098f30cdf37f178194a32763654ece6a

Sharing

Copy URL Twitter E-mail

General

Target

098f30cdf37f178194a32763654ece6a
Size

307KB
MD5

098f30cdf37f178194a32763654ece6a
SHA1

c2cffaddb4725618a405d13301872a7c6c13f4b4
SHA256

dd78ef0353ebe30554d8669048366d5d9570dfade2b885cb1ff8fb7e3f6a40d3
SHA512

90c40ad97797f9f52d8f8dad81dd5b16a3dd4da6628fb37a7d236649481e42b380c75c54990df04fd7e7e4edfb8a550af3d7bb90589d03251209bac1658f5c37
SSDEEP

6144:BgPluX4WUNjEAHjkbWubVmAzyihXTZDRI3mNq9K3Y:+PW4vNjPHAfZmwFxQK3Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
098f30cdf37f178194a32763654ece6a

Files

098f30cdf37f178194a32763654ece6a
.exe windows:4 windows x86 arch:x86

7fb126dccbc9a6a2ef795e98a4d7390f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime

crypt32

CertCloseStore
CertDuplicateCertificateContext
CertFindChainInStore
CertAddSerializedElementToStore
CertFreeCertificateChain
CertFreeCertificateContext
CertGetCertificateChain
CertNameToStrW
CertAddEncodedCertificateToStore
CertFindExtension
CertVerifyCertificateChainPolicy
CryptHashCertificate
CryptDecodeObjectEx
CertOpenStore
CertSerializeCertificateStoreElement
CertOpenSystemStoreW
CertAddCertificateContextToStore

advapi32

CopySid
UnregisterTraceGuids
TraceEvent
SetSecurityDescriptorDacl
RegisterTraceGuidsW
RegQueryValueExW
RegQueryValueExA
RegQueryInfoKeyW
RegOpenKeyExW
RegOpenKeyExA
RegEnumKeyExW
RegCreateKeyExW
RegCloseKey
OpenProcessToken
InitializeSecurityDescriptor
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
GetTokenInformation
GetLengthSid
AllocateAndInitializeSid
FreeSid

shlwapi

PathFileExistsW
PathFindExtensionW
PathFindFileNameW
PathFileExistsA
UrlCreateFromPathW
UrlCreateFromPathA
PathRemoveExtensionW
PathIsUNCW
PathIsUNCA
PathGetCharTypeW

shell32

CommandLineToArgvW
DragQueryFileW
SHFileOperationW
SHGetFolderPathW
ShellExecuteW
SHGetSpecialFolderPathW
DragFinish

kernel32

FindNextFileW
FindResourceW
FlushFileBuffers
FormatMessageA
FormatMessageW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetComputerNameA
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCurrencyFormatW
GetCurrentDirectoryA
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetDiskFreeSpaceA
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
GetDriveTypeA
GetDriveTypeW
GetEnvironmentStringsA
GetEnvironmentStringsW
GetFileAttributesA
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileSize
GetFileSizeEx
GetFileType
GetFullPathNameA
GetFullPathNameW
GetLastError
GetLocaleInfoA
GetLocaleInfoW
GetLogicalDriveStringsW
GetLogicalDrives
GetLongPathNameW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetNumberFormatW
GetOEMCP
GetPrivateProfileStringW
GetProcAddress
GetProcessHeap
GetQueuedCompletionStatus
FindFirstFileW
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempFileNameW
GetTempPathA
GetTempPathW
GetThreadContext
GetThreadLocale
GetThreadTimes
GetTickCount
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetUserDefaultLangID
GetVersionExA
GetVersionExW
GetVolumeInformationA
GetWindowsDirectoryW
GlobalAddAtomW
GlobalAlloc
GlobalDeleteAtom
GlobalFree
GlobalLock
GlobalMemoryStatus
GlobalMemoryStatusEx
GlobalSize
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedExchangeAdd
InterlockedIncrement
IsBadWritePtr
IsDebuggerPresent
IsValidCodePage
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LoadResource
LocalAlloc
LocalFileTimeToFileTime
LocalFree
LockFile
LockFileEx
LockResource
MapViewOfFile
MoveFileA
MoveFileExW
MultiByteToWideChar
OpenThread
OutputDebugStringA
PeekNamedPipe
PostQueuedCompletionStatus
QueryPerformanceCounter
QueryPerformanceFrequency
QueueUserWorkItem
RaiseException
ReadFile
RegisterWaitForSingleObject
ReleaseMutex
ReleaseSemaphore
RemoveDirectoryW
ResetEvent
ResumeThread
RtlUnwind
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableA
SetEvent
SetFileAttributesA
SetFilePointer
SetFilePointerEx
SetHandleCount
SetLastError
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SuspendThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
FindFirstFileA
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnlockFile
UnmapViewOfFile
UnregisterWaitEx
VirtualAlloc
VirtualFree
VirtualProtect
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
lstrcmpiA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
ExpandEnvironmentStringsW
ExitThread
ExitProcess
EnumSystemLocalesA
EnterCriticalSection
DuplicateHandle
DeleteFileW
DeleteFileA
DeleteCriticalSection
CreateThread
CreateSemaphoreW
CreateSemaphoreA
CreateProcessW
CreateMutexW
CreateIoCompletionPort
CreateFileW
CreateFileMappingW
CreateFileMappingA
CreateFileA
CreateEventW
CreateDirectoryW
CreateDirectoryA
CompareStringW
CompareStringA
CloseHandle
CancelIo
AreFileApisANSI
GetStartupInfoA
TlsAlloc

