d520790c8e54febd2dfc19e75dc965f3a53ca0a34e8ae8ec0103432aef5dd87e

Sharing

Copy URL Twitter E-mail

General

Target

d520790c8e54febd2dfc19e75dc965f3a53ca0a34e8ae8ec0103432aef5dd87e
Size

2.2MB
MD5

067ee81b76e68592a1c48125a37c29ee
SHA1

e3e1945bbcd66fdc11b600779cc7f083c455df69
SHA256

d520790c8e54febd2dfc19e75dc965f3a53ca0a34e8ae8ec0103432aef5dd87e
SHA512

ebeeb3fbcebd2f3755bbbf5fcddbe04eeacec0301f9248e0ef3c9eb928b8b7cae4465be6fbbbd3bc08a16b8970c55cbde780b80e2305961f25306ff78a75b001
SSDEEP

49152:yuC+ChQTlRGuR1vOrUwd7JzoGOd+tKlqgx+PewgfeVOYdBUG7EiVyQESlIq:y9+CUlRGuR1vud1o9d+tKkgAPewgfEWk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d520790c8e54febd2dfc19e75dc965f3a53ca0a34e8ae8ec0103432aef5dd87e

Files

d520790c8e54febd2dfc19e75dc965f3a53ca0a34e8ae8ec0103432aef5dd87e
.exe windows:5 windows x86 arch:x86

ceb5662cda2b481e0c9ca7f8abe818a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cfgmgr32

CM_Get_Parent
CM_Get_Child
CM_Get_Sibling
CM_Get_DevNode_Registry_PropertyA
CM_Get_Device_IDA

kernel32

IsProcessorFeaturePresent
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetDriveTypeW
GetConsoleCP
GetConsoleMode
CompareStringW
GetCurrentDirectoryW
WriteConsoleW
CreateFileW
SetEnvironmentVariableA
Sleep
WideCharToMultiByte
SizeofResource
LockResource
LoadResource
FindResourceW
DeleteFileA
GetLocalTime
CreateDirectoryA
GetPrivateProfileStringA
WritePrivateProfileStringA
ReleaseMutex
GetSystemDefaultLangID
CreateMutexA
GetModuleFileNameA
LCMapStringW
CreateFileA
CloseHandle
DeviceIoControl
GetLastError
GetVersionExA
SetThreadLocale
LoadLibraryA
GetProcAddress
GetPrivateProfileIntA
CopyFileA
OpenMutexA
FreeLibrary
SetLastError
GetModuleHandleA
ActivateActCtx
GlobalReAlloc
GlobalSize
GlobalLock
GlobalUnlock
MulDiv
GetTickCount
VirtualProtect
GlobalFree
GlobalAlloc
FindResourceA
GetCurrentProcessId
lstrlenA
MultiByteToWideChar
lstrlenW
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoW
GetTimeZoneInformation
IsValidCodePage
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapQueryInformation
HeapSize
GetFileType
SetStdHandle
CreateThread
ExitThread
VirtualQuery
GetSystemInfo
VirtualAlloc
RaiseException
HeapReAlloc
RtlUnwind
GetStartupInfoW
HeapSetInformation
GetCommandLineA
GetDateFormatA
LocalFree
HeapCreate
GetStdHandle
DeactivateActCtx
GetTimeFormatA
HeapFree
FormatMessageA
lstrcmpW
LoadLibraryW
HeapAlloc
ExitProcess
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
GetUserDefaultLCID
SearchPathA
GetTempPathA
GetTempFileNameA
GetNumberFormatA
GetWindowsDirectoryA
InitializeCriticalSectionAndSpinCount
GetFileTime
GetFileSizeEx
GetFileAttributesA
GetFileAttributesExA
SetErrorMode
GetCurrentDirectoryA
lstrcpyA
GetACP
GetOEMCP
GetCPInfo
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GlobalFlags
FindResourceExW
GetProfileIntA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
InterlockedExchange
GetModuleHandleW
InterlockedDecrement
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CompareStringA
lstrcmpiA
GetThreadLocale
FileTimeToLocalFileTime
FileTimeToSystemTime
FindFirstFileA
FindNextFileA
FindClose
lstrcmpA
CreateEventA
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom

user32

LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
CopyImage
OpenClipboard
EnumChildWindows
LockWindowUpdate
UnpackDDElParam
ReuseDDElParam
LoadMenuA
LoadImageA
DestroyIcon
LoadAcceleratorsA
InsertMenuItemA
BringWindowToTop
TranslateAcceleratorA
SetClassLongA
SetParent
CreateAcceleratorTableA
LoadAcceleratorsW
DestroyAcceleratorTable
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
CopyAcceleratorTableA
PostThreadMessageA
WaitMessage
UnregisterClassA
GetMenuDefaultItem
SetMenuDefaultItem
CreatePopupMenu
IsMenu
MonitorFromPoint
UpdateLayeredWindow
EnableScrollBar
UnionRect
NotifyWinEvent
SetWindowRgn
LoadMenuW
DeleteMenu
LoadCursorW
SetLayeredWindowAttributes
EnumDisplayMonitors
SetRectEmpty
GetSysColorBrush
RealChildWindowFromPoint
RegisterClipboardFormatA
DestroyMenu
GetMenuItemInfoA
ShowOwnedPopups
SetWindowContextHelpId
MessageBeep
IsZoomed
PostQuitMessage
CharUpperA
DrawStateA
GetMessageA
TranslateMessage
ValidateRect
GetDesktopWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuA
EnableMenuItem
CheckMenuItem
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SetDlgItemInt
GetDlgItemInt
CheckDlgButton
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
CharNextA
IsChild
IsCharLowerA
CallNextHookEx
GetClassLongA
GetClassNameA
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
CallWindowProcA
GetMenu
GetWindow
MapVirtualKeyA
GetKeyNameTextA
GetMenuState
GetMenuStringA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
GetWindowThreadProcessId
GetLastActivePopup
MessageBoxA
EndPaint
BeginPaint
GetWindowDC
SetPropA
GetActiveWindow
SetActiveWindow
MapDialogRect
SetWindowPos
ShowWindow
GetPropA
RemovePropA
GetAsyncKeyState
SetFocus
GetDlgItem
IsWindowEnabled
WindowFromPoint
ClientToScreen
IsWindowVisible
IsRectEmpty
GetDoubleClickTime
GrayStringA
DrawTextExA
TabbedTextOutA
ReleaseCapture
InvalidateRgn
GetNextDlgGroupItem
DrawFocusRect
HideCaret
GetIconInfo
GetWindowRgn
DestroyCursor
CreateMenu
SubtractRect
GetUpdateRect
GetCapture
ClipCursor
SetCapture
InvertRect
PtInRect
GetFocus
GetMessagePos
IsClipboardFormatAvailable
GetKeyState
IntersectRect
DefWindowProcA
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
WinHelpA
MapVirtualKeyExA
SetRect
LoadCursorA
DrawTextA
CharUpperBuffA
CopyIcon
SetCursorPos
DrawFrameControl
SetWindowsHookExA
DrawIconEx
InflateRect
DrawEdge
FrameRect
ReleaseDC
GetDC
SystemParametersInfoA
ScreenToClient
GetCursorPos
RegisterDeviceNotificationA
AppendMenuA
GetSystemMenu
UnregisterDeviceNotification
GetClassInfoA
CopyRect
CharLowerW
CharUpperW
IsCharAlphaA
GetDlgCtrlID
DrawIcon
GetSystemMetrics
IsIconic
LoadIconW
SetWindowLongA
GetWindowLongA
SetTimer
KillTimer
IsWindow
SetCursor
OffsetRect
FillRect
GetClientRect
UpdateWindow
InvalidateRect
RedrawWindow
GetSysColor
MsgWaitForMultipleObjects
DispatchMessageA
PeekMessageA
PostMessageA
SendMessageA
GetParent
GetWindowRect
EnableWindow
SetMenuItemBitmaps

gdi32

PatBlt
SaveDC
RestoreDC
SetBkColor
SetBkMode
SetPolyFillMode
SetROP2
SetTextColor
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
SelectObject
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
CreateBitmap
SelectPalette
GetObjectType
ExtTextOutA
GetTextMetricsA
CopyMetaFileA
CreateDCA
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
EnumFontFamiliesExA
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
CreateRoundRectRgn
CreateDIBSection
OffsetRgn
GetRgnBox
GetTextColor
SetDIBColorTable
GetDIBits
RealizePalette
StretchBlt
SetPixel
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
ExtFloodFill
SetPaletteEntries
GetWindowOrgEx
LPtoDP
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetTextFaceA
SetPixelV
CreateHatchBrush
Escape
TextOutA
RectVisible
PtVisible
CreatePen
GetBkColor
GetDeviceCaps
LineTo
MoveToEx
GetCurrentObject
GetTextExtentPoint32A
Rectangle
GetStockObject
BitBlt
SetViewportOrgEx
GetViewportOrgEx
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectA
DeleteObject
CreateSolidBrush
GetObjectA
CreateFontA

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegEnumValueA
RegEnumKeyExA
RegOpenKeyExA

shell32

SHAppBarMessage
SHGetFileInfoA
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListA
ShellExecuteA
DragQueryFileA
DragFinish
SHBrowseForFolderA

comctl32

ImageList_GetIconSize
InitCommonControlsEx

shlwapi

PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW
PathFindExtensionA
PathIsDirectoryA
PathFindFileNameA

ole32

OleLockRunning
CoRegisterMessageFilter
CoRevokeClassObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CreateStreamOnHGlobal
CoInitialize
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
OleFlushClipboard
OleIsCurrentClipboard
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
CoInitializeEx
CoCreateInstance
CoUninitialize
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
DoDragDrop
CoTaskMemFree
OleSetClipboard

oleaut32

VariantTimeToSystemTime
SysAllocString
OleCreateFontIndirect
VarBstrFromDate
SafeArrayDestroy
VariantCopy
SysStringLen
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
SysAllocStringByteLen
SysFreeString
VarUdateFromDate
SystemTimeToVariantTime

oledlg

ord8

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageRectI

setupapi

SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundA

Exports

Exports

?test@@YAHHH@Z

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 328KB - Virtual size: 327KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ceb5662cda2b481e0c9ca7f8abe818a3

Headers

DLL Characteristics

File Characteristics

Imports

cfgmgr32

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

setupapi

oleacc

imm32

winmm

Exports

Exports

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 328KB - Virtual size: 327KB

.data Size: 27KB - Virtual size: 56KB

.rsrc Size: 120KB - Virtual size: 120KB

.reloc Size: 188KB - Virtual size: 187KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 328KB - Virtual size: 327KB

.data
Size: 27KB - Virtual size: 56KB

.rsrc
Size: 120KB - Virtual size: 120KB

.reloc
Size: 188KB - Virtual size: 187KB