357f7014a60c4e9146d9c40583477de0

Sharing

Copy URL Twitter E-mail

General

Target

357f7014a60c4e9146d9c40583477de0
Size

1.3MB
MD5

357f7014a60c4e9146d9c40583477de0
SHA1

133582ced45bbbf7598dd2121f14520c5fd2ff12
SHA256

46c392d510d2bf589ea4bb35494648c01c23f46c982fc3c8d78222d6b0ed3715
SHA512

0288b62a8cf5bb9205967bf40beaa26f8f6871d8305e9759189e67c26543c231f1aab80e6dfc28acaa16e1cf0d84e60b781744eacb48db3481df91502a93ce81
SSDEEP

24576:pWS8s3r2xthqC98Cf+WR6VODBnPvYdO7TOj6mkYRXTLymP8tmC0R76GK:zBb2FqI0ODBnPA+TOmm7RXT2G8tO9I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
357f7014a60c4e9146d9c40583477de0

Files

357f7014a60c4e9146d9c40583477de0
.exe windows:4 windows x86 arch:x86

8532099ccd69240641edf35f0b4c7fe0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

getsockopt
ioctlsocket
setsockopt
listen
__WSAFDIsSet
WSACleanup
WSAStartup
ntohl
inet_ntoa

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

kernel32

TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GlobalFlags
SetErrorMode
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
GetProcessHeap
GetSystemTimeAsFileTime
CreateDirectoryA
RtlUnwind
RaiseException
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
ExitThread
SetStdHandle
GetFileType
ExitProcess
HeapSize
SetEnvironmentVariableA
SetEnvironmentVariableW
LocalAlloc
GetStdHandle
GetModuleFileNameA
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTimeFormatA
GetDateFormatA
LCMapStringA
LCMapStringW
CreateFileA
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetCurrentDirectoryA
GetDriveTypeA
GetFullPathNameA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
CompareStringA
GetModuleHandleA
GetFileTime
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameW
GetVolumeInformationW
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetThreadLocale
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
lstrcmpW
GetVersionExA
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
MulDiv
LoadLibraryA
GetExitCodeThread
SleepEx
PeekNamedPipe
ExpandEnvironmentStringsW
GetFileInformationByHandle
FindFirstFileA
IsBadReadPtr
GetVersion
OpenMutexW
GetCurrentProcessId
ProcessIdToSessionId
WaitForMultipleObjects
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
IsBadStringPtrW
ResumeThread
SuspendThread
lstrlenA
SetThreadPriority
MoveFileW
CreateDirectoryW
WritePrivateProfileStringW
MoveFileExW
GetTickCount
GetTempPathW
GetLocalTime
TerminateProcess
ReleaseMutex
CreateMutexW
CreateEventW
GetCommandLineW
GetModuleFileNameW
GetCurrentDirectoryW
GetWindowsDirectoryW
FreeResource
InterlockedDecrement
InterlockedIncrement
GetModuleHandleW
UnmapViewOfFile
MapViewOfFile
GetStartupInfoW
CopyFileW
GetFileAttributesW
GetPrivateProfileStringW
GetPrivateProfileSectionNamesW
GetPrivateProfileIntW
FindResourceW
LoadResource
LockResource
SizeofResource
lstrlenW
WideCharToMultiByte
lstrcpynW
Sleep
LoadLibraryW
DeleteFileW
SetFileAttributesW
MultiByteToWideChar
FindClose
FindNextFileW
FreeLibrary
FindFirstFileW
GetProcAddress
GetCurrentProcess
TerminateThread
WaitForSingleObject
CreateThread
GetCurrentThreadId
SetEvent
CreateProcessW
GetSystemDirectoryW
GetVersionExW
CreateFileMappingW
SetLastError
SetFilePointer
GetFileSize
WriteFile
GetTimeZoneInformation
GlobalAlloc
GlobalFree
ReadFile
CloseHandle
GetLastError
CreateFileW
GetCPInfo

