bb926f17c90cc47406c3bd42b0e1839916d41fb745c3ad147b73e234de06d9a5

Sharing

Copy URL Twitter E-mail

General

Target

bb926f17c90cc47406c3bd42b0e1839916d41fb745c3ad147b73e234de06d9a5
Size

2.5MB
MD5

cf2f2c07b0d3dadafa065f80e396775c
SHA1

44451fec6197bf46b53fefe9e778995d1cfa0a1a
SHA256

bb926f17c90cc47406c3bd42b0e1839916d41fb745c3ad147b73e234de06d9a5
SHA512

61d6bfdfb8b19236b31fafb4a989eb3d76c51bc1a2f7c55447dfd7590c59eccc41975391e04b75f38e41a86a4824fafc429cb15050a5a110b261141246080b28
SSDEEP

49152:WRibLyodANTMqbON9kuPZwbJ6C4sCjjK2Q7RMS2QSj+3PP39b/ewEL:oUyod2MoON95ZwbICJCjjK2Q7IQSj+fK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb926f17c90cc47406c3bd42b0e1839916d41fb745c3ad147b73e234de06d9a5

Files

bb926f17c90cc47406c3bd42b0e1839916d41fb745c3ad147b73e234de06d9a5
.exe windows:5 windows x86 arch:x86

add683d75fa2ca29fc0d31f165471af7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList

hid

HidD_SetFeature
HidD_GetAttributes
HidD_GetHidGuid
HidD_GetFeature
HidD_GetPreparsedData
HidP_GetCaps
HidP_GetSpecificButtonCaps
HidP_GetSpecificValueCaps
HidP_MaxUsageListLength

kernel32

GetConsoleMode
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
GetProcessHeap
SetEnvironmentVariableA
FreeEnvironmentStringsW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
IsProcessorFeaturePresent
IsDebuggerPresent
GetTimeZoneInformation
LCMapStringW
GetStdHandle
SetUnhandledExceptionFilter
GetFileType
SetStdHandle
GetSystemTimeAsFileTime
HeapSize
HeapQueryInformation
HeapReAlloc
RaiseException
HeapAlloc
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapFree
DecodePointer
EncodePointer
RtlUnwind
GetStartupInfoW
HeapSetInformation
GetCommandLineW
FindResourceExW
VirtualProtect
GetUserDefaultLCID
SearchPathW
GetProfileIntW
GetTempFileNameW
GetFileTime
GetFileSizeEx
GetFileAttributesW
FileTimeToLocalFileTime
GetFileAttributesExW
SetErrorMode
GetNumberFormatW
GetWindowsDirectoryW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
lstrcmpiW
lstrcpyW
DeleteFileW
GetCurrentDirectoryW
UnhandledExceptionFilter
GetThreadLocale
lstrlenA
GlobalGetAtomNameW
InterlockedIncrement
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
ResumeThread
SetThreadPriority
lstrcmpA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
CopyFileW
GlobalSize
FormatMessageW
LocalFree
GetCurrentProcessId
lstrlenW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
GetModuleHandleW
FreeLibrary
GetProcAddress
CompareStringW
LoadLibraryW
ActivateActCtx
DeactivateActCtx
SetLastError
lstrcmpW
GetOverlappedResult
ReadFile
GetTickCount
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
WriteFile
GetLastError
GetTempPathW
CreateDirectoryW
WaitForMultipleObjects
TerminateThread
SetEvent
ExitProcess
CreateEventW
CreateThread
WideCharToMultiByte
MultiByteToWideChar
ResetEvent
WaitForSingleObject
CreateFileW
CloseHandle
ExitThread
OutputDebugStringW
Beep
Sleep
InterlockedExchange
EnterCriticalSection
LeaveCriticalSection
FreeResource
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetModuleFileNameW
LoadResource
LockResource
SizeofResource
FindResourceW
MulDiv
TerminateProcess
QueryPerformanceCounter
HeapCreate
SetHandleCount
FileTimeToSystemTime
GetEnvironmentStringsW
GetConsoleCP

