aa8e61a8164e06d6089963f46a5977ca

Sharing

Copy URL Twitter E-mail

General

Target

aa8e61a8164e06d6089963f46a5977ca
Size

2.0MB
MD5

aa8e61a8164e06d6089963f46a5977ca
SHA1

2a610526a26e7df3ea992df13d1391edf567431f
SHA256

92815eb8276ddbbc7a9f7bea5b334629b2d1d35571f5db4c338c25edc8213576
SHA512

55d850567ab8407aaba3b07c6d5709b89f1f48091bb600e1be0ca425cadd537fe0ed974849f1586649af683c50b2f3c346598d95a6ea2309755482089a79dbcc
SSDEEP

49152:lkIXUbz9oTQxvU+bowuLN/hhwN5EVOrB+:XEdo89boDLNZiEVOr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa8e61a8164e06d6089963f46a5977ca

Files

aa8e61a8164e06d6089963f46a5977ca
.exe windows:5 windows x86 arch:x86

f24131f54e727b2c27bd8e35ff40b461

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHBindToParent
ord18
ShellExecuteA
ord727
ord25
SHGetFileInfoW
ord71
DragQueryFileW
ShellExecuteW
ord16
CommandLineToArgvW
Shell_NotifyIconA
SHGetSpecialFolderPathW
SHGetPathFromIDListW
SHGetPathFromIDListA
SHFileOperationW
SHFreeNameMappings
SHGetFolderPathW
SHGetFolderLocation
ord2
ord23
SHGetSpecialFolderPathA
ord17
ShellExecuteExW
SHBrowseForFolderW
SHGetDesktopFolder
ord152
SHGetSpecialFolderLocation

gdiplus

GdipCreateBitmapFromScan0
GdiplusShutdown
GdipGetAllPropertyItems
GdipGetPropertySize
GdiplusStartup
GdipImageGetFrameCount
GdipCreatePen1
GdipFillRectangleI
GdipImageGetFrameDimensionsCount
GdipCreateFromHDC
GdipGetPropertyItemSize
GdipCreateBitmapFromFile
GdipCreateSolidFill
GdipGetPropertyItem
GdipImageSelectActiveFrame
GdipGraphicsClear
GdipImageGetFrameDimensionsList
GdipDrawImageRectI
GdipDeleteGraphics
GdipCloneBrush
GdipDeletePen
GdipDeleteBrush
GdipCloneImage
GdipLoadImageFromFile
GdipFree
GdipAlloc
GdipCreatePath
GdipDeletePath
GdipAddPathRectangleI
GdipCreatePathGradientFromPath
GdipSetPathGradientCenterPointI
GdipDisposeImage
GdipGetImageVerticalResolution
GdipGetImageHorizontalResolution
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipSetPathGradientCenterColor
GdipSetPathGradientSurroundColorsWithCount
GdipDrawLineI
GdipGetPathGradientPointCount
GdipCreateHBITMAPFromBitmap

shlwapi

SHDeleteKeyW
PathIsRootW
StrCmpW
PathIsUNCW
PathCombineW
StrCmpLogicalW
PathRemoveFileSpecW
PathFindExtensionW
PathAppendW
StrChrW
PathStripToRootW
StrRetToBufW
PathIsDirectoryW
PathRemoveExtensionW
PathStripPathW
StrCatW
PathRenameExtensionW
PathRemoveBlanksW
SHStrDupW
PathIsRelativeW
PathIsURLW
PathCanonicalizeW
PathRemoveBackslashW
PathFileExistsA
StrStrIA
SHAutoComplete
PathIsSameRootW
StrCmpIW

