53f139b6662d970aeff5015c67d591051cf11f7ffcc1c983af4822f9fab6ff24

Sharing

Copy URL Twitter E-mail

General

Target

53f139b6662d970aeff5015c67d591051cf11f7ffcc1c983af4822f9fab6ff24
Size

1.4MB
MD5

4fe2d0e9e7f8c25f3abccd756c04223f
SHA1

f5680d9f1b1c15b7779659a9073ad87fa29fec27
SHA256

53f139b6662d970aeff5015c67d591051cf11f7ffcc1c983af4822f9fab6ff24
SHA512

85c8f4d8707c359a40dc669080f130ac2f80a3cba74ce38b7f508a7ff0bb865563cef9db05562ff1569b67982ea3dbcb8ed742569022c72c7db95516a4132124
SSDEEP

12288:8Uh+tlBmr9fIzBkg0VeDOevpp/hICz9gpD3OQLudAqn/D9:8Uh+3kFCz9x6c3nr9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53f139b6662d970aeff5015c67d591051cf11f7ffcc1c983af4822f9fab6ff24

Files

53f139b6662d970aeff5015c67d591051cf11f7ffcc1c983af4822f9fab6ff24
.exe windows:4 windows x86 arch:x86

8d9776bffbb7b9393a963b2e844a2d5c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsSetValue
LocalReAlloc
TlsFree
InterlockedIncrement
SetErrorMode
GetTickCount
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
RtlUnwind
RaiseException
HeapReAlloc
SetStdHandle
GetFileType
ExitProcess
ExitThread
HeapSize
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
TlsAlloc
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCPInfo
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetCurrentDirectoryA
GetDriveTypeA
CreateFileA
SetEnvironmentVariableA
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GlobalFlags
GetFileTime
GetFileAttributesW
SuspendThread
ResumeThread
SetThreadPriority
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
GetLocaleInfoW
CompareStringA
FileTimeToLocalFileTime
FindNextFileW
CreateFileW
GetFullPathNameW
GetVolumeInformationW
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrlenA
lstrcmpA
InterlockedDecrement
FileTimeToSystemTime
GetThreadLocale
GetCurrentProcessId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
MulDiv
GetModuleHandleA
SetLastError
CreateThread
TerminateThread
ResetEvent
SetEvent
CreateEventW
LocalFree
SetCurrentDirectoryW
Sleep
CreateProcessW
GetPrivateProfileIntW
TerminateProcess
OpenProcess
CloseHandle
UnmapViewOfFile
ReleaseMutex
MapViewOfFile
CreateFileMappingW
WaitForSingleObject
CreateMutexW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetModuleFileNameW
CreateDirectoryW
GetCurrentThreadId
FormatMessageW
GetLastError
GetACP
WinExec
lstrlenW
lstrcatW
lstrcpyW
GetWindowsDirectoryW
GlobalSize
WideCharToMultiByte
GetTempPathW
FindClose
FindFirstFileW
MultiByteToWideChar
GetVersionExW
GetCurrentProcess
GetModuleHandleW
GetProcAddress
DeleteCriticalSection
InitializeCriticalSection
lstrcpynW
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
GlobalLock
LoadLibraryW
GlobalAlloc
GlobalFree
GlobalUnlock
FreeResource
InterlockedExchange
FindResourceW
LoadResource
LockResource
FreeEnvironmentStringsW
SizeofResource

user32

GetDCEx
LockWindowUpdate
PostThreadMessageW
GetMenuStringW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetMessageTime
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollPos
UpdateWindow
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
DefWindowProcW
SystemParametersInfoA
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetNextDlgTabItem
EndDialog
GetWindowTextLengthW
GetWindowTextW
SetFocus
IsWindowEnabled
SetWindowTextW
IsDialogMessageW
SendDlgItemMessageW
GetNextDlgGroupItem
GetDlgItem
EndPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
TabbedTextOutW
DispatchMessageW
TranslateMessage
PeekMessageW
CallWindowProcW
SetWindowRgn
GetAsyncKeyState
SetRect
GetCapture
MoveWindow
UnionRect
EqualRect
DrawIcon
GetWindowPlacement
PostQuitMessage
IsIconic
AppendMenuW
LoadIconW
SetWindowPlacement
GetLastActivePopup
SetForegroundWindow
ShowWindow
GetWindowThreadProcessId
SetWindowPos
GetDlgCtrlID
ModifyMenuW
GetMenuState
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetTopWindow
DrawMenuBar
EnableMenuItem
GetWindow
TranslateAcceleratorW
SetParent
GetMessagePos
InvalidateRgn
CopyAcceleratorTableW
CharNextW
MessageBeep
CopyIcon
SetCursor
ScreenToClient
LoadMenuW
SetCaretPos
ShowScrollBar
GetFocus
LoadCursorW
RegisterClipboardFormatW
ShowCaret
SetTimer
EmptyClipboard
PtInRect
FillRect
UnregisterClassW
DestroyCaret
KillTimer
GetSysColorBrush
IsZoomed
SetWindowContextHelpId
MapDialogRect
GetMessageW
ValidateRect
SetRectEmpty
DestroyMenu
CharUpperW
GetCursorPos
WindowFromPoint
GetDC
CopyRect
ReleaseCapture
GetMenuItemID
CreateCaret
GetSubMenu
GetMenuItemCount
PostMessageW
GetMenu
ReleaseDC
IsRectEmpty
InflateRect
DrawTextW
IntersectRect
SetCapture
GetKeyboardLayout
HideCaret
RedrawWindow
SetClipboardData
InsertMenuW
CreatePopupMenu
GetClipboardData
OpenClipboard
IsClipboardFormatAvailable
GetKeyState
CloseClipboard
GetSystemMetrics
SetWindowLongW
GetWindowLongW
LoadImageW
GetSysColor
GetParent
OffsetRect
GetClientRect
IsWindowVisible
GetWindowRect
IsWindow
InvalidateRect
SendMessageW
EnableWindow
BeginPaint
UnregisterClassA