user32

SetWindowContextHelpId
MapDialogRect
RegisterClipboardFormatW
PostQuitMessage
WindowFromPoint
ValidateRect
GetWindowThreadProcessId
EndPaint
BeginPaint
GetWindowDC
CharUpperW
WaitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
EnableMenuItem
CheckMenuItem
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
GetActiveWindow
CreateDialogIndirectParamW
IsWindowEnabled
GetNextDlgTabItem
EndDialog
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
GetDlgItem
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
GetMenuItemInfoW
GetKeyState
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
EqualRect
GetScrollInfo
CreatePopupMenu
CreateMenu
PostThreadMessageW
LoadStringW
UnregisterClassA
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SystemParametersInfoA
GetWindowPlacement
GetMenuState
GetMenuStringW
AppendMenuW
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetDesktopWindow
AdjustWindowRectEx
GetWindow
MoveWindow
GetTopWindow
ClientToScreen
GetMenu
GetWindowLongW
ModifyMenuW
GetSystemMenu
LoadImageW
BringWindowToTop
CopyAcceleratorTableW
SetRect
InvalidateRgn
MessageBeep
GetNextDlgGroupItem
ReleaseCapture
SetActiveWindow
SetWindowPos
DispatchMessageW
TranslateMessage
GetMessageW
LoadIconW
IsWindowVisible
DestroyIcon
DestroyMenu
GetSysColorBrush
UnregisterClassW
LoadBitmapW
RedrawWindow
GrayStringW
DrawTextExW
TabbedTextOutW
SetParent
UpdateWindow
DrawTextW
IntersectRect
ReleaseDC
UnionRect
CharNextW
GetDC
IsWindow
ShowWindow
IsIconic
RegisterWindowMessageW
PeekMessageW
GetSystemMetrics
CopyRect
DrawFocusRect
SetWindowLongW
ScreenToClient
GetCursorPos
PtInRect
SendMessageW
OffsetRect
GetWindowRect
GetSysColor
InflateRect
InvalidateRect
GetClientRect
IsRectEmpty
SetCursor
PostMessageW
LoadCursorW
ExitWindowsEx
MessageBoxW
GetParent
SetForegroundWindow
KillTimer
SetTimer
EnableWindow
wsprintfW
LoadStringA
SetCapture

gdi32

GetStockObject
CreateRectRgnIndirect
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
CreatePen
CreateFontW
CreateFontIndirectW
GetObjectW
GetTextExtentPoint32W
MoveToEx
LineTo
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetTextMetricsW
GetDeviceCaps
SelectObject
Escape
CreateRectRgn
ExtTextOutW
TextOutW
RectVisible
PtVisible
DeleteObject
BitBlt
CreateCompatibleBitmap
Rectangle
CreateCompatibleDC
CreateSolidBrush

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

RegOpenKeyExW
RegQueryValueExW
IsTextUnicode
ConvertSidToStringSidW
LookupAccountNameW
GetUserNameW
RegSetValueExW
OpenSCManagerW
OpenProcessToken
RegEnumKeyW
RegOpenKeyW
RegCloseKey
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueW
RegDeleteKeyW
RegCreateKeyExW
RegDeleteValueW
AdjustTokenPrivileges
LookupPrivilegeValueW

shell32

SHGetFolderPathW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetSpecialFolderPathW
ShellExecuteW
DoEnvironmentSubstW

comctl32

FlatSB_EnableScrollBar
FlatSB_SetScrollInfo
_TrackMouseEvent
UninitializeFlatSB

shlwapi

PathFindExtensionW
PathIsUNCW
PathStripToRootW
PathFileExistsW
PathFindFileNameW

oledlg

OleUIBusyW

ole32

CoTaskMemAlloc
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CLSIDFromString
StringFromGUID2
CoTaskMemFree
CoCreateInstance
CoInitialize
CoCreateGuid
CoGetClassObject
CoRevokeClassObject
CLSIDFromProgID
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal

oleaut32

SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SysStringLen
SysFreeString
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit

wsock32

ntohs
gethostbyname
closesocket
recv
send
WSAAsyncSelect
recvfrom
sendto
connect
WSASetLastError
getsockname
WSAGetLastError
bind
select
socket
accept
ioctlsocket
htons
htonl

wininet

InternetOpenW
InternetOpenUrlW
InternetCloseHandle
InternetReadFile
HttpQueryInfoW
InternetErrorDlg

winmm

timeGetTime

Sections

.text
Size: 578KB - Virtual size: 577KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 154KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 304KB - Virtual size: 303KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tc
Size: 198KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8532099ccd69240641edf35f0b4c7fe0

Headers

File Characteristics

Imports

ws2_32

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

wsock32

wininet

winmm

Sections

.text Size: 578KB - Virtual size: 577KB

.rdata Size: 154KB - Virtual size: 154KB

.data Size: 68KB - Virtual size: 97KB

.rsrc Size: 304KB - Virtual size: 303KB

.tc Size: 198KB - Virtual size: 200KB

.text
Size: 578KB - Virtual size: 577KB

.rdata
Size: 154KB - Virtual size: 154KB

.data
Size: 68KB - Virtual size: 97KB

.rsrc
Size: 304KB - Virtual size: 303KB

.tc
Size: 198KB - Virtual size: 200KB