659ccb0c4f6448e7b3d75d9ff17e645b30ad952fb9ce9b8cd8568e26cfb7a9fe

Sharing

Copy URL Twitter E-mail

General

Target

659ccb0c4f6448e7b3d75d9ff17e645b30ad952fb9ce9b8cd8568e26cfb7a9fe
Size

3.9MB
MD5

aa8bb41af34b6d4f703392852fe72a39
SHA1

01fc1fd9aaa83822619f82815c9e706bb759f282
SHA256

659ccb0c4f6448e7b3d75d9ff17e645b30ad952fb9ce9b8cd8568e26cfb7a9fe
SHA512

5511ef559cebc17f973d281b1afc028966a1958005a018b36623c41b26d0f5f2420158a569f00d5affb1355ecd003f9ece30d21fecee3a58ca4c1e5948934b10
SSDEEP

98304:bD9WErCDvSMmZucSfffF/HQowwnB7S4OiZrq1DfPHNADtV6v+7:39/+Dva2YwnB7S4O7NADtV6v+7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
659ccb0c4f6448e7b3d75d9ff17e645b30ad952fb9ce9b8cd8568e26cfb7a9fe

Files

659ccb0c4f6448e7b3d75d9ff17e645b30ad952fb9ce9b8cd8568e26cfb7a9fe
.exe windows:6 windows x86 arch:x86

18173b6452e6eb75979d4882c8c248e0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
HeapReAlloc
HeapAlloc
HeapSize
RaiseException
DecodePointer
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
GetProcessHeap
InitializeCriticalSectionEx
DeleteCriticalSection
GetLastError
GetModuleFileNameA
GetCurrentProcess
OutputDebugStringA
FreeResource
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
LoadLibraryW
GlobalFree
FindResourceA
SetThreadPriority
GetCurrentThread
GetVersionExA
FreeLibrary
LoadLibraryExW
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
CompareStringA
GetPrivateProfileIntA
GlobalAddAtomA
GetCurrentProcessId
VerSetConditionMask
InitializeCriticalSectionAndSpinCount
lstrcpyA
VerifyVersionInfoA
LoadLibraryA
GlobalSize
LocalFree
MulDiv
FormatMessageA
CopyFileA
EncodePointer
GetSystemDirectoryW
lstrcmpW
GlobalFindAtomA
GlobalGetAtomNameA
GlobalFlags
GetACP
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalAlloc
LocalReAlloc
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
DeleteFileA
CreateFileA
FindClose
FindFirstFileA
FlushFileBuffers
GetFileSize
GetFullPathNameA
LockFile
SetEndOfFile
SetFilePointer
UnlockFile
WriteFile
DuplicateHandle
lstrcmpiA
GetVolumeInformationA
GetThreadLocale
GetTempPathA
GetFileAttributesA
FileTimeToSystemTime
VirtualProtect
GetOEMCP
GetCPInfo
FileTimeToLocalFileTime
GetFileAttributesExA
GetFileSizeEx
GetFileTime
SystemTimeToTzSpecificLocalTime
GetWindowsDirectoryA
SetErrorMode
GetTempFileNameA
GetUserDefaultLCID
GetProfileIntA
SearchPathA
FindResourceExW
ResetEvent
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
VirtualAlloc
VirtualFree
VirtualQuery
GetModuleHandleExA
RtlUnwind
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetCommandLineW
GetSystemInfo
SetStdHandle
GetFileType
HeapQueryInformation
QueryPerformanceFrequency
CreateProcessW
GetTempPathW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
GetStringTypeW
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetTimeZoneInformation
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetFileAttributesExW
CreateFileW
DeleteFileW
MoveFileExW
WriteConsoleW
CreateWaitableTimerA
GlobalLock
GlobalUnlock
GetCurrentThreadId
CancelWaitableTimer
SetWaitableTimer
SleepEx
GetStartupInfoA
GetTickCount
CreateProcessA
ResumeThread
SuspendThread
GetExitCodeProcess
TerminateProcess
Sleep
CreateEventA
SetEvent
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
PeekNamedPipe
CreatePipe
ReadFile
GetCurrentDirectoryA
GetStdHandle
WideCharToMultiByte
FindResourceW
SizeofResource
LockResource
LoadResource
OpenProcess
CreateThread
ExitProcess
WaitForSingleObject
CloseHandle
SetLastError
GetCommandLineA

