31f42e702475a921ee5dfab4124fe5a157bfb367ac415a62c4c011b7325d8e69

Sharing

Copy URL Twitter E-mail

General

Target

31f42e702475a921ee5dfab4124fe5a157bfb367ac415a62c4c011b7325d8e69
Size

1.1MB
MD5

34058686fc48bc79a35af62e9086338d
SHA1

4e555a53330ef681870c66c3b9f056285b69375a
SHA256

31f42e702475a921ee5dfab4124fe5a157bfb367ac415a62c4c011b7325d8e69
SHA512

ce81690c8b639e0a3725dc09c71258af3afc06648f6f07b30c891a37156c68cdbd45d8f0f28734d4a70efb16ed6558817d948f3154d78fa20f5478fbc4792251
SSDEEP

12288:seqpOSYHHAJ6SW6VviPAwutLUwjfuSB2udsGJ5v3ThXibkGY+RepeOwtmR0Z0Eaj:seqpSHAqodVsGJ5P9ib88eHwtW0ZDa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31f42e702475a921ee5dfab4124fe5a157bfb367ac415a62c4c011b7325d8e69

Files

31f42e702475a921ee5dfab4124fe5a157bfb367ac415a62c4c011b7325d8e69
.exe windows:6 windows x86 arch:x86

da4b4f9ba0d2e0efd938354e458fa0e3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathRemoveFileSpecW
PathCombineW
PathStripPathW
PathRemoveExtensionW
PathAddBackslashW

kernel32

LocalFileTimeToFileTime
SetFilePointer
SetFileTime
WriteFile
SystemTimeToFileTime
GetLocalTime
lstrcpynW
InitializeCriticalSectionEx
lstrcpyW
QueryFullProcessImageNameW
K32EnumProcessModules
K32GetModuleFileNameExW
OutputDebugStringA
CreateEventW
GetCurrentProcess
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
GetFileSizeEx
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
SetFilePointerEx
GetFileType
HeapAlloc
HeapFree
GetStdHandle
ExitProcess
FreeLibraryAndExitThread
ExitThread
CreateThread
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
OutputDebugStringW
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetStringTypeW
LCMapStringEx
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
GlobalLock
InitOnceComplete
InitOnceBeginInitialize
GetExitCodeThread
WaitForSingleObjectEx
LocalFree
QueryPerformanceFrequency
QueryPerformanceCounter
IsProcessorFeaturePresent
GetModuleHandleExW
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
SleepConditionVariableSRW
SleepConditionVariableCS
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
FormatMessageA
AcquireSRWLockExclusive
MulDiv
GetACP
WideCharToMultiByte
MultiByteToWideChar
FreeLibrary
DeleteTimerQueueTimer
CreateTimerQueueTimer
DeleteCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrlenW
LoadLibraryW
FreeResource
GetTickCount
ReadFile
GetFileSize
GetCurrentDirectoryW
GetSystemDirectoryW
WaitForSingleObject
CreateProcessW
FindFirstFileExW
GetModuleFileNameW
Process32NextW
TerminateProcess
OpenProcess
lstrcmpiW
Process32FirstW
CreateToolhelp32Snapshot
Sleep
WriteConsoleW
GetPrivateProfileStringW
GetProductInfo
GetVersionExW
GetModuleHandleA
FindNextFileW
FindClose
FindFirstFileW
RemoveDirectoryW
SetFileAttributesW
GetFileAttributesW
GetFileAttributesExW
DeviceIoControl
CreateFileW
GlobalUnlock
CloseHandle
GetFullPathNameW
GetProcAddress
GetCurrentThreadId
RaiseException
SizeofResource
LockResource
LoadResource
GetModuleHandleW
FindResourceW
DeleteFileW
GetCommandLineW
GetLastError
FlushFileBuffers
ReleaseSRWLockExclusive
InitializeSRWLock
CreateDirectoryW
GlobalAlloc
GetCurrentProcessId
HeapSize
SetEndOfFile
RtlUnwind

