a0050acb01fc6026cfcfb8dc541233ab687d4d6d992c0ad99997a0e47a3eea23

Sharing

Copy URL Twitter E-mail

General

Target

a0050acb01fc6026cfcfb8dc541233ab687d4d6d992c0ad99997a0e47a3eea23
Size

715KB
MD5

c4eda8c2d609e197fd726e599c2b12b0
SHA1

9348351fbe0cbb7698589ae514e4ce4225ea7259
SHA256

a0050acb01fc6026cfcfb8dc541233ab687d4d6d992c0ad99997a0e47a3eea23
SHA512

b40a81616f1d38a5b0d336287b68f4cf08ebd7c409bd566eca3a8a189828bf614c5fc7af4315e6660da39c0de81020c1e8635fc43ec531de19590c26fc750212
SSDEEP

12288:5tY0/bgskY8Mv2r6YJx+LCT8NHYCKaTUvV1g5Nk:jY0/07Uur6YuCTsYETu8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0050acb01fc6026cfcfb8dc541233ab687d4d6d992c0ad99997a0e47a3eea23

Files

a0050acb01fc6026cfcfb8dc541233ab687d4d6d992c0ad99997a0e47a3eea23
.exe windows:6 windows x86 arch:x86

15d5871583a014bcbebf7983f439c5f3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryW
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetConsoleMode
GetConsoleOutputCP
SetFilePointerEx
GetStringTypeW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
VirtualProtect
FindNextFileW
FindFirstFileExW
GetTimeZoneInformation
LCMapStringW
GetFileType
ExitProcess
GetStdHandle
VirtualQuery
VirtualAlloc
GetSystemInfo
HeapQueryInformation
GetModuleHandleExW
GetCommandLineW
GetCommandLineA
RtlUnwind
RaiseException
OutputDebugStringW
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
SetErrorMode
LocalFileTimeToFileTime
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
SystemTimeToFileTime
ReplaceFileW
SetFileTime
GetTempFileNameW
GetFileTime
GetFileAttributesW
GetDiskFreeSpaceW
GetTickCount64
CompareStringA
GetCurrentThread
GlobalGetAtomNameW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcmpA
GetThreadLocale
GetStringTypeExW
MoveFileW
lstrcmpiW
GetCurrentProcess
DuplicateHandle
CloseHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetShortPathNameW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
FindClose
CreateFileW
GetVersionExW
GetCurrentProcessId
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryA
LoadLibraryExW
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
FormatMessageW
MulDiv
LocalFree
LoadLibraryW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
SetLastError
OutputDebugStringA
GetACP
WideCharToMultiByte
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
HeapFree
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
GetTempPathW
MultiByteToWideChar
DeleteFileW
FindResourceW
LoadResource
SizeofResource
LockResource
IsValidCodePage
WriteConsoleW

user32

ScrollWindowEx
IsWindowEnabled
GetDlgItemInt
SetDlgItemInt
MoveWindow
ShowWindow
IntersectRect
InflateRect
FillRect
ClientToScreen
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
MonitorFromWindow
WinHelpW
SetScrollInfo
LoadIconW
CallNextHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
SetWindowLongW
GetWindowLongW
PtInRect
EqualRect
MapWindowPoints
MessageBoxW
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
GetScrollPos
SetWindowTextW
ValidateRect
EndPaint
BeginPaint
GetForegroundWindow
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
GetDlgItem
IsIconic
IsWindowVisible
GetWindowThreadProcessId
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
LoadCursorW
InvalidateRect
SetCapture
ReleaseCapture
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
UnhookWindowsHookEx
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
IsDialogMessageW
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadBitmapW
GetMenuStringW
LoadMenuW
CreateDialogIndirectParamW
EndDialog
GetNextDlgTabItem
GetActiveWindow
GetDesktopWindow
DrawFocusRect
SetScrollPos
UpdateWindow
SendMessageW
GetParent
EnableWindow
GetWindowRect
GetSysColor
GetSystemMetrics
CopyRect
GetClientRect
SetCursor
TranslateAcceleratorW
TrackMouseEvent
ScreenToClient
GetWindow
GetFocus
IsWindow
DeleteMenu
GetKeyState
WindowFromPoint
OpenClipboard
GetClipboardData
CloseClipboard
MapDialogRect
RedrawWindow
SetForegroundWindow
PostMessageW
EmptyClipboard
SetClipboardData
UnregisterClassW
EnumChildWindows
MonitorFromPoint
GetMonitorInfoW
SendDlgItemMessageA
SetRectEmpty
OffsetRect
CharUpperW
BringWindowToTop
LoadAcceleratorsW
NotifyWinEvent
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableW
CharNextW
PostThreadMessageW
SetRect
KillTimer
SetTimer
IsRectEmpty
RealChildWindowFromPoint
SystemParametersInfoW
GetMenuItemInfoW
GetSysColorBrush
ShowOwnedPopups
GetCursorPos
TranslateMessage
GetMessageW
SetWindowContextHelpId
RegisterClipboardFormatW
PostQuitMessage
IsZoomed
ReuseDDElParam
UnpackDDElParam
DestroyIcon
InsertMenuItemW
DestroyMenu
CreatePopupMenu
EndDeferWindowPos