psapi

GetModuleFileNameExW

mpr

WNetGetUniversalNameW

uxtheme

SetWindowTheme

winmm

PlaySoundW

kernel32

GetLocalTime
FindNextFileA
FindNextFileW
GetTempPathA
DeleteFileA
GetTempFileNameA
GetModuleHandleW
SetLastError
GetModuleHandleA
GetProcAddress
GetVersion
GetFileAttributesW
LoadLibraryA
LoadLibraryW
GetModuleFileNameW
OutputDebugStringA
lstrlenW
GlobalLock
GlobalUnlock
lstrcmpiW
GetFileAttributesExW
GetLogicalDriveStringsW
lstrcmpW
InitializeCriticalSection
GetVersionExW
FreeLibrary
InterlockedIncrement
InterlockedDecrement
CreateThread
SetThreadPriority
DeleteCriticalSection
CreateFileW
GetFileSizeEx
ReadFile
WriteFile
EnterCriticalSection
LeaveCriticalSection
GetDriveTypeW
GetCurrentDirectoryW
GetComputerNameW
GlobalMemoryStatusEx
GetDiskFreeSpaceExW
GetVolumeInformationW
SleepEx
QueueUserAPC
GetUserDefaultUILanguage
SetCurrentDirectoryW
GetLocaleInfoW
SetFileAttributesW
SetFileTime
GlobalAlloc
CreateMutexW
GetCurrentThreadId
FindClose
GetPrivateProfileStringA
WritePrivateProfileStringW
GetCommandLineW
SetUnhandledExceptionFilter
CreateMutexA
WaitForSingleObject
ReleaseMutex
FindResourceA
lstrcmpA
FreeResource
lstrlenA
LoadResource
Process32First
GetPrivateProfileIntA
SizeofResource
CreateProcessA
lstrcatA
Process32Next
LocalAlloc
WritePrivateProfileStringA
LockResource
GetModuleFileNameA
GetVersionExA
LocalFree
lstrcpyA
FlushInstructionCache
RaiseException
InitializeCriticalSectionAndSpinCount
MulDiv
VirtualFreeEx
ReadProcessMemory
VirtualAllocEx
WriteProcessMemory
IsDBCSLeadByte
lstrcmpiA
LoadLibraryExA
WinExec
Process32FirstW
Process32NextW
lstrcpyW
GetSystemTime
CreateToolhelp32Snapshot
CloseHandle
Sleep
GetLastError
FindFirstFileW
GetCurrentProcess
OpenProcess
WideCharToMultiByte
TerminateProcess
MultiByteToWideChar
FindFirstFileA
GetCurrentProcessId
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDateFormatW
GetTimeFormatW
InterlockedPopEntrySList
VirtualFree
InterlockedPushEntrySList
FormatMessageA
GetFullPathNameW
GetCurrentDirectoryA
SwitchToThread
SetEnvironmentVariableA
GetProcessHeap
WriteConsoleW
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
CreateFileA
IsValidCodePage
GetOEMCP
GetACP
GetTimeZoneInformation
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
HeapSize
GetConsoleMode
GetConsoleCP
HeapCreate
GetFileType
GetStdHandle
SetHandleCount
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
GetCPInfo
RtlUnwind
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
GetDateFormatA
GetTimeFormatA
GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapReAlloc
ExitProcess
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
DecodePointer
EncodePointer
InterlockedExchange
InterlockedCompareExchange
GetStringTypeW
CompareFileTime
ResetEvent
GetCurrentThread
CancelIo
ReadDirectoryChangesW
SetEvent
SetErrorMode
CreateEventW
ExitThread
GlobalSize
DeleteFileW
CreateHardLinkW
LocalFileTimeToFileTime
CreateDirectoryW
CompareStringW
LCMapStringW
FlushFileBuffers
SetFileValidData
SetEndOfFile
SetFilePointerEx
GetDiskFreeSpaceW
SetFilePointer
GetFileInformationByHandle
GetUserDefaultLangID
GlobalFree
SystemTimeToFileTime
TzSpecificLocalTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetFileSize

user32

SetWindowPos
GetWindowTextLengthW
IsDlgButtonChecked
DialogBoxParamW
GetWindowRect
OffsetRect
MapWindowPoints
InflateRect
ScreenToClient
MessageBoxW
CheckDlgButton
UnregisterClassA
AppendMenuW
RegisterDeviceNotificationW
UnregisterDeviceNotification
GetSysColorBrush
SetRect
DrawIconEx
GetUpdateRect
RegisterClassW
SetFocus
SetWindowTextW
DestroyIcon
GetDlgItem
DrawTextW
DrawEdge
GetMenuState
FrameRect
FindWindowExA
FindWindowA
GetTabbedTextExtentW
GetMenuStringW
SystemParametersInfoW
EndDialog
GetParent
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
EnableMenuItem
SetDlgItemTextW
GetWindowTextW
InsertMenuItemW
GetMenuItemInfoW
DeleteMenu
GetMenu
GetSubMenu
SetMenuItemInfoW
GetMessagePos
GetMenuItemCount
CreateMenu
InsertMenuW
InvalidateRect
GetClientRect
FillRect
SetClassLongW
LoadIconW
SetDlgItemInt
GetDlgItemInt
GetFocus
GetWindowLongW
EndPaint
GetDlgItemTextW
CheckMenuRadioItem
LoadStringW
SendDlgItemMessageW
LoadBitmapW
SendMessageW
LoadImageW
CheckMenuItem
GetClassNameA
GetIconInfo
DestroyAcceleratorTable
IsChild
GetDC
ReleaseDC
PtInRect
CallWindowProcW
GetKeyState
SetForegroundWindow
DestroyMenu
LoadMenuW
TrackPopupMenu
SetCursor
LoadCursorW
PostQuitMessage
SetWindowLongW
DefWindowProcW
GetMenuItemID
CreatePopupMenu
SetMenuInfo
UpdateWindow
IntersectRect
InvalidateRgn
CharNextA
GetWindowTextLengthA
SendMessageA
RegisterWindowMessageA
BeginPaint
CreateAcceleratorTableA
RedrawWindow
GetSysColor
IsWindow
ClientToScreen
PostMessageW
IsClipboardFormatAvailable
RegisterWindowMessageW
SetMenu
SetClipboardViewer
MoveWindow
ChangeClipboardChain
CreateDialogParamW
GetWindow
AppendMenuA
RegisterClassA
UpdateLayeredWindow
RegisterClassExA
GetClassInfoExA
SetWindowLongA
GetWindowLongA
CreateWindowExA
DefWindowProcA
CallWindowProcA
LoadCursorA
GetMessageA
SetActiveWindow
AttachThreadInput
DispatchMessageA
GetWindowThreadProcessId
GetForegroundWindow
GetWindowTextA
GetDesktopWindow
PostMessageA
SystemParametersInfoA
SetWindowTextA
LoadImageA
GetShellWindow
wsprintfW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
IsDialogMessageW
GetMessageW
LoadAcceleratorsW
SetWindowPlacement
GetSystemMetrics
FindWindowW
RegisterClipboardFormatW
CopyIcon
FindWindowExW
WindowFromPoint
GetCapture
SetCapture
ReleaseCapture
UnregisterClassW
GetClassLongW
GetMenuBarInfo
PrintWindow
IsWindowVisible
IsIconic
RegisterClassExW
CreateWindowExW
KillTimer
SetTimer
ShowWindow
GetWindowPlacement
EnableWindow
GetCursorPos
DestroyWindow

