33f2ab93554d762906d8f7efe929cb99

Sharing

Copy URL Twitter E-mail

General

Target

33f2ab93554d762906d8f7efe929cb99
Size

1.9MB
MD5

33f2ab93554d762906d8f7efe929cb99
SHA1

93910918f8de82ed5263721e266d4abc76a0b457
SHA256

87a3ada9f127a33a9b686b388f2f2e00a20ed8825d4d68ff4130c1ea2a164fa3
SHA512

0ee83e45dc3b7b24a4b45f846f88ca461882e2d82762f597ec54db0fc41c7eadd751d68bc98a5b4859f4b99dbaf691804f6d69e621acce8d63b9e96f050c3735
SSDEEP

49152:vaIxxkn3VadrBa9CZX7zBbMRqCLw4Zm3qf2daQ2rf6o:cbjmaf2dpo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33f2ab93554d762906d8f7efe929cb99

Files

33f2ab93554d762906d8f7efe929cb99
.exe windows:10 windows x64 arch:x64

70cb5812c8e4008e4261dd9ab57bd42e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA

kernel32

GetTickCount
MulDiv
GlobalFree
GlobalUnlock
GlobalLock
GetModuleHandleW
GlobalAlloc
CreateSemaphoreExW
CreateMutexExW
GetCurrentProcessId
InitOnceComplete
InitializeCriticalSection
LeaveCriticalSection
InitOnceBeginInitialize
GetCommandLineW
HeapSetInformation
CreateEventW
OpenEventW
LockResource
GetModuleFileNameW
FindResourceExW
LoadResource
SizeofResource
MultiByteToWideChar
RaiseException
lstrcmpiW
LoadLibraryExW
FreeLibrary
OpenSemaphoreW
WaitForSingleObject
DeleteCriticalSection
EnterCriticalSection
WaitForSingleObjectEx
ReleaseMutex
ReleaseSemaphore
CloseHandle
SetEvent
SetLastError
OutputDebugStringW
IsDebuggerPresent
GetLastError
GetProcAddress
DebugBreak
GetModuleFileNameA
GetModuleHandleExW
HeapAlloc
GetProcessHeap
HeapFree
GetACP
GetSystemDefaultLCID
GetVersionExA
GetProfileIntA
GetUserDefaultLCID
GetSystemDefaultLangID
DisableThreadLibraryCalls
ResetEvent
WaitForMultipleObjects
TryEnterCriticalSection
ResumeThread
SetThreadPriority
CreateThread
GetLocaleInfoW
GetUserDefaultUILanguage
FreeResource
FindResourceW
LoadLibraryW
LocalFree
LocalAlloc
GetProcessMitigationPolicy
OutputDebugStringA
GetSystemTimeAsFileTime
QueryPerformanceCounter
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetStartupInfoW
Sleep
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
DecodePointer
EncodePointer
LoadLibraryExA
VirtualAlloc
GetCurrentProcess
VirtualFree
WideCharToMultiByte
GetStringTypeExW
HeapDestroy
HeapReAlloc
HeapSize
GetCurrentThreadId
FormatMessageW

gdi32

BitBlt
CreateDIBSection
GetRegionData
CreateSolidBrush
ExtSelectClipRgn
SetDIBColorTable
GetObjectW
SetStretchBltMode
OffsetRgn
ExtCreateRegion
GetDIBColorTable
StretchBlt
CreateFontIndirectW
GetTextMetricsW
GetTextExtentPointW
GetTextColor
SetBkMode
CreateCompatibleBitmap
CreateBitmap
GetBitmapBits
GetStockObject
Ellipse
CreateCompatibleDC
SetROP2
CreateFontW
Polyline
SetLayout
SetWindowExtEx
StretchDIBits
GetTextFaceW
GetCharABCWidthsW
GetCharWidthA
GetCharWidth32A
GetCharWidthW
GetOutlineTextMetricsA
ExtTextOutA
Escape
SetTextAlign
SetBkColor
GetObjectType
CreatePalette
SelectPalette
RealizePalette
EnumFontFamiliesExW
SetDCBrushColor
RestoreDC
DeleteDC
GetDeviceCaps
SetViewportOrgEx
SetWindowOrgEx
SetMapMode
SaveDC
LPtoDP
CreateDCW
CombineRgn
CreateRectRgnIndirect
DeleteObject
SelectClipRgn
PatBlt
PtInRegion
CreateRectRgn
CreatePen
SelectObject
MoveToEx
LineTo
SetTextColor
CreateRoundRectRgn
CreateICW
ExtTextOutW
ScriptTextOut
ScriptGetLogicalWidths
ScriptItemize
ScriptPlace
ScriptShape
ScriptFreeCache
ScriptGetCMap
ScriptGetProperties
GetGlyphIndicesW
GetCurrentObject
GetBkColor
GetGlyphOutlineW
GetOutlineTextMetricsW
GetFontData
TranslateCharsetInfo
GetPixel
GetTextCharsetInfo
GetTextMetricsA
GetObjectA
CreateFontIndirectA

