75f2d8fcd6665555a9e145b0dd9dc49a

Sharing

Copy URL Twitter E-mail

General

Target

75f2d8fcd6665555a9e145b0dd9dc49a
Size

336KB
MD5

75f2d8fcd6665555a9e145b0dd9dc49a
SHA1

081c2ef9e0afd774b1e2146d90423d848699b59d
SHA256

580aa01e488a9de220c39c8da7a8b1f167780e3c7a11ca866f3a60a2d92e022e
SHA512

e986d50025f02c113eacec74130f6f3785a031eae92d88f2ab3946575dfe7adf2ca531191795ce8b4ccfad6546854b68924feab8f53be0ac436e559d52c228ce
SSDEEP

6144:yYfm4gNC6N8Eavi35JFqk/THXaqzFSTz5mXejQDPcWs/THNte1UD5/jW:OsXECwo8aq7esDPct/I0k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75f2d8fcd6665555a9e145b0dd9dc49a

Files

75f2d8fcd6665555a9e145b0dd9dc49a
.exe windows:4 windows x86 arch:x86

e70b1c3b322ede629f60beadaa6e5abe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAAsyncGetHostByName
WSAAsyncGetProtoByNumber
WSACancelAsyncRequest
WSACloseEvent
WSADuplicateSocketA
WSAEnumNameSpaceProvidersA
ntohs
WSAAsyncGetProtoByName

imm32

ImmDestroyContext
ImmDestroySoftKeyboard
ImmEnumRegisterWordW
ImmGenerateMessage
ImmCreateIMCC

shlwapi

HashData
PathAddExtensionW
PathAppendA
PathAppendW
PathCanonicalizeW
PathCombineW
PathCompactPathExW
PathFileExistsA
PathFileExistsW
PathFindExtensionW
PathFindFileNameA
PathFindFileNameW
PathGetArgsA
PathIsContentTypeA
PathIsContentTypeW
PathIsDirectoryEmptyW
PathIsDirectoryW
PathIsFileSpecW
PathIsRelativeW
PathIsRootW
PathIsURLW
PathRelativePathToW
PathRemoveArgsA
PathRemoveBackslashW
PathRemoveExtensionW
PathRemoveFileSpecA
PathRemoveFileSpecW
PathRenameExtensionW
PathStripPathW
PathUnExpandEnvStringsW
PathUnquoteSpacesA
PathUnquoteSpacesW
SHAutoComplete
SHCopyKeyA
SHCreateShellPalette
ord16
SHDeleteKeyA
SHDeleteKeyW
SHDeleteValueA
SHDeleteValueW
SHEnumKeyExW
SHGetValueA
SHGetValueW
SHQueryInfoKeyW
SHQueryValueExA
SHQueryValueExW
SHRegGetBoolUSValueA
SHRegSetUSValueA
SHSetValueA
SHSetValueW
SHStrDupW
StrCSpnA
StrCSpnW
StrChrA
StrCmpIW
StrCmpNIA
StrCmpNIW
StrCmpNW
StrCmpW
StrDupA
StrDupW
StrFormatByteSizeW
StrRChrIW
StrRChrW
StrStrA
StrStrIA
StrStrIW
StrStrW
StrToIntA
StrToIntExA
StrToIntExW
StrToIntW
StrTrimA
UrlApplySchemeW
UrlCreateFromPathW
UrlUnescapeA
UrlUnescapeW
PathAddBackslashW

advapi32

RegisterTraceGuidsA
CloseServiceHandle
CreateProcessWithLogonW
EnumServicesStatusA
EqualSid
FreeSid
GetTokenInformation
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
ImpersonateLoggedOnUser
OpenProcessToken
OpenSCManagerA
OpenThreadToken
RegCloseKey
RegCreateKeyExA
RegCreateKeyExW
RegDeleteKeyA
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyA
RegEnumKeyExA
RegEnumKeyExW
RegEnumValueW
RegOpenKeyA
RegOpenKeyExA
RegOpenKeyExW
RegQueryInfoKeyA
RegQueryInfoKeyW
RegQueryValueA
RegQueryValueExA
RegQueryValueExW
RegSetValueExA
RegSetValueExW
RevertToSelf
TraceEvent
UnregisterTraceGuids
AllocateAndInitializeSid

