323902a0260d1effe9acd92da577b5fc

Sharing

Copy URL Twitter E-mail

General

Target

323902a0260d1effe9acd92da577b5fc
Size

668KB
MD5

323902a0260d1effe9acd92da577b5fc
SHA1

aad475921b885a4d1606e83a4e2ee67e55794815
SHA256

e6b0fedf1e11eb55733fa42fc21088407be045bdde4d103a8e74e21f25656050
SHA512

c5aa358dea9917cce37c05eefd3e439a1ee1fa73f0c11a58eff7dca92efd50699eccb2c9d72182a11c24aa74a086ffb01559cb24f27875dd47ff80b5577d4c12
SSDEEP

12288:frXYuKzBmNQoeG2FocPPX9uoKbnzm5cNKR1gxq/p:7mm8GrE/9uoKbz7S1g0/p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
323902a0260d1effe9acd92da577b5fc

Files

323902a0260d1effe9acd92da577b5fc
.exe windows:4 windows x86 arch:x86

566f002a55b61d576d8bfc5e3af592bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
HeapCreate
VirtualAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
IsBadWritePtr
GetEnvironmentStrings
FreeEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
LCMapStringA
LCMapStringW
GetStringTypeA
GetEnvironmentStringsW
IsBadReadPtr
HeapDestroy
HeapSize
lstrcpynA
CompareStringA
CompareStringW
SetEnvironmentVariableA
CloseHandle
GetModuleHandleA
FreeLibrary
LoadLibraryA
SetFileAttributesA
GetWindowsDirectoryA
lstrcpyA
lstrcatA
HeapReAlloc
TerminateProcess
GetACP
ExitProcess
GetCommandLineA
GetStartupInfoA
RaiseException
GetLocalTime
GetSystemTime
GetTimeZoneInformation
HeapAlloc
HeapFree
GetDriveTypeA
RtlUnwind
SetErrorMode
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetOEMCP
GetCPInfo
GetProcessVersion
SizeofResource
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
SetLastError
MulDiv
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFullPathNameA
GetFileAttributesA
GlobalAlloc
GetCurrentThread
lstrlenA
IsBadCodePtr
SetStdHandle
GetCurrentThreadId
_lcreat
GetPrivateProfileIntA
GetVersion
GetModuleFileNameA
GlobalAddAtomA
GlobalGetAtomNameA
lstrcmpiA
GlobalLock
GlobalFindAtomA
GlobalDeleteAtom
LockResource
GlobalUnlock
GlobalFree
lstrcmpA
FindResourceA
LoadResource
FileTimeToLocalFileTime
FileTimeToSystemTime
WideCharToMultiByte
LocalFree
MultiByteToWideChar
WinExec
InterlockedDecrement
InterlockedIncrement
GetPrivateProfileSectionNamesA
CreateDirectoryA
GetCurrentDirectoryA
GetProcAddress
GetProfileStringA
WriteProfileStringA
GetStringTypeW
Sleep
GetLastError
GetTickCount
GetPrivateProfileStringA
FindClose
FindNextFileA
FindFirstFileA
WritePrivateProfileStringA
_lclose
GetTempFileNameA
GetTempPathA
_lwrite
_llseek
_lread
_lopen
CopyFileA

