1c0921380e8d9a1828cab0708683a067

Sharing

Copy URL Twitter E-mail

General

Target

1c0921380e8d9a1828cab0708683a067
Size

1.7MB
MD5

1c0921380e8d9a1828cab0708683a067
SHA1

d8b37fbe78c5cd699a8ba62c19be757cc6c3375b
SHA256

79f5ffda9e105e47e0e7f7fd00149e4d444d283e7fafb86021c929811bb77f1e
SHA512

4aceb034a0618c2fc78f833e758f1d73ce00f613e37c374f9a6ded312626b204a360fc5129d163ef722857256ebc404aab4bbcf2437c095a55de4b4296d9d12c
SSDEEP

24576:1vE7W+7ev/7or5g3dObVtjwQbnypQH9n0l3hPNSnX44ejUHFkzgnFCx+VQ2U5qE3:1sTg3d5QbyuhUEOotTrWH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c0921380e8d9a1828cab0708683a067

Files

1c0921380e8d9a1828cab0708683a067
.exe windows:4 windows x86 arch:x86

d9e9cf5c807a7c5ae30db998364814a1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

wininet

InternetOpenA
InternetGetLastResponseInfoA
InternetSetOptionA
InternetOpenUrlA
InternetCloseHandle
HttpQueryInfoA
InternetQueryOptionA
InternetGetConnectedState
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetConnectA
InternetReadFile
InternetCrackUrlA
InternetCanonicalizeUrlA

psapi

GetModuleBaseNameA
EnumProcesses

kernel32

GetModuleFileNameA
CompareStringA
lstrcpyA
GetLocaleInfoA
GetDateFormatA
GetTimeFormatA
GetTickCount
InterlockedExchange
CompareStringW
GetStringTypeExA
lstrcpynA
ExitProcess
WritePrivateProfileStringA
CloseHandle
TerminateThread
Sleep
CreateThread
ResumeThread
SuspendThread
WaitForSingleObject
DeleteFileA
GetPrivateProfileSectionNamesA
FindClose
FindNextFileA
FindFirstFileA
CreateMutexA
GetCommandLineA
GetVersionExA
WritePrivateProfileStructA
CreateDirectoryA
lstrcatA
GetLocalTime
OpenProcess
lstrcmpA
VirtualFreeEx
ReadProcessMemory
VirtualAllocEx
SetEvent
CreateEventA
ResetEvent
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateWaitableTimerA
SetWaitableTimer
LocalFileTimeToFileTime
WaitForMultipleObjects
SystemTimeToFileTime
ExitThread
OutputDebugStringA
WriteFile
SetFilePointer
CreateFileA
GetFileSize
GetCurrentDirectoryA
GetSystemDirectoryA
GetVolumeInformationA
ReadFile
CreateProcessA
SetFileAttributesA
MulDiv
MapViewOfFileEx
CreateFileMappingA
UnmapViewOfFile
GetSystemTime
GetPrivateProfileIntA
GlobalHandle
GetTempPathA
GetModuleHandleA
GetWindowsDirectoryA
GetExitCodeThread
FlushFileBuffers
HeapCreate
GetStdHandle
IsValidCodePage
GetOEMCP
GetTimeZoneInformation
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetCPInfo
LCMapStringW
LCMapStringA
GetFileType
PeekNamedPipe
GetFileInformationByHandle
GetStartupInfoA
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
VirtualProtect
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
HeapSize
HeapReAlloc
HeapDestroy
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
GetProcAddress
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
GetThreadLocale
GetACP
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
SetStdHandle
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
LoadLibraryExA
SetLastError
IsDBCSLeadByte
LoadLibraryA
FreeLibrary
lstrcmpiA
lstrlenA
InterlockedDecrement
InterlockedIncrement
GetLastError
lstrlenW
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
CreateFileW
SetEndOfFile
GetFileAttributesA
GetFileAttributesW
GetConsoleMode
GetFullPathNameW
DeleteFileW
MultiByteToWideChar
GetCurrentThreadId
RaiseException
GetPrivateProfileStringA
GetPrivateProfileStructA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalReAlloc
GlobalFree
GetCurrentProcess
FlushInstructionCache
FindResourceExA
FindResourceA
LoadResource
LockResource
SizeofResource
GetStringTypeA
GetStringTypeW
GetFullPathNameA
LocalFree
FormatMessageA
AreFileApisANSI
UnlockFile
LockFile
LoadLibraryW
GetTempPathW
LockFileEx
SetHandleCount
GetConsoleCP
FreeEnvironmentStringsA

