17d5175a4d8a74b77731e0fd0b3f8ba2

Sharing

Copy URL Twitter E-mail

General

Target

17d5175a4d8a74b77731e0fd0b3f8ba2
Size

503KB
MD5

17d5175a4d8a74b77731e0fd0b3f8ba2
SHA1

4017a6ffbd4f15bb5381d13c300ff5102ac9b811
SHA256

c26751a8b052b57fe12141d187cd061bf5d9457e8ae4fecae8c62e1694183d1a
SHA512

e42ad76f3dffa822474aba299650bcd6530dc3d767c5b4808506df6bb87415791a009d4136263c65a1efbb6d5179a1a559eef754f8f5e77dec89b0d9b43faa61
SSDEEP

6144:9UbIf1+dKP0seZqDhr/RW19lNGGFYGGFSh:9pt+dKssoqVrKlNGGCGG+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17d5175a4d8a74b77731e0fd0b3f8ba2

Files

17d5175a4d8a74b77731e0fd0b3f8ba2
.exe windows:5 windows x86 arch:x86

d4eeee9ebe94cde43a9ea11cecfca4f7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
??3@YAXPAX@Z
swprintf
_wcsicmp
_purecall
wcscpy
qsort
_c_exit
_exit
_iob
fwrite
strtol
_wtoi
_itow
_ftol
memmove
_snwprintf
wcsncpy
wcscmp
wcslen
_except_handler3
atoi
_onexit
__dllonexit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_cexit
_XcptFilter

advapi32

RegOpenKeyExA
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenThreadToken
OpenProcessToken
ConvertSidToStringSidW
RegLoadKeyW
RegUnLoadKeyW
GetUserNameW
RegQueryValueExA
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
LookupAccountNameW
GetSidSubAuthorityCount
GetSidSubAuthority

kernel32

GetStartupInfoA
GetModuleHandleA
LoadLibraryA
InterlockedCompareExchange
DeleteAtom
AddAtomW
lstrcatW
TlsGetValue
HeapFree
HeapReAlloc
HeapAlloc
MulDiv
GetProcAddress
LoadLibraryW
InterlockedDecrement
InterlockedIncrement
HeapCreate
TlsAlloc
TlsFree
HeapDestroy
TlsSetValue
DeleteCriticalSection
InitializeCriticalSection
FreeLibrary
GetLocaleInfoW
GetModuleHandleW
lstrlenW
lstrcpynW
lstrcmpiW
SetUnhandledExceptionFilter
ExitProcess
LocalAlloc
lstrcpyW
LocalFree
DelayLoadFailureHook
GetLastError
GetComputerNameW
LocalSize
SetLastError
ExpandEnvironmentStringsW
IsBadWritePtr
IsBadStringPtrW
GetCurrentProcess
GetCurrentThread
CloseHandle
InterlockedExchange
GetVersionExA
GetAtomNameW
SetProcessWorkingSetSize
GetUserDefaultUILanguage
MultiByteToWideChar
FindAtomW
EnterCriticalSection
LeaveCriticalSection
OutputDebugStringW
SizeofResource
LockResource
LoadResource
FindResourceW

gdi32

GetDeviceCaps
CreateSolidBrush
GdiFlush
CreateFontIndirectW
CreateCompatibleDC
CreateCompatibleBitmap
CreateRectRgn
OffsetRgn
ExtTextOutA
LPtoDP
StretchDIBits
GetLayout
SetLayout
CreateDIBPatternBrushPt
CreateDIBSection
GetDIBits
GetBrushOrgEx
SetBrushOrgEx
CreateHalftonePalette
SelectPalette
RealizePalette
PlayEnhMetaFile
SetStretchBltMode
CreatePatternBrush
BitBlt
SetBkMode
SetTextAlign
GetTextExtentPoint32W
DeleteEnhMetaFile
GetObjectA
StretchBlt
GetObjectW
GetPixel
CreateBitmap
SelectObject
SetBkColor
SetTextColor
ExtTextOutW
PatBlt
DeleteObject
DeleteDC
GetStockObject