user32

GetKeyboardLayout
DispatchMessageW
PeekMessageW
CharUpperW
PostThreadMessageW
GetKeyboardLayoutList
UnregisterClassW
SendMessageA
IsWindowUnicode
LoadCursorA
LoadBitmapA
GetThreadDesktop
CharNextW
LoadBitmapW
SetProcessDPIAware
MsgWaitForMultipleObjectsEx
GetUserObjectInformationW
GetWindowLongPtrW
GetDoubleClickTime
SetCaretBlinkTime
InvertRect
DestroyCaret
MenuItemFromPoint
SetWindowLongW
WindowFromDC
GetSystemMetrics
DeleteMenu
MonitorFromRect
SetMenuItemInfoW
DestroyIcon
GetMessageTime
SetFocus
DestroyCursor
RegisterClassW
GetClassInfoW
CreateCursor
GetDesktopWindow
GetWindowDC
DrawTextW
SystemParametersInfoW
GetParent
DrawFrameControl
InflateRect
GetMessagePos
NotifyWinEvent
SendMessageW
GetPropW
TrackMouseEvent
SetPropW
RemovePropW
ScreenToClient
FrameRect
GetSysColorBrush
FillRect
SetWindowRgn
ValidateRect
GetUpdateRect
GetWindowLongW
EndDeferWindowPos
GetWindowRect
DeferWindowPos
BeginDeferWindowPos
ReleaseCapture
SetCapture
PostMessageW
SetWindowPos
GetSysColor
EqualRect
DrawIconEx
IntersectRect
CreateWindowExW
GetClassInfoExW
RegisterClassExW
IsWindow
DestroyWindow
GetKeyState
PtInRect
UnionRect
IsChild
GetFocus
BeginPaint
GetClientRect
GetDC
ReleaseDC
EndPaint
GetClipboardFormatNameW
CallNextHookEx
GetWindowThreadProcessId
WindowFromPoint
AdjustWindowRectEx
OffsetRect
DestroyMenu
PostQuitMessage
SetMenuDefaultItem
AppendMenuW
GetCursorPos
CreatePopupMenu
KillTimer
SetTimer
LoadIconW
SendInput
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
RegisterClipboardFormatW
ClientToScreen
InvalidateRect
RegisterWindowMessageW
SetRectEmpty
UnhookWindowsHookEx
UnhookWinEvent
TrackPopupMenuEx
SetWinEventHook
SetWindowsHookExW
EndMenu
LoadCursorW
SetCursor
IsRectEmpty
CopyRect
CallWindowProcW
DefWindowProcW
GetWindow
SetWindowLongPtrW
UnregisterClassA
ShowWindow
EnumDisplayMonitors
GetMonitorInfoW
GetForegroundWindow
SetForegroundWindow

msvcrt

floorf
ceil
memcpy
_CxxThrowException
realloc
_errno
_onexit
ceilf
_ltow
_ltow_s
_wcsnicmp
_wcslwr_s
wcstol
iswdigit
_wtol
_wcsicmp
_wtoi
memmove
__dllonexit
_unlock
_lock
??1type_info@@UEAA@XZ
?terminate@@YAXXZ
_commode
_fmode
_wcmdln
_initterm
__setusermatherr
_cexit
_exit
exit
__set_app_type
__wgetmainargs
_amsg_exit
_XcptFilter
sqrtf
memset
_callnewh
vswprintf_s
_vscwprintf
wcsncmp
calloc
swprintf_s
_resetstkoflw
_purecall
wcscat_s
wcscpy_s
memmove_s
wcsncpy_s
??0exception@@QEAA@XZ
_vsnprintf_s
memcpy_s
_vsnwprintf
??0exception@@QEAA@AEBV0@@Z
??1exception@@UEAA@XZ
free
malloc
__C_specific_handler
__CxxFrameHandler3
memcmp
wcscmp