gdi32

ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
CreateBitmap
GetDeviceCaps
SetViewportExtEx
SetRectRgn
GetMapMode
GetCharWidthW
StretchDIBits
GetTextMetricsW
GetBkColor
GetTextColor
GetRgnBox
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
GetTextExtentPoint32W
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetTextColor
SetBkMode
SetBkColor
RestoreDC
SaveDC
PatBlt
CreateFontIndirectW
SetBoundsRect
FrameRgn
CreateRectRgnIndirect
BitBlt
TextOutW
CombineRgn
CreateRectRgn
TranslateCharsetInfo
CreateSolidBrush
GetStockObject
DeleteObject
SelectObject
SetDIBColorTable
GetDIBColorTable
DeleteDC
CreateDIBSection
StretchBlt
CreateCompatibleDC
GetObjectW
CreateCompatibleBitmap
CreateFontW

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegEnumKeyW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegDeleteKeyW
RegQueryValueExW
RegOpenKeyW
RegCloseKey
RegQueryValueW

shell32

ShellExecuteW

comctl32

InitCommonControlsEx

shlwapi

PathFindExtensionW
PathRemoveExtensionW
PathStripToRootW
PathIsUNCW
PathFindFileNameW

oledlg

OleUIBusyW

ole32

CoTaskMemAlloc
CoUninitialize
CoCreateInstance
CoInitialize
CreateStreamOnHGlobal
CoTaskMemFree
CLSIDFromString
CoRegisterMessageFilter
OleFlushClipboard
CLSIDFromProgID
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard

oleaut32

SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
VariantClear
VarDateFromStr
SysAllocStringLen
VariantChangeType
VariantInit
SysStringLen
SysFreeString
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize

gdiplus

GdiplusShutdown
GdipGetImagePaletteSize
GdipDisposeImage
GdipAlloc
GdipCloneImage
GdipCreateBitmapFromStream
GdipDrawImageI
GdipGetImageHeight
GdipFree
GdipDeleteGraphics
GdipGetImagePalette
GdipGetImageWidth
GdiplusStartup
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImagePixelFormat

winmm

sndPlaySoundW
timeGetTime

skyprousb

ord10
ord35
ord9
ord28
ord8
ord7
ord6
ord4
ord2
ord32
ord11
ord12
ord13
ord14
ord15
ord1
ord34

ws2_32

select
ioctlsocket
inet_ntoa
gethostbyname
WSACleanup
WSAStartup
sendto
__WSAFDIsSet
getsockname
connect
listen
bind
htonl
setsockopt
socket
inet_addr
htons
accept
closesocket
ntohs
recvfrom
WSAGetLastError

Sections

.text
Size: 676KB - Virtual size: 674KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 160KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SkyPRO_O
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 560KB - Virtual size: 557KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8d9776bffbb7b9393a963b2e844a2d5c

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

gdiplus

winmm

skyprousb

ws2_32

Sections

.text Size: 676KB - Virtual size: 674KB

.rdata Size: 160KB - Virtual size: 157KB

.data Size: 16KB - Virtual size: 55KB

SkyPRO_O Size: 4KB - Virtual size: 4B

.rsrc Size: 560KB - Virtual size: 557KB

.text
Size: 676KB - Virtual size: 674KB

.rdata
Size: 160KB - Virtual size: 157KB

.data
Size: 16KB - Virtual size: 55KB

SkyPRO_O
Size: 4KB - Virtual size: 4B

.rsrc
Size: 560KB - Virtual size: 557KB