ddecb22fb6cd998ef88d3f56de51377beb5cf165988196d312206b850ed090b6

Sharing

Copy URL

Twitter E-mail

General

Target

ddecb22fb6cd998ef88d3f56de51377beb5cf165988196d312206b850ed090b6
Size

4.0MB
MD5

3850fe533e6cfa28bd851d310dad970c
SHA1

1b9aaa74d647cd720c377a026c046c996fdaeed1
SHA256

ddecb22fb6cd998ef88d3f56de51377beb5cf165988196d312206b850ed090b6
SHA512

825c0fbc5b468f59607f93a23afb371ab4aa440ad17774244cd2e1ad4d090951cc5a22c75aaedad1f958e1ed27dac5f1d922011f55666f9c484f2fe57feb54ca
SSDEEP

49152:C8y4+H/MA9KvdXjuvugsDwy9p6a7ZIcQ2R8+06QlCQ1U2V+6kYS3e+/skGV8rOv1:a/MOeDp6l08+06QxUZ6kb/skbrOO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddecb22fb6cd998ef88d3f56de51377beb5cf165988196d312206b850ed090b6

Files

ddecb22fb6cd998ef88d3f56de51377beb5cf165988196d312206b850ed090b6
.exe windows:6 windows x64 arch:x64

6bc256a8b337c84576593ac739614e18

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

lstrcmpA
CompareStringA
GetModuleHandleW
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetCurrentProcessId
GlobalAddAtomA
VerSetConditionMask
lstrcpyA
VerifyVersionInfoA
GetSystemDirectoryW
lstrcmpW
GlobalFindAtomA
GlobalGetAtomNameA
InitializeCriticalSectionAndSpinCount
InitializeCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
QueryActCtxW
GlobalReAlloc
GlobalHandle
LocalAlloc
LocalReAlloc
GetFileSize
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GlobalFlags
FindClose
FindFirstFileA
FlushFileBuffers
GetFullPathNameA
LockFile
SetEndOfFile
UnlockFile
GetVolumeInformationA
DuplicateHandle
GetCurrentProcess
lstrcmpiA
GetACP
FileTimeToSystemTime
GetTempPathA
VirtualProtect
GetOEMCP
GetTickCount64
GetProfileIntA
SearchPathA
SetErrorMode
FileTimeToLocalFileTime
GetFileAttributesExA
GetFileSizeEx
GetFileTime
SystemTimeToTzSpecificLocalTime
GetWindowsDirectoryA
GetTempFileNameA
GetUserDefaultLCID
FindResourceExW
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LoadLibraryExW
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
RaiseException
RtlUnwindEx
RtlPcToFileHeader
GetSystemInfo
VirtualAlloc
VirtualQuery
CreateThread
ExitThread
FreeLibraryAndExitThread
GetCommandLineA
GetCommandLineW
QueryPerformanceFrequency
HeapQueryInformation
SetStdHandle
GetFileType
GetStdHandle
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
ReadConsoleW
GetTimeZoneInformation
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
CreateFileW
WriteConsoleW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
LoadLibraryW
GetModuleHandleExW
GetModuleFileNameW
OutputDebugStringA
ResumeThread
SetThreadPriority
GetCurrentThreadId
WaitForSingleObject
SetLastError
CopyFileA
MulDiv
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalAlloc
GetCPInfo
GetStringTypeW
LCMapStringEx
LocalFree
EncodePointer
FormatMessageA
GlobalDeleteAtom
GetModuleFileNameA
FreeLibrary
TerminateProcess
GetVersionExA
SystemTimeToFileTime
GetFileAttributesA
LocalFileTimeToFileTime
GetCurrentDirectoryA
SetFilePointer
SetFileTime
ReadFile
CreateDirectoryA
WideCharToMultiByte
ExitProcess
GetProcAddress
GetThreadContext
FindResourceW
LoadResource
CloseHandle
Process32Next
DeleteFileA
LockResource
LoadLibraryA
GetCurrentThread
CreateFileA
Sleep
MultiByteToWideChar
CreateToolhelp32Snapshot
OpenProcess
GetModuleHandleA
FindResourceA
WriteFile
Process32First
SizeofResource
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
TlsFree
HeapFree
RtlUnwind