user32

SetWindowPos
IsWindowVisible
IsIconic
IsZoomed
CharNextW
SetFocus
GetActiveWindow
GetFocus
GetKeyState
SetCapture
ReleaseCapture
SetTimer
KillTimer
GetDC
ReleaseDC
BeginPaint
EndPaint
GetUpdateRect
InvalidateRect
GetClientRect
GetWindowRect
GetCursorPos
IsWindow
MapWindowPoints
IntersectRect
UnionRect
OffsetRect
IsRectEmpty
PtInRect
GetWindowLongW
SetWindowLongW
GetParent
GetWindow
MonitorFromWindow
GetMonitorInfoW
SetWindowRgn
MessageBoxW
InflateRect
DefWindowProcW
PostQuitMessage
CallWindowProcW
RegisterClassW
RegisterClassExW
GetClassInfoExW
ShowWindow
EnableWindow
GetSystemMetrics
SetPropW
GetPropW
LoadCursorW
LoadImageW
CreateWindowExW
DispatchMessageW
TranslateMessage
GetMessageW
PostMessageW
SendMessageW
DestroyWindow
ScreenToClient
UpdateLayeredWindow
MapVirtualKeyExW
GetKeyNameTextW
GetKeyboardLayout
SetForegroundWindow
GetGUIThreadInfo
InvalidateRgn
CreateAcceleratorTableW
DrawTextA
wsprintfA
EqualRect
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
IsWindowEnabled
SystemParametersInfoW
wsprintfW
GetSysColor
ClientToScreen
GetCaretPos
SetCaretPos
ShowCaret
HideCaret
GetCaretBlinkTime
CreateCaret
TrackPopupMenu
AppendMenuW
EnableMenuItem
DestroyMenu
CreatePopupMenu
SetRect
FillRect
DrawTextW
CharPrevW
SetCursor
MonitorFromPoint
GetWindowRgn
MoveWindow

gdi32

SetBitmapBits
GetBitmapBits
FillRgn
GetTextExtentPointA
CreatePatternBrush
GdiFlush
TextOutW
MoveToEx
GetObjectA
SetTextColor
SetStretchBltMode
StretchBlt
SetBkMode
ExtSelectClipRgn
SelectClipRgn
LineTo
GetTextExtentPoint32W
GetClipBox
GetCharABCWidthsW
CreateSolidBrush
CreateRectRgnIndirect
CreatePenIndirect
CreateCompatibleBitmap
CombineRgn
GetDeviceCaps
CreateDIBSection
PtInRegion
CreateRectRgn
CreateRoundRectRgn
SetWindowOrgEx
GetObjectW
GetTextMetricsW
SelectObject
SaveDC
RestoreDC
Rectangle
RemoveFontMemResourceEx
AddFontMemResourceEx
GetStockObject
DeleteObject
DeleteDC
CreatePen
CreateFontIndirectW
CreateCompatibleDC
BitBlt
SetBkColor

advapi32

RegOpenKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteKeyExW
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegCloseKey
RegEnumKeyExW
RegEnumKeyW
RegDeleteValueW

shell32

SHGetSpecialFolderPathW

ole32

CreateStreamOnHGlobal
CoCreateGuid
CoUninitialize
CoInitialize
OleLockRunning
CoCreateInstance
CLSIDFromString
CLSIDFromProgID

oleaut32

VariantClear
SysAllocString
SysFreeString
VariantInit

comctl32

_TrackMouseEvent
ord17

gdiplus

GdiplusStartup
GdiplusShutdown
GdipAlloc
GdipFree
GdipCloneBrush
GdipRotateWorldTransform
GdipTranslateWorldTransform
GdipDrawImageRectI
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipGetImageHeight
GdipGetImageWidth
GdipSetStringFormatTrimming
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipCloneStringFormat
GdipDeleteStringFormat
GdipStringFormatGetGenericTypographic
GdipMeasureString
GdipDrawString
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipFillRectangleI
GdipDrawRectangleI
GdipSetInterpolationMode
GdipSetTextRenderingHint
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipDisposeImage
GdipCloneImage
GdipLoadImageFromStreamICM
GdipLoadImageFromStream
GdipSetPenMode
GdipDeletePen
GdipCreatePen1
GdipCreateSolidFill
GdipDeleteBrush

imm32

ImmSetCompositionWindow
ImmGetContext
ImmReleaseContext

winhttp

WinHttpOpen
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpAddRequestHeaders
WinHttpOpenRequest
WinHttpConnect
WinHttpSetOption
WinHttpSetTimeouts
WinHttpCloseHandle

Sections

.text
Size: 580KB - Virtual size: 580KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 314KB - Virtual size: 314KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

da4b4f9ba0d2e0efd938354e458fa0e3

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

gdiplus

imm32

winhttp

Sections

.text Size: 580KB - Virtual size: 580KB

.rdata Size: 160KB - Virtual size: 159KB

.data Size: 13KB - Virtual size: 19KB

.rsrc Size: 314KB - Virtual size: 314KB

.reloc Size: 38KB - Virtual size: 37KB

.text
Size: 580KB - Virtual size: 580KB

.rdata
Size: 160KB - Virtual size: 159KB

.data
Size: 13KB - Virtual size: 19KB

.rsrc
Size: 314KB - Virtual size: 314KB

.reloc
Size: 38KB - Virtual size: 37KB