ntdll

RtlLookupFunctionEntry
RtlCaptureContext
RtlVirtualUnwind
EtwEventSetInformation
EtwEventUnregister
EtwEventRegister
EtwEventWriteTransfer
EtwEventWrite

ole32

CreateStreamOnHGlobal
CoGetClassObject
CoCreateFreeThreadedMarshaler
OleLockRunning
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
OleInitialize
OleUninitialize
CoUninitialize
CoInitialize
StringFromGUID2
CoCreateInstance
RegisterDragDrop
RevokeDragDrop
OleRegGetMiscStatus
CreateOleAdviseHolder
OleRegGetUserType
OleRegEnumVerbs

oleaut32

UnRegisterTypeLi
RegisterTypeLi
SysAllocStringLen
LoadTypeLi
VariantClear
VariantInit
DispCallFunc
LoadRegTypeLi
VarUI4FromStr
VarBstrCat
SysAllocString
SafeArrayAccessData
VarBstrCmp
OleCreatePropertyFrame
SysAllocStringByteLen
SysStringByteLen
SysStringLen
SafeArrayCreateVector
SafeArrayDestroy
SysFreeString
SafeArrayUnaccessData

oleacc

LresultFromObject
AccessibleObjectFromWindow

gdiplus

GdipDrawImageI
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdipCreateBitmapFromScan0
GdiplusStartup
GdiplusShutdown
GdipCreateSolidFill
GdipDeleteBrush
GdipBitmapUnlockBits
GdipCreateBitmapFromStream
GdipCreateFromHWND
GdipAlloc
GdipCloneBrush
GdipCreateFromHDC
GdipDeleteGraphics
GdipFillRectangleI
GdipSetSolidFillColor
GdipCreatePen1
GdipSetPenColor
GdipDrawLineI
GdipDeletePen
GdipBitmapLockBits
GdipGetImagePalette
GdipGetImagePaletteSize
GdipSetClipRectI
GdipCreateLineBrushI
GdipCreatePen2
GdipSetPenDashStyle
GdipSetPenDashArray
GdipDrawRectangleI
GdipGetDC
GdipReleaseDC
GdipFillEllipseI
GdipDrawEllipseI
GdipGetImageWidth
GdipFree
GdipGetImagePixelFormat
GdipGetImageHeight

shell32

Shell_NotifyIconW
ShellAboutW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

comctl32

ord8

uxtheme

DrawThemeTextEx
DrawThemeEdge
DrawThemeIcon
DrawThemeText
GetThemeColor
GetThemePartSize
GetThemeBackgroundRegion
IsThemeActive
OpenThemeData
DrawThemeBackground
CloseThemeData
GetThemeMargins

msimg32

AlphaBlend
GradientFill
TransparentBlt

dwmapi

DwmEnableBlurBehindWindow

Exports

Exports

?REExtendedRegisterClass@@YAHXZ

Sections

.text
Size: 915KB - Virtual size: 914KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 383KB - Virtual size: 383KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 404KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

70cb5812c8e4008e4261dd9ab57bd42e

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

msvcrt

ntdll

ole32

oleaut32

oleacc

gdiplus

shell32

version

comctl32

uxtheme

msimg32

dwmapi

Exports

Exports

Sections

.text Size: 915KB - Virtual size: 914KB

.rdata Size: 140KB - Virtual size: 139KB

.data Size: 31KB - Virtual size: 36KB

.pdata Size: 28KB - Virtual size: 27KB

.rsrc Size: 383KB - Virtual size: 383KB

.reloc Size: 404KB - Virtual size: 1.1MB

.text
Size: 915KB - Virtual size: 914KB

.rdata
Size: 140KB - Virtual size: 139KB

.data
Size: 31KB - Virtual size: 36KB

.pdata
Size: 28KB - Virtual size: 27KB

.rsrc
Size: 383KB - Virtual size: 383KB

.reloc
Size: 404KB - Virtual size: 1.1MB