user32

UpdateWindow
GetForegroundWindow
SetForegroundWindow
ScrollWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
SetPropA
GetPropA
RemovePropA
AdjustWindowRectEx
EqualRect
PtInRect
GetClassLongA
GetTopWindow
LoadIconA
SetScrollInfo
GetScrollInfo
WinHelpA
MonitorFromWindow
InvalidateRect
RealChildWindowFromPoint
CopyImage
DeleteMenu
SetTimer
KillTimer
DestroyIcon
CharUpperA
WaitMessage
SetCapture
ReleaseCapture
WindowFromPoint
CharNextA
CopyAcceleratorTableA
InvalidateRgn
SetRect
IntersectRect
GetNextDlgGroupItem
MessageBeep
GetKeyboardLayout
GetAsyncKeyState
GetKeyboardState
ToAsciiEx
MapVirtualKeyA
LoadAcceleratorsW
CreateAcceleratorTableA
DestroyAcceleratorTable
TrackMouseEvent
IsZoomed
LoadMenuW
NotifyWinEvent
SetCursorPos
SetParent
BringWindowToTop
CreatePopupMenu
LockWindowUpdate
SetClassLongA
MonitorFromPoint
SetClipboardData
EmptyClipboard
LoadImageA
LoadImageW
UnionRect
EnableScrollBar
GetDoubleClickTime
GetIconInfo
CopyIcon
GetMenuDefaultItem
SetMenuDefaultItem
ModifyMenuA
GetUpdateRect
UpdateLayeredWindow
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
InsertMenuItemA
UnpackDDElParam
ReuseDDElParam
RegisterClipboardFormatA
IsCharLowerA
GetKeyNameTextA
MapVirtualKeyExA
CharUpperBuffA
FrameRect
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
SubtractRect
PostThreadMessageA
CreateMenu
GetComboBoxInfo
HideCaret
InvertRect
DestroyCursor
GetWindowRgn
CheckDlgButton
TrackPopupMenu
ShowWindow
GetMenuItemInfoA
DestroyMenu
ScreenToClient
ClientToScreen
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
UnhookWindowsHookEx
RemoveMenu
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringA
DrawIconEx
IsRectEmpty
OffsetRect
InflateRect
FillRect
DrawFocusRect
RedrawWindow
SetWindowRgn
DrawStateA
DrawFrameControl
DrawEdge
RegisterWindowMessageA
EnumDisplayMonitors
GetMonitorInfoA
SystemParametersInfoA
LoadCursorW
LoadCursorA
CopyRect
SetRectEmpty
GetSysColorBrush
GetSysColor
MapWindowPoints
SetLayeredWindowAttributes
GetClassInfoA
MapDialogRect
GetWindow
SetWindowContextHelpId
SetWindowPos
GetLastActivePopup
SetCursor
ShowOwnedPopups
PostQuitMessage
PostMessageA
CallNextHookEx
SetWindowsHookExA
GetCursorPos
ValidateRect
GetKeyState
IsWindowVisible
GetMessageA
GetWindowLongA
SetActiveWindow
IsWindowEnabled
GetActiveWindow
GetNextDlgTabItem
GetDlgItem
EndDialog
CreateDialogIndirectParamA
DestroyWindow
IsWindow
LoadBitmapW
GetParent
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
SendMessageA
IsIconic
EnableWindow
GetSystemMetrics
GetSystemMenu
AppendMenuA
DrawIcon
GetClientRect
LoadIconW
TranslateMessage
DispatchMessageA
PeekMessageA
DefWindowProcA
RegisterClassExA
CreateWindowExA
MsgWaitForMultipleObjects
FindWindowExA
GetWindowThreadProcessId
IsDialogMessageA
OpenClipboard
CloseClipboard
GetClipboardData
IsClipboardFormatAvailable
MoveWindow
GetWindowTextA
GetWindowRect
MessageBoxA
GetDesktopWindow
EnumChildWindows
GetClassNameA
UnregisterClassA
SetMenu
GetMenu
GetCapture
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
IsMenu
GetClassInfoExA
RegisterClassA
CallWindowProcA
GetMessageTime
GetMessagePos
SetWindowLongA
GetWindowTextLengthA
SetWindowTextA
SetFocus
GetDlgCtrlID
SendDlgItemMessageA

