4f91c66a85acb06f737482c80882a294

Sharing

Copy URL Twitter E-mail

General

Target

4f91c66a85acb06f737482c80882a294
Size

552KB
MD5

4f91c66a85acb06f737482c80882a294
SHA1

3a196b31afb7161e4f5c2c636bd05dde33b7346d
SHA256

54d4f682cae6b64e98b98069fe576977c2a725f72bad26868cf0648b2c212a95
SHA512

3d3ab6d3ca8dbc78097ae3fd2741773b9870144b450ed175c8d8f9c15fa9be497a1a086c59e2bd710008f93da34fd7f01354075518a09de172e90dbb72863739
SSDEEP

12288:X5xEFeO7BXe33OdneCw8DG8sl0HRvd5SyKCBUbnKjKtCFMbW1fgWcSe4E9:4FeUBXeOdneCwOPRV5SyMy4Qf4Sw9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f91c66a85acb06f737482c80882a294

Files

4f91c66a85acb06f737482c80882a294
.exe windows:4 windows x86 arch:x86

eb2ee384eb1ea83574f32fdacabbbeee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoCreateInstance
CoInitialize
CoUninitialize

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

mpr

WNetGetResourceInformationA
WNetEnumResourceA
WNetOpenEnumA
WNetCloseEnum

kernel32

FileTimeToSystemTime
FileTimeToLocalFileTime
RtlUnwind
HeapFree
GetDriveTypeA
GetTimeZoneInformation
GetSystemTime
HeapAlloc
GetStartupInfoA
GetCommandLineA
ExitProcess
RaiseException
TerminateProcess
CreateThread
ExitThread
HeapReAlloc
HeapSize
GetACP
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadCodePtr
SetStdHandle
CompareStringW
SetEnvironmentVariableA
GetFullPathNameA
ResumeThread
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GlobalAlloc
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
MulDiv
SetEvent
CloseHandle
SetCurrentDirectoryA
CreateEventA
CreateMutexA
ReleaseMutex
lstrcmpA
LoadLibraryA
FreeLibrary
Sleep
WaitNamedPipeA
GetTickCount
WriteFile
TransactNamedPipe
WaitForMultipleObjects
FlushFileBuffers
DeleteCriticalSection
GetCurrentThreadId
GlobalGetAtomNameA
GetLastError
FormatMessageA
CreateFileA
SetFilePointer
GetFileSize
lstrcpyA
ReadFile
SetEndOfFile
GetSystemDirectoryA
GetProcAddress
CreateDirectoryA
FindClose
FindNextFileA
CopyFileA
SetErrorMode
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
TlsAlloc
FindFirstFileA
LocalAlloc
GlobalFindAtomA
lstrcatA
GlobalAddAtomA
GetVersion
GlobalDeleteAtom
lstrcmpiA
lstrlenA
InterlockedDecrement
InterlockedIncrement
lstrcpynA
IsBadReadPtr
SetNamedPipeHandleState
GetComputerNameA
GetCurrentProcessId
LoadResource
LockResource
FindResourceA
SuspendThread
DefineDosDeviceW
QueryDosDeviceW
GetCurrentThread
OpenMutexA
OpenFileMappingA
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
GetModuleFileNameW
GetModuleFileNameA
ExpandEnvironmentStringsA
GetShortPathNameA
MoveFileExA
WritePrivateProfileSectionA
GetPrivateProfileSectionA
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileSectionNamesA
GetPrivateProfileStringA
GetProfileIntA
SetLastError
WriteProfileStringA
GetProfileStringA
EnumSystemLocalesA
GetCurrentProcess
GetModuleHandleA
GetSystemInfo
GetVersionExA
DisconnectNamedPipe
PeekNamedPipe
CreateNamedPipeA
LocalFree
ResetEvent
ConnectNamedPipe
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
GetTempPathW
WaitForSingleObject
GetLocaleInfoA
GlobalReAlloc
GlobalSize
GlobalFlags
GetTempPathA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetWindowsDirectoryA
GetLocalTime
GetCurrentDirectoryA
RemoveDirectoryA
GetTempFileNameA
DeleteFileA
SetFileAttributesA
GetFileAttributesA
CreateProcessA
SetThreadPriority
CompareStringA

user32

ClientToScreen
GetSysColorBrush
MapWindowPoints
AdjustWindowRectEx
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetWindowTextLengthA
GetMessageTime
GetMessagePos
GetForegroundWindow
GetWindowPlacement
BringWindowToTop
EqualRect
GetSubMenu
UnpackDDElParam
ReuseDDElParam
SetActiveWindow
SetMenu
GetMenu
LoadMenuA
DestroyMenu
GetCapture
ReleaseCapture
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
GetActiveWindow
GetKeyState
ValidateRect
IsWindowVisible
GetCursorPos
ShowOwnedPopups
ScreenToClient
PostQuitMessage
IsDialogMessageA
TranslateMessage
DispatchMessageA
DeferWindowPos
GetClassLongA
FillRect
ExitWindowsEx
GetWindowThreadProcessId
RemovePropA
CallWindowProcA
GetPropA
SetPropA
BeginPaint
EndPaint
IsIconic
LoadImageA
GetClassInfoA
RegisterClassA
DestroyWindow
UnregisterClassA
GetSystemMenu
GetMenuItemCount
GetMenuItemID
DeleteMenu
SendMessageTimeoutA
OffsetRect
GrayStringA
DrawTextA
TabbedTextOutA
CopyRect
GetSysColor
DrawFocusRect
GetDesktopWindow
DefWindowProcA
OpenClipboard
SetClipboardData
CloseClipboard
GetAsyncKeyState
IsDlgButtonChecked
LoadIconA
DestroyIcon
WinHelpA
IsWindow
EnumWindows
CharLowerA
CallNextHookEx
CreateWindowExA
MessageBeep
SetWindowsHookExA
MessageBoxA
UnhookWindowsHookEx
GetLastActivePopup
KillTimer
SystemParametersInfoA
RegisterWindowMessageA
PostMessageA
FindWindowA
SetTimer
InvalidateRect
UpdateWindow
ShowWindow
SetFocus
IsWindowEnabled
PtInRect
wvsprintfA
GetDialogBaseUnits
GetDlgCtrlID
GetWindow
GetClassNameA
IntersectRect
GetDlgItem
EnableWindow
GetDC
ReleaseDC
GetWindowRect
GetWindowTextA
GetSystemMetrics
GetClientRect
SetWindowPos
PeekMessageA
MsgWaitForMultipleObjects
LoadCursorA
ShowCursor
SetCursor
LoadStringA
EndDialog
SetWindowTextA
DialogBoxParamA
GetWindowLongA
GetDlgItemTextA
SetDlgItemTextA
SetWindowLongA
GetParent
SetForegroundWindow
wsprintfA
SendMessageA
MapDialogRect
EmptyClipboard

gdi32

GetTextExtentPoint32A
PatBlt
CreateCompatibleBitmap
GetBkColor
EnumFontFamiliesExA
ResetDCA
DeleteObject
CreateFontIndirectA
TranslateCharsetInfo
GetCurrentObject
GetGlyphOutlineW
GetObjectType
GetCharacterPlacementA
GetCharacterPlacementW
CreateFontA
GetFontLanguageInfo
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
SaveDC
RestoreDC
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetDeviceCaps
GetOutlineTextMetricsA
GetCharWidthW
GetCharWidthA
GetTextMetricsA
GetStockObject
GetObjectA
CreateDCA
ExtEscape
DeleteDC
RemoveFontResourceA
GetTextExtentPointA
SelectObject
Escape

comdlg32

GetSaveFileNameA
GetOpenFileNameA

winspool.drv

EnumPrintersW
EnumPrinterDriversA
OpenPrinterA
OpenPrinterW
GetPrinterW
GetPrinterA
SetPrinterW
SetPrinterA
EnumPrintersA
DocumentPropertiesA
AddMonitorA
AddPrinterConnectionA
DeviceCapabilitiesA
AddPrinterA
ClosePrinter
AddPrinterW
GetPrinterDriverDirectoryA
EnumPortsA
GetJobA
GetPrinterDriverA

advapi32

RegisterServiceCtrlHandlerA
GetUserNameA
RegOpenKeyExW
SetServiceStatus
StartServiceCtrlDispatcherA
ControlService
StartServiceA
OpenSCManagerA
OpenServiceA
QueryServiceStatus
EnumDependentServicesA
DeleteService
CreateServiceA
CloseServiceHandle
RegNotifyChangeKeyValue
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyExA
RegFlushKey
RegUnLoadKeyA
RegLoadKeyA
LookupAccountSidA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
GetSecurityDescriptorSacl
SetSecurityDescriptorSacl
RegEnumKeyA
RegCreateKeyA
ReportEventA
DeregisterEventSource
RegisterEventSourceA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
GetSidSubAuthority
GetSidSubAuthorityCount
GetTokenInformation
OpenProcessToken
OpenThreadToken
LookupAccountNameA
FreeSid
EqualSid
AllocateAndInitializeSid
AdjustTokenPrivileges
LookupPrivilegeValueA
RegDeleteKeyA
RegDeleteKeyW
RegEnumKeyExW

shell32

ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
SHChangeNotify
ExtractIconExA
SHGetFileInfoA
SHGetSpecialFolderLocation
SHGetDesktopFolder
DragFinish
DragQueryFileA

comctl32

ImageList_ReplaceIcon
ord17

Sections

.text
Size: 392KB - Virtual size: 391KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb2ee384eb1ea83574f32fdacabbbeee

Headers

File Characteristics

Imports

ole32

version

mpr

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

Sections

.text Size: 392KB - Virtual size: 391KB

.rdata Size: 44KB - Virtual size: 43KB

.data Size: 40KB - Virtual size: 58KB

Size: 60KB - Virtual size: 58KB

.rsrc Size: 12KB - Virtual size: 9KB

.text
Size: 392KB - Virtual size: 391KB

.rdata
Size: 44KB - Virtual size: 43KB

.data
Size: 40KB - Virtual size: 58KB

.rsrc
Size: 12KB - Virtual size: 9KB