gdi32

TextOutW
GetDeviceCaps
GetObjectA
CreateDIBSection
CreateCompatibleBitmap
BitBlt
DeleteDC
StretchBlt
SetBrushOrgEx
SetStretchBltMode
SelectObject
CreateCompatibleDC
GetBitmapDimensionEx
SetBitmapDimensionEx
GetTextExtentPoint32W
CreateFontIndirectW
GetObjectW
CreateFontW
GetStockObject
SetBkMode
SetTextColor
CreateSolidBrush
DeleteObject

advapi32

RegisterEventSourceA
ReportEventA
DeregisterEventSource
CryptGenRandom
CryptAcquireContextW
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
GetTokenInformation
ConvertSidToStringSidW
LookupAccountSidW
GetSecurityInfo
RegSetValueExA
RegCreateKeyExA
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
OpenProcessToken

ole32

CLSIDFromProgID
OleInitialize
CreateStreamOnHGlobal
CoTaskMemAlloc
RevokeDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CoInitializeEx
OleGetClipboard
DoDragDrop
CoTaskMemFree
RegisterDragDrop
OleLockRunning
CoInitialize
CoUninitialize
CoCreateInstance
OleSetClipboard
OleDuplicateData
StgCreateStorageEx
CLSIDFromString
CoGetClassObject
CoTaskMemRealloc
StgCreateDocfile
OleCreate
StringFromGUID2
ReleaseStgMedium
OleUninitialize

oleaut32

SysStringLen
LoadTypeLi
VariantInit
SysAllocStringLen
VariantClear
SysFreeString
LoadRegTypeLi
VarUI4FromStr
OleCreateFontIndirect
SysAllocString

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
VerQueryValueA

iphlpapi

GetAdaptersAddresses

userenv

ExpandEnvironmentStringsForUserW

netapi32

Netbios

wininet

InternetOpenA
InternetCrackUrlA
HttpQueryInfoA
InternetConnectA
InternetCloseHandle
HttpOpenRequestA
HttpSendRequestA
InternetReadFileExA

imagehlp

MakeSureDirectoryPathExists

comctl32

InitCommonControlsEx
ImageList_Draw
ord410
ord412
ord413
_TrackMouseEvent

winspool.drv

GetPrinterW
ClosePrinter
OpenPrinterW

comdlg32

GetSaveFileNameW

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 206KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 79KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 448KB - Virtual size: 448KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 142KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f24131f54e727b2c27bd8e35ff40b461

Headers

DLL Characteristics

File Characteristics

Imports

shell32

gdiplus

shlwapi

psapi

mpr

uxtheme

winmm

kernel32

user32

gdi32

advapi32

ole32

oleaut32

version

iphlpapi

userenv

netapi32

wininet

imagehlp

comctl32

winspool.drv

comdlg32

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 206KB - Virtual size: 205KB

.data Size: 79KB - Virtual size: 103KB

.rsrc Size: 448KB - Virtual size: 448KB

.reloc Size: 142KB - Virtual size: 144KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 206KB - Virtual size: 205KB

.data
Size: 79KB - Virtual size: 103KB

.rsrc
Size: 448KB - Virtual size: 448KB

.reloc
Size: 142KB - Virtual size: 144KB