05adb48eca2a4b3080d7b844bf256b51

Sharing

Copy URL Twitter E-mail

General

Target

05adb48eca2a4b3080d7b844bf256b51
Size

720KB
MD5

05adb48eca2a4b3080d7b844bf256b51
SHA1

bbb927f3f0ae5157d8e5a7ae8a44f29e3d20d109
SHA256

46b800ed0f9ceff3fc95fd2464dd1b1f98962310e0ba15aa234572536cff480f
SHA512

21823fb45dc79e564d8466818b2ba754bfa3feefff23c044a756df3db7423d24de6aca8b18cf752b03d86993038e3f44974a0b08489f9208ea1681bde35a827c
SSDEEP

12288:ckApE4mcQIhFFH0sy6KiuqbAAZ/lJTm49oQZ6fWMT0sflge7E:ckApE4m5y0sTKFqLlA49QuMT0sfCl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05adb48eca2a4b3080d7b844bf256b51

Files

05adb48eca2a4b3080d7b844bf256b51
.exe windows:4 windows x86 arch:x86

50f612c680ae2dbb4dc3023d1a2f735f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAWaitForMultipleEvents
WSAGetLastError
closesocket
setsockopt
WSARecv
WSAEnumNetworkEvents
WSAStartup
WSAEventSelect
shutdown
inet_ntoa
getsockname
WSASocketA
recvfrom
WSAConnect
htons
listen
htonl
WSAAccept
bind
ioctlsocket
ntohl
gethostbyname
WSASend
ntohs
inet_addr
socket
sendto
WSACleanup
select

kernel32

GetThreadLocale
GetCurrentThread
GlobalAlloc
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrcmpA
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GetProcessVersion
SizeofResource
LocalAlloc
TlsAlloc
GlobalFlags
SetErrorMode
HeapFree
HeapAlloc
RtlUnwind
RaiseException
CreateDirectoryA
GetStartupInfoA
GetCommandLineA
ExitProcess
ExitThread
GetSystemTime
GetLocalTime
GetACP
HeapSize
GetVolumeInformationA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
MoveFileA
GetFullPathNameA
GlobalUnlock
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
OpenProcess
TerminateProcess
InterlockedExchange
GetModuleHandleA
GetModuleFileNameA
DeleteFileA
GetVersion
GetPrivateProfileSectionNamesA
GetCurrentProcess
WritePrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileStringA
CreateFileA
GetFileSize
GetLastError
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
SetFileAttributesA
GetTimeZoneInformation
lstrlenA
ResetEvent
SetEvent
GetVersionExA
CreateThread
GetExitCodeThread
GetTickCount
WaitForSingleObject
Sleep
CreateEventA
CloseHandle
LockFile
SetEndOfFile
UnlockFile
WriteFile
FlushFileBuffers
SetFilePointer
SetFileTime
ReadFile
DuplicateHandle
FindFirstFileA
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileTime
FindClose
lstrcpynA
FileTimeToSystemTime
GetFileAttributesA
FileTimeToLocalFileTime
GlobalLock
MulDiv
SetLastError
FreeEnvironmentStringsA
lstrcatA
GetProfileStringA
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
FindResourceA
LoadResource
LockResource
GlobalFree
FormatMessageA
LocalFree
SuspendThread
GetCurrentThreadId
SetThreadPriority
ResumeThread
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
FreeLibrary
LoadLibraryA
GetProcAddress
CopyFileA
MoveFileExA
GetShortPathNameA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetCPInfo
GetOEMCP
HeapReAlloc

user32

CharUpperA
PostQuitMessage
SetCursor
SetWindowContextHelpId
LoadCursorA
GetSysColorBrush
GetClassNameA
PtInRect
GetDesktopWindow
DestroyMenu
GrayStringA
LoadStringA
CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
InvalidateRect
RegisterClipboardFormatA
PostThreadMessageA
wvsprintfA
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
EndDialog
CreateDialogIndirectParamA
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
GetDC
ReleaseDC
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
ScreenToClient
CopyRect
DrawTextA
GetTopWindow
ClientToScreen
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetWindow
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetSystemMetrics
MapDialogRect
SetWindowPos
GetCapture
GetAsyncKeyState
GetFocus
SetFocus
GetDlgItem
IsWindowEnabled
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
PeekMessageA
GetWindowDC
GetCursorPos
SetWindowsHookExA
RedrawWindow
InflateRect
SendMessageTimeoutA
GetWindowThreadProcessId
MessageBoxA
GetWindowLongA
SetWindowLongA
LoadImageA
DestroyIcon
GetWindowRect
KillTimer
SetTimer
TabbedTextOutA
EndPaint
BeginPaint
IsChild
LoadIconA
IsWindowVisible
ShowWindow
IsIconic
SetForegroundWindow
SetActiveWindow
ExitWindowsEx
EnableWindow
BringWindowToTop
GetParent
PostMessageA
GetClientRect
LoadBitmapA
IsWindow
SendMessageA
GetForegroundWindow
AdjustWindowRectEx
IsWindowUnicode
DefDlgProcA
DrawFocusRect
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn

gdi32

DeleteDC
CreateBitmap
SetBkColor
SetTextColor
SetViewportExtEx
ScaleViewportExtEx
GetObjectA
CreateCompatibleDC
SetStretchBltMode
SetBrushOrgEx
StretchBlt
GetTextExtentPointA
BitBlt
CreateDIBitmap
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
GetClipBox
DeleteObject
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
TextOutA
ExtTextOutA
RectVisible
Escape
GetMapMode
DPtoLP
GetTextColor
LPtoDP
GetBkColor
IntersectClipRect
ScaleWindowExtEx
SetWindowExtEx
PatBlt

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA
RegQueryValueExA

comctl32

ImageList_Create
ImageList_Destroy
ord17
CreatePropertySheetPageA
DestroyPropertySheetPage
PropertySheetA
ImageList_GetImageCount
ImageList_GetIcon
ImageList_AddMasked

oledlg

ord8

ole32

OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject

olepro32

ord253

oleaut32

VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString
SysAllocString
SysAllocStringByteLen
SysStringLen

Sections

.text
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kingupd
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tc
Size: 248KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

50f612c680ae2dbb4dc3023d1a2f735f

Headers

File Characteristics

Imports

ws2_32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 256KB - Virtual size: 255KB

.rdata Size: 56KB - Virtual size: 54KB

.data Size: 12KB - Virtual size: 29KB

.kingupd Size: 4KB - Virtual size: 4B

.rsrc Size: 140KB - Virtual size: 139KB

.tc Size: 248KB - Virtual size: 248KB

.text
Size: 256KB - Virtual size: 255KB

.rdata
Size: 56KB - Virtual size: 54KB

.data
Size: 12KB - Virtual size: 29KB

.kingupd
Size: 4KB - Virtual size: 4B

.rsrc
Size: 140KB - Virtual size: 139KB

.tc
Size: 248KB - Virtual size: 248KB