661dd1d0b01a3c4956a18ec45d4e58fc

Sharing

Copy URL Twitter E-mail

General

Target

661dd1d0b01a3c4956a18ec45d4e58fc
Size

620KB
MD5

661dd1d0b01a3c4956a18ec45d4e58fc
SHA1

0cf1f90d155969d7e81ae04be922095d0b885852
SHA256

8f56bc6828d342174e7f68d8ad99907cc1a4a259f7472049fbee27414696f3c7
SHA512

5f5374d971b36a1f2aae86ae96472fabe92446abc3ce1a084190fb8f6eee019ad2ccc097a621631ca4f14b3a2fd319ccda58c863089b34d178d1eef9fe189f6b
SSDEEP

12288:sdu2RfkJOV+xeCGahuqSbIJ6gqfLXqs76J9N:sddjVseBgqTR76J9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
661dd1d0b01a3c4956a18ec45d4e58fc

Files

661dd1d0b01a3c4956a18ec45d4e58fc
.exe windows:4 windows x86 arch:x86

779714f7ec8efc425dcf3250ca25f59b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

netapi32

Netbios

kernel32

SetFileTime
SetFileAttributesA
lstrlenW
GlobalSize
CopyFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
FindNextFileA
SetErrorMode
RtlUnwind
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
Sleep
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetStartupInfoA
GetCommandLineA
RaiseException
SetStdHandle
GetFileType
ExitThread
HeapReAlloc
HeapSize
GetACP
HeapDestroy
HeapCreate
SystemTimeToFileTime
VirtualAlloc
IsBadWritePtr
FatalAppExitA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
SetUnhandledExceptionFilter
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
SetConsoleCtrlHandler
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
LocalFileTimeToFileTime
GetFileTime
GetFileSize
GetShortPathNameA
GetProfileStringA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
DuplicateHandle
GetOEMCP
GetCPInfo
GetProcessVersion
SizeofResource
GetCurrentDirectoryA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
lstrcpynA
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
MulDiv
SetLastError
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
GlobalUnlock
VirtualProtect
FindResourceA
LoadResource
LockResource
GlobalFree
FormatMessageA
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThreadId
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
CreateThread
GetExitCodeThread
LoadLibraryA
GetProcAddress
FreeLibrary
GetEnvironmentVariableA
DeleteFileA
GetModuleFileNameA
GetUserDefaultLangID
GetModuleHandleA
LoadLibraryExA
LocalAlloc
LocalFree
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
CloseHandle
GetCurrentThread
GetLastError
GlobalMemoryStatus
GetSystemInfo
GetVersionExA
GetTempPathA
GetFileAttributesA
GetCurrentProcess
GetComputerNameA
VirtualFree

user32

WaitMessage
GetWindowThreadProcessId
WindowFromPoint
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
InvalidateRect
BringWindowToTop
GetDlgItemInt
CheckRadioButton
CheckDlgButton
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
ReleaseCapture
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
GetDialogBaseUnits
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetNextDlgTabItem
EndDialog
IsWindow
CreateDialogIndirectParamA
DestroyWindow
MapDialogRect
SetWindowPos
ShowWindow
GetCapture
GetActiveWindow
SetActiveWindow
GetAsyncKeyState
PostMessageA
EnableWindow
GetFocus
MessageBoxA
UnregisterClassA
HideCaret
GetWindowLongA
SetFocus
GetDlgItem
IsWindowEnabled
OemToCharA
CharToOemA
IsIconic
GetSystemMetrics
DrawIcon
GetSystemMenu
AppendMenuA
LoadBitmapA
GetWindowRect
ReleaseDC
GetWindow
LoadIconA
GetParent
GetClientRect
GetDC
SetCapture
RemoveMenu
CharUpperA
GetSysColorBrush
SetWindowsHookExA
LoadCursorA
SendMessageA
MsgWaitForMultipleObjects
PeekMessageA
TranslateMessage
DispatchMessageA
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
InflateRect
CharNextA
IsWindowUnicode
PostQuitMessage
GetMenuStringA
DeleteMenu
InsertMenuA
PtInRect
GetClassNameA
DestroyMenu
GetDesktopWindow
GetMessageA
ValidateRect
GetCursorPos
SetCursor
ShowOwnedPopups
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
LoadStringA
wvsprintfA
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
MoveWindow
SetWindowTextA
GetDlgItemTextA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
RemovePropA
SetDlgItemInt
IsDialogMessageA

gdi32

OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetCurrentPositionEx
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
DeleteObject
GetClipRgn
CreateRectRgn
SetWindowOrgEx
ExtSelectClipRgn
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreatePen
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreatePatternBrush
CreateDIBPatternBrushPt
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextMetricsA
CreateFontIndirectA
CopyMetaFileA
CreateDCA
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SelectPalette
GetStockObject
SelectObject
RestoreDC
SaveDC
StartDocA
DeleteDC
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
SelectClipPath
CreateDIBitmap
PatBlt
GetTextExtentPointA
BitBlt
CreateCompatibleDC
GetTextExtentPoint32A

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryValueExA
GetTokenInformation
OpenProcessToken
FreeSid
RegSetValueA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
LookupAccountSidA
RegOpenKeyExA
RegOpenKeyA
RegEnumKeyA
RegQueryValueA
OpenThreadToken
AllocateAndInitializeSid
EqualSid

shell32

DragFinish
SHGetFileInfoA
DragAcceptFiles
ShellExecuteExA
DragQueryFileA

comctl32

DestroyPropertySheetPage
CreatePropertySheetPageA
PropertySheetA
ord17

ole32

ReadFmtUserTypeStg
ReadClassStg
CoTreatAsClass
ReleaseStgMedium
CoTaskMemAlloc
OleRegGetUserType
CoDisconnectObject
CoCreateInstance
OleRun
CLSIDFromString
CLSIDFromProgID
StringFromCLSID
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateBindCtx
CoTaskMemFree
OleDuplicateData

oleaut32

SafeArrayAllocData
VarBstrFromDate
VarDateFromStr
VarBstrFromCy
VarCyFromStr
SysStringByteLen
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysReAllocStringLen
SysAllocStringLen
VariantCopy
SysAllocStringByteLen
SysStringLen
SysAllocString
VariantClear
SysFreeString
VariantChangeType
SafeArrayAllocDescriptor
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
LoadTypeLi
SafeArrayCopy

wininet

InternetGetLastResponseInfoA
GopherFindFirstFileA
InternetFindNextFileA
FtpFindFirstFileA
HttpQueryInfoA
HttpSendRequestExA
HttpEndRequestA
HttpSendRequestA
HttpAddRequestHeadersA
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetQueryOptionA
InternetSetOptionExA
InternetSetStatusCallback
InternetSetCookieA
InternetGetCookieA
InternetSetFilePointer
InternetWriteFile
InternetReadFile
InternetQueryDataAvailable
InternetConnectA
FtpDeleteFileA
FtpRenameFileA
FtpCreateDirectoryA
FtpRemoveDirectoryA
FtpSetCurrentDirectoryA
FtpGetCurrentDirectoryA
FtpOpenFileA
FtpPutFileA
FtpGetFileA
GopherCreateLocatorA
GopherGetAttributeA
GopherOpenFileA
HttpOpenRequestA
InternetErrorDlg

Exports

Exports

?su_getSWShipState@@YAHXZ
?su_getTaggedDateCode@@YAIXZ
?su_getTaggedExpireDate@@YAJXZ
?su_getTaggedRevCode@@YAIXZ
?su_getTaggedServicePack@@YAAAVCString@@AAV1@@Z
?su_getVerSuffix@@YAAAVCString@@AAV1@@Z

Sections

.text
Size: 300KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tc
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

779714f7ec8efc425dcf3250ca25f59b

Headers

File Characteristics

Imports

netapi32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

ole32

oleaut32

wininet

Exports

Exports

Sections

.text Size: 300KB - Virtual size: 296KB

.rdata Size: 60KB - Virtual size: 58KB

.data Size: 28KB - Virtual size: 42KB

.rsrc Size: 32KB - Virtual size: 30KB

.tc Size: 196KB - Virtual size: 196KB

.text
Size: 300KB - Virtual size: 296KB

.rdata
Size: 60KB - Virtual size: 58KB

.data
Size: 28KB - Virtual size: 42KB

.rsrc
Size: 32KB - Virtual size: 30KB

.tc
Size: 196KB - Virtual size: 196KB