00c319db625f5e61a398625848c193bc

Sharing

Copy URL Twitter E-mail

General

Target

00c319db625f5e61a398625848c193bc
Size

1.6MB
MD5

00c319db625f5e61a398625848c193bc
SHA1

49705f9d60322f0277e54209f719bfec3f1f453e
SHA256

12b823e783c126b708d5a306386ccbd4d911e0addea19ebe7adb2a0f50592501
SHA512

bdad746711aef76c64007ce3dcdfa8d936e55bb37db7ac73acc3340dd5ba7203d0c77be764c718b32096d1a9d6ad18dcfa7162b7d6c4a48bb79eccf5a0301c4e
SSDEEP

24576:gCzKk/QLVD8IDx6UUdqi6WI98bLuvDMILbGUQrq29e6D1gAR2ptIoOFdT:gCzKk4D8qi6WYCbvDqw2pt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00c319db625f5e61a398625848c193bc

Files

00c319db625f5e61a398625848c193bc
.exe windows:1 windows x86 arch:x86

113641c9fe012dbc6ff89d38c8ac75ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
MoveFileA
GetModuleHandleA
GetStartupInfoA
GetEnvironmentStrings
GetCommandLineA
GetVersion
GetTimeZoneInformation
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
UnhandledExceptionFilter
ExitProcess
GetStdHandle
GetFileType
VirtualFree
VirtualAlloc
WriteFile
GlobalLock
GlobalFlags
GlobalFree
FreeLibrary
GetProcAddress
lstrcpyA
lstrcmpiA
RaiseException
SetStdHandle
ReadFile
FlushFileBuffers
SetEnvironmentVariableA
CloseHandle
GlobalAlloc
_lclose
GlobalSize
GlobalReAlloc
lstrcatA
GetTickCount
_lread
_lwrite
_llseek
GetProfileStringA
SetErrorMode
GlobalGetAtomNameA
GlobalAddAtomA
GlobalDeleteAtom
GetDriveTypeA
GetPrivateProfileStringA
GetModuleFileNameA
GetLastError
GetTempFileNameA
GetTempPathA
GetCurrentDirectoryA
GetWindowsDirectoryA
SetHandleCount
GetProfileIntA
LoadLibraryA
GetVersionExA
GetAtomNameA
AddAtomA
DeleteAtom
IsDBCSLeadByte
lstrcmpA
LoadLibraryExA
SetEndOfFile
SetFilePointer
lstrlenA
CreateFileA
DeleteFileA
GlobalHandle
GetPrivateProfileIntA
WritePrivateProfileStringA
MultiByteToWideChar
WideCharToMultiByte
GlobalUnlock