gdi32

MoveToEx
TextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
ExtSelectClipRgn
OffsetViewportOrgEx
OffsetWindowOrgEx
SelectClipRgn
SaveDC
RestoreDC
RectVisible
ScaleViewportExtEx
ScaleWindowExtEx
GetRgnBox
CreateRoundRectRgn
CreateDIBSection
GetMapMode
SetRectRgn
DPtoLP
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBitmap
CreateFontIndirectA
CreatePen
CreatePatternBrush
DeleteObject
EnumFontFamiliesA
GetDeviceCaps
GetStockObject
GetTextCharsetInfo
GetTextMetricsA
GetObjectA
CombineRgn
CreateEllipticRgn
CreateHatchBrush
CreateRectRgn
Ellipse
GetBkColor
GetTextColor
GetTextExtentPoint32A
PatBlt
ExtTextOutA
CreatePolygonRgn
Polygon
Polyline
CopyMetaFileA
CreateDCA
Escape
DeleteDC
RealizePalette
SetTextAlign
SetTextColor
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetViewportExtEx
CreateRectRgnIndirect
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SetBkColor
SelectPalette
SelectObject
CreateSolidBrush
CreateBitmap
GetTextFaceA
SetPixelV
GetViewportOrgEx
GetWindowOrgEx
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
SetPaletteEntries
ExtFloodFill
LPtoDP
EnumFontFamiliesExA
GetSystemPaletteEntries
GetNearestPaletteIndex
GetPaletteEntries
CreatePalette
RoundRect
OffsetRgn
Rectangle
SetDIBColorTable
StretchBlt
SetPixel

advapi32

RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegEnumKeyA
RegQueryValueA
RegEnumValueA
RegEnumKeyExA
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
RegOpenKeyExA

shell32

DragQueryFileA
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHGetDesktopFolder
SHGetFileInfoA
SHAppBarMessage
ShellExecuteA
DragFinish

ole32

OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
CoRevokeClassObject
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoTaskMemFree
CoInitialize
CoInitializeEx
CoTaskMemAlloc
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CLSIDFromProgID
CLSIDFromString
OleLockRunning
DoDragDrop
CoCreateInstance
CoCreateGuid
CoUninitialize
CoGetClassObject
CoDisconnectObject
OleRun
ReleaseStgMedium
OleDuplicateData
OleCreateMenuDescriptor

msimg32

AlphaBlend
TransparentBlt

comctl32

InitCommonControlsEx

shlwapi

PathIsUNCA
PathFindFileNameA
PathFindExtensionA
PathStripToRootA
PathRemoveFileSpecW
StrFormatKBSizeA

uxtheme

OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
GetWindowTheme
GetThemeSysColor
DrawThemeText
IsAppThemed
DrawThemeParentBackground

oledlg

ord8

gdiplus

GdiplusShutdown
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetInterpolationMode
GdipDrawImageRectI
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipDrawImageI
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipAlloc

haoi

IsRight
SetRebate
SendFileEx

ws2_32

socket
send
recv
listen
gethostname
htons
htonl
connect
closesocket
bind
accept
WSAStartup
WSACleanup
gethostbyname
inet_ntoa
inet_pton

oleacc

CreateStdAccessibleObject
LresultFromObject
AccessibleObjectFromWindow

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

oleaut32

VariantInit
SysAllocStringByteLen
SysStringLen
VariantClear
VariantChangeType
SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
LoadTypeLi
SysFreeString
VariantCopy
VarBstrFromDate
SysAllocStringLen

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 346KB - Virtual size: 346KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 23KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

18173b6452e6eb75979d4882c8c248e0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

msimg32

comctl32

shlwapi

uxtheme

oledlg

gdiplus

haoi

ws2_32

oleacc

imm32

winmm

winspool.drv

oleaut32

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.rdata Size: 346KB - Virtual size: 346KB

.data Size: 23KB - Virtual size: 42KB

.vmp0 Size: 46KB - Virtual size: 45KB

.reloc Size: 147KB - Virtual size: 146KB

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.text
Size: 1.9MB - Virtual size: 1.9MB

.rdata
Size: 346KB - Virtual size: 346KB

.data
Size: 23KB - Virtual size: 42KB

.vmp0
Size: 46KB - Virtual size: 45KB

.reloc
Size: 147KB - Virtual size: 146KB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB