25541fa33a5a635592fe8bc660efd0c0

Sharing

Copy URL Twitter E-mail

General

Target

25541fa33a5a635592fe8bc660efd0c0
Size

300KB
MD5

25541fa33a5a635592fe8bc660efd0c0
SHA1

8bb3c173c4aa9c2dc826865f4d5c63a04a48442c
SHA256

5afabb2caa143882a6bdb7cd0fd7332fbe1f9ab804d29ae7321b27d99e1777d0
SHA512

5a067c28f77d04db9f19614c64e49511c461c0cbe1e2f7cebc4cce89ce68dc05727d5b09cdef741863abf7545561a42bceb5f7e23d0fe2567bac921d8bc27979
SSDEEP

6144:VCpP38p3fhSX7sNQIeBUy0YquQubeNKC5c/EY7osw:AP34hk7441QF5c/EY7ol

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25541fa33a5a635592fe8bc660efd0c0

Files

25541fa33a5a635592fe8bc660efd0c0
.exe windows:4 windows x86 arch:x86

c0b237b5dc89a2086865ca9400aba240

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

AlphaBlend
GradientFill

shlwapi

PathCompactPathW
PathStripPathW
PathFileExistsW
PathAppendW
PathRemoveFileSpecW
ColorAdjustLuma
PathCompactPathExW
StrChrW
PathIsDirectoryW
StrRetToStrW
StrRStrIW

ole32

CoRegisterClassObject
CoRevokeClassObject
CoGetInterfaceAndReleaseStream
CoUninitialize
OleRun
CoResumeClassObjects
CoInitializeSecurity
StringFromGUID2
CLSIDFromString
CoInitializeEx
CoTaskMemFree
CoInitialize
CreateStreamOnHGlobal
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CLSIDFromProgID
StringFromCLSID

comdlg32

GetOpenFileNameW
GetSaveFileNameW
FindTextW

activeds

ord3
ord9
ord7

comctl32

CreatePropertySheetPageW
InitCommonControlsEx
ImageList_Create
CreateStatusWindowW
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_LoadImageW
_TrackMouseEvent
ImageList_DrawIndirect
ImageList_GetIcon
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_Draw
ImageList_Destroy
DestroyPropertySheetPage
ord8
PropertySheetW

kernel32

SetUnhandledExceptionFilter
SetThreadPriority
CreateFileW
lstrcmpW
FreeLibrary
ReadFile
LoadResource
lstrcmpiW
VirtualFree
CreateWaitableTimerW
SystemTimeToTzSpecificLocalTime
LeaveCriticalSection
FileTimeToSystemTime
lstrlenW
CreateThread
DuplicateHandle
ResumeThread
GetWindowsDirectoryW
GetSystemTime
IsProcessorFeaturePresent
GlobalUnlock
WaitForMultipleObjects
RaiseException
GetModuleHandleW
GetCurrentDirectoryW
lstrcatW
SetLastError
GetTempPathW
lstrcpyW
UnhandledExceptionFilter
SizeofResource
LocalFree
GetSystemInfo
HeapSize
FindFirstFileW
EnterCriticalSection
GetCurrentThreadId
DeleteCriticalSection
WriteFile
GetDriveTypeW
FindResourceExW
GetSystemTimeAsFileTime
GetFileInformationByHandle
GetProcessHeap
LockResource
ResetEvent
MulDiv
TerminateThread
GetThreadLocale
WaitForSingleObject
lstrcpynA
SetCurrentDirectoryW
CloseHandle
LocalAlloc
FindClose
GetFileType
OpenEventW
GetUserDefaultLangID
GetTimeFormatW
GetUserDefaultLCID
GlobalAlloc
DeleteFileW
GlobalLock
FormatMessageW
CreateEventW
HeapReAlloc
FlushInstructionCache
LoadLibraryExW
lstrlenA
FatalAppExitW
GetExitCodeThread
FindResourceW
SetWaitableTimer
ExpandEnvironmentStringsA
GetFileSize
IsDebuggerPresent
HeapFree
GetNumberFormatW
HeapAlloc
GlobalFree
VirtualAlloc
SetFilePointer
WideCharToMultiByte
GetCommandLineW
GetLogicalDriveStringsW
GetFullPathNameW
GetComputerNameW
GetACP
GetDateFormatW
lstrcpynW
GetLongPathNameW
HeapDestroy
VirtualAllocEx
lstrcmpA

advapi32

SetSecurityDescriptorDacl
GetSecurityDescriptorOwner
FreeSid
LookupAccountSidW
RegOpenKeyExW
GetSecurityDescriptorGroup
RegQueryValueExA
RegCloseKey
SetFileSecurityW
RegQueryValueExW
OpenSCManagerW
GetAce
MakeSelfRelativeSD
OpenServiceW
GetSecurityDescriptorDacl
OpenProcessToken
RegOpenKeyW
RegSetValueExW
AdjustTokenPrivileges
StartServiceW
MakeAbsoluteSD
LookupPrivilegeValueW
CheckTokenMembership
GetLengthSid
InitializeSid
GetSidSubAuthority
AllocateAndInitializeSid
IsValidSid
InitializeSecurityDescriptor
AddAce
ConvertStringSidToSidW
QueryServiceStatus
GetSecurityDescriptorControl
RegNotifyChangeKeyValue
GetUserNameW
RegOpenKeyExA
LookupAccountNameW
CopySid
EqualSid
InitializeAcl
ConvertSidToStringSidW
GetSecurityDescriptorSacl
GetSidLengthRequired
CloseServiceHandle
GetSecurityDescriptorLength
GetTokenInformation
GetAclInformation
GetFileSecurityW
RegCreateKeyExW

user32

RegisterClassExW
GetWindowPlacement
SetWindowTextW
GetKeyState
EqualRect
ExitWindowsEx
GetTopWindow
DrawAnimatedRects
GetDC
IsClipboardFormatAvailable
GetClassInfoExW
FindWindowW
MapDialogRect
GetWindowDC
GetWindowRect
CopyRect
LockWindowUpdate
GetWindow
GetDlgCtrlID
GetParent
MessageBoxW
LoadStringW
CharUpperBuffW
SetForegroundWindow
GetScrollInfo
EndPaint
GetClassNameW
FillRect
LoadIconW
SetMenuItemInfoW
IsWindowVisible
ClientToScreen
CreateDialogParamW
IsCharAlphaW
CallNextHookEx
DestroyWindow
OffsetRect
DestroyIcon
IsMenu
RegisterWindowMessageW
IsDialogMessageW
ReleaseDC
GetActiveWindow
SetWindowsHookExW
EnableMenuItem
UnregisterClassA
GetCursor
GetMonitorInfoW
ModifyMenuW
InvalidateRect
LoadBitmapW
EndDialog
GetMenuItemInfoW
PostQuitMessage
SetTimer
CharLowerW
GetMessageW
IsIconic
ScreenToClient
CloseClipboard
SetMenuDefaultItem
SetClipboardData
GetCapture
GetDlgItem
MessageBeep
IsRectEmpty
CallWindowProcW
IsChild
GetWindowLongW
MsgWaitForMultipleObjects
MonitorFromPoint
DrawFrameControl
GetClipboardData
SetScrollPos
DeleteMenu
SystemParametersInfoW
wsprintfW
ScrollWindowEx
SendMessageW
DestroyMenu
TabbedTextOutW
FrameRect
IsWindow
GetSubMenu
CreateWindowExW
DrawStateW
IsCharLowerW
DrawFocusRect
LoadCursorW
GetMessagePos
PostMessageW
GetWindowTextLengthW
DefWindowProcW
TrackPopupMenu
GetTabbedTextExtentW
SetCapture
GetClientRect
SetCursorPos
SetFocus
InflateRect
GetScrollPos
SetWindowPos
OpenClipboard
CharNextW
LoadImageW
GetMenu
TrackPopupMenuEx
ReleaseCapture
GetGUIThreadInfo
BeginDeferWindowPos
DispatchMessageW
WindowFromPoint
MoveWindow
GetMenuItemCount
WindowFromDC
IsCharAlphaNumericW
GetFocus
IntersectRect
KillTimer
TranslateMessage
UpdateWindow
GetDesktopWindow
DrawEdge
GetSystemMenu
GetSystemMetrics
DrawIconEx
PtInRect
DialogBoxParamW
EnableWindow
RemoveMenu
SetWindowLongW
BeginPaint
RedrawWindow
DeferWindowPos
SetCursor
SetRectEmpty
AppendMenuW
GetSysColor
TranslateAcceleratorW
ShowWindow
AttachThreadInput
EmptyClipboard
GetWindowThreadProcessId
SetMenu
MapWindowPoints
GetNextDlgTabItem
DrawTextW
GetWindowTextW
GetCursorPos
CreatePopupMenu
GetSysColorBrush
SetScrollInfo
SetDlgItemTextW
LoadMenuW
AnimateWindow
UnhookWindowsHookEx
PeekMessageW
LoadAcceleratorsW
LoadStringA
EndDeferWindowPos
GetForegroundWindow
IsWindowEnabled
SetWindowPlacement
CharUpperW

