6146997eb7f8a9373d71e1fed15bef0944ca15681438802d5a90e0fd92b19e72

Sharing

Copy URL

Twitter E-mail

General

Target

6146997eb7f8a9373d71e1fed15bef0944ca15681438802d5a90e0fd92b19e72
Size

2.9MB
MD5

dda97930e9174628611076d7b0b49fef
SHA1

94add46c29963f19147ee8830cb7f3f50dd8d6f1
SHA256

6146997eb7f8a9373d71e1fed15bef0944ca15681438802d5a90e0fd92b19e72
SHA512

19cd62c7df8de54c0720d02a30eb2ef5a0031de9bdc870f41268661c98d9cf5a17bda0ba4059696531c12fa528b2649405c2896cb29de6a97d86650186f59ec9
SSDEEP

49152:m7A9BOWLfWQYj6kfC4O2Ic9wenFBfp9bsQT1:tTLyj5fC4zI8nDb4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6146997eb7f8a9373d71e1fed15bef0944ca15681438802d5a90e0fd92b19e72

Files

6146997eb7f8a9373d71e1fed15bef0944ca15681438802d5a90e0fd92b19e72
.exe windows:4 windows x86 arch:x86

7aca3907037670ec21c387e20635fd40

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvfw32

DrawDibDraw

avifil32

AVIStreamInfoA
AVIStreamGetFrame

rasapi32

RasHangUpA
RasGetConnectStatusA
RasEnumConnectionsA

winmm

midiStreamProperty
midiOutPrepareHeader
midiStreamOut
midiStreamStop
midiOutReset
midiStreamClose
midiStreamRestart
midiStreamOpen
midiOutUnprepareHeader
waveOutOpen
waveOutGetNumDevs
waveOutClose
waveOutReset
waveOutPause
waveOutWrite
waveOutPrepareHeader
waveOutUnprepareHeader
PlaySoundA
timeGetTime

ws2_32

socket
setsockopt
recvfrom
ioctlsocket
connect
htons
getpeername
accept
WSASetLastError
WSAAsyncSelect
closesocket
send
select
WSACleanup
WSAStartup
gethostbyname
inet_ntoa
inet_addr
recv
gethostname

kernel32

GetVersion
FlushInstructionCache
FileTimeToSystemTime
GetTimeZoneInformation
SetLastError
Process32Next
Process32First
CreateToolhelp32Snapshot
SetFilePointer
GetFileSize
TerminateProcess
OpenProcess
GetCurrentProcess
IsDBCSLeadByte
lstrcmpA
lstrcmpiA
lstrcpynA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
FlushViewOfFile
InterlockedIncrement
InterlockedDecrement
LocalFree
FileTimeToLocalFileTime
DuplicateHandle
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
LocalAlloc
TlsAlloc
GlobalHandle
TlsFree
TlsSetValue
LocalReAlloc
TlsGetValue
GetFileTime
GetCurrentThread
GlobalFlags
SetErrorMode
GetProcessVersion
GetCPInfo
GetOEMCP
GetStartupInfoA
RtlUnwind
RaiseException
GetSystemTime
GetLocalTime
GetFileType
HeapSize
GetACP
SetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
SetEnvironmentVariableA
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
CompareStringA
CompareStringW
IsBadReadPtr
IsBadCodePtr
GetSystemDirectoryA
Beep
GetWindowsDirectoryA
LoadLibraryExA
CreateSemaphoreA
ResumeThread
ReleaseSemaphore
EnterCriticalSection
LeaveCriticalSection
GetProfileStringA
WriteFile
WaitForMultipleObjects
CreateFileA
DeviceIoControl
SetEvent
FindResourceA
LoadResource
LockResource
ReadFile
lstrlenW
GetModuleFileNameA
WideCharToMultiByte
MultiByteToWideChar
GetCurrentThreadId
ExitProcess
GlobalSize
GlobalFree
DeleteCriticalSection
InitializeCriticalSection
lstrcatA
lstrlenA
WinExec
lstrcpyA
FindNextFileA
GlobalReAlloc
HeapFree
HeapReAlloc
GetProcessHeap
HeapAlloc
GetUserDefaultLCID
GetFullPathNameA
FreeLibrary
LoadLibraryA
GetLastError
GetVersionExA
WritePrivateProfileStringA
GetPrivateProfileStringA
CreateThread
CreateEventA
Sleep
OutputDebugStringA
GlobalAlloc
GlobalLock
GlobalUnlock
GetTempPathA
FindFirstFileA
FindClose
GetFileAttributesA
MoveFileA
DeleteFileA
CopyFileA
CreateDirectoryA
SetCurrentDirectoryA
GetVolumeInformationA
GetModuleHandleA
GetProcAddress
MulDiv
GetCommandLineA
GetTickCount
CreateProcessA
WaitForSingleObject
CloseHandle
GetCurrentProcessId
InterlockedExchange