user32

UpdateWindow
IsWindowVisible
EnableWindow
SetActiveWindow
GetKeyState
GetMessageA
TranslateMessage
DispatchMessageA
RegisterClipboardFormatA
GetComboBoxInfo
IntersectRect
IsRectEmpty
SetScrollInfo
GetScrollInfo
SetScrollPos
GetScrollPos
KillTimer
SetTimer
GetClassNameA
GetSysColor
ReleaseDC
GetDC
GetCursorPos
IsDialogMessageA
LoadAcceleratorsA
TranslateAcceleratorA
PostQuitMessage
SetForegroundWindow
LoadImageA
DialogBoxParamA
GetActiveWindow
LoadIconA
FindWindowA
EnumChildWindows
GetWindowThreadProcessId
RegisterWindowMessageA
MoveWindow
InvalidateRgn
IsChild
DestroyAcceleratorTable
GetDesktopWindow
CreateAcceleratorTableA
PeekMessageA
MsgWaitForMultipleObjects
GetWindowPlacement
EnumWindows
SetCursor
DrawStateA
SetCapture
IsWindowEnabled
RedrawWindow
CreateDialogParamA
GetFocus
GetMessagePos
GetAsyncKeyState
EqualRect
InvalidateRect
GetForegroundWindow
SetParent
SetWindowContextHelpId
MapDialogRect
DrawFrameControl
GetDlgCtrlID
SetFocus
RegisterClassExA
SetRectEmpty
EndPaint
BeginPaint
GetCapture
ReleaseCapture
OffsetRect
InflateRect
PtInRect
ScreenToClient
ClientToScreen
GetWindowTextLengthA
PostMessageA
DestroyWindow
DrawTextA
FrameRect
CallWindowProcA
FillRect
CharNextA
DefWindowProcA
CopyRect
DestroyCursor
LoadCursorA
GetClassInfoExA
ShowWindow
SetRect
LoadBitmapA
GetParent
GetWindow
GetWindowRect
SystemParametersInfoA
MapWindowPoints
IsWindow
SetWindowRgn
AdjustWindowRectEx
GetDlgItem
GetClientRect
SetWindowPos
GetMenu
GetWindowTextA
SetWindowTextA
GetWindowLongA
CreateWindowExA
SetWindowLongA
EndDialog
SendMessageA
DialogBoxIndirectParamA
PostThreadMessageA
UnregisterClassA
LoadStringA
GetSystemMetrics
wsprintfA

gdi32

Rectangle
CreateRectRgn
CreatePolygonRgn
GetTextExtentPoint32A
SetViewportOrgEx
LineTo
StretchBlt
GetDeviceCaps
GetDIBits
SetWindowOrgEx
GetClipBox
OffsetWindowOrgEx
CreateCompatibleBitmap
CreatePen
CreateSolidBrush
ExtTextOutA
RoundRect
SetTextColor
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateFontIndirectA
DeleteObject
GetObjectA
GetStockObject
DeleteDC
CombineRgn
ExtCreateRegion
BitBlt
SelectObject
MoveToEx
CreateCompatibleDC
CreateDIBSection

advapi32

RegEnumValueA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegEnumKeyExA
RegQueryValueExA
GetUserNameA
RegDeleteKeyA

shell32

ShellExecuteA
Shell_NotifyIconA
SHAppBarMessage
SHGetFolderPathA
SHGetSpecialFolderPathA

ole32

CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
DoDragDrop
ReleaseStgMedium
OleDuplicateData
RegisterDragDrop
StringFromGUID2
OleLockRunning
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
CreateStreamOnHGlobal
OleInitialize
OleUninitialize
CoUninitialize
CoInitialize
RevokeDragDrop

oleaut32

VariantChangeType
DispCallFunc
VarUI4FromStr
SysFreeString
SysStringLen
SysAllocStringLen
SysAllocString
SysStringByteLen
VariantInit
VariantClear
OleCreateFontIndirect
LoadRegTypeLi
LoadTypeLi

shlwapi

StrToIntA
PathIsDirectoryA
PathRemoveExtensionA
PathCombineA
PathAppendA
PathRemoveFileSpecA
PathStripPathA
PathFindExtensionA
StrStrIA
PathAddBackslashA

comctl32

ImageList_GetIconSize
InitCommonControlsEx
_TrackMouseEvent
ImageList_LoadImageA
ImageList_DrawEx
ImageList_Create
ImageList_Destroy
ImageList_AddMasked
ImageList_GetImageInfo
ImageList_Draw

msimg32

TransparentBlt
AlphaBlend
GradientFill

uxtheme

CloseThemeData
OpenThemeData
DrawThemeBackground

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

urlmon

ObtainUserAgentString

Sections

.text
Size: 956KB - Virtual size: 953KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 164KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 572KB - Virtual size: 568KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d9e9cf5c807a7c5ae30db998364814a1

Headers

File Characteristics

Imports

iphlpapi

wininet

psapi

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

msimg32

uxtheme

version

urlmon

Sections

.text Size: 956KB - Virtual size: 953KB

.rdata Size: 164KB - Virtual size: 160KB

.data Size: 28KB - Virtual size: 41KB

.rsrc Size: 572KB - Virtual size: 568KB

.text
Size: 956KB - Virtual size: 953KB

.rdata
Size: 164KB - Virtual size: 160KB

.data
Size: 28KB - Virtual size: 41KB

.rsrc
Size: 572KB - Virtual size: 568KB