d128d5d2a4710973f5f620c33462c516efc307af1002d3a7d0b5553270305981

Sharing

Copy URL Twitter E-mail

General

Target

d128d5d2a4710973f5f620c33462c516efc307af1002d3a7d0b5553270305981
Size

2.9MB
MD5

1fa840ca08245c07c450459d1a4f1767
SHA1

0051836d8b79e85d184299fcb5c804e38295cec4
SHA256

d128d5d2a4710973f5f620c33462c516efc307af1002d3a7d0b5553270305981
SHA512

960e8a75a40516d213661dbadc879d213ff98b3d2cdd027d4a65ce2011a3b23a987be18b1a3c7cc64008a8ca59362e3368d0624c990f0c37bf5216f44558e9d8
SSDEEP

24576:1EpQ9F+i9PoY63eH7777tFTeH9mTdZm0t+LrUQnDJRkbQ3e5HphKx89l:tgGva9mTdx+ZkieVpj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d128d5d2a4710973f5f620c33462c516efc307af1002d3a7d0b5553270305981

Files

d128d5d2a4710973f5f620c33462c516efc307af1002d3a7d0b5553270305981
.exe windows:4 windows x86 arch:x86

3c0df2edced0e7cb878930d53557a21c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoW
ExitProcess
RtlUnwind
RaiseException
HeapFree
HeapAlloc
GetTimeZoneInformation
TerminateProcess
HeapSize
HeapReAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
GetCPInfo
SetStdHandle
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
FlushFileBuffers
SetErrorMode
FindResourceA
GlobalAddAtomA
GetProfileStringA
GetProcessVersion
GlobalFlags
lstrcmpiW
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
TlsAlloc
lstrcmpW
lstrcmpA
lstrcmpiA
GetCurrentThread
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcpynW
CreateEventW
MulDiv
lstrlenW
InterlockedDecrement
InterlockedIncrement
GetModuleHandleA
LoadLibraryA
FreeLibrary
lstrlenA
GetVersion
lstrcatW
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
lstrcpyW
GetSystemDirectoryW
FindNextFileW
IsProcessorFeaturePresent
GlobalMemoryStatus
GetDiskFreeSpaceW
GetModuleFileNameW
FindFirstFileW
FindClose
SetFilePointer
GlobalHandle
GlobalUnlock
GlobalFree
GlobalAlloc
GlobalLock
GetSystemInfo
WideCharToMultiByte
MultiByteToWideChar
CopyFileW
GetFileSize
ReadFile
GetEnvironmentVariableW
ExpandEnvironmentStringsW
LoadLibraryW
GetSystemTime
GetLocalTime
GetVolumeInformationW
TryEnterCriticalSection
DefineDosDeviceW
GetLogicalDrives
GetDriveTypeW
GetCurrentThreadId
QueryDosDeviceW
FindResourceW
SizeofResource
LoadResource
LockResource
WriteFile
GetModuleHandleW
GetProcAddress
GetCurrentProcess
GetTempPathW
GetFileAttributesW
GetWindowsDirectoryW
CreateDirectoryW
RemoveDirectoryW
DeleteFileW
GetExitCodeProcess
ReleaseMutex
WaitForSingleObject
GetVersionExW
CreateMutexW
QueryPerformanceFrequency
QueryPerformanceCounter
LeaveCriticalSection
SetEvent
LocalAlloc
CreateThread
SetThreadPriority
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
ResetEvent
GetTickCount
Sleep
SetLastError
CloseHandle
CreateFileW
DeviceIoControl
FormatMessageW
LocalFree
GetLastError
GetModuleFileNameA
GetUserDefaultLangID

