19c1c911be65074dcad7bafed58ef16d

Sharing

Copy URL Twitter E-mail

General

Target

19c1c911be65074dcad7bafed58ef16d
Size

728KB
MD5

19c1c911be65074dcad7bafed58ef16d
SHA1

fb1e12d2c0e083a8e6aff6e61a1550014c30de02
SHA256

a6ab192055df6129dcdadef7737aa67a5aa511a8eff5950dff579f0b057f2cdc
SHA512

d89611ba083d063b08f56b00347697d9aa18f8f9af9e665ec3ba020e904e21a18ac8738bd7937c36f4979c537f1b958568968c9e856c8ccb7e12fd0fbba7db4f
SSDEEP

12288:mxXiyygWsXSNBhn6FrwHmJqt4ioLpkvpTL8lY9crZgoctmTXc1EOZp4TyhZeM:EyOWXNBhk30pTJ9crZgoBTXctZGTyWM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19c1c911be65074dcad7bafed58ef16d

Files

19c1c911be65074dcad7bafed58ef16d
.exe windows:4 windows x86 arch:x86

adf7c358b83e73f3c04645d4d0c41f4e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

shlwapi

PathFindExtensionA
PathRemoveExtensionA
PathIsUNCA
PathStripToRootA
SHSetValueA
PathFindFileNameA
PathFileExistsA
SHDeleteValueA
SHGetValueA
PathAppendA

advapi32

SetSecurityDescriptorDacl
RegOpenKeyExA
RegEnumKeyA
RegQueryValueA
RegDeleteKeyA
GetLengthSid
AllocateAndInitializeSid
DuplicateTokenEx
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegOpenKeyA
OpenProcessToken
SetTokenInformation

wininet

InternetCrackUrlA
FindNextUrlCacheEntryA
FindCloseUrlCache
InternetGetCookieA
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
FindFirstUrlCacheEntryA

kernel32

RaiseException
MulDiv
FormatMessageA
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
CreateSemaphoreA
ReleaseSemaphore
CreateEventA
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
GetThreadLocale
DuplicateHandle
GetFullPathNameA
lstrcmpA
SetThreadPriority
ResumeThread
SetEvent
SuspendThread
GlobalDeleteAtom
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
GlobalAddAtomA
GlobalGetAtomNameA
InterlockedIncrement
InterlockedDecrement
LocalAlloc
GlobalFindAtomA
GetModuleFileNameW
GetUserDefaultLCID
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
SetErrorMode
GetFileAttributesA
GetFileTime
WritePrivateProfileStringA
GlobalFlags
GetCPInfo
GetOEMCP
GetTickCount
HeapFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
GetProcessHeap
GetStartupInfoA
RtlUnwind
ExitThread
CreateThread
HeapSize
HeapDestroy
HeapCreate
VirtualFree
GetACP
GetStdHandle
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
SetHandleCount
GetFileType
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStringTypeA
GetStringTypeW
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
SetEnvironmentVariableA
SetFilePointer
WriteFile
FreeResource
lstrcpyA
LocalFree
GetCurrentProcess
FindNextFileA
FindClose
FindFirstFileA
CreateMutexA
ReadFile
ConnectNamedPipe
CreateNamedPipeA
GetModuleHandleA
GetCurrentThreadId
Process32Next
TerminateProcess
GetExitCodeProcess
OpenProcess
Process32First
CreateToolhelp32Snapshot
SetLastError
Sleep
GetVolumeInformationA
GetTempFileNameA
GetCommandLineA
GetModuleFileNameA
ExitProcess
InitializeCriticalSectionAndSpinCount
FreeLibrary
GetCurrentProcessId
GetVersionExA
LoadLibraryW
GetVersion
CompareStringA
lstrcmpiA
InterlockedExchange
MultiByteToWideChar
CompareStringW
lstrlenA
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetFileTime
CreateFileA
CloseHandle
CompareFileTime
GetProcAddress
LoadLibraryA
GetTempPathA
WaitForSingleObject
DeleteFileA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
GetLastError
SystemTimeToFileTime
GetTimeZoneInformation
GetSystemTime
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
CreateDirectoryA
lstrcmpW
CreateFileW

user32

LoadCursorA
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
SetCapture
ReleaseCapture
CharNextA
CopyAcceleratorTableA
IsRectEmpty
SetRect
InvalidateRect
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
DestroyMenu
UnregisterClassA
RegisterClipboardFormatA
PostThreadMessageA
IsChild
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
SetFocus
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
EqualRect
CopyRect
GetDC
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetLastActivePopup
MessageBoxA
SetCursor
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
SetWindowContextHelpId
MapDialogRect
SetWindowPos
PostQuitMessage
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
SendMessageA
GetKeyState
PeekMessageA
ValidateRect
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetParent
GetClassNameA
ReleaseDC
GetSysColorBrush
ShowWindow
MoveWindow
IsDialogMessageA
GetSystemMetrics
SendMessageTimeoutA
EnumChildWindows
EnumThreadWindows
WaitForInputIdle
BringWindowToTop
GetWindowThreadProcessId
SetWindowTextA
GetClientRect
GetForegroundWindow
wsprintfA
EnableWindow
SetParent
PostMessageA
SetTimer
KillTimer
RegisterWindowMessageA
GetCursorPos
EnumWindows
GetWindowTextA
CharUpperA
LoadIconA
SendDlgItemMessageA
WinHelpA
GetWindow

gdi32

SaveDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
OffsetViewportOrgEx
SetViewportOrgEx
GetDeviceCaps
RestoreDC
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
GetStockObject
Escape
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
DeleteObject
SetMapMode
SelectObject

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

shell32

SHGetSpecialFolderPathA

oledlg

ord8

ole32

OleFlushClipboard
StgOpenStorageOnILockBytes
CoInitialize
CoCreateInstance
CoGetMalloc
CoUninitialize
CLSIDFromProgID
CLSIDFromString
CoDisconnectObject
OleRun
CoTaskMemAlloc
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoGetClassObject
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
CoRegisterMessageFilter

oleaut32

OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
LoadTypeLi
SysAllocStringByteLen
SysStringLen
GetErrorInfo
VariantCopy
SysAllocStringLen
VariantChangeType
VariantInit
SysAllocString
SysFreeString
VariantClear

ws2_32

WSAStartup

Sections

.text
Size: 576KB - Virtual size: 572KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

adf7c358b83e73f3c04645d4d0c41f4e

Headers

File Characteristics

Imports

version

shlwapi

advapi32

wininet

kernel32

user32

gdi32

comdlg32

winspool.drv

shell32

oledlg

ole32

oleaut32

ws2_32

Sections

.text Size: 576KB - Virtual size: 572KB

.rdata Size: 128KB - Virtual size: 127KB

.data Size: 16KB - Virtual size: 122KB

.rsrc Size: 4KB - Virtual size: 744B

.text
Size: 576KB - Virtual size: 572KB

.rdata
Size: 128KB - Virtual size: 127KB

.data
Size: 16KB - Virtual size: 122KB

.rsrc
Size: 4KB - Virtual size: 744B