user32

IsCharLowerW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
RegisterClipboardFormatW
UnpackDDElParam
ReuseDDElParam
InsertMenuItemW
TranslateAcceleratorW
LockWindowUpdate
BringWindowToTop
SetCursorPos
CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
DrawFrameControl
DrawEdge
DrawStateW
SetClassLongW
DestroyAcceleratorTable
SetParent
SetWindowRgn
IsZoomed
DrawIconEx
LoadImageW
CopyImage
GetIconInfo
NotifyWinEvent
EnableScrollBar
HideCaret
DrawFocusRect
InvertRect
GetAsyncKeyState
CreatePopupMenu
GetMenuDefaultItem
UnregisterClassW
GetNextDlgGroupItem
InvalidateRgn
IsRectEmpty
CopyAcceleratorTableW
OffsetRect
CharNextW
SetRect
MessageBeep
IsClipboardFormatAvailable
CharUpperW
DestroyIcon
WaitMessage
ReleaseCapture
SetCapture
SetLayeredWindowAttributes
EnumDisplayMonitors
SetRectEmpty
DeleteMenu
LoadCursorW
GetSysColorBrush
RealChildWindowFromPoint
WindowFromPoint
IntersectRect
SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
InflateRect
MapVirtualKeyW
GetKeyNameTextW
SetWindowContextHelpId
MapDialogRect
GetDesktopWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
ShowOwnedPopups
MapVirtualKeyExW
GetMessageW
TranslateMessage
GetActiveWindow
GetCursorPos
ValidateRect
PostQuitMessage
GetMenuStringW
InsertMenuW
RemoveMenu
GetWindowThreadProcessId
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
ClientToScreen
FillRect
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
GetWindowRect
RedrawWindow
GetParent
EnableWindow
RegisterWindowMessageW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
UpdateLayeredWindow
MonitorFromPoint
IsMenu
PostThreadMessageW
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
CreateMenu
SetMenuDefaultItem
FrameRect
GetUpdateRect
PeekMessageW
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
CopyIcon
CharUpperBuffW
GetDoubleClickTime
GetWindowRgn
DestroyCursor
SetCursor
SubtractRect
GetClientRect
WindowFromDC
EqualRect
SendMessageW
BroadcastSystemMessageW
SetTimer
LoadIconW
InvalidateRect
DrawIcon
GetSystemMetrics
IsIconic
KillTimer
UpdateWindow
PostMessageW
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
AppendMenuW
GetSystemMenu
SetWindowPos
GetDC
GetWindowLongW
IsWindow
GetSubMenu
LoadMenuW
GetWindow
SetWindowLongW
GetMenu
CallWindowProcW
DefWindowProcW
GetDlgCtrlID
GetWindowPlacement
SetWindowPlacement
PtInRect
CopyRect
SetScrollInfo
GetScrollInfo
DeferWindowPos
ScreenToClient
AdjustWindowRectEx
GetSysColor
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
MessageBoxW
GetMenuItemCount
GetMenuItemID
IsWindowVisible
ShowScrollBar
SetForegroundWindow
GetScrollPos
SetScrollPos
UnionRect

gdi32

CreateSolidBrush
CreateHatchBrush
CopyMetaFileW
CreateDCW
CreateRectRgnIndirect
PatBlt
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
CreateDIBitmap
GetTextMetricsW
EnumFontFamiliesW
GetTextCharsetInfo
GetBkColor
GetTextColor
GetRgnBox
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreateRoundRectRgn
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePen
SetPixel
Rectangle
OffsetRgn
EnumFontFamiliesExW
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
GetTextFaceW
GetWindowExtEx
GetViewportExtEx
GetObjectType
SelectPalette
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
DeleteObject
GetDeviceCaps
CreateFontW
CreateFontIndirectW
GetStockObject
CreateRectRgn
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetTextExtentPoint32W
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetDIBColorTable
StretchBlt
CreateCompatibleBitmap
BitBlt
GetObjectW
DeleteDC
CreateCompatibleDC
SelectObject
CreateDIBSection
SetDIBColorTable
GetPixel

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegCloseKey
RegEnumKeyExW
RegEnumValueW

shell32

SHAppBarMessage
SHGetFileInfoW
SHGetDesktopFolder
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ShellExecuteW
DragFinish
DragQueryFileW
SHBrowseForFolderW

comctl32

_TrackMouseEvent
ImageList_GetIconSize

shlwapi

StrStrIW
PathFileExistsW
StrCatW
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathRemoveFileSpecW

ole32

StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoInitialize
CoUninitialize
CoCreateInstance
CreateILockBytesOnHGlobal
CLSIDFromProgID
CoCreateGuid
OleDuplicateData
CoInitializeEx
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
CoRevokeClassObject
CoRegisterMessageFilter
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
CLSIDFromString
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CreateStreamOnHGlobal

oleaut32

SysFreeString
SysAllocString
VariantCopy
VariantInit
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
VariantChangeType
VarBstrFromDate
VariantClear
SysAllocStringLen
OleCreateFontIndirect

oledlg

OleUIBusyW

gdiplus

GdiplusShutdown
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipDrawString
GdipCreateSolidFill
GdipCloneBrush
GdipCreateFromHWNDICM
GdipCreateFromHWND
GdipSetSmoothingMode
GdipDrawImageRectI
GdipCreateFontFamilyFromName
GdipCreateFont
GdipSetTextRenderingHint
GdipTranslateWorldTransform
GdipRotateWorldTransform
GdipCreateCachedBitmap
GdipDrawCachedBitmap
GdipResetWorldTransform
GdipDeleteCachedBitmap
GdipDeleteBrush
GdipDeleteFont
GdipDeleteFontFamily
GdipCreateFromHDC
GdipDrawImageRectRect
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImagePaletteSize
GdipGetImagePalette
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCreateBitmapFromScan0
GdipGetImageGraphicsContext
GdipDrawImageI
GdipDeleteGraphics
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipCloneImage
GdipAlloc
GdipFree
GdipDisposeImage
GdiplusStartup

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 302KB - Virtual size: 302KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 742KB - Virtual size: 741KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

add683d75fa2ca29fc0d31f165471af7

Headers

DLL Characteristics

File Characteristics

Imports

setupapi

hid

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

oleacc

imm32

winmm

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 302KB - Virtual size: 302KB

.data Size: 27KB - Virtual size: 61KB

.rsrc Size: 742KB - Virtual size: 741KB

.reloc Size: 176KB - Virtual size: 176KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 302KB - Virtual size: 302KB

.data
Size: 27KB - Virtual size: 61KB

.rsrc
Size: 742KB - Virtual size: 741KB

.reloc
Size: 176KB - Virtual size: 176KB