2b5d6ddcdbcf5d29e2c6cf9940d7ca44605a6370698f244b4401c1ecf6861a29

Sharing

Copy URL

Twitter E-mail

General

Target

2b5d6ddcdbcf5d29e2c6cf9940d7ca44605a6370698f244b4401c1ecf6861a29
Size

6.1MB
MD5

358cf6690f28f4576859144cbefe2fd5
SHA1

c89234964f3becb1e9402588286089d0d88730bf
SHA256

2b5d6ddcdbcf5d29e2c6cf9940d7ca44605a6370698f244b4401c1ecf6861a29
SHA512

06b094d45840c83a84ae20da397f9c29e89bf18121b16cf60456537150e0a546552c9bb915af63ede00fc4865fb890af1b3f358414ada7fce98532d0c7fce9bb
SSDEEP

98304:H9C0zYZhO2/78851pCFLw+Lr20eKd/dYCBb8PJtSBNFu2ITXvgRYeT3CekRDXE:H5B8B+Lr20HIubcSBNcDOmxRD0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b5d6ddcdbcf5d29e2c6cf9940d7ca44605a6370698f244b4401c1ecf6861a29

Files

2b5d6ddcdbcf5d29e2c6cf9940d7ca44605a6370698f244b4401c1ecf6861a29
.exe windows:6 windows x86 arch:x86

d860d646e8d7195c38d73bdfa206b605

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileAttributesW
CreateFileW
InitializeCriticalSectionEx
SetFileTime
GetDriveTypeW
GetLogicalDriveStringsW
GetVolumeInformationW
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
ResetEvent
Sleep
VirtualQuery
CopyFileW
GetModuleHandleW
CreateProcessW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetSystemInfo
GlobalFlags
GetFileAttributesExW
GetVersionExW
GetFileAttributesW
PeekNamedPipe
GetCurrentProcess
GetCommandLineW
SetLastError
ReadFile
FreeLibrary
GetProcAddress
LoadLibraryW
GetUserDefaultLCID
FindResourceW
LoadResource
LockResource
FreeResource
GetCurrentThreadId
SizeofResource
GlobalReAlloc
MulDiv
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
GlobalSize
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
TerminateProcess
OpenProcess
GetCurrentProcessId
OpenEventW
IsDebuggerPresent
CreateEventW
CloseHandle
ResumeThread
SetThreadPriority
CreateThread
WaitForSingleObject
SetEvent
GetModuleFileNameW
GetTempPathW
GetSystemDirectoryW
GetWindowsDirectoryW
GetTickCount
ExitProcess
MoveFileW
DeleteFileW
CreateDirectoryW
MultiByteToWideChar
TryEnterCriticalSection
InitializeCriticalSection
WideCharToMultiByte
FindFirstFileW
FindNextFileW
FindClose
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
WriteConsoleW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetTimeZoneInformation
EnumSystemLocalesW
IsValidLocale
GetConsoleCP
ReadConsoleW
GetConsoleMode
SetStdHandle
VirtualAlloc
HeapQueryInformation
SetFilePointerEx
GetFileInformationByHandle
FreeLibraryAndExitThread
ExitThread
GetModuleHandleExW
GetCommandLineA
RtlUnwind
GetCPInfo
GetStringTypeW
LCMapStringW
SwitchToThread
RaiseException
HeapReAlloc
GetLastError
HeapSize
LeaveCriticalSection
OutputDebugStringW
GetStartupInfoW
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetTempFileNameW
SetErrorMode
GetFileTime
SystemTimeToTzSpecificLocalTime
GetProfileIntW
SearchPathW
FindResourceExW
lstrcmpiW
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetFullPathNameW
FlushFileBuffers
GetFileSize
VerifyVersionInfoW
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
LocalReAlloc
LocalAlloc
GlobalHandle
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GlobalGetAtomNameW
lstrcpyW
GetThreadLocale
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
CompareStringA
lstrcmpA
GetCurrentThread
LocalFree
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
EncodePointer
OutputDebugStringA
GetFileSizeEx
CreateFileA
VerifyVersionInfoA
VerSetConditionMask
FormatMessageW
WaitForMultipleObjects
GetFileType
GetStdHandle
GetEnvironmentVariableA
WaitForSingleObjectEx
MoveFileExA
LoadLibraryA
GetModuleHandleA
GetSystemDirectoryA
QueryPerformanceFrequency
SleepEx
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
HeapFree

