0d3bcec902ee4d5adca07588bc2bc8b5

Sharing

Copy URL Twitter E-mail

General

Target

0d3bcec902ee4d5adca07588bc2bc8b5
Size

996KB
MD5

0d3bcec902ee4d5adca07588bc2bc8b5
SHA1

471f00ae49cc795f841fa4bed3252c26889053eb
SHA256

daae2f28040b9a8efeaf53cec0f9aa7caca808b2c66443bd222d20dba802edfb
SHA512

9945e59b964c0d763efdcdb2e366259aa02489d6f9324356786b3dd14b0804c9160b61b1ea2e49871f54f6a016738619039873db47f719623de78cd1533324d6
SSDEEP

12288:Ejasqe4HWQ828Mr6ghw1zfBg15UC9aHPZ:EwWQ82Lx05G5UjPZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d3bcec902ee4d5adca07588bc2bc8b5

Files

0d3bcec902ee4d5adca07588bc2bc8b5
.exe windows:4 windows x86 arch:x86

a8a70698c5da570e46449acc5d3db74b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

wininet

HttpOpenRequestA
InternetQueryDataAvailable
HttpSendRequestA
InternetOpenA
InternetReadFile
InternetConnectA
InternetCloseHandle

kernel32

GetWindowsDirectoryA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
HeapAlloc
HeapFree
RtlUnwind
GetTickCount
SizeofResource
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
SetErrorMode
GetFileTime
GetFileSize
GetFileAttributesA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalFree
CreateEventA
SuspendThread
SetThreadPriority
SetEvent
GlobalAlloc
lstrcmpA
GetCurrentThread
GlobalLock
GlobalUnlock
MulDiv
FreeLibrary
FindResourceA
LoadResource
LockResource
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
SetLastError
lstrcmpiA
GetThreadLocale
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
FindClose
LoadLibraryA
GetProcAddress
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
FormatMessageA
LocalFree
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
GetStartupInfoA
GetCommandLineA
ExitProcess
GetACP
TerminateProcess
CreateThread
ExitThread
HeapSize
HeapReAlloc
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStringTypeA
GetStringTypeW
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
SetStdHandle
QueryPerformanceFrequency
QueryPerformanceCounter
GetModuleFileNameA
CloseHandle
WaitForSingleObject
CreateProcessA
GetTempPathA
CreateDirectoryA
GetUserDefaultLangID
WideCharToMultiByte
GetSystemDirectoryA
GetVersion
RaiseException
GetVersionExA
GetSystemDefaultLangID
GetCurrentDirectoryA
DeleteFileA
FindFirstFileA
Sleep
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProfileStringA
lstrcpyA
ReleaseMutex
GetLastError
CreateMutexA
WinExec
ResumeThread
lstrlenA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

winspool.drv

ClosePrinter
DocumentPropertiesA
ord201
OpenPrinterA
GetPrinterA
EnumPrintersA

user32

CharUpperA
IntersectRect
wsprintfA
DrawTextA
GetWindowDC
ReleaseDC
GetWindowPlacement
SystemParametersInfoA
OffsetRect
RegisterWindowMessageA
SetWindowPos
GetClassInfoA
WinHelpA
GetCapture
GetParent
IsChild
MessageBoxA
GetTopWindow
SetWindowLongA
GetWindowLongA
GetWindow
GetLastActivePopup
GetMessagePos
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
UnhookWindowsHookEx
SetPropA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
CreateWindowExA
DestroyWindow
DefWindowProcA
GetKeyState
GetDlgCtrlID
GetWindowTextA
GetWindowTextLengthA
GetDlgItem
PostThreadMessageA
RegisterClipboardFormatA
CopyRect
SetWindowRgn
GetSysColorBrush
SetRect
SetForegroundWindow
GetSystemMenu
AppendMenuA
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
LoadIconA
InvalidateRect
LoadBitmapA
GetCursorPos
GetWindowRect
PtInRect
SendMessageA
LoadCursorA
SetCursor
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
IsWindowUnicode
DefDlgProcA
DrawFocusRect
ExcludeUpdateRgn
ShowCaret
HideCaret
UnregisterClassA
WaitForInputIdle
GetSysColor
EnableWindow
RedrawWindow
SetTimer
KillTimer
UpdateWindow
GetForegroundWindow
MessageBeep
GetNextDlgGroupItem
CopyAcceleratorTableA
CharNextA
GetDesktopWindow
GetClassNameA
InflateRect
DestroyMenu
LoadStringA
MapDialogRect
SetWindowContextHelpId
EndDialog
CreateDialogIndirectParamA
GetMessageA
TranslateMessage
GetActiveWindow
ValidateRect
PostQuitMessage
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
GrayStringA
TabbedTextOutA
EndPaint
BeginPaint
GetDC
ClientToScreen
PostMessageA
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetActiveWindow
IsWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
IsWindowVisible
GetMenuItemID

gdi32

GetTextExtentPointA
LPtoDP
GetBkColor
GetTextColor
DPtoLP
GetMapMode
PatBlt
CreateBitmap
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateDIBitmap
GetWindowExtEx
GetViewportExtEx
GetDeviceCaps
IntersectClipRect
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
RestoreDC
SaveDC
DeleteDC
SetBkColor
SetTextColor
GetClipBox
GetDIBits
CreateRectRgn
CombineRgn
StretchBlt
CreateCompatibleDC
BitBlt
SelectObject
DeleteObject
GetStockObject
GetObjectA
CreateFontIndirectA
CreateSolidBrush

comdlg32

GetFileTitleA

advapi32

RegCreateKeyExA
RegFlushKey
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegEnumKeyExA
RegOpenKeyExA

shell32

Shell_NotifyIconA
ShellExecuteA

comctl32

ImageList_AddMasked
_TrackMouseEvent
ord17
ImageList_Destroy
ImageList_Create

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoInitialize
CoCreateInstance
CoUninitialize
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

SysAllocStringByteLen
SysAllocString
VariantChangeType
VariantCopy
VariantTimeToSystemTime
SysAllocStringLen
SysFreeString
VariantInit
VariantClear
SysStringLen

urlmon

URLDownloadToFileA

Sections

.text
Size: 212KB - Virtual size: 209KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 712KB - Virtual size: 708KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a8a70698c5da570e46449acc5d3db74b

Headers

File Characteristics

Imports

iphlpapi

wininet

kernel32

version

winspool.drv

user32

gdi32

comdlg32

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

urlmon

Sections

.text Size: 212KB - Virtual size: 209KB

.rdata Size: 52KB - Virtual size: 48KB

.data Size: 16KB - Virtual size: 31KB

.rsrc Size: 712KB - Virtual size: 708KB

.text
Size: 212KB - Virtual size: 209KB

.rdata
Size: 52KB - Virtual size: 48KB

.data
Size: 16KB - Virtual size: 31KB

.rsrc
Size: 712KB - Virtual size: 708KB