user32

LoadAcceleratorsA
RegisterClipboardFormatA
CreateDialogParamA
RemoveMenu
DestroyMenu
CheckDlgButton
SetWindowTextA
GetMenuCheckMarkDimensions
IsDialogMessageA
CharNextA
SetScrollRange
SetScrollInfo
EnableWindow
GetScrollRange
GetUpdateRect
CallNextHookEx
KillTimer
SetTimer
GetCaretBlinkTime
IsWindowEnabled
GetClipboardOwner
CharPrevA
DrawFocusRect
UnregisterClassA
GetWindowRect
MoveWindow
ShowWindow
GetScrollInfo
LoadMenuA
UnionRect
IsCharUpperA
GetDoubleClickTime
GetKeyState
GetClientRect
InvertRect
InflateRect
PtInRect
IntersectRect
UpdateWindow
IsWindowVisible
OffsetRect
GetWindow
CreateWindowExA
DestroyWindow
GetClipboardData
FillRect
GetParent
GetWindowTextA
SendMessageA
CopyRect
IsClipboardFormatAvailable
EmptyClipboard
OpenClipboard
SetClipboardData
CloseClipboard
GetDC
ReleaseDC
GetWindowLongA
InvalidateRect
SetRect
GetMenuStringA
GetMenuItemID
LoadIconA
LoadImageA
RegisterClassExA
RegisterClassA
ValidateRect
EqualRect
GetActiveWindow
PostMessageA
AppendMenuA
wsprintfA
GetWindowPlacement
GetClassNameA
FrameRect
IsDlgButtonChecked
SendDlgItemMessageA
CheckRadioButton
SetDlgItemTextA
LoadBitmapA
GetSysColor
GetDlgItemTextA
SetActiveWindow
DialogBoxParamA
EndDialog
GetDlgItemInt
SetDlgItemInt
GetDlgItem
ScrollWindow
GetMessageTime
GetScrollPos
SetCapture
SetWindowLongA
ModifyMenuA
CheckMenuItem
GetMenuState
GetMenu
GetMenuItemCount
DrawMenuBar
SetMessageQueue
BringWindowToTop
GetMessageA
TranslateMDISysAccel
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
BeginPaint
EndPaint
EnableMenuItem
DefMDIChildProcA
GetDlgCtrlID
PostQuitMessage
IsIconic
SetWindowPos
SetForegroundWindow
DefFrameProcA
DefWindowProcA
ClientToScreen
GetSubMenu
TrackPopupMenu
PeekMessageA
WinHelpA
LoadStringA
SetWindowsHookA
UnhookWindowsHook
SetCursor
MessageBeep
SetScrollPos
OemToCharA
GetFocus
SetFocus
ReleaseCapture
GetCursorPos
ScreenToClient
MessageBoxA
CharToOemA
GetMessagePos
LoadCursorA
DeleteMenu
GetSystemMetrics

gdi32

Polyline
SetTextCharacterExtra
GetTextExtentPoint32A
ExtCreatePen
GetMapMode
SetMapMode
CreateICA
Escape
EnumFontFamiliesExA
EnumFontsA
CreateFontIndirectA
ExtTextOutA
CreateRectRgn
CreateMetaFileA
CloseMetaFile
CopyMetaFileA
GetMetaFileBitsEx
CreateFontA
GetTextMetricsA
CreatePatternBrush
CreateCompatibleDC
TextOutA
OffsetRgn
SetStretchBltMode
GetDeviceCaps
GetPaletteEntries
StretchDIBits
SetMetaFileBitsEx
GetViewportOrgEx
SetTextAlign
SetViewportOrgEx
SetWindowExtEx
SetViewportExtEx
PlayMetaFile
DeleteMetaFile
CreatePalette
CreateCompatibleBitmap
SetDIBits
GetDIBits
SelectClipRgn
SetPolyFillMode
GetROP2
SetROP2
GetTextExtentPointA
SelectPalette
RealizePalette
SetWindowOrgEx
Rectangle
CreatePolygonRgn
InvertRgn
CreateSolidBrush
RoundRect
CreateRoundRectRgn
PaintRgn
SetBkMode
ExcludeClipRect
GetNearestColor
LPtoDP
DPtoLP
Polygon
Arc
IntersectClipRect
SaveDC
SetTextColor
SetBkColor
GetObjectA
CreatePen
SelectObject
MoveToEx
LineTo
PatBlt
BitBlt
RestoreDC
DeleteObject
GetWindowOrgEx
GetStockObject
DeleteDC

comdlg32

GetSaveFileNameA
ChooseFontA
GetOpenFileNameA
CommDlgExtendedError
PrintDlgA

advapi32

RegQueryValueA
RegOpenKeyA
RegCreateKeyA
RegSetValueA
RegDeleteKeyA
RegCloseKey

ole32

OleUninitialize
CreateOleAdviseHolder
CreateDataAdviseHolder
ReleaseStgMedium
OleRegEnumFormatEtc
CreateFileMoniker
CreateItemMoniker
CreateGenericComposite
CoRegisterClassObject
CoGetMalloc
GetRunningObjectTable
CoDisconnectObject
CreateStreamOnHGlobal
OleSaveToStream
WriteClassStm
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleFlushClipboard
OleSetClipboard
CoRevokeClassObject
OleInitialize
OleBuildVersion
WriteClassStg
WriteFmtUserTypeStg