shell32

SHGetDesktopFolder
ShellExecuteW
SHGetMalloc
ShellExecuteExW
SHAppBarMessage
SHGetSpecialFolderPathW
SHGetPathFromIDListW
DragQueryFileW
SHBrowseForFolderW
SHGetFileInfoW
SHGetFolderPathW
SHGetSpecialFolderLocation
DragAcceptFiles

userenv

UnloadUserProfile

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

gdi32

CombineRgn
UnrealizeObject
GetPixel
GetCurrentObject
RoundRect
CreateDIBSection
GetTextExtentExPointW
CreatePatternBrush
DeleteObject
IntersectClipRect
PatBlt
Polygon
MoveToEx
SetTextColor
SelectObject
SetViewportOrgEx
CreateSolidBrush
Rectangle
SetROP2
CreateBitmap
ExtTextOutW
GetStockObject
CreatePolygonRgn
SetBkMode
GetBkColor
SetBkColor
CreateFontIndirectW
GetDeviceCaps
SelectClipRgn
GetTextExtentPoint32W
SetPixel
GetTextMetricsW
CreateRectRgn
GetObjectType
SetBrushOrgEx
CreateRectRgnIndirect
PtInRegion
DeleteDC
LineTo
CreateCompatibleBitmap
SetTextAlign
BitBlt
CreatePen
TextOutW
GetClipRgn
ExtCreatePen
CreateCompatibleDC
GetObjectW

oleaut32

SafeArrayDestroy
VariantInit
SafeArrayCreateVectorEx
VariantChangeType
SysAllocStringByteLen
SafeArrayUnlock
SafeArrayCreate
SafeArrayUnaccessData
SysStringLen
SafeArrayLock
SafeArrayGetDim
LoadRegTypeLi
VarDateFromStr
VariantClear
VarBstrFromDate
SafeArrayGetLBound
VarBstrCmp
SafeArrayRedim
SysAllocString
SafeArrayGetUBound
VariantCopyInd
GetRecordInfoFromGuids
SystemTimeToVariantTime
DispCallFunc
SysAllocStringLen
VarDateFromUdate
SafeArrayGetVartype
SafeArrayGetElement
LoadTypeLi
SafeArrayCopy
GetErrorInfo
VariantCopy
SysFreeString
SysStringByteLen
SafeArrayAccessData
VariantTimeToSystemTime

secur32

GetUserNameExW
TranslateNameW

netapi32

NetApiBufferFree
NetQueryDisplayInformation

security

ExportSecurityContext
AcceptSecurityContext
ImpersonateSecurityContext

dinput8

DllRegisterServer
DllCanUnloadNow
DllUnregisterServer

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 258KB - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c0b237b5dc89a2086865ca9400aba240

Headers

File Characteristics

Imports

msimg32

shlwapi

ole32

comdlg32

activeds

comctl32

kernel32

advapi32

user32

shell32

userenv

version

gdi32

oleaut32

secur32

netapi32

security

dinput8

Sections

.text Size: 20KB - Virtual size: 20KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 258KB - Virtual size: 258KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 20KB - Virtual size: 20KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 258KB - Virtual size: 258KB

.rsrc
Size: 8KB - Virtual size: 7KB