0951480b8cbc3be0029db279e4227d3b

Sharing

Copy URL Twitter E-mail

General

Target

0951480b8cbc3be0029db279e4227d3b
Size

4.2MB
MD5

0951480b8cbc3be0029db279e4227d3b
SHA1

635766f3fd2f90fab764efd592f76682562e390d
SHA256

9a0b29d6e054e6c8f39e0667399e0c4e39d6a40e0bad558d197b7b603a0b82fe
SHA512

b7839102ca35ef7cc515eaf46d5e917dec0e3cb0494b6a5356c3b35ad63a1c4ce766b7922670c15e34a3551573520775ce1ef6833c109ce8f4e9ef9ae62a743e
SSDEEP

98304:lTCMFRkvfFvsXv4qv0NvwED6HSwLHUPF4+7gJ:8sRkvfFvsXv4qv0Nvwy6HjLHUP6++

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0951480b8cbc3be0029db279e4227d3b

Files

0951480b8cbc3be0029db279e4227d3b
.exe windows:4 windows x86 arch:x86

1436cf0fe34e3f7d0916ee85b7758c2f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

accept
send
inet_addr
setsockopt
htonl
htons
bind
WSAGetLastError
closesocket
listen
WSAAsyncSelect
recv
connect
recvfrom
ntohl
socket
ioctlsocket
gethostname
gethostbyname
shutdown
WSACleanup
WSAStartup
sendto

ws2_32

WSAAccept
WSARecv
WSASocketA
WSASendTo
WSASend

mumsg

??1CMsg@@QAE@XZ
??0CMsg@@QAE@XZ
?Get@CMsg@@QAEPADH@Z
?LoadWTF@CMsg@@QAEXPAD@Z

comctl32

ord17

dbghelp

SymLoadModule
SymGetOptions
SymSetOptions
SymInitialize
SymFunctionTableAccess
SymGetLineFromAddr
SymGetSymFromAddr
SymGetModuleInfo
StackWalk

kernel32

GetThreadContext
GetCurrentThread
GetCurrentProcess
GetModuleFileNameA
VirtualQueryEx
GetCurrentProcessId
GetCurrentThreadId
GetProcAddress
LoadLibraryA
SetUnhandledExceptionFilter
SetErrorMode
OutputDebugStringA
FindFirstFileA
InterlockedExchange
InterlockedDecrement
InterlockedExchangeAdd
FreeLibrary
WriteFile
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
LocalFree
FileTimeToSystemTime
FileTimeToLocalFileTime
SetLastError
lstrcpynA
lstrcmpA
LocalAlloc
TlsAlloc
GlobalUnlock
GlobalHandle
TlsFree
GlobalLock
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GetVersion
SetEvent
ResumeThread
CreateFileA
SuspendThread
CreateEventA
lstrcpyA
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
lstrcatA
LockResource
LoadResource
FindResourceA
GetProcessVersion
MulDiv
GlobalFlags
GetCPInfo
GetOEMCP
WritePrivateProfileStringA
GetCurrentDirectoryA
DuplicateHandle
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
MoveFileA
DeleteFileA
FindClose
GetVolumeInformationA
GetFullPathNameA
GetStringTypeExA
GetThreadLocale
GetShortPathNameA
GetFileAttributesA
GetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
SetFileAttributesA
RtlUnwind
ExitThread
GetTimeZoneInformation
GetSystemTime
GetStartupInfoA
GetCommandLineA
ExitProcess
GetACP
RaiseException
HeapSize
HeapReAlloc
TerminateProcess
UnhandledExceptionFilter
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
FatalAppExitA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetConsoleCtrlHandler
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
CreateDirectoryA
GlobalAlloc
GlobalFree
GetProcessHeap
HeapAlloc
HeapFree
InitializeCriticalSectionAndSpinCount
GetQueuedCompletionStatus
GetSystemInfo
CreateIoCompletionPort
PostQueuedCompletionStatus
FormatMessageA
TerminateThread
OpenFile
GetFileSize
_lclose
ReadFile
GetLastError
GetPrivateProfileIntA
GetPrivateProfileStringA
GetLocalTime
InterlockedIncrement
Sleep
WaitForSingleObject
CloseHandle
CreateThread
GetTickCount
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
SetThreadPriority

