036f7dc6c23d2ee24e88bbeee7d7b0b3

Sharing

Copy URL Twitter E-mail

General

Target

036f7dc6c23d2ee24e88bbeee7d7b0b3
Size

240KB
MD5

036f7dc6c23d2ee24e88bbeee7d7b0b3
SHA1

236aad7d36751fe7dc6c73f5f710e6327b4675a3
SHA256

e83754db79cf559a2c0d200b4179406af6b9881bd939a99640435545709b43be
SHA512

a9acc781ef30b20cf3cf308f7e6bbd8e41d1cc94f49cf458dd72a992c75ccf7daf5f58997e9ccd9ebfbd2fcbdbf7b3dc797b3aa79811cdbd455d082367ec8d3b
SSDEEP

3072:6dCq148A/r2DDW0EsHTqSYNkQMUGTMpVYafRyFoPFymoK1AxHaS8Z:zPd2W0ZzfYCQMXTa8igRxHa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
036f7dc6c23d2ee24e88bbeee7d7b0b3

Files

036f7dc6c23d2ee24e88bbeee7d7b0b3
.exe windows:4 windows x86 arch:x86

d89de5692a0008f65f57fa8623b5f974

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeZoneInformation
GetCommandLineA
ExitThread
GetStartupInfoA
RaiseException
HeapAlloc
ExitProcess
RtlUnwind
CreateThread
GetFileType
HeapReAlloc
HeapFree
GetACP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
SetStdHandle
SetHandleCount
FileTimeToLocalFileTime
TerminateProcess
HeapSize
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
GetEnvironmentStringsW
DuplicateHandle
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringW
SetEnvironmentVariableA
SetErrorMode
FileTimeToSystemTime
GetFileSize
GetFileTime
GetFileAttributesA
FindFirstFileA
GetFullPathNameA
GetVolumeInformationA
FindClose
LockFile
SetEndOfFile
UnlockFile
WriteFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
ReadFile
CreateFileA
GetStdHandle
GetEnvironmentVariableA
GetThreadLocale
FindResourceA
LoadResource
GetTickCount
ResumeThread
OpenFileMappingA
UnmapViewOfFile
CloseHandle
GetProcAddress
FreeLibrary
LoadLibraryA
GetCurrentThreadId
CreateFileMappingA
MapViewOfFile
Sleep
GetModuleFileNameA
WritePrivateProfileStringA
GetOEMCP
GetProcessVersion
GetCPInfo
GetProfileStringA
TlsSetValue
TlsGetValue
LocalReAlloc
LeaveCriticalSection
EnterCriticalSection
GlobalReAlloc
DeleteCriticalSection
TlsFree
GlobalHandle
LocalAlloc
TlsAlloc
InitializeCriticalSection
GlobalFlags
SizeofResource
GetLastError
lstrcmpA
lstrcpynA
GlobalAlloc
SuspendThread
GetCurrentThread
CreateEventA
WaitForSingleObject
SetThreadPriority
SetEvent
MultiByteToWideChar
FormatMessageA
LocalFree
InterlockedDecrement
WideCharToMultiByte
lstrlenA
SetLastError
InterlockedIncrement
MulDiv
GlobalGetAtomNameA
GetVersion
lstrcatA
GlobalFindAtomA
lstrcmpiA
GlobalAddAtomA
GetModuleHandleA
GlobalDeleteAtom
lstrcpyA
GlobalFree
GlobalLock
GlobalUnlock
IsBadWritePtr
LockResource
LCMapStringA
GetVersionExA
CompareStringA
GetPrivateProfileStringA

user32

CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
CharUpperA
InvalidateRect
RegisterClipboardFormatA
PostThreadMessageA
GetDesktopWindow
GetClassNameA
DestroyMenu
LoadStringA
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
IsDialogMessageA
PostMessageA
MapWindowPoints
GetSysColor
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
CopyRect
IsWindowVisible
GetTopWindow
MessageBoxA
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
UnhookWindowsHookEx
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
SetForegroundWindow
GetWindow
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetSysColorBrush
SendDlgItemMessageA
UpdateWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
IsIconic
GetSystemMetrics
DrawIcon
SetPropA
GetSystemMenu
AppendMenuA
SetTimer
LoadIconA
GetPropA
EnumWindows
LoadBitmapA
RedrawWindow
PtInRect
ReleaseCapture
SetCapture
SetCursor
SetWindowLongA
GetParent
SendMessageA
GetClientRect
InflateRect
LoadCursorA
GetForegroundWindow
GetWindowTextA
GetAsyncKeyState
GetKeyNameTextA
MapVirtualKeyA
GetKeyState
PeekMessageA
EnableWindow
SetWindowTextA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode

gdi32

MoveToEx
DeleteObject
GetViewportExtEx
GetWindowExtEx
GetDeviceCaps
PtVisible
RectVisible
ExtTextOutA
Escape
TextOutA
GetTextColor
DPtoLP
LPtoDP
GetBkColor
PatBlt
CreateDIBitmap
GetTextExtentPointA
IntersectClipRect
ScaleWindowExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetViewportExtEx
SetMapMode
SetBkMode
RestoreDC
SaveDC
GetStockObject
DeleteDC
CreateBitmap
SetTextColor
GetClipBox
SetBkColor
CreateCompatibleDC
GetMapMode
CreateSolidBrush
Rectangle
CreatePen
BitBlt
GetObjectA
SelectObject
LineTo
StretchBlt
GetTextMetricsA
SetWindowExtEx

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegSetValueExA
RegOpenKeyA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA

shell32

ShellExecuteA

comctl32

ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoTaskMemFree
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoTaskMemAlloc

olepro32

ord253

oleaut32

SysStringLen
SysAllocStringByteLen
VariantCopy
SysAllocString
VariantChangeType
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString

Sections

.text
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d89de5692a0008f65f57fa8623b5f974

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 160KB - Virtual size: 159KB

.rdata Size: 40KB - Virtual size: 38KB

.data Size: 24KB - Virtual size: 39KB

.rsrc Size: 12KB - Virtual size: 10KB

.text
Size: 160KB - Virtual size: 159KB

.rdata
Size: 40KB - Virtual size: 38KB

.data
Size: 24KB - Virtual size: 39KB

.rsrc
Size: 12KB - Virtual size: 10KB