user32

EmptyClipboard
DestroyIcon
LoadImageA
LoadImageW
CopyImage
SetParent
MonitorFromPoint
TrackMouseEvent
IsZoomed
CharUpperA
GetAsyncKeyState
SetCapture
ReleaseCapture
SetTimer
KillTimer
LoadMenuW
GetSystemMenu
DeleteMenu
MessageBeep
WindowFromPoint
NotifyWinEvent
SetCursorPos
SetRect
UnionRect
BringWindowToTop
CreatePopupMenu
LockWindowUpdate
DestroyMenu
EnableScrollBar
GetDoubleClickTime
GetIconInfo
CopyIcon
GetMenuItemInfoA
GetMenuDefaultItem
SetMenuDefaultItem
ModifyMenuA
DestroyAcceleratorTable
SetClassLongPtrA
GetUpdateRect
RealChildWindowFromPoint
WaitMessage
UpdateLayeredWindow
CopyAcceleratorTableA
GetNextDlgGroupItem
GetKeyboardLayout
GetKeyboardState
ToAsciiEx
MapVirtualKeyA
LoadAcceleratorsW
CreateAcceleratorTableA
GetKeyNameTextA
SubtractRect
RegisterClipboardFormatA
CharUpperBuffA
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
InsertMenuItemA
UnpackDDElParam
ReuseDDElParam
FrameRect
IsClipboardFormatAvailable
PostThreadMessageA
IsCharLowerA
MapVirtualKeyExA
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
GetComboBoxInfo
CreateMenu
DestroyCursor
GetWindowRgn
DrawIcon
CheckDlgButton
HideCaret
InvertRect
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
MapDialogRect
GetWindow
SetWindowPos
CloseClipboard
PtInRect
ScreenToClient
ClientToScreen
GetDesktopWindow
SetActiveWindow
GetNextDlgTabItem
GetDlgItem
EndDialog
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetLastActivePopup
GetWindowThreadProcessId
GetWindowLongA
MessageBoxA
IsWindowEnabled
SetCursor
ShowOwnedPopups
PostQuitMessage
PostMessageA
DrawIconEx
GetParent
IsRectEmpty
OffsetRect
InflateRect
FillRect
DrawFocusRect
GetSysColorBrush
GetSysColor
MapWindowPoints
GetWindowRect
GetClientRect
RedrawWindow
SetWindowRgn
DrawStateA
GetSystemMetrics
GetFocus
DrawFrameControl
DrawEdge
RegisterWindowMessageA
CallNextHookEx
SetWindowsHookExA
GetCursorPos
ValidateRect
GetKeyState
GetActiveWindow
IsWindowVisible
SendMessageA
PeekMessageA
DispatchMessageA
TranslateMessage
GetMessageA
RemoveMenu
AppendMenuA
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringA
MoveWindow
ShowWindow
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconA
GetTopWindow
GetClassLongPtrA
GetClassLongA
SetWindowLongPtrA
GetWindowLongPtrA
SetWindowLongA
EqualRect
AdjustWindowRectEx
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
LoadBitmapW
ScrollWindow
SetForegroundWindow
GetForegroundWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
IsIconic
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
IsMenu
SetClipboardData
OpenClipboard
IntersectRect
IsDialogMessageA
SetWindowTextA
SendDlgItemMessageA
UnhookWindowsHookEx
CreateWindowExA
GetClassInfoExA
RegisterClassA
CallWindowProcA
GetMessageTime
GetMessagePos
GetClassNameA
InvalidateRect
UpdateWindow
EnumDisplayMonitors
GetMonitorInfoA
SystemParametersInfoA
LoadCursorW
LoadCursorA
CopyRect
SetRectEmpty
SetLayeredWindowAttributes
GetClassInfoA
wsprintfA
LoadIconW
EnableWindow
UnregisterClassA
DefWindowProcA
SetScrollPos