comdlg32

GetSaveFileNameW
PrintDlgExW

gdi32

SetDIBits
SetGraphicsMode
SetMiterLimit
SetPolyFillMode
SetROP2
SetRectRgn
SetStretchBltMode
SetDCPenColor
SetWorldTransform
StartDocW
StartPage
StretchDIBits
StrokeAndFillPath
StrokePath
SetTextColor
SetDCBrushColor
GetFontData
SetBrushOrgEx
SetBkMode
SetBkColor
SetArcDirection
SetAbortProc
SelectObject
SelectClipRgn
SaveDC
RestoreDC
RemoveFontMemResourceEx
Rectangle
PolyBezier
PathToRegion
GetTextMetricsW
GetTextFaceW
GetTextColor
GetStretchBltMode
GetStockObject
GetOutlineTextMetricsW
GetCurrentObject
GetCharWidthI
GdiFlush
ExtTextOutW
ExtCreatePen
EnumFontFamiliesExW
EndPath
EndPage
EndDoc
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgnIndirect
CreateRectRgn
CreatePen
CreateFontW
CreateFontIndirectW
CreateDIBSection
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
CombineRgn
BitBlt
BeginPath
AddFontMemResourceEx
AbortPath
GetFontUnicodeRanges
GetGlyphIndicesW
GetGlyphOutlineW
GetObjectW
GetDeviceCaps

user32

SetTimer
SetWindowLongA
GetMessageTime
SetPropW
SetParent
SetFocus
SetCursor
SetClipboardData
SetClassLongW
WaitMessage
UnregisterClassW
UnregisterClassA
UnhookWindowsHookEx
TranslateMessage
TrackPopupMenu
TrackMouseEvent
SystemParametersInfoW
SetWindowsHookExW
SetWindowRgn
SetWindowPos
CallMsgFilterW
CallNextHookEx
CallWindowProcW
CloseClipboard
CreateIconIndirect
CreatePopupMenu
CreateWindowExW
DefWindowProcA
DefWindowProcW
DestroyIcon
DestroyWindow
DispatchMessageW
DrawEdge
DrawFocusRect
DrawFrameControl
DrawIconEx
DrawTextW
EmptyClipboard
EnumDisplayMonitors
EnumDisplaySettingsW
EnumThreadWindows
FillRect
FrameRect
GetAsyncKeyState
GetCaretBlinkTime
GetClassNameW
GetClipboardData
GetCursor
GetDC
GetFocus
GetForegroundWindow
GetGuiResources
GetKeyState
GetKeyboardLayout
SetCapture
GetMonitorInfoW
GetParent
GetPropW
GetQueueStatus
GetSysColor
GetSysColorBrush
GetSystemMetrics
GetWindowLongW
GetWindowRect
GetWindowThreadProcessId
InflateRect
InsertMenuItemW
InvalidateRect
InvertRect
IsClipboardFormatAvailable
IsWindow
KillTimer
LoadCursorW
LoadImageW
LoadKeyboardLayoutW
MapWindowPoints
MessageBeep
MessageBoxW
MonitorFromWindow
MsgWaitForMultipleObjectsEx
OpenClipboard
PeekMessageW
PostMessageW
PostQuitMessage
RealGetWindowClassW
RedrawWindow
RegisterClassExW
RegisterClipboardFormatW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemovePropW
ScreenToClient
ScrollDC
SendInput
SetWindowLongW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

comctl32

InitCommonControlsEx

winspool.drv

ClosePrinter
ord203
GetPrinterW
OpenPrinterW

ole32

CoCreateGuid
CoCreateInstance
CoInitialize
CoUninitialize
OleInitialize
OleUninitialize
RegisterDragDrop
ReleaseStgMedium
RevokeDragDrop
StringFromGUID2

ws2_32

setsockopt
sendto
send
select
recvfrom
recv
ntohs
ntohl
listen
ioctlsocket
inet_ntoa
inet_addr
htons
htonl
getsockopt
getsockname
shutdown
socket
getservbyport
getservbyname
getpeername
gethostname
gethostbyname
gethostbyaddr
connect
closesocket
bind
accept
__WSAFDIsSet
WSAStartup
WSASocketW
WSASetLastError
WSASend
WSACleanup
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSAGetLastError
WSAGetOverlappedResult
WSARecv
WSAResetEvent