comctl32

ord17

imm32

ImmReleaseContext
ImmGetContext
ImmNotifyIME

Exports

Exports

AboutHandler
BMControlHandler
CHBColumnHandler
CHBHorizHandler
CHFDrawPGLines
CHFFind
CHF_DPPos
CHF_DeSelLine
CHF_DeSelPos
CHF_FindSelPos
CHF_HitLine
CHF_HitPos
CHF_IdlePos
CHF_InvPos
CHF_SelLine
CHF_SelMsgL
CHF_SelMsgPG
CHF_SelMsgPos
CHF_SelPos
CHF_SetSelLine
CHF_SetSelPos
CHF_ToggleLPos
CHF_ToggleSelPos
CHF_TravPos
CIHandler
CheckImpFields
CheckLabelSetups
ColorDlgHandler
ColorMenu_WndProc
CopyClipDlgProc
DP_AnglHandler
DP_ImageHandler
DP_LineDHandler
DP_LineHHandler
DP_LineVHandler
DP_PictHandler
DP_RectHandler
DP_TextHandler
DrawPosition
DrawSample
DrawSelect
Erase_Position
ExamineFonts
FEObj_Handler
FEObj_TENDraw
FEPosHandler
FindDialogHandler
FindLayout
HelpFilter
IACleanup
IALayout
IAbuildTree
IAgetRec
IAinit
IAterm
IAuserSetUp
IOPBuildTree
IOPCleanup
IOPGetRec
IOPInit
IOPLayout
IOPSetUp
IOPTerm
IOP_GetLevel
InfoHandler
InsDateHandler
LevelHandler
MenuHelpFilter
MiscFilter
OEMFInfo
OEMOpenChart
OEMSaveChart
OPACountFn
OPWChart
OPWDocument
OPWEPanel
OPWMain
OPWPalette
OPWStatus
PFPHandler
PNFHandler
POHandler
PPHandler
PSHandler
PZHandler
PasteDlgHandler
PasteListHandler
PrintAbort
PrintCodeAction
ReplNextDlgHandler
ReplaceDlgHandler
SEFontHook
SEIcnBtn
SEOpenHook
SEPPrintHook
SEPSetupHook
SampleHandler
ShDlgHandler
ShowPrintingDlg
SortDlgProc
TENProc
TEN_CaretIdle
TT_TENDraw
Title_Handler
_GetLevel
_PGApplyStyle
_PGAsst
_PGGroup
_PGLayout
_PGPasteFields
_PGPasteLayout
_PGSetArrow
_PGSetBColor
_PGSetBorder
_PGSetBorderColor
_PGSetBorderPat
_PGSetBranchID
_PGSetLine
_PGSetLineColor
_PGSetLineShadow
_PGSetShadow
_PGSetShape
_PGSetSpace
_PGShowBr
_PGShowPic
_PGShowPos
_PGTextAtt

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 108KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

113641c9fe012dbc6ff89d38c8ac75ee

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

ole32

comctl32

imm32

Exports

Exports

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.bss Size: - Virtual size: 12KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 20KB - Virtual size: 19KB

.idata Size: 8KB - Virtual size: 8KB

.edata Size: 3KB - Virtual size: 3KB

.rsrc Size: 108KB - Virtual size: 112KB

.reloc Size: 50KB - Virtual size: 49KB

.tc Size: 244KB - Virtual size: 244KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.bss
Size: - Virtual size: 12KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 20KB - Virtual size: 19KB

.idata
Size: 8KB - Virtual size: 8KB

.edata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 108KB - Virtual size: 112KB

.reloc
Size: 50KB - Virtual size: 49KB

.tc
Size: 244KB - Virtual size: 244KB