gdi32

CreatePen
CreatePatternBrush
DeleteObject
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
CreateCompatibleDC
LineTo
PtVisible
RectVisible
RestoreDC
CreateBitmap
BitBlt
GetTextMetricsA
Polyline
Polygon
CreatePolygonRgn
Rectangle
DeleteDC
SaveDC
ExtTextOutA
PatBlt
GetTextExtentPoint32A
GetTextColor
GetBkColor
Ellipse
CreateSolidBrush
CreateRectRgnIndirect
CreateRectRgn
CreateHatchBrush
CreateEllipticRgn
CombineRgn
GetDeviceCaps
GetTextFaceA
IntersectClipRect
CopyMetaFileA
SetPixelV
GetWindowOrgEx
LPtoDP
GetViewportOrgEx
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
SetPaletteEntries
ExtFloodFill
EnumFontFamiliesExA
GetSystemPaletteEntries
GetNearestPaletteIndex
GetPaletteEntries
CreatePalette
RoundRect
OffsetRgn
GetRgnBox
CreateRoundRectRgn
SetDIBColorTable
CreateDIBSection
StretchBlt
SetPixel
RealizePalette
DPtoLP
SetRectRgn
GetTextCharsetInfo
EnumFontFamiliesA
CreateFontIndirectA
CreateDIBitmap
CreateCompatibleBitmap
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetWindowExtEx
SetViewportOrgEx
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
GetObjectA
MoveToEx
TextOutA
SetViewportExtEx
CreateDCA

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegEnumKeyA
RegEnumKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegQueryValueA
RegEnumValueA

shell32

DragFinish
DragQueryFileA
SHGetFileInfoA
SHAppBarMessage
SHGetDesktopFolder
SHBrowseForFolderA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteA

ole32

CoInitializeEx
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoInitialize
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CreateStreamOnHGlobal
CoDisconnectObject
CoCreateGuid
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoUninitialize

oleaut32

SysFreeString
SysAllocString
VariantClear
VarBstrFromDate
VariantInit
SysAllocStringLen
SysAllocStringByteLen
SysStringLen
VariantChangeType
LoadTypeLi
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantCopy

msimg32

AlphaBlend
TransparentBlt

shlwapi

PathFindExtensionA
PathFindFileNameA
PathIsUNCA
PathStripToRootA
PathRemoveFileSpecW
StrFormatKBSizeA
PathIsDirectoryA

uxtheme

DrawThemeBackground
GetCurrentThemeName
DrawThemeParentBackground
IsAppThemed
DrawThemeText
GetWindowTheme
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
OpenThemeData
CloseThemeData
GetThemeSysColor
GetThemeColor

gdiplus

GdipGetImagePaletteSize
GdipDrawImageI
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipCreateBitmapFromStream
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDisposeImage
GdipDeleteGraphics
GdipCreateFromHDC
GdipGetImagePalette
GdipDrawImageRectI
GdipSetInterpolationMode

oleacc

LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 544KB - Virtual size: 544KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6bc256a8b337c84576593ac739614e18

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

msimg32

shlwapi

uxtheme

gdiplus

oleacc

imm32

winmm

winspool.drv

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 544KB - Virtual size: 544KB

.data Size: 29KB - Virtual size: 59KB

.pdata Size: 87KB - Virtual size: 86KB

_RDATA Size: 512B - Virtual size: 500B

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.reloc Size: 59KB - Virtual size: 58KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 544KB - Virtual size: 544KB

.data
Size: 29KB - Virtual size: 59KB

.pdata
Size: 87KB - Virtual size: 86KB

_RDATA
Size: 512B - Virtual size: 500B

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

.reloc
Size: 59KB - Virtual size: 58KB