user32

IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsMenu
IsIconic
IsDlgButtonChecked
IsDialogMessageW
IsDialogMessageA
IsChild
IsCharAlphaNumericW
InvalidateRect
InsertMenuW
InsertMenuItemW
InsertMenuItemA
InsertMenuA
InflateRect
GetWindowThreadProcessId
GetWindowTextW
GetWindowTextLengthW
GetWindowTextLengthA
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowLongA
GetWindowInfo
GetWindowDC
GetWindow
GetSystemMetrics
GetSysColorBrush
GetSubMenu
GetScrollBarInfo
GetPropW
GetPropA
GetParent
GetNextDlgTabItem
GetNextDlgGroupItem
GetMonitorInfoA
GetMessageW
GetMessagePos
GetMessageA
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemInfoA
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardLayoutList
GetKeyState
GetGUIThreadInfo
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDlgItemTextW
GetDlgItemTextA
GetDlgItemInt
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassInfoW
GetClassInfoExW
GetClassInfoExA
GetClassInfoA
GetCapture
GetActiveWindow
FindWindowExW
FindWindowExA
FillRect
EqualRect
EnumWindows
EnumThreadWindows
EnumChildWindows
EndPaint
EndDialog
EndDeferWindowPos
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextExW
DrawTextA
DrawIconEx
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DispatchMessageA
DialogBoxParamW
DialogBoxParamA
DialogBoxIndirectParamA
DestroyWindow
DestroyMenu
DestroyIcon
DeleteMenu
DeferWindowPos
DefWindowProcW
DefWindowProcA
CreateWindowExW
CreateWindowExA
CreatePopupMenu
CreateDialogParamW
CopyRect
CloseClipboard
ClientToScreen
CheckRadioButton
CheckMenuRadioItem
CheckMenuItem
CheckDlgButton
CharUpperW
CharUpperA
CharPrevW
CharPrevA
CharNextW
CharNextExA
CharNextA
CharLowerW
CharLowerA
CallWindowProcW
CallWindowProcA
CallNextHookEx
BeginPaint
BeginDeferWindowPos
AppendMenuW
AppendMenuA
AdjustWindowRectEx
AdjustWindowRect
ActivateKeyboardLayout
WindowFromPoint
ValidateRect
UpdateWindow
UnregisterClassW
UnregisterClassA
UnionRect
UnhookWindowsHookEx
TranslateMessage
TranslateAcceleratorW
TranslateAcceleratorA
TrackPopupMenuEx
TrackPopupMenu
TrackMouseEvent
SystemParametersInfoA
ShowWindow
SetWindowsHookExA
SetWindowTextW
SetWindowTextA
SetWindowRgn
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetWindowLongA
SetTimer
SetRectEmpty
SetRect
SetPropW
SetPropA
SetParent
SetMenuItemInfoW
SetMenuItemInfoA
SetMenuDefaultItem
SetMenu
SetForegroundWindow
SetFocus
SetDlgItemTextW
SetDlgItemTextA
SetDlgItemInt
SetCursor
SetClipboardData
SetActiveWindow
SendMessageW
SendMessageCallbackW
SendMessageA
SendDlgItemMessageW
SendDlgItemMessageA
ScreenToClient
RemovePropW
RemovePropA
ReleaseDC
ReleaseCapture
RegisterWindowMessageA
RegisterClassW
RegisterClassExW
RegisterClassExA
RegisterClassA
RedrawWindow
PtInRect
PostThreadMessageA
PostQuitMessage
PostMessageW
PostMessageA
PeekMessageW
PeekMessageA
OpenClipboard
KillTimer
MoveWindow
MonitorFromPoint
ModifyMenuW
MessageBoxW
MessageBoxA
MessageBeep
MapWindowPoints
LoadStringW
LoadStringA
LoadMenuW
LoadMenuA
LoadImageW
LoadImageA
LoadIconA
LoadCursorA
LoadAcceleratorsW
GetClassNameW
LoadAcceleratorsA
OffsetRect

ole32

PropVariantClear
OleUninitialize
OleSetClipboard
OleSaveToStream
OleRun
OleRegGetUserType
OleRegGetMiscStatus
OleRegEnumVerbs
OleLoadFromStream
OleInitialize
HWND_UserUnmarshal
HWND_UserSize
HWND_UserMarshal
HWND_UserFree
GetHGlobalFromStream
DoDragDrop
CreateStreamOnHGlobal
CreateOleAdviseHolder
CreateDataAdviseHolder
CoWaitForMultipleHandles
CoUnmarshalInterface
CoUninitialize
PropVariantCopy
CoTaskMemFree
CoTaskMemAlloc
CoSetProxyBlanket
CoRevokeClassObject
CoResumeClassObjects
CoReleaseServerProcess
CoReleaseMarshalData
CoRegisterClassObject
CoMarshalInterface
CoMarshalInterThreadInterfaceInStream
CoLockObjectExternal
CoInitializeEx
CoInitialize
CoGetMalloc
CoGetInterfaceAndReleaseStream
CoGetClassObject
CoFreeUnusedLibraries
CoCreateInstance
CoCreateGuid
CoAllowSetForegroundWindow
CoAddRefServerProcess
CLSIDFromString
ReadClassStm
RegisterDragDrop
ReleaseStgMedium
RevokeDragDrop
StringFromCLSID
StringFromGUID2
WriteClassStm
CoTaskMemRealloc

