharNextW
GetSysColorBrush
DestroyMenu
GetMenuItemInfoW
InflateRect
LoadCursorW
KillTimer
SetTimer
IsRectEmpty
FindWindowW
SystemParametersInfoW
CharUpperW
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringW
UnregisterClassA
DrawTextW
TabbedTextOutW
FillRect
GetMessageW
TranslateMessage
ValidateRect
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
GetWindowThreadProcessId
ShowOwnedPopups
SetCursor
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
GetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
IsWindowEnabled
LoadMenuW
MoveWindow
SetWindowTextW
IsDialogMessageW
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
RemovePropW
GetFocus
IsWindow
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
UpdateWindow
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
GetParent
ScreenToClient
LoadAcceleratorsW
InsertMenuItemW
CreatePopupMenu
SetRectEmpty
BringWindowToTop
SetMenu
EqualRect
DeferWindowPos
TranslateAcceleratorW
UnregisterClassW
ShowWindow
MessageBeep
GetScrollInfo
SetScrollInfo
PtInRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetWindowLongW
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindow
CopyRect
TrackMouseEvent
InvalidateRect
GetSystemMetrics
wsprintfW
DrawIcon
PostMessageW
LoadIconW
SetRect
GetCursorPos
IsIconic
LoadImageW
ReleaseCapture
SetCapture
GetClientRect
SetWindowRgn
GetDesktopWindow
MessageBoxW
EnableWindow
SendMessageW
GetPropW
DrawTextExW

gdi32

ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
GetStockObject
SetWindowExtEx
LPtoDP
Ellipse
CreateFontIndirectW
GetTextExtentPoint32W
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
CreateSolidBrush
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetPixel
GetWindowExtEx
GetViewportExtEx
CreateEllipticRgn
SelectObject
SetMapMode
SetBkMode
RestoreDC
SaveDC
GetDeviceCaps
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
StretchBlt
GetCurrentObject
CreateFontW
CreateCompatibleBitmap
DeleteDC
CreateCompatibleDC
ExtCreateRegion
GetObjectW
CombineRgn
CreateDIBSection
BitBlt
DeleteObject

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

RegEnumKeyW
RegQueryValueW
RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegOpenKeyExW

shell32

DragFinish
DragQueryFileW
ShellExecuteW

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFindExtensionW
UrlUnescapeW

oledlg

OleUIBusyW

ole32

CoRegisterMessageFilter
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard

oleaut32

SysAllocStringLen
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocString
SysFreeString
SysStringLen
VariantInit
VariantChangeType
VariantClear

ws2_32

setsockopt
connect
socket
WSAStartup
ioctlsocket
WSACleanup
inet_addr
shutdown
select
htons
recv
WSAGetLastError
closesocket
gethostbyname
send

wininet

InternetCanonicalizeUrlW
InternetCrackUrlW

Sections

.text
Size: 364KB - Virtual size: 363KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 232KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

329872982732b3950b1f2b3330c0a37a

Headers

File Characteristics

Imports

winmm

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

wininet

Sections

.text Size: 364KB - Virtual size: 363KB

.rdata Size: 92KB - Virtual size: 90KB

.data Size: 16KB - Virtual size: 95KB

.rsrc Size: 232KB - Virtual size: 228KB

.text
Size: 364KB - Virtual size: 363KB

.rdata
Size: 92KB - Virtual size: 90KB

.data
Size: 16KB - Virtual size: 95KB

.rsrc
Size: 232KB - Virtual size: 228KB