145bf23002e7f97935cd50675ed05876

Sharing

Copy URL Twitter E-mail

General

Target

145bf23002e7f97935cd50675ed05876
Size

7.7MB
MD5

145bf23002e7f97935cd50675ed05876
SHA1

70bf65e6faa9d847a25a50acc5d77f33ca2ba0a5
SHA256

bdd9c895ec6b6f3383ec80d5c1ee38508b8a1514a59a63d3c3f1d1ecbb1d711f
SHA512

f5d891b22dbde2d3ff975c5c310b85cb5baf6423b7f4945ee0d56b2c2e421e2026e15928d3cd4d82605df005024c5bd4e0d3427b6a5896acb3e5b74ce830f522
SSDEEP

98304:hhQsphwUCHNOnLCoKqGoi47JDKkbaepPhBDLColQWodUh:bvENaCoFGoiWJDMepHFlrzh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
145bf23002e7f97935cd50675ed05876

Files

145bf23002e7f97935cd50675ed05876
.exe windows:4 windows x86 arch:x86

ef2bec4505d26118380d9ae044f011e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetStdHandle
GetFileType
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
GetProcessHeap
GetStartupInfoA
ExitThread
CreateThread
GetFileInformationByHandle
PeekNamedPipe
RemoveDirectoryA
GetConsoleCP
GetConsoleMode
HeapSize
RtlUnwind
RaiseException
GetStdHandle
IsValidCodePage
GetStringTypeA
GetStringTypeW
IsDebuggerPresent
HeapDestroy
HeapCreate
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
LCMapStringA
LCMapStringW
SetHandleCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
SetEnvironmentVariableA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapReAlloc
HeapFree
ExitProcess
HeapAlloc
LocalFileTimeToFileTime
FileTimeToLocalFileTime
SetErrorMode
GetOEMCP
GetCPInfo
WritePrivateProfileStringA
InterlockedIncrement
FileTimeToSystemTime
FindResourceExA
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
SetFileTime
GetFileAttributesA
GetShortPathNameA
GetVolumeInformationA
DuplicateHandle
SuspendThread
ResumeThread
InterlockedDecrement
GetModuleFileNameW
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
UnmapViewOfFile
ExpandEnvironmentStringsA
SetEndOfFile
GetCurrentProcessId
FileTimeToDosDateTime
SystemTimeToFileTime
GetLocalTime
FlushFileBuffers
DosDateTimeToFileTime
GetFullPathNameA
LockFile
OpenMutexA
UnlockFile
CreateDirectoryA
FindNextFileA
GetCurrentThreadId
WaitForMultipleObjects
CancelWaitableTimer
PulseEvent
SetWaitableTimer
ReleaseMutex
CreateMutexA
CreateWaitableTimerA
TerminateProcess
GetFileSize
GetSystemTimeAsFileTime
OutputDebugStringA
GetPrivateProfileStringA
GlobalSize
_hread
_llseek
_lopen
FormatMessageA
GlobalMemoryStatus
QueryPerformanceCounter
SetThreadPriority
GetCurrentThread
CompareStringA
InterlockedExchange
CompareStringW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
IsDBCSLeadByte
GetComputerNameA
LocalFree
LocalAlloc
GetExitCodeThread
SetEvent
ResetEvent
WaitForSingleObject
CreateEventA
ReadFile
SetFilePointer
lstrcmpA
GetFileTime
GetTickCount
_lclose
_lcreat
SetCurrentDirectoryA
MoveFileA
GetModuleFileNameA
VirtualProtect
DeleteFileA
GetSystemDirectoryA
GetLogicalDrives
GetDiskFreeSpaceA
GetDriveTypeA
DeviceIoControl
WriteFile
CloseHandle
CreateFileA
GlobalFree
GlobalAlloc
GetCurrentProcess
GetCurrentDirectoryA
GlobalUnlock
GlobalLock
GetACP
GetPrivateProfileIntA
GetStringTypeExA
FindClose
FindFirstFileA
CopyFileA
SetFileAttributesA
FreeLibrary
GetTempFileNameA
GetThreadLocale
GetTempPathA
GetVersionExA
lstrcpynA
MultiByteToWideChar
lstrcpyA
lstrcatA
lstrcmpiA
Sleep
GetVersion
lstrlenA
FreeResource
MulDiv
SetLastError
GetProcAddress
GetModuleHandleA
LoadLibraryA
GetLastError
FindResourceA
LoadResource
LockResource
SizeofResource
VirtualFree
WideCharToMultiByte

user32

DrawIcon
SetParent
DestroyCursor
UnregisterClassA
InvalidateRgn
SetWindowContextHelpId
EnableMenuItem
TabbedTextOutA
GrayStringA
SubtractRect
MsgWaitForMultipleObjects
PostThreadMessageA
GetClipboardOwner
OemToCharA
CharToOemA
wvsprintfA
CallWindowProcA
CharUpperA
GetDCEx
EmptyClipboard
SetClipboardData
CharNextA
IsMenu
GetScrollInfo
SetWindowRgn
GetClassLongA
GetWindowRgn
CheckDlgButton
IsCharAlphaA
GetWindowTextA
IsCharAlphaNumericA
GetWindowTextLengthA
IsDlgButtonChecked
RegisterClipboardFormatA
EqualRect
OemToCharBuffA
CharToOemBuffA
TranslateAcceleratorA
GetMenuItemRect
ShowScrollBar
GetMenuState
GetMenuItemID
ValidateRect
LockWindowUpdate
IsChild
EnumChildWindows
FindWindowExA
keybd_event
GetClassNameA
LoadStringW
SetWindowTextA
ShowWindow
SetWindowPos
LoadStringA
LoadMenuIndirectA
GetDialogBaseUnits
DrawCaption
GetWindowDC
IsZoomed
AdjustWindowRectEx
GetSystemMenu
DefWindowProcA
SetWindowLongA
GetForegroundWindow
IntersectRect
ScrollDC
DrawTextExA
DispatchMessageA
TranslateMessage
LoadIconA
GetNextDlgGroupItem
GetWindow
MessageBeep
SetActiveWindow
SetFocus
IsWindowEnabled
GetAsyncKeyState
AdjustWindowRect
SetMenuItemInfoA
GetKeyNameTextA
MapVirtualKeyA
CopyAcceleratorTableA
AppendMenuA
CreateMenu
WaitMessage
DestroyIcon
GetMenuItemInfoA
DrawStateA
CloseClipboard
SetForegroundWindow
DestroyMenu
GetActiveWindow
GetDlgItem
MessageBoxA
wsprintfA
GetClipboardData
OpenClipboard
IsClipboardFormatAvailable
ActivateKeyboardLayout
GetKeyboardLayoutList
GetKeyboardLayout
IsIconic
GetMenu
SetCaretPos
DestroyCaret
HideCaret
LoadAcceleratorsA
CreateCaret
InsertMenuA
CreatePopupMenu
FrameRect
RedrawWindow
ChildWindowFromPointEx
ReleaseCapture
GetKeyState
GetNextDlgTabItem
SetCapture
GetDoubleClickTime
IsWindowVisible
GetDesktopWindow
GetMenuItemCount
DeleteMenu
GetSysColorBrush
SystemParametersInfoA
SetTimer
KillTimer
WindowFromPoint
GetIconInfo
MapWindowPoints
IsRectEmpty
GetDlgCtrlID
GetTabbedTextExtentA
GetWindowLongA
InvertRect
ReleaseDC
GetDC
CopyImage
FillRect
LoadBitmapA
LoadImageA
DrawFrameControl
GetCapture
PeekMessageA
DrawFocusRect
SetRect
DrawTextA
BringWindowToTop
GetCursorPos
GetParent
ScreenToClient
GetClientRect
GetWindowRect
SetCursor
GetMessagePos
GetSystemMetrics
MapDialogRect
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
RegisterWindowMessageA
UpdateWindow
LoadCursorA
PtInRect
GetSysColor
EnableWindow
SetRectEmpty
ClientToScreen
SendMessageA
GetFocus
GetSubMenu
PostMessageA
IsWindow
OffsetRect
ShowOwnedPopups
PostQuitMessage
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
GetMessageA
UnpackDDElParam
ReuseDDElParam
GetWindowThreadProcessId
InsertMenuItemA
LoadMenuA
InvalidateRect
InflateRect
CopyRect
SetMenu
EndPaint
BeginPaint
CreateDialogIndirectParamA
EndDialog
MoveWindow
IsDialogMessageA
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
SendDlgItemMessageA
WinHelpA
SetWindowsHookExA
CallNextHookEx
SetPropA
GetPropA
RemovePropA
GetLastActivePopup
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
ScrollWindow
TrackPopupMenu
GetScrollPos
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
SetScrollInfo
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
CheckMenuItem
GetMenuStringA
RemoveMenu
GetUpdateRect
SetScrollPos
SetScrollRange
GetScrollRange
UnionRect
DrawEdge
FindWindowA
TrackMouseEvent

gdi32

CopyMetaFileA
GetTextColor
Polygon
Ellipse
CreateRectRgnIndirect
EnumFontFamiliesA
AddFontResourceA
SetBkColor
SetBkMode
UnrealizeObject
SetBrushOrgEx
SelectObject
StretchBlt
CreatePatternBrush
DeleteDC
SetTextColor
SelectPalette
RealizePalette
CreateDIBitmap
CreatePalette
SetStretchBltMode
GetDIBColorTable
GetPaletteEntries
CreateDIBSection
CreateRectRgn
CreatePolygonRgn
CombineRgn
InvertRgn
Chord
SetViewportOrgEx
SetWindowOrgEx
CreatePen
GetTextMetricsW
MoveToEx
GetTextExtentPoint32W
LineTo
ExtTextOutA
GetCharWidthW
ExtTextOutW
GetClipRgn
SelectClipRgn
GetCharWidthA
GetTextExtentPointA
LPtoDP
GetViewportOrgEx
DPtoLP
ExcludeClipRect
CreateEllipticRgn
ScaleWindowExtEx
SetPixel
GetPixel
GetBkColor
SetRectRgn
OffsetRgn
FillRgn
GetCurrentPositionEx
GetCharacterPlacementA
CreateHalftonePalette
GetMapMode
Escape
RectVisible
PtVisible
GetBkMode
GetFontData
EnumFontFamiliesExA
StartDocA
StartPage
EndPage
EndDoc
AbortDoc
CreateDCA
SetAbortProc
GetClipBox
SetPolyFillMode
SetROP2
IntersectClipRect
SetTextAlign
GetViewportExtEx
GetWindowExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
OffsetWindowOrgEx
ExtSelectClipRgn
PlayMetaFileRecord
GetObjectType
CreateFontA
GetNearestColor
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextFaceA
GetRgnBox
EnumMetaFile
DeleteMetaFile
RestoreDC
PlayMetaFile
SaveDC
SetMetaFileBitsEx
SetWindowExtEx
SetViewportExtEx
SetMapMode
GetDeviceCaps
BitBlt
PatBlt
CreateBitmap
DeleteObject
StretchDIBits
Rectangle
CreateSolidBrush
CreateFontIndirectA
GetWindowOrgEx
CreateCompatibleBitmap
TextOutA
GetTextExtentPoint32A
GetStockObject
CreateCompatibleDC
GetTextAlign
GetTextMetricsA
GetCurrentObject
GetObjectA

comdlg32

GetFileTitleA

winspool.drv

GetJobA
ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegOpenKeyA
RegSetValueExA
RegCloseKey
RegCreateKeyA
RegQueryValueA
RegEnumKeyA
GetFileSecurityA
SetFileSecurityA
RegOpenKeyExA
RegSetValueA
GetUserNameA
RegDeleteKeyA
RegCreateKeyExA
CloseServiceHandle
OpenSCManagerA
RegQueryValueExA

shell32

DragQueryFileA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
FindExecutableA
ShellExecuteA
ExtractIconA
SHGetFileInfoA
SHGetMalloc
DragFinish
SHBrowseForFolderA

comctl32

CreatePropertySheetPageW
_TrackMouseEvent
DestroyPropertySheetPage

shlwapi

PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathFindFileNameA

oledlg

ord8

ole32

CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoGetClassObject
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
CLSIDFromProgID
OleRun
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CoCreateInstance
CoInitialize

oleaut32

GetActiveObject
SysAllocString
VariantInit
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
VariantClear
SysAllocStringLen
SysStringLen
SysAllocStringByteLen
VariantChangeType
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
VariantCopy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysFreeString

mpr

WNetGetUniversalNameA
WNetOpenEnumA
WNetEnumResourceA
WNetCloseEnum
WNetAddConnection2A
WNetCancelConnection2A
WNetGetLastErrorA

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 484KB - Virtual size: 481KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2.3MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.6rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ef2bec4505d26118380d9ae044f011e7

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

mpr

Sections

.text Size: 2.9MB - Virtual size: 2.9MB

.rdata Size: 484KB - Virtual size: 481KB

.data Size: 2.3MB - Virtual size: 2.5MB

.rsrc Size: 1.9MB - Virtual size: 1.9MB

.6rdata Size: 60KB - Virtual size: 60KB

.text
Size: 2.9MB - Virtual size: 2.9MB

.rdata
Size: 484KB - Virtual size: 481KB

.data
Size: 2.3MB - Virtual size: 2.5MB

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

.6rdata
Size: 60KB - Virtual size: 60KB