kernel32

HeapFree
HeapReAlloc
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByte
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LocalReAlloc
LockResource
MoveFileExW
MoveFileW
MulDiv
MultiByteToWideChar
OpenFile
OpenMutexA
OpenThread
QueryPerformanceCounter
RaiseException
ReadFile
ReleaseMutex
RemoveDirectoryA
RemoveDirectoryW
ResumeThread
RtlMoveMemory
SetEndOfFile
SetErrorMode
SetEvent
SetFileAttributesW
SetFilePointer
GetVersionExA
GetVersion
GetUserDefaultUILanguage
GetUserDefaultLCID
GetTimeFormatW
GetTickCount
GetTempPathW
GetTempPathA
GetTempFileNameW
GetTempFileNameA
GetSystemWindowsDirectoryA
GetSystemTimeAsFileTime
GetSystemTime
GetSystemInfo
GetSystemDirectoryW
GetSystemDirectoryA
GetStringTypeExA
GetStdHandle
GetShortPathNameW
GetProfileIntA
GetProcessHeap
GetProcAddress
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
GetLocaleInfoW
GetLocaleInfoA
GetLocalTime
GetLastError
GetFileType
GetFileTime
GetFileSize
GetFileAttributesW
GetExitCodeThread
GlobalAlloc
GetEnvironmentVariableW
GetDriveTypeW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetACP
FreeResource
FreeLibraryAndExitThread
FreeLibrary
FormatMessageW
FormatMessageA
FlushInstructionCache
FlushFileBuffers
FindResourceA
FindNextFileW
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
ExpandEnvironmentStringsW
ExpandEnvironmentStringsA
ExitProcess
EnterCriticalSection
DuplicateHandle
DeviceIoControl
DeleteTimerQueueTimer
DeleteFileW
DeleteFileA
DeleteCriticalSection
CreateTimerQueueTimer
CreateThread
CreateProcessW
CreateMutexW
CreateMutexA
CreateFileW
CreateEventW
CreateEventA
CreateDirectoryW
CopyFileW
CompareStringW
CompareStringA
CompareFileTime
CloseHandle
SetFileTime
SetHandleInformation
SetLastError
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SystemTimeToFileTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcmpA
lstrcmpW
lstrcmpiA
lstrcmpiW
lstrlenA
lstrlenW
GlobalFree
GlobalLock
GlobalReAlloc
GlobalSize
GlobalUnlock
GetExitCodeProcess
HeapAlloc

ddraw

DDInternalLock

shfolder

SHGetFolderPathA

shell32

SHGetSettings

gdi32

CreatePen
CreateMetaFileA
DeleteDC
CreateFontIndirectA
CreateFontA
CreateDIBSection
CreateCompatibleDC
DeleteMetaFile
DeleteObject
Ellipse
EnumFontFamiliesExA
CreateCompatibleBitmap
ExtTextOutA
CreateRectRgnIndirect
GetClipBox
GetDeviceCaps
GetObjectA
GetObjectW
GetTextExtentPoint32W
GetTextExtentPointA
GetTextExtentPointW
GetTextMetricsA
LPtoDP
LineTo
MoveToEx
PatBlt
Polygon
ExtTextOutW
CreateSolidBrush
BitBlt
CloseMetaFile
Polyline
Rectangle
RestoreDC
SaveDC
SelectObject
SetBkColor
SetBkMode
SetMapMode
SetTextColor
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
StretchBlt
TextOutW
CreateFontIndirectW

rpcrt4

IUnknown_Release_Proxy
NdrCStdStubBuffer_Release
NdrClientCall2
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrOleAllocate
NdrOleFree
IUnknown_QueryInterface_Proxy
CStdStubBuffer_AddRef
CStdStubBuffer_Connect
CStdStubBuffer_CountRefs
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_Disconnect
CStdStubBuffer_Invoke
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_QueryInterface
IUnknown_AddRef_Proxy