user32

GetParent
GetDesktopWindow
LoadCursorW
LoadIconW
SetPropW
RegisterClassW
GetClassInfoW
GetActiveWindow
LoadStringW
RemovePropW
CreateWindowExW
GetPropW
DestroyWindow
PostMessageW
DefWindowProcW
GetWindowLongW
GetWindowRect
GetDC
GetSystemMetrics
GetWindowDC
GetClientRect
ReleaseDC
LoadImageW
GetWindowThreadProcessId
MessageBoxTimeoutW
SetTimer
KillTimer
SetDlgItemTextW
FindWindowW
GetWindowTextW
GetWindowTextLengthW
GetAncestor
SetWindowPos
EnumWindows
GetClassNameW
AdjustWindowRectEx
ShowWindow
GetWindow
SetCursor
GetKeyState
CopyImage
SetForegroundWindow
SetClipboardData
MoveWindow
RegisterWindowMessageW
SetFocus
PeekMessageW
GetMessagePos
GetMessageTime
GetClassInfoExW
IsMenu
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetDlgItem
GetMenuItemID
GetForegroundWindow
BeginPaint
EndPaint
ValidateRect
ScrollWindow
ShowScrollBar
MapWindowPoints
EqualRect
GetClassLongW
GetLastActivePopup
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
SetScrollInfo
GetScrollInfo
GetMenuStringW
GetMenuState
RemoveMenu
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW
CheckDlgButton
SetWindowTextW
IsDialogMessageW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadMenuW
GetKeyNameTextW
MapVirtualKeyW
SystemParametersInfoW
RegisterClipboardFormatW
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
GetMessageW
TranslateMessage
ShowOwnedPopups
CharNextW
CreateDialogIndirectParamW
EndDialog
DrawFocusRect
NotifyWinEvent
SendDlgItemMessageA
SetRectEmpty
GetMenuItemInfoW
InflateRect
MonitorFromPoint
GetSysColorBrush
RealChildWindowFromPoint
GetAsyncKeyState
BringWindowToTop
LoadAcceleratorsW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
SetLayeredWindowAttributes
EnumDisplayMonitors
DrawStateW
TrackMouseEvent
CharUpperW
PostThreadMessageW
WaitMessage
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
CopyAcceleratorTableW
EnumChildWindows
LockWindowUpdate
SetClassLongW
InvalidateRgn
GetNextDlgGroupItem
DrawEdge
DrawFrameControl
DrawIconEx
UnionRect
GetIconInfo
SetCursorPos
CharUpperBuffW
UpdateLayeredWindow
EnableScrollBar
GetMenuDefaultItem
SetMenuDefaultItem
CopyIcon
FrameRect
IsClipboardFormatAvailable
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsCharLowerW
MapVirtualKeyExW
SubtractRect
GetUpdateRect
HideCaret
InvertRect
GetDoubleClickTime
DestroyCursor
GetComboBoxInfo
GetWindowRgn
EmptyClipboard
IsWindow
MessageBoxW
GetFocus
InvalidateRect
EnableWindow
SendMessageW
UnregisterClassW
DispatchMessageW
CloseClipboard
DestroyIcon
IsZoomed
SetRect
GetSystemMenu
CallWindowProcW
IsWindowVisible
SetWindowRgn
FillRect
ScreenToClient
MessageBeep
WindowFromPoint
GetScrollPos
DrawIcon
OffsetRect
GetCapture
RedrawWindow
GetScrollRange
CopyRect
GetDlgCtrlID
ClientToScreen
IsChild
GetTopWindow
GetSysColor
IsWindowEnabled
SetMenu
WinHelpW
LoadBitmapW
IsRectEmpty
IntersectRect
SetParent
SetCapture
SetScrollRange
SetWindowLongW
SetScrollPos
PtInRect
UpdateWindow
ReleaseCapture
IsIconic
GetNextDlgTabItem
wsprintfW
ModifyMenuW
GetMenu
GetMenuItemCount
DeleteMenu
CreatePopupMenu
TrackPopupMenu
GetSubMenu
DestroyAcceleratorTable
CreateAcceleratorTableW
DestroyMenu
TranslateAcceleratorW
InsertMenuW
CheckMenuItem
AppendMenuW
EnableMenuItem
CreateMenu
GetCursorPos
MonitorFromWindow
SetActiveWindow
OpenClipboard
GetMonitorInfoW

gdi32

RoundRect
GetTextExtentPoint32W
CreateFontIndirectW
BitBlt
CreateCompatibleBitmap
SelectObject
CreateDIBSection
SetDIBColorTable
CreateCompatibleDC
GdiAlphaBlend
StretchBlt
RealizePalette
GetStockObject
GetDIBits
GetDeviceCaps
GetSystemPaletteEntries
SelectPalette
CreatePalette
SetStretchBltMode
DeleteObject
DeleteDC
GetObjectType
GetViewportExtEx
IntersectClipRect
LineTo
CreateEllipticRgn
PtVisible
RectVisible
CreateHatchBrush
SaveDC
SelectClipRgn
ExtSelectClipRgn
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
TextOutW
SetTextAlign
CreateSolidBrush
Ellipse
Rectangle
CreatePen
GetTextMetricsW
CreateRoundRectRgn
PatBlt
GetViewportOrgEx
CombineRgn
CreateBitmap
CreateRectRgn
GetPixel
CreatePatternBrush
GetWindowOrgEx
GetClipBox
ExcludeClipRect
Escape
CreateDCW
CopyMetaFileW
SetTextColor
SetBkColor
SetPixel
GetWindowExtEx
MoveToEx
RestoreDC
GetObjectW
SetPixelV
GetTextFaceW
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
SetPaletteEntries
ExtFloodFill
LPtoDP
GetPaletteEntries
GetNearestPaletteIndex
EnumFontFamiliesExW
Polyline
Polygon
CreatePolygonRgn
OffsetRgn
GetRgnBox
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
DPtoLP
SetRectRgn
GetMapMode
GetTextColor
GetBkColor
CreateRectRgnIndirect
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutW

advapi32

CryptAcquireContextA
CryptGetHashParam
CryptGenRandom
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptDestroyKey
CryptImportKey
CryptEncrypt
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyW
RegEnumKeyExW
RegEnumValueW
CryptReleaseContext
RegQueryValueExW
RegCloseKey
RegQueryValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW

shell32

SHGetDesktopFolder
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
SHAppBarMessage
SHGetFileInfoW
DragFinish
SHGetSpecialFolderPathW
SHCreateDirectoryExW
Shell_NotifyIconW
ShellExecuteW
DragQueryFileW

ole32

CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
OleGetClipboard
DoDragDrop
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoGetClassObject
CoDisconnectObject
CoInitialize
CoCreateGuid
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
ReleaseStgMedium
OleDuplicateData
CreateStreamOnHGlobal
CoUninitialize
CoTaskMemFree
CoInitializeEx
CLSIDFromString
CoTaskMemAlloc
IsAccelerator
CLSIDFromProgID
CoCreateInstance

oleaut32

VariantInit
SystemTimeToVariantTime
SysFreeString
LoadTypeLi
OleCreateFontIndirect
VariantTimeToSystemTime
VariantClear
VariantChangeType
VarBstrFromDate
VariantCopy
SafeArrayDestroy
SysStringLen
SysAllocStringLen
SysAllocString

comctl32

ImageList_Create
ImageList_AddMasked
InitCommonControlsEx
ImageList_Destroy

gdiplus

GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdiplusShutdown
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdiplusStartup
GdipGetImageHeight
GdipGetImagePaletteSize
GdipCloneImage
GdipBitmapUnlockBits
GdipCreateBitmapFromStream
GdipAlloc
GdipDrawImageRectI
GdipDisposeImage
GdipGetImageWidth
GdipGetImagePixelFormat
GdipFree
GdipBitmapLockBits
GdipSetInterpolationMode
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipGetImagePalette
GdipSetCompositingMode

shlwapi

PathFindExtensionW
SHCreateStreamOnFileEx
PathFileExistsW
PathCombineW
StrFormatKBSizeW
PathIsUNCW
PathStripToRootW
PathRemoveFileSpecW
PathFindFileNameW

wldap32

ord35
ord32
ord27
ord26
ord79
ord30
ord200
ord301
ord33
ord22
ord41
ord50
ord45
ord60
ord211
ord46
ord143

ws2_32

socket
send
recv
closesocket
accept
WSAIoctl
setsockopt
ntohs
htons
getsockopt
getsockname
getpeername
connect
bind
WSASetLastError
htonl
WSAStartup
inet_pton
WSAGetLastError
listen
ioctlsocket
ntohl
select
getaddrinfo
freeaddrinfo
__WSAFDIsSet
WSACleanup
WSACloseEvent
gethostname
sendto
recvfrom
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent

msimg32

TransparentBlt
AlphaBlend

uxtheme

DrawThemeBackground
GetThemePartSize
IsAppThemed
GetWindowTheme
DrawThemeText
DrawThemeParentBackground
GetThemeColor
GetCurrentThemeName
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
OpenThemeData
CloseThemeData

oledlg

OleUIBusyW

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

crypt32

CertOpenStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateContext
CryptStringToBinaryA
PFXImportCertStore
CryptDecodeObjectEx
CertAddCertificateContextToStore
CertFindExtension
CertGetNameStringA
CryptQueryObject
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChain
CertCloseStore

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 507KB - Virtual size: 506KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 187KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d860d646e8d7195c38d73bdfa206b605

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

gdiplus

shlwapi

wldap32

ws2_32

msimg32

uxtheme

oledlg

oleacc

imm32

winmm

winspool.drv

crypt32

Sections

.text Size: 2.2MB - Virtual size: 2.2MB

.rdata Size: 507KB - Virtual size: 506KB

.data Size: 31KB - Virtual size: 51KB

.rsrc Size: 3.1MB - Virtual size: 3.1MB

.reloc Size: 187KB - Virtual size: 187KB

.text
Size: 2.2MB - Virtual size: 2.2MB

.rdata
Size: 507KB - Virtual size: 506KB

.data
Size: 31KB - Virtual size: 51KB

.rsrc
Size: 3.1MB - Virtual size: 3.1MB

.reloc
Size: 187KB - Virtual size: 187KB