Exports

Exports

_get_output_format
av_add_index_entry
av_alloc_format_context
av_alloc_put_byte
av_close_input_file
av_close_input_stream
av_codec_get_id
av_codec_get_tag
av_filename_number_test
av_find_default_stream_index
av_find_input_format
av_find_stream_info
av_gen_search
av_get_frame_filename
av_get_packet
av_gettime
av_guess_codec
av_guess_format
av_hex_dump
av_hex_dump_log
av_iformat_next
av_index_search_timestamp
av_interleave_packet_per_dts
av_interleaved_write_frame
av_match_ext
av_metadata_conv
av_metadata_free
av_metadata_get
av_metadata_set
av_metadata_set2
av_new_program
av_new_stream
av_oformat_next
av_open_input_file
av_open_input_stream
av_pkt_dump
av_pkt_dump_log
av_probe_input_format
av_protocol_next
av_read_frame
av_read_packet
av_read_pause
av_read_play
av_register_all
av_register_input_format
av_register_output_format
av_register_protocol
av_seek_frame
av_seek_frame_binary
av_set_parameters
av_set_pts_info
av_update_cur_dts
av_url_read_fpause
av_url_read_fseek
av_url_read_pause
av_url_read_seek
av_write_frame
av_write_header
av_write_trailer
avf_sdp_create
avformat_alloc_context
avformat_configuration
avformat_license
avformat_seek_file
avformat_version
brktimegm
dump_format
ff_codec_bmp_tags
ff_codec_get_id
ff_codec_get_tag
ff_codec_wav_tags
ff_crc04C11DB7_update
ff_data_to_hex
ff_dynarray_add
ff_free_parser_state
ff_gen_syncpoint_search
ff_get_v
ff_get_wav_header
ff_interleave_add_packet
ff_interleave_compare_dts
ff_metadata_demux_compat
ff_metadata_mux_compat
ff_mkv_codec_tags
ff_mkv_metadata_conv
ff_mkv_mime_tags
ff_new_chapter
ff_ntp_time
ff_ogm_audio_codec
ff_ogm_old_codec
ff_ogm_text_codec
ff_ogm_video_codec
ff_parse_specific_params
ff_probe_input_buffer
ff_program_add_stream_index
ff_read_frame_flush
ff_reduce_index
ff_restore_parser_state
ff_store_parser_state
ff_theora_codec
ff_url_join
ff_url_split
ff_vorbis_codec
ff_vorbis_comment
ff_vorbiscomment_length
ff_vorbiscomment_metadata_conv
ff_vorbiscomment_write
ff_wav_codec_get_id
find_info_tag
first_iformat
first_oformat
first_protocol
get_be16
get_be24
get_be32
get_be64
get_buffer
get_byte
get_checksum
get_le16
get_le24
get_le32
get_le64
get_partial_buffer
get_strz
guess_format
guess_stream_format
init_checksum
init_put_byte
metadata_conv
mktimegm
ogg_demuxer
parse_date
parse_frame_rate
parse_image_size
put_be16
put_be24
put_be32
put_be64
put_buffer
put_byte
put_flush_packet
put_le16
put_le24
put_le32
put_le64
put_strz
put_tag
register_protocol
small_strptime
strcasecmp
strncasecmp
url_close
url_exist
url_fclose
url_fdopen
url_feof
url_ferror
url_fget_max_packet_size
url_fgetc
url_fgets
url_fileno
url_filesize
url_fopen
url_fseek
url_fsize
url_fskip
url_ftell
url_get_file_handle
url_get_filename
url_get_max_packet_size
url_interrupt_cb
url_open
url_open_protocol
url_read
url_read_complete
url_resetbuf
url_seek
url_set_interrupt_cb
url_setbufsize
url_write
webm_demuxer

Sections

.text
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7fb126dccbc9a6a2ef795e98a4d7390f

Headers

File Characteristics

Imports

winmm

crypt32

advapi32

shlwapi

shell32

kernel32

comdlg32

gdi32

user32

version

comctl32

winspool.drv

ole32

ws2_32

Exports

Exports

Sections

.text Size: 96KB - Virtual size: 96KB

.rdata Size: 112KB - Virtual size: 112KB

.data Size: 76KB - Virtual size: 1.6MB

.idata Size: 20KB - Virtual size: 20KB

.rsrc Size: 20KB - Virtual size: 20KB

.text
Size: 96KB - Virtual size: 96KB

.rdata
Size: 112KB - Virtual size: 112KB

.data
Size: 76KB - Virtual size: 1.6MB

.idata
Size: 20KB - Virtual size: 20KB

.rsrc
Size: 20KB - Virtual size: 20KB