user32

ScrollWindowEx
IsDialogMessageA
MoveWindow
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetMenuItemCount
GetMenuItemRect
GetMenuItemID
GetMenuState
GetWindowTextA
GetClassNameA
DrawStateA
FrameRect
GetNextDlgTabItem
LoadIconA
TranslateMessage
DrawFrameControl
DrawEdge
DrawFocusRect
WindowFromPoint
GetMessageA
DispatchMessageA
SetRectEmpty
RegisterClipboardFormatA
CreateIconFromResourceEx
CreateIconFromResource
DrawIconEx
CreatePopupMenu
AppendMenuA
ModifyMenuA
CreateMenu
CreateAcceleratorTableA
GetDlgCtrlID
GetSubMenu
EnableMenuItem
ClientToScreen
EnumDisplaySettingsA
LoadImageA
SystemParametersInfoA
ShowWindow
IsWindowEnabled
TranslateAcceleratorA
GetKeyState
CopyAcceleratorTableA
PostQuitMessage
IsZoomed
GetClassInfoA
DefWindowProcA
GetSystemMenu
DeleteMenu
GetMenu
SetMenu
PeekMessageA
EndDialog
SetFocus
GetActiveWindow
GetWindow
DestroyAcceleratorTable
SetWindowRgn
GetMessagePos
ScreenToClient
ChildWindowFromPointEx
CopyRect
LoadBitmapA
WinHelpA
KillTimer
SetTimer
ReleaseCapture
GetCapture
SetCapture
GetScrollRange
SetScrollRange
SetScrollPos
SetRect
IntersectRect
PtInRect
OffsetRect
IsWindowVisible
EnableWindow
RedrawWindow
GetWindowLongA
SetWindowLongA
GetSysColor
SetActiveWindow
SetCursorPos
LoadCursorA
SetCursor
GetDC
FillRect
InvertRect
IsRectEmpty
ScrollDC
ReleaseDC
IsChild
TrackPopupMenu
DestroyMenu
SetForegroundWindow
GetWindowRect
EqualRect
UpdateWindow
ValidateRect
InvalidateRect
GetClientRect
GetFocus
GetParent
GetTopWindow
PostMessageA
IsWindow
SetParent
DestroyCursor
SendMessageA
SetWindowPos
MessageBoxA
GetCursorPos
GetSystemMetrics
IsClipboardFormatAvailable
EmptyClipboard
SetClipboardData
OpenClipboard
GetClipboardData
CloseClipboard
wsprintfA
WaitForInputIdle
CreateDialogIndirectParamA
DestroyWindow
EndPaint
BeginPaint
GetWindowTextLengthA
CharUpperA
FindWindowExA
GetDlgItem
FindWindowA
GetWindowThreadProcessId
CheckMenuItem
SendDlgItemMessageA
MapWindowPoints
AdjustWindowRectEx
GetScrollPos
RegisterClassA
CreateWindowExA
GetClassLongA
GrayStringA
DrawTextA
TabbedTextOutA
WindowFromDC
GetDesktopWindow
IsMenu
DrawMenuBar
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetSysColorBrush
GetWindowDC
GetMenuItemInfoA
GetForegroundWindow
CreateIconIndirect
GetIconInfo
CopyIcon
GetMessageTime
GetLastActivePopup
RegisterWindowMessageA
InflateRect
GetWindowPlacement
LoadStringA
SetWindowTextA
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
IsIconic
DestroyIcon
UnregisterClassA

