d3ab8fa4c1a6a9eb1111b6593cdd7573

Sharing

Copy URL Twitter E-mail

General

Target

d3ab8fa4c1a6a9eb1111b6593cdd7573
Size

297KB
MD5

d3ab8fa4c1a6a9eb1111b6593cdd7573
SHA1

60e3185ae4cd619d45c19ade8d9e0163c5056e45
SHA256

3229b40faf1cfc4b400d46453344206c2f054e7fe873608b58f9d29af2923163
SHA512

d534f0612afbf26afc2a89aea6a9869c2c684b79daff756b243d22b95db5a9312a151f288d11bb4db56032a272dca29a72f5a58eb80ca83c8200cafcfedf1611
SSDEEP

6144:KOS5rUrWM3hifHoRxXy05qh/Dcar0kEEMbcUkZZ5G1:wUrWMR4Ho7C7aEMbci

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3ab8fa4c1a6a9eb1111b6593cdd7573

Files

d3ab8fa4c1a6a9eb1111b6593cdd7573
.exe windows:4 windows x86 arch:x86

0da79132d48d34710d8239985ffbe403

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
CreateFileW
DuplicateHandle
SetErrorMode
GetThreadLocale
SizeofResource
GetProcessVersion
WritePrivateProfileStringW
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
InterlockedIncrement
WriteFile
LoadLibraryA
lstrlenA
MultiByteToWideChar
GetVersion
GlobalAddAtomW
GlobalFindAtomW
GetModuleHandleW
LockResource
FindResourceW
LoadResource
GlobalUnlock
MulDiv
GetModuleHandleA
SetLastError
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
WideCharToMultiByte
GetCurrentThread
GetCurrentThreadId
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationW
GetFullPathNameW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetTickCount
GetFileAttributesW
GetFileSize
GetFileTime
FormatMessageW
GetStartupInfoW
ExitProcess
RtlUnwind
TerminateProcess
RaiseException
HeapReAlloc
HeapSize
GetTimeZoneInformation
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
GetModuleFileNameA
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetStringTypeA
GetStringTypeW
SetStdHandle
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
GetProfileStringA
GlobalAddAtomA
FindResourceA
CreateMutexW
GetLastError
CloseHandle
GetModuleFileNameW
lstrcpynW
lstrcatW
FindFirstFileW
LoadLibraryW
GetProcAddress
GetCurrentProcess
GetCommandLineW
lstrlenW
lstrcmpiW
GetProcessHeap
HeapAlloc
GetPrivateProfileStringW
lstrcmpW
lstrcpyW
HeapFree
FindClose
FreeLibrary
InterlockedDecrement
GlobalFree

msimg32

TransparentBlt

user32

GetClassNameA
SetWindowLongA
SetPropA
GetPropA
DefWindowProcA
LoadStringW
LoadIconW
wsprintfW
SendMessageW
AppendMenuW
GetSystemMenu
LoadBitmapW
DrawIcon
GetClientRect
IsWindowUnicode
IsIconic
EnableWindow
SendMessageA
GetWindowLongA
DefDlgProcA
GetClassInfoA
InvalidateRect
DrawFocusRect
DrawTextA
GetWindowTextA
ExcludeUpdateRgn
ShowCaret
HideCaret
GetWindowTextLengthA
CharNextW
SetWindowsHookExA
RemovePropA
CallWindowProcA
GetSystemMetrics
CharNextA
CopyAcceleratorTableW
SetRect
GetNextDlgGroupItem
MessageBeep
CharUpperW
InflateRect
RegisterClipboardFormatW
PostThreadMessageW
UnregisterClassW
MessageBoxW
GetWindowLongW
SetCursor
PostMessageW
wvsprintfW
GetSysColorBrush
LoadCursorW
GetDesktopWindow
PtInRect
GetClassNameW
DestroyMenu
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
UpdateWindow
SendDlgItemMessageW
SendDlgItemMessageA
MapWindowPoints
GetSysColor
SetFocus
AdjustWindowRectEx
IsWindowEnabled
CopyRect
GetTopWindow
IsChild
GetCapture
WinHelpW
GetClassInfoW
RegisterClassW
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextW
GetDlgCtrlID
DefWindowProcW
CreateWindowExW
SetPropW
UnhookWindowsHookEx
GetPropW
CallWindowProcW
RemovePropW
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongW
RegisterWindowMessageW
OffsetRect
IntersectRect
SystemParametersInfoW
GetWindowPlacement
GetWindowRect
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
GrayStringW
DrawTextW
TabbedTextOutW
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
ScreenToClient
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuW
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageW
GetCursorPos
SetWindowsHookExW
GetParent
GetLastActivePopup
PostQuitMessage

gdi32

BitBlt
GetTextExtentPointA
ExtTextOutA
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
CreateSolidBrush
GetWindowExtEx
GetViewportExtEx
GetDeviceCaps
DeleteObject
IntersectClipRect
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetTextColor
SetBkMode
SetBkColor
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
GetObjectW
CreateCompatibleDC
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
PatBlt
CreateDIBitmap

comdlg32

GetFileTitleW

winspool.drv

EnumPrinterDriversW
ClosePrinter
EnumPrintersW
OpenPrinterW
DocumentPropertiesW

advapi32

RegDeleteValueW
RegEnumValueW
RegOpenKeyExW
RegCloseKey
EqualSid
AllocateAndInitializeSid
GetTokenInformation
RegCreateKeyExW
RegSetValueExW
OpenProcessToken

shell32

CommandLineToArgvW

comctl32

ord17

oledlg

OleUIBusyW

ole32

CoRevokeClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

SysStringLen
SysAllocString
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString

Sections

.text
Size: 136KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0da79132d48d34710d8239985ffbe403

Headers

File Characteristics

Imports

kernel32

msimg32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 136KB - Virtual size: 133KB

.rdata Size: 36KB - Virtual size: 35KB

.data Size: 12KB - Virtual size: 30KB

.rsrc Size: 104KB - Virtual size: 104KB

.text
Size: 136KB - Virtual size: 133KB

.rdata
Size: 36KB - Virtual size: 35KB

.data
Size: 12KB - Virtual size: 30KB

.rsrc
Size: 104KB - Virtual size: 104KB