user32

OemToCharA
EnableWindow
GetWindowLongA
IsWindowEnabled
GetLastActivePopup
GetParent
UnhookWindowsHookEx
SetWindowsHookExA
GetCursorPos
PeekMessageA
IsWindowVisible
ValidateRect
CallNextHookEx
GetKeyState
GetActiveWindow
GetNextDlgTabItem
GetFocus
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
GetSystemMetrics
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoA
IntersectRect
OffsetRect
RegisterWindowMessageA
SetWindowPos
GetWindow
SetForegroundWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
RemovePropA
GetPropA
SetPropA
GetClassLongA
GetDlgCtrlID
GetWindowTextA
GetWindowTextLengthA
SetWindowPlacement
TrackPopupMenu
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
IsChild
GetTopWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
SetScrollInfo
GetScrollInfo
ScrollWindow
EndDeferWindowPos
CopyRect
BeginDeferWindowPos
CharToOemA
EqualRect
ScreenToClient
AdjustWindowRectEx
SetFocus
SetActiveWindow
GetSysColor
MapWindowPoints
SendDlgItemMessageA
PostMessageA
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextA
SetDlgItemInt
IsDlgButtonChecked
ScrollWindowEx
IsDialogMessageA
MoveWindow
GetSysColorBrush
GetClassNameA
PtInRect
ClientToScreen
GetDesktopWindow
DestroyMenu
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
ShowOwnedPopups
SetCursor
InsertMenuA
DeleteMenu
GetMenuStringA
CharUpperA
KillTimer
DestroyWindow
PostQuitMessage
CreateWindowExA
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
SetTimer
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
SetWindowTextA
GetClientRect
FillRect
CallWindowProcA
SetWindowLongA
GetDC
ReleaseDC
SetRect
MessageBoxA
IsWindow
CreateDialogParamA
ShowWindow
GetDlgItem
EndDialog
SetDlgItemTextA
SendMessageA
wsprintfA
DialogBoxParamA
DeferWindowPos
DefWindowProcA

gdi32

ExcludeClipRect
Escape
ExtTextOutA
RectVisible
PtVisible
CreateDIBPatternBrushPt
IntersectClipRect
CreateHatchBrush
ExtCreatePen
CreatePen
GetWindowExtEx
GetViewportExtEx
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
ExtSelectClipRgn
SelectClipPath
CreateRectRgn
GetClipRgn
PolyBezierTo
SetColorAdjustment
PolylineTo
CreatePatternBrush
OffsetClipRgn
PolyDraw
SetArcDirection
ArcTo
GetCurrentPositionEx
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
LineTo
MoveToEx
SetTextColor
CreateSolidBrush
CreateFontA
DeleteObject
SelectObject
SetBkMode
GetStockObject
CreateBitmap
GetDCOrgEx
GetClipBox
SetBkColor
GetObjectA
GetDeviceCaps
DeleteDC
StartDocA
SaveDC
RestoreDC
SelectPalette
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
TextOutA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegDeleteKeyA
RegOpenKeyExA
RegCloseKey
RegOpenKeyA
RegCreateKeyExA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA

shell32

DragAcceptFiles
SHGetFileInfoA

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 180KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 168.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 536KB - Virtual size: 534KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1436cf0fe34e3f7d0916ee85b7758c2f

Headers

File Characteristics

Imports

wsock32

ws2_32

mumsg

comctl32

dbghelp

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

Sections

.text Size: 3.4MB - Virtual size: 3.4MB

.rdata Size: 180KB - Virtual size: 178KB

.data Size: 76KB - Virtual size: 168.4MB

.idata Size: 16KB - Virtual size: 12KB

.rsrc Size: 16KB - Virtual size: 14KB

.reloc Size: 536KB - Virtual size: 534KB

.text
Size: 3.4MB - Virtual size: 3.4MB

.rdata
Size: 180KB - Virtual size: 178KB

.data
Size: 76KB - Virtual size: 168.4MB

.idata
Size: 16KB - Virtual size: 12KB

.rsrc
Size: 16KB - Virtual size: 14KB

.reloc
Size: 536KB - Virtual size: 534KB