user32

BeginPaint
EndPaint
GetWindowDC
TabbedTextOutA
DrawTextA
GrayStringA
SetRectEmpty
IsZoomed
LoadAcceleratorsA
TranslateAcceleratorA
GetDesktopWindow
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
SetParent
DeleteMenu
GetSystemMenu
WindowFromPoint
GetClassNameA
GetSysColorBrush
InsertMenuA
GetMenuStringA
CharUpperA
GetTabbedTextExtentA
InvertRect
GetDCEx
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
LoadIconA
PostMessageA
SendDlgItemMessageA
MapWindowPoints
DispatchMessageA
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
MessageBoxA
IsChild
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetMenuItemID
GetWindowTextLengthA
GetDlgCtrlID
GetKeyState
DefWindowProcA
SetWindowsHookExA
CallNextHookEx
SetPropA
UnhookWindowsHookEx
DestroyMenu
GetMenuCheckMarkDimensions
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
LoadStringA
ClientToScreen
RegisterWindowMessageA
OffsetRect
IntersectRect
IsIconic
GetWindowPlacement
GetNextDlgTabItem
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
GetWindowLongA
IsWindowEnabled
wsprintfA
GetFocus
PtInRect
PeekMessageA
PostQuitMessage
SetForegroundWindow
IsWindowVisible
SetRect
GetDC
ReleaseDC
IsWindow
LoadCursorA
SystemParametersInfoA
SetWindowTextA
ShowWindow
SetWindowLongA
GetDlgItem
GetWindowTextA
EndDialog
SetFocus
SetCursor
KillTimer
SetTimer
RedrawWindow
DrawIcon
FrameRect
DestroyIcon
CreateWindowExA
GetParent
DestroyWindow
MessageBeep
InvalidateRect
GetCapture
ReleaseCapture
SetCapture
GetSystemMetrics
CopyRect
DrawFrameControl
InflateRect
GetSysColor
DrawFocusRect
CreatePopupMenu
AppendMenuA
GetCursorPos
LockWindowUpdate
SendMessageA
GetClientRect
GetWindowRect
ScreenToClient
EnableWindow
UpdateWindow
IsDialogMessageA
SetDlgItemTextA
ShowOwnedPopups
GetMessageA
TranslateMessage
ValidateRect
MapDialogRect
GetAsyncKeyState
IsRectEmpty
FindWindowA
FillRect
DestroyCursor
wvsprintfA
MoveWindow
GetWindow
SetWindowPos
GetPropA
CallWindowProcA
TrackPopupMenu
GetClassLongA
GetSubMenu
IsWindowUnicode
HideCaret
ExcludeUpdateRgn
UnregisterClassA
CharNextA
ShowCaret
DefDlgProcA

gdi32

CreateSolidBrush
SetViewportOrgEx
SelectObject
DeleteDC
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
CreateHalftonePalette
Rectangle
GetStockObject
GetTextMetricsA
GetTextExtentPoint32A
RealizePalette
GetObjectA
PatBlt
CreateFontIndirectA
GetClipBox
CreateRectRgnIndirect
SetBkColor
CreateBitmap
SetTextColor
DPtoLP
CreatePen
GetDeviceCaps
AbortDoc
EndDoc
GetViewportOrgEx
StartPage
StartDocA
EndPage
LPtoDP
CreateDCA
SetRectRgn
CombineRgn
CreatePatternBrush
CreateRectRgn
ExtTextOutA
SaveDC
RestoreDC
SelectPalette
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetCurrentPositionEx
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
Escape
StretchDIBits
GetCharWidthA
CreateFontA
GetBkColor
GetNearestColor
GetTextColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
GetWindowOrgEx
CreateDIBitmap
GetTextExtentPointA
DeleteObject
SetAbortProc

comdlg32

PrintDlgA
GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegSetValueExA
RegSetValueA
RegCreateKeyA
GetFileSecurityA
SetFileSecurityA
RegDeleteValueA
RegQueryValueA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyA
RegEnumKeyA
RegCloseKey

shell32

DragQueryFileA
DragFinish
SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA
ExtractIconA
SHGetFileInfoA

comctl32

PropertySheetA
ImageList_Destroy
CreatePropertySheetPageA
DestroyPropertySheetPage
ord17

Exports

Exports

AEB_HostGetFunc

Sections

.text
Size: 480KB - Virtual size: 479KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 306KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

566f002a55b61d576d8bfc5e3af592bb

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

Exports

Exports

Sections

.text Size: 480KB - Virtual size: 479KB

.rdata Size: 96KB - Virtual size: 94KB

.data Size: 32KB - Virtual size: 306KB

.rsrc Size: 56KB - Virtual size: 52KB

.text
Size: 480KB - Virtual size: 479KB

.rdata
Size: 96KB - Virtual size: 94KB

.data
Size: 32KB - Virtual size: 306KB

.rsrc
Size: 56KB - Virtual size: 52KB