gdi32

CreatePatternBrush
CreateSolidBrush
DeleteObject
Escape
ExcludeClipRect
GetClipBox
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
PtVisible
RectVisible
RestoreDC
SaveDC
ExtSelectClipRgn
SelectObject
SetBkMode
SetMapMode
SetLayout
GetLayout
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
GetMapMode
GetTextMetricsW
GetTextExtentPoint32W
GetBkColor
GetTextColor
GetRgnBox
CreateBitmap
SetTextColor
SetBkColor
GetDeviceCaps
DeleteDC
CreateFontIndirectW
GetObjectW
Rectangle
StretchBlt
GetStockObject
CreatePen
CreateICW
CreateCompatibleDC
BitBlt
CreateCompatibleBitmap

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

RegDeleteValueW
RegCloseKey
SetFileSecurityW
GetFileSecurityW
RegQueryValueW
RegEnumKeyW
RegSetValueExW
RegQueryValueExW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
RegSetValueW
RegEnumValueW

shell32

SHGetFileInfoW
DragQueryFileW
DragFinish
SHAddToRecentDocs
ExtractIconW
ShellExecuteW

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
SHCreateStreamOnFileW
PathFindExtensionW

uxtheme

GetThemePartSize
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
IsAppThemed

ole32

CoGetClassObject
CLSIDFromProgID
CLSIDFromString
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoCreateGuid
CoInitialize
CoInitializeEx
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
StringFromCLSID
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CoRevokeClassObject

oleaut32

SafeArrayDestroy
VariantTimeToSystemTime
SysStringLen
SysAllocString
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysFreeString
OleCreateFontIndirect
VariantCopy
SystemTimeToVariantTime

oledlg

OleUIBusyW

gdiplus

GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImageHorizontalResolution
GdipGetImageVerticalResolution
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipBitmapUnlockBits
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipSaveImageToFile
GdipCreateBitmapFromStream
GdipCreateFromHDC
GdipDeleteGraphics
GdipDrawImageI
GdipGetImageGraphicsContext
GdipGraphicsClear
GdipFillRectangleI
GdipDeleteFontFamily
GdipGetFamilyName
GdipNewInstalledFontCollection
GdipGetFontCollectionFamilyCount
GdipDisposeImage
GdipGetFontCollectionFamilyList
GdipDeleteBrush
GdipCloneBrush
GdipCreateTexture
GdipCreateSolidFill
GdipSetSmoothingMode
GdipFillRectanglesI
GdipDrawImageRectRectI
GdipBitmapGetPixel
GdipTranslateLineTransform
GdipScaleTextureTransform
GdipTranslateTextureTransform
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipDeleteStringFormat
GdipCreateLineBrushFromRect
GdipCreateStringFormat
GdiplusStartup
GdiplusShutdown
GdipSaveGraphics
GdipSetTextRenderingHint
GdipFree
GdipDrawString
GdipRestoreGraphics
GdipMeasureString
GdipFillRectangle
GdipRotateWorldTransform
GdipScaleWorldTransform
GdipDeleteFont
GdipCreateFont
GdipGetGenericFontFamilySansSerif
GdipCreateFontFamilyFromName
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipImageRotateFlip
GdipAlloc
GdipCloneFontFamily
GdipTranslateWorldTransform

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 490KB - Virtual size: 490KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 250KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

15d5871583a014bcbebf7983f439c5f3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

oleacc

Sections

.text Size: 490KB - Virtual size: 490KB

.rdata Size: 133KB - Virtual size: 132KB

.data Size: 13KB - Virtual size: 250KB

.rsrc Size: 38KB - Virtual size: 37KB

.reloc Size: 39KB - Virtual size: 39KB

.text
Size: 490KB - Virtual size: 490KB

.rdata
Size: 133KB - Virtual size: 132KB

.data
Size: 13KB - Virtual size: 250KB

.rsrc
Size: 38KB - Virtual size: 37KB

.reloc
Size: 39KB - Virtual size: 39KB