user32

CreateWindowExW
ShowWindow
SetForegroundWindow
EnableWindow
DestroyWindow
UnregisterClassW
GetSystemMetrics
SetWindowLongW
MonitorFromPoint
GetMonitorInfoW
SetWindowPos
wsprintfW
LoadStringW
PostMessageW
CopyIcon
GetClientRect
MessageBoxW
FindWindowW
GetKeyboardLayout
DestroyIcon
GetKeyboardLayoutList
SystemParametersInfoW
GetDC
ReleaseDC
GetSysColor
DrawTextW
GetProcessDefaultLayout
CreateIconIndirect
GetWindowRect
SendMessageW
KillTimer
SetTimer
LoadCursorW
RegisterClassExW
GetWindowLongW
DefWindowProcW
BeginPaint
FillRect
EndPaint
CharNextA
CharNextW
GetWindowLongA
SetRect
GetIconInfo
LoadImageW
EqualRect
DrawIconEx
DrawFocusRect
IntersectRect
DrawFrameControl
CopyRect
SetRectEmpty
AdjustWindowRectEx
GetParent
SetCursor
ScreenToClient
GetMessagePos
InvalidateRect
DefWindowProcA
GetClassInfoExW
GetSysColorBrush
SendMessageA
GetWindowTextW
GetWindowTextLengthW
DispatchMessageW
TranslateMessage
GetMessageW
PostQuitMessage
SetWindowLongA
SetFocus
SystemParametersInfoA
NotifyWinEvent
SetParent
CallWindowProcW
UpdateWindow
SetWindowRgn
SetWindowTextW
MapWindowPoints
GetFocus

comctl32

ord413
ord412
InitCommonControlsEx
ord355
ord17
ord410

shell32

ord752

ntdll

NtQuerySystemInformation
RtlUnhandledExceptionFilter

netapi32

NetApiBufferFree
DsGetDcNameW
NetQueryDisplayInformation

ole32

CoUninitialize
CoInitialize
CoDisconnectObject
CoInitializeEx
CoCreateInstance

oleaut32

VariantInit
VariantClear
SysAllocString
SysFreeString

rpcrt4

RpcBindingFromStringBindingW
NdrClientCall2
RpcBindingFree
RpcStringFreeW
RpcEpResolveBinding
RpcStringBindingComposeW

duser

UtilDrawBlendRect
DUserRegisterStub
DeleteHandle
FindGadgetFromPoint
LookupGadgetTicket
SetGadgetRootInfo
GetStdColorBrushI
GetStdColorI
FindStdColor
GetMessageExW
InitGadgets
SetGadgetBufferInfo
GetGadgetTicket
MapGadgetPoints
CreateAction
GetGadgetRgn
GetGadgetAnimation
BuildInterpolation
BuildAnimation
GetGadgetSize
GetGadgetRect
CreateGadget
DUserPostEvent
ForwardGadgetMessage
AttachWndProcW
InvalidateGadget
SetGadgetRect
SetGadgetParent
SetGadgetFocus
GetGadgetFocus
SetGadgetMessageFilter
SetGadgetStyle
DUserSendEvent

msimg32

GradientFill
AlphaBlend
TransparentBlt

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

Sections

.text
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 22KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 333KB - Virtual size: 355KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d4eeee9ebe94cde43a9ea11cecfca4f7

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

advapi32

kernel32

gdi32

user32

comctl32

shell32

ntdll

netapi32

ole32

oleaut32

rpcrt4

duser

msimg32

oleacc

Sections

.text Size: 146KB - Virtual size: 146KB

.data Size: 22KB - Virtual size: 88KB

.rsrc Size: 333KB - Virtual size: 355KB

.text
Size: 146KB - Virtual size: 146KB

.data
Size: 22KB - Virtual size: 88KB

.rsrc
Size: 333KB - Virtual size: 355KB