user32

GetFocus
IsWindow
SetFocus
AdjustWindowRectEx
SetScrollInfo
GetTopWindow
WinHelpW
wsprintfW
GetClassInfoW
RegisterClassW
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextLengthW
GetWindowTextW
GetDlgCtrlID
DefWindowProcW
DestroyWindow
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
SetPropW
UnhookWindowsHookEx
GetPropW
CallWindowProcW
RemovePropW
GetMessageTime
GetMessagePos
GetWindow
GetWindowLongW
SetWindowLongW
SetWindowPos
GetWindowPlacement
WindowFromPoint
IntersectRect
GrayStringW
MapWindowPoints
GetCapture
GetClassLongW
SetClassLongW
SetActiveWindow
PostQuitMessage
GetSystemMetrics
DrawTextW
IsRectEmpty
CopyIcon
ExitWindowsEx
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
BringWindowToTop
SetForegroundWindow
SystemParametersInfoW
PostMessageW
MessageBoxW
GetParent
GetKeyState
RedrawWindow
ScreenToClient
MessageBeep
GetLastActivePopup
SetRectEmpty
GetClientRect
GetWindowRect
UnregisterClassW
GetWindowTextLengthA
HideCaret
ShowCaret
ExcludeUpdateRgn
InvalidateRect
FillRect
GetSysColor
InflateRect
DestroyIcon
LoadImageW
GetWindowDC
SetWindowRgn
ReleaseCapture
IsIconic
ClientToScreen
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
SetCapture
ClipCursor
GetCursorPos
SendDlgItemMessageA
SendDlgItemMessageW
UpdateWindow
LoadIconW
TabbedTextOutW
SetCursor
IsZoomed
OffsetRect
DrawIconEx
PtInRect
GetDoubleClickTime
SetTimer
KillTimer
IsWindowVisible
CopyRect
LoadBitmapW
LoadCursorW
SendMessageTimeoutW
EnableWindow
EqualRect
GetWindowTextA
DrawTextA
DrawFocusRect
GetClassInfoA
DefDlgProcA
DefWindowProcA
CharNextA
CallWindowProcA
RemovePropA
SetWindowsHookExA
GetWindowLongA
SendMessageA
IsWindowUnicode
GetClassNameA
SetWindowLongA
SetPropA
GetPropA
SendMessageW
ReleaseDC
GetDC
LoadStringW
DestroyMenu
GetSysColorBrush
GetClassNameW
ValidateRect
EndDialog
GetActiveWindow
CreateDialogIndirectParamW
EndPaint
BeginPaint
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuW
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
IsWindowEnabled
ShowWindow
SetWindowTextW
IsDialogMessageW
RegisterWindowMessageW
SetScrollPos

gdi32

SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExcludeClipRect
IntersectClipRect
OffsetViewportOrgEx
GetDeviceCaps
CreateSolidBrush
PatBlt
SetViewportOrgEx
SetMapMode
SetBkMode
GetStockObject
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
CreateCompatibleBitmap
CreateFontIndirectW
CreateDIBSection
SelectObject
DeleteDC
StretchDIBits
CreateRectRgn
CombineRgn
DeleteObject
CreateCompatibleDC
GetObjectW
ExtTextOutA
GetTextExtentPointA
CreateDIBitmap
BitBlt

comdlg32

GetOpenFileNameW
GetSaveFileNameW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegOpenKeyExW
ImpersonateSelf
RegCloseKey
RegQueryValueExW
RegSetValueExW
RegOpenKeyW
RegCreateKeyW
RegDeleteValueW
GetTokenInformation
OpenProcessToken
RegDeleteKeyW
RegEnumKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
RevertToSelf
RegCreateKeyExW

shell32

SHGetFileInfoW
ShellExecuteW
DragQueryFileW
DragFinish
SHGetSpecialFolderPathW
SHBrowseForFolderW
SHGetPathFromIDListW
SHChangeNotify
ShellExecuteExW
DragAcceptFiles

comctl32

ImageList_ReplaceIcon
ImageList_GetImageInfo
ImageList_GetImageCount
ImageList_GetIcon
ImageList_Draw
ord17
ImageList_Destroy
ImageList_Create

ole32

CoInitializeSecurity
CoSetProxyBlanket
OleUninitialize
OleInitialize
CoInitialize
CoCreateInstance
CoUninitialize
CoInitializeEx

oleaut32

VarBstrFromDate
VariantInit
VariantClear

setupapi

SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList

Sections

.text
Size: 416KB - Virtual size: 416KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3c0df2edced0e7cb878930d53557a21c

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

ole32

oleaut32

setupapi

Sections

.text Size: 416KB - Virtual size: 416KB

.rdata Size: 76KB - Virtual size: 76KB

.data Size: 72KB - Virtual size: 92KB

.rsrc Size: 2.3MB - Virtual size: 2.3MB

.text
Size: 416KB - Virtual size: 416KB

.rdata
Size: 76KB - Virtual size: 76KB

.data
Size: 72KB - Virtual size: 92KB

.rsrc
Size: 2.3MB - Virtual size: 2.3MB