gdi32

GetObjectA
GetCurrentObject
RoundRect
Pie
Chord
EndPage
Arc
DPtoLP
DeleteDC
StartDocA
Polygon
StartPage
BitBlt
GetPixel
CreateCompatibleDC
SetPixelV
Ellipse
GetTextExtentPoint32A
Rectangle
LPtoDP
EndDoc
GetStockObject
CreateFontIndirectA
CreateSolidBrush
FillRgn
GetViewportExtEx
CreateRectRgn
CombineRgn
PatBlt
CreatePen
SelectObject
CreatePatternBrush
CreateBitmap
CreateHatchBrush
CreateBrushIndirect
CreateDCA
CreateCompatibleBitmap
GetPolyFillMode
GetStretchBltMode
GetROP2
GetBkColor
GetBkMode
GetTextColor
CreateRoundRectRgn
CreateEllipticRgn
PathToRegion
EndPath
BeginPath
GetWindowOrgEx
GetViewportOrgEx
GetWindowExtEx
GetDIBits
RealizePalette
SelectPalette
StretchBlt
CreatePalette
GetSystemPaletteEntries
CreateDIBitmap
DeleteObject
SelectClipRgn
CreatePolygonRgn
GetClipRgn
SetStretchBltMode
ExtCreateRegion
SetPixel
CreateDIBSection
CreateRectRgnIndirect
SetBkColor
TextOutA
SetBkMode
SetTextColor
SetDIBitsToDevice
FrameRgn
OffsetRgn
GetTextMetricsA
LineTo
MoveToEx
GetClipBox
PtVisible
RectVisible
ExtTextOutA
Escape
SaveDC
RestoreDC
SetPolyFillMode
SetROP2
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExcludeClipRect
ExtSelectClipRgn
GetDeviceCaps

msimg32

TransparentBlt
AlphaBlend
GradientFill

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

comdlg32

GetSaveFileNameA
GetFileTitleA
ChooseFontA
ChooseColorA
GetOpenFileNameA

advapi32

RegOpenKeyExA
RegSetValueExA
RegQueryValueA
RegCreateKeyExA
RegCloseKey

shell32

SHBrowseForFolderA
ShellExecuteA
Shell_NotifyIconA
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderPathA

ole32

CoCreateInstance
OleRun
OleInitialize
CLSIDFromProgID
CLSIDFromString
OleUninitialize

oleaut32

SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetElement
VariantCopyInd
VariantInit
SafeArrayGetDim
VariantCopy
VariantClear
VariantChangeType
SafeArrayGetUBound
SafeArrayGetLBound
UnRegisterTypeLi
OleCreatePictureIndirect
LoadTypeLi
LHashValOfNameSys
RegisterTypeLi
SafeArrayPutElement
SafeArrayCreate
SafeArrayDestroy
SysAllocString

comctl32

ImageList_AddMasked
ImageList_Duplicate
ImageList_Write
ImageList_Read
ImageList_LoadImageA
ImageList_Create
ImageList_Destroy
ord17
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_ReplaceIcon
ImageList_Draw
ImageList_GetImageCount
ImageList_GetIcon
ImageList_SetBkColor

wininet

InternetCloseHandle

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 656KB - Virtual size: 654KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 160KB - Virtual size: 655KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7aca3907037670ec21c387e20635fd40

Headers

File Characteristics

Imports

msvfw32

avifil32

rasapi32

winmm

ws2_32

kernel32

user32

gdi32

msimg32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

wininet

Sections

.text Size: 2.0MB - Virtual size: 2.0MB

.rdata Size: 656KB - Virtual size: 654KB

.data Size: 160KB - Virtual size: 655KB

.rsrc Size: 84KB - Virtual size: 81KB

.text
Size: 2.0MB - Virtual size: 2.0MB

.rdata
Size: 656KB - Virtual size: 654KB

.data
Size: 160KB - Virtual size: 655KB

.rsrc
Size: 84KB - Virtual size: 81KB