f4e56ad9e9a0304eaa3084a642a61f668d17365c7a6935019234c65568c2a2cc

Sharing

Copy URL Twitter E-mail

General

Target

f4e56ad9e9a0304eaa3084a642a61f668d17365c7a6935019234c65568c2a2cc
Size

544KB
MD5

8efd25671f617473559ca9ae2254af58
SHA1

f77806256e7fb7555651c78e6a9a8ce534c7a738
SHA256

f4e56ad9e9a0304eaa3084a642a61f668d17365c7a6935019234c65568c2a2cc
SHA512

117219dcf7b5fe1f221ec7509ec3c9ed3b2f2725870c7f753782bcb5960ef256b72b85e4b0564a0222c71bb602eabb29e11454ae41ba1c5b86bfd75c76beaac1
SSDEEP

6144:WgP+3MmJfo+d9JpFh0aijGFu6wDcUmshSQfyHQjkS/r1Hn7zep2k8i/39dP:WgT8vF+LaFycUmshS0yHQpHn7zer53P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4e56ad9e9a0304eaa3084a642a61f668d17365c7a6935019234c65568c2a2cc

Files

f4e56ad9e9a0304eaa3084a642a61f668d17365c7a6935019234c65568c2a2cc
.exe windows:4 windows x86 arch:x86

d2d9045aae509120e296e76a6f9b5826

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
HeapAlloc
RaiseException
CreateThread
ExitThread
TerminateProcess
SetStdHandle
GetFileType
HeapReAlloc
HeapSize
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetACP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetEnvironmentVariableA
GetVersionExA
GetCommandLineA
HeapCreate
VirtualFree
FatalAppExitA
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetConsoleCtrlHandler
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
GetStartupInfoA
RtlUnwind
SetErrorMode
CopyFileA
GlobalSize
FormatMessageA
GetOEMCP
GetCPInfo
SetFileAttributesA
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetCurrentDirectoryA
SizeofResource
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalFree
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalFlags
GetProcessVersion
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
MulDiv
SetLastError
InterlockedDecrement
GetLastError
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFullPathNameA
GetTempFileNameA
GetFileAttributesA
GetTickCount
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
InterlockedIncrement
GetModuleFileNameA
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
GetCurrentThread
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
WaitForSingleObject
CloseHandle
lstrcpynA
lstrlenW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
lstrcmpiA
GetCurrentThreadId
Sleep
LoadLibraryA
HeapFree
GetModuleHandleA
HeapDestroy
GetProcAddress

user32

GetClassNameA
CharToOemA
OemToCharA
LoadStringA
GetDialogBaseUnits
InsertMenuA
GetMenuStringA
DestroyIcon
CharUpperA
SetTimer
KillTimer
WindowFromPoint
SetRect
InflateRect
SetCapture
InvertRect
FillRect
GetDCEx
LockWindowUpdate
RemoveMenu
wvsprintfA
SetParent
IsZoomed
PtInRect
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
LoadMenuA
DestroyMenu
GetDesktopWindow
ReleaseCapture
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
InvalidateRect
RegisterClipboardFormatA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SendDlgItemMessageA
MapWindowPoints
GetSysColor
SetFocus
AdjustWindowRectEx
GetSysColorBrush
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
GetMessageA
GetInputState
PostThreadMessageA
UpdateWindow
EnableWindow
PostMessageA
GetClientRect
IsWindowVisible
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetLastActivePopup
MessageBoxA
SetCursor
ShowOwnedPopups
PostQuitMessage
EndDialog
LoadCursorA
GetSystemMenu
DeleteMenu
AppendMenuA
ScreenToClient
IsRectEmpty
SetActiveWindow
IsWindow
GetNextDlgTabItem
GetParent
GetFocus
EnableMenuItem
SendMessageA
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
SetWindowsHookExA
GetCursorPos
PeekMessageA
ValidateRect
CallNextHookEx
GetKeyState
GetActiveWindow
DispatchMessageA
TranslateMessage
IsWindowEnabled
GetDlgItem
GetWindowLongA
DestroyWindow
CreateDialogIndirectParamA
GetSystemMetrics
LoadIconA

gdi32

EnumMetaFile
PlayMetaFile
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreatePen
ExtCreatePen
CreateHatchBrush
CreatePatternBrush
CreateDIBPatternBrushPt
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
StretchDIBits
GetObjectType
CreateCompatibleBitmap
GetCharWidthA
CreateFontA
GetTextExtentPoint32A
GetTextMetricsA
CreateFontIndirectA
BitBlt
CopyMetaFileA
CreateDCA
GetMapMode
PatBlt
SetRectRgn
CombineRgn
CreateRectRgnIndirect
DPtoLP
PlayMetaFileRecord
ExtSelectClipRgn
SelectClipPath
CreateRectRgn
GetClipRgn
DeleteObject
PolyBezierTo
SetColorAdjustment
PolylineTo
PolyDraw
SetArcDirection
ArcTo
GetCurrentPositionEx
SetMapperFlags
SetTextJustification
CreateCompatibleDC
Pie
SetTextAlign
LineTo
MoveToEx
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SelectPalette
GetStockObject
SelectObject
RestoreDC
SaveDC
StartDocA
DeleteDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
CreateBitmap
CreateSolidBrush
SetTextCharacterExtra

comdlg32

GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryValueExA
RegCreateKeyA
RegSetValueA
GetFileSecurityA
SetFileSecurityA
RegDeleteValueA
RegSetValueExA
RegQueryValueA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyA
RegEnumKeyA
RegCloseKey

shell32

ExtractIconA
DragQueryFileA
DragFinish
DragAcceptFiles
SHGetFileInfoA

comctl32

ord17

oledlg

ord8

ole32

WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateBindCtx
OleDuplicateData
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
ReleaseStgMedium
CoGetClassObject
OleRegGetUserType
StringFromCLSID
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoDisconnectObject
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoRevokeClassObject
CoRegisterClassObject
ReadFmtUserTypeStg
ReadClassStg
CreateStreamOnHGlobal
OleRun
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoTreatAsClass

oleaut32

VariantCopy
VariantClear
VariantChangeType
SysAllocStringLen
SysReAllocStringLen
SysFreeString
SysAllocString
SysStringByteLen
SysStringLen
SysAllocStringByteLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VarCyFromStr
VarBstrFromCy
VarDateFromStr
VarBstrFromDate
SafeArrayCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
LoadTypeLi

Exports

Exports

s_284545

Sections

.text
Size: 260KB - Virtual size: 258KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d2d9045aae509120e296e76a6f9b5826

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

oleaut32

Exports

Exports

Sections

.text Size: 260KB - Virtual size: 258KB

.rdata Size: 60KB - Virtual size: 56KB

.data Size: 132KB - Virtual size: 142KB

.rsrc Size: 88KB - Virtual size: 86KB

.text
Size: 260KB - Virtual size: 258KB

.rdata
Size: 60KB - Virtual size: 56KB

.data
Size: 132KB - Virtual size: 142KB

.rsrc
Size: 88KB - Virtual size: 86KB