4034fae5e24b056485ecf90fe3bbb27acf5324b1649c755560bb1f2c168f4941

Sharing

Copy URL

Twitter E-mail

General

Target

4034fae5e24b056485ecf90fe3bbb27acf5324b1649c755560bb1f2c168f4941
Size

2.1MB
MD5

58dfbc6e9e973c3e9ab506b670e7e2e5
SHA1

7ae67f91d3e64eab857db8afcaf85711beb244b2
SHA256

4034fae5e24b056485ecf90fe3bbb27acf5324b1649c755560bb1f2c168f4941
SHA512

776fbd16a1d54171f9d461af3ba50d450605dd1bc56d61f8380f586046ac9bffd65377b63e8b4c336ce57e16b4f0144785b07dd98dba964dbc834a518410d05c
SSDEEP

49152:XqxaiQSOwdl5gj+KnYJVmk2IGM7hFmiYRFYQ5ipozQhe8ZiFzH+T/qlH:X9vwdUj+KnYJVmk7GM7hFmiY4QtUeGiD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4034fae5e24b056485ecf90fe3bbb27acf5324b1649c755560bb1f2c168f4941

Files

4034fae5e24b056485ecf90fe3bbb27acf5324b1649c755560bb1f2c168f4941
.exe windows:5 windows x86 arch:x86

16a7c22ac4159768ff9aa3016192c0d8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

select
WSAStartup
connect
htons
gethostname
getsockname
setsockopt
WSACleanup
recv
WSAIoctl
send
closesocket
gethostbyname
socket

kernel32

GetStdHandle
IsValidCodePage
GetTimeZoneInformation
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
HeapDestroy
LCMapStringW
CompareStringW
GetConsoleCP
GetConsoleMode
GetExitCodeProcess
WriteConsoleW
SetEnvironmentVariableA
CreateFileW
HeapCreate
IsProcessorFeaturePresent
GetStringTypeW
IsDebuggerPresent
VirtualFree
VirtualAlloc
WaitForSingleObject
SetEvent
Sleep
CreateEventA
SetUnhandledExceptionFilter
InterlockedExchange
ResetEvent
CancelIo
CloseHandle
lstrlenA
FindResourceW
FreeLibrary
LoadResource
GetCurrentProcess
GetTickCount
WideCharToMultiByte
SizeofResource
GetSystemDirectoryA
GetLastError
GetProcAddress
LoadLibraryA
MoveFileA
LockResource
GetModuleFileNameA
DeleteFileA
lstrcpyA
ExitProcess
TerminateThread
GetVersionExA
UnhandledExceptionFilter
GetFileType
SetStdHandle
GetSystemTimeAsFileTime
HeapSize
HeapQueryInformation
VirtualQuery
GetSystemInfo
RaiseException
RtlUnwind
HeapReAlloc
GetStartupInfoW
HeapSetInformation
GetCommandLineA
CreateThread
ExitThread
GetDateFormatA
GetTimeFormatA
DecodePointer
EncodePointer
VirtualProtect
GetProfileIntA
SearchPathA
GetTempPathA
GetTempFileNameA
GetFileTime
GetFileSizeEx
SetErrorMode
GetNumberFormatA
GetWindowsDirectoryA
InitializeCriticalSectionAndSpinCount
GetFullPathNameA
GetVolumeInformationA
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetCurrentDirectoryA
GetOEMCP
GetCPInfo
GetACP
GlobalFlags
InterlockedIncrement
TlsFree
DeleteCriticalSection
TlsSetValue
TlsAlloc
CreateFileA
GetFileSize
SetFilePointer
ExpandEnvironmentStringsA
WriteFile
InitializeCriticalSection
GlobalHandle
GetDriveTypeA
GetFileAttributesA
LocalReAlloc
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
ResumeThread
SetThreadPriority
GetCurrentProcessId
GetPrivateProfileIntA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
GetModuleHandleW
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
LoadLibraryW
ActivateActCtx
DeactivateActCtx
lstrcmpW
FindResourceA
FreeResource
FormatMessageA
lstrlenW
MulDiv
SetLastError
ReleaseMutex
CreateMutexA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetFileAttributesExA
GetProcessHeap
HeapFree
HeapAlloc
FileTimeToLocalFileTime
InterlockedDecrement
CreateProcessA
FindResourceExW
Module32Next
CreateToolhelp32Snapshot
GetModuleHandleA
GlobalMemoryStatusEx
Process32Next
Module32First
MultiByteToWideChar
FileTimeToSystemTime
TerminateProcess
OpenProcess
GetPriorityClass
CreateRemoteThread
Process32First
QueryDosDeviceA
SystemTimeToTzSpecificLocalTime
lstrcmpA
GetCurrentThreadId
lstrcmpiA
GlobalFree
GlobalUnlock
GlobalAlloc
GlobalLock
GlobalSize
GetLocalTime
LocalFree
LocalSize
GetDiskFreeSpaceExA
OutputDebugStringA
FindNextFileA
LocalAlloc
FindClose
SetFileAttributesA
CopyFileA
RemoveDirectoryA
GetLogicalDriveStringsA
FindFirstFileA
CreateDirectoryA
lstrcatA
ReadFile

user32

UnionRect
DrawFrameControl
DrawEdge
DrawIconEx
GetNextDlgGroupItem
GetIconInfo
EnableScrollBar
DrawFocusRect
InvertRect
GetMenuDefaultItem
LoadImageW
CopyImage
DrawStateA
RegisterClipboardFormatA
EnumChildWindows
LockWindowUpdate
IsRectEmpty
IsMenu
GetSystemMenu
MonitorFromPoint
UnpackDDElParam
ReuseDDElParam
LoadMenuA
LoadImageA
LoadAcceleratorsA
InsertMenuItemA
IntersectRect
BringWindowToTop
TranslateAcceleratorA
SetClassLongA
SetParent
CreatePopupMenu
NotifyWinEvent
SetWindowRgn
CreateAcceleratorTableA
LoadAcceleratorsW
DestroyAcceleratorTable
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
CopyAcceleratorTableA
PostThreadMessageA
LoadMenuW
UnregisterClassA
CharUpperA
DestroyIcon
WaitMessage
ReleaseCapture
LoadCursorW
SetLayeredWindowAttributes
EnumDisplayMonitors
SetRectEmpty
KillTimer
SetTimer
InvalidateRect
DeleteMenu
DestroyMenu
GetMenuItemInfoA
InflateRect
RealChildWindowFromPoint
GetSysColorBrush
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
OffsetRect
MessageBeep
RedrawWindow
IsZoomed
TranslateMessage
ValidateRect
ShowOwnedPopups
SetCursor
PostQuitMessage
MoveWindow
SetWindowTextA
IsDialogMessageA
CheckDlgButton
RegisterWindowMessageA
LoadIconA
UpdateLayeredWindow
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetLastActivePopup
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
UpdateWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
GetWindowRect
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
PtInRect
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
GetWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
GetParent
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
SetMenuDefaultItem
IsCharLowerA
GetKeyNameTextA
MapVirtualKeyExA
IsClipboardFormatAvailable
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
FrameRect
GetUpdateRect
CharUpperBuffA
RemoveMenu
OpenDesktopA
IsIconic
DrawIcon
GetClientRect
LoadIconW
EnumWindows
ShowWindow
PostMessageA
IsWindowVisible
CopyIcon
SubtractRect
CreateMenu
GetDoubleClickTime
MapDialogRect
SendDlgItemMessageA
GetWindowRgn
GetWindowThreadProcessId
GetUserObjectInformationA
GetThreadDesktop
OpenInputDesktop
IsChild
CloseDesktop
GetDC
GetCursorInfo
SetRect
ReleaseDC
GetDesktopWindow
GetCursorPos
SetThreadDesktop
keybd_event
CloseClipboard
SetCapture
WindowFromPoint
MapVirtualKeyA
SetCursorPos
GetClipboardData
EmptyClipboard
DestroyCursor
BlockInput
OpenClipboard
SystemParametersInfoA
GetSystemMetrics
SetClipboardData
LoadCursorA
mouse_event
GetKeyState
GetForegroundWindow
GetAsyncKeyState
CharNextA
SendMessageA
EnableWindow
ExitWindowsEx
MessageBoxA
wsprintfA
GetMessageA
HideCaret

gdi32

ExtSelectClipRgn
CreatePatternBrush
GetStockObject
SelectPalette
GetObjectType
CreatePen
CreateSolidBrush
CreateHatchBrush
GetTextExtentPoint32A
GetTextMetricsA
CreateFontIndirectA
CreateDIBitmap
CreateRectRgnIndirect
EnumFontFamiliesA
GetTextCharsetInfo
OffsetRgn
GetRgnBox
CreateRoundRectRgn
GetTextColor
SetDIBColorTable
PatBlt
RealizePalette
CombineRgn
StretchBlt
SetPixel
SetRectRgn
DPtoLP
GetBkColor
CreatePalette
GetPaletteEntries
ScaleWindowExtEx
GetSystemPaletteEntries
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
Rectangle
EnumFontFamiliesExA
GetWindowOrgEx
LPtoDP
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetViewportOrgEx
ExtFloodFill
SetPaletteEntries
GetTextFaceA
SetPixelV
OffsetWindowOrgEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetPixel
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
GetObjectA
SetBkColor
SetTextColor
CreateBitmap
CreateDCA
CopyMetaFileA
GetDeviceCaps
BitBlt
DeleteDC
CreateDIBSection
GetDIBits
DeleteObject
SelectObject
GetNearestPaletteIndex
CreateCompatibleBitmap
CreateCompatibleDC

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

LookupAccountSidA
OpenServiceA
CloseServiceHandle
OpenProcessToken
DeleteService
StartServiceA
RegQueryValueA
RegEnumKeyA
GetUserNameA
AdjustTokenPrivileges
AbortSystemShutdownA
LookupPrivilegeValueA
RegQueryValueExA
GetTokenInformation
QueryServiceConfig2A
QueryServiceConfigA
EnumServicesStatusA
RegEnumValueA
RegQueryInfoKeyA
RegCreateKeyExA
RegEnumKeyExA
RegDeleteKeyA
RegSetValueExA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
ControlService
OpenSCManagerA
QueryServiceStatus

shell32

DragQueryFileA
SHGetFileInfoA
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetMalloc
ShellExecuteA
SHAppBarMessage
DragFinish
SHBrowseForFolderA
SHGetPathFromIDListA

comctl32

ImageList_GetIconSize

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathRemoveFileSpecW

ole32

OleLockRunning
CoInitializeEx
CreateStreamOnHGlobal
CoUninitialize
CoCreateGuid
OleDuplicateData
ReleaseStgMedium
DoDragDrop
OleGetClipboard
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoTaskMemFree
CoInitialize
CoCreateInstance
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
CoTaskMemAlloc

oleaut32

VarBstrFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
SysAllocString
SysStringLen
SysFreeString

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDisposeImage

wtsapi32

WTSLogoffSession
WTSDisconnectSession
WTSEnumerateSessionsA
WTSFreeMemory
WTSQuerySessionInformationA

psapi

GetProcessMemoryInfo
GetModuleFileNameExA
GetProcessImageFileNameA
EnumProcessModules

netapi32

NetUserEnum
NetUserGetLocalGroups
NetUserAdd
NetApiBufferFree
NetUserGetInfo
NetLocalGroupAddMembers
NetUserDel
NetUserSetInfo

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 277KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 505KB - Virtual size: 505KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

16a7c22ac4159768ff9aa3016192c0d8

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

gdiplus

wtsapi32

psapi

netapi32

oleacc

imm32

winmm

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 277KB - Virtual size: 276KB

.data Size: 23KB - Virtual size: 56KB

.rsrc Size: 505KB - Virtual size: 505KB

.reloc Size: 167KB - Virtual size: 167KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 277KB - Virtual size: 276KB

.data
Size: 23KB - Virtual size: 56KB

.rsrc
Size: 505KB - Virtual size: 505KB

.reloc
Size: 167KB - Virtual size: 167KB