Exports

Exports

AboutDlgProc
AllocPointer
AllocSlider
AngleFromSlope
BlockMove
BlockMoveData
BufferedDraw
CalcProxyRect
CalcProxyRectCore
CenterWindow
CentreDialog
CheckProxiesSupported
DefPaintBack
DefPlotThumb
DeinitializePIExpressDialogs
DisposPtr
DisposeHandle
DisposePtr
DoYield
DragThumb
DrawSmallButton
DrawTheSmallButton
DrawTicksBack
DupHandle
EditFail
EmptyRect
FSClose
FSRead
FSWrite
FSpCreate
FSpDelete
FSpOpenDF
Fix2Frac
Fix2Long
Fix2X
FixATan2
FixDiv
FixHypot
FixMul
FixRatio
FixRound
FixSqrt
Frac2Fix
Frac2X
FracCos
FracDiv
FracHypot
FracMul
FracSin
FracSqrt
FreePointer
FreeSlider
GetDlgItemRect
GetEOF
GetFPos
GetHandleSize
GetIndString
GetIndStringPreferred
GetSliderPos
GetSliderRange
GetThumbRect
HLock
HUnlock
HandFromPtr
HostAddPIResource
HostAllocateBuffer
HostAllocateStripBuffer
HostBufferProcsAvailable
HostBufferSpace
HostCountPIResources
HostDeletePIResource
HostDisposeHandle
HostFreeBuffer
HostGetHandleSize
HostGetPIResource
HostHandleProcsAvailable
HostLockBuffer
HostLockHandle
HostNewHandle
HostResourceProcsAvailable
HostSetHandleSize
HostUnlockBuffer
HostUnlockHandle
Hypot
InitCursor
InitEditWnd
InitHypotTable
InitializePIExpressDialogs
Interpolate1D
Interpolate1DMulti
Interpolate2D
Interpolate2DMulti
InvalThumbRect
LockSliderData
Long2Fix
Long2X
LongHypot
LongMul
LongSqrt
MPSafe_Random
MPSafe_SetRandomSeed
MacToWinRect
MapRect
MemError
MoveHHi
NewCalcProxyRect
NewHandle
NewHandleClear
NewPtr
NewPtrClear
Num2Comp
NumToString
OutputMessage
PIDMDisposeDialog
PIDMExpressHandleDialog
PIDMExpressResDialog
PIDMGetControl
PIDMGetControlIndex
PIDMGetMacDialog
PIDMModalDialog
PIDMNewHandleDialog
PIDMNewResDialog
PIDMWinExpressDialog
PIExpressDialogsAvailable
PIInsetRect
PIOffsetRect
PIPtInRect
PIQuickZResToCString
PIQuickZResToPascalString
PIQuickZToCString
PIQuickZToCStringLen
PIQuickZToPascalString
PIQuickZToPascalStringLen
PISetRect
PIThreadsDoAll
PIThreadsEndThreads
PIThreadsGetNumThreads
PIThreadsGetParamsPtr
PIThreadsInit
PIThreadsStart1
PIThreadsWaitForCompletion
PIZGetIndString
PIZGetIndStringPreferred
PIZLoadString
PIZNoteAlert
PIZStopAlert
PIZToUnicodeCString
PIZToUnicodeStringLen
PackBits
PaintSlider
ParamText
Random
RegisterSlider
SectRect
SetFPos
SetHandleSize
SetPIExpressDialogSuiteVersion
SetSliderData
SetSliderFlags
SetSliderMax
SetSliderMin
SetSliderPos
SetSliderProc
SetSliderRange
SetSliderThumbOff
SetSliderThumbSize
ShortHypot
ShortMul
ShowAlert
ShowOutputBuffer
SliderWndProc
SlopeFromAngle
SnapToLogPos
TickCount
TranslatePos
TruncateFileName
UnRegisterSlider
UnlockSliderData
UnpackBits
UserChangedEditText
UserInputAvail
UtilReadDescriptors
UtilReadPlatformFilePathDescriptor
UtilReadPointDescriptor
UtilReadPointListDescriptor
UtilWriteDescriptors
UtilWriteNoDescForceUI
UtilWritePlatformFilePathDescriptor
UtilWritePointDescriptor
UtilWritePointListDescriptor
ValidateDlgLong
WAllocBuffer
WFreeBuffer
WSizeBuffer
WarnHostAdvanceStateAvailable
WarnHostBufferProcsAvailable
WarnHostHandleProcsAvailable
WarnHostResourceProcsAvailable
WinToMacRect
X2Fix
X2Frac
X2Long
map_one
map_to_logical
map_to_physical

Sections

.text
Size: 54KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 238KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 21KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e70b1c3b322ede629f60beadaa6e5abe

Headers

File Characteristics

Imports

ws2_32

imm32

shlwapi

advapi32

user32

ole32

kernel32

ddraw

shfolder

shell32

gdi32

rpcrt4

Exports

Exports

Sections

.text Size: 54KB - Virtual size: 56KB

.rdata Size: 238KB - Virtual size: 240KB

.data Size: 18KB - Virtual size: 19KB

.idata Size: 21KB - Virtual size: 23KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 54KB - Virtual size: 56KB

.rdata
Size: 238KB - Virtual size: 240KB

.data
Size: 18KB - Virtual size: 19KB

.idata
Size: 21KB - Virtual size: 23KB

.rsrc
Size: 4KB - Virtual size: 3KB