0ddf3aeb0c50ff7d78f7f20715193227

Sharing

Copy URL Twitter E-mail

General

Target

0ddf3aeb0c50ff7d78f7f20715193227
Size

1.2MB
MD5

0ddf3aeb0c50ff7d78f7f20715193227
SHA1

8822180d1563fe92b5ce11770babb3fb1b39126f
SHA256

3abac7c950cca1e3d74a8bcda3eea97d8207c305a7335a9bcfa0333c4c9d03fc
SHA512

a2341fe69bfe4cb1dd4674eeb84548f9dfe85b262480c5d1c6bd11d6588b94586e240cc6de634592030e31580a5bb82188cfbd644116087663df1afe8cce025e
SSDEEP

24576:612c6JNjWzv2zsgYBJs1+b/PNOYsnC78f76+CyMAe0eQiUMB80eQiUMBO1:6Ac6JNqzvxgwsMMYsCmm+xM/yiUMB8yF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ddf3aeb0c50ff7d78f7f20715193227

Files

0ddf3aeb0c50ff7d78f7f20715193227
.exe windows:4 windows x86 arch:x86

6acf2741f58e76c6edcbe39ab6befce0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToSystemTime
GetUserDefaultLangID
FileTimeToLocalFileTime
GetComputerNameA
GetDiskFreeSpaceExW
GlobalMemoryStatusEx
DeviceIoControl
CreateFileA
LoadLibraryA
GetCurrentProcessId
ExpandEnvironmentStringsW
GetTempPathW
CreateProcessW
SetUnhandledExceptionFilter
MoveFileW
CreateThread
SetEvent
GetLogicalDriveStringsW
QueryDosDeviceW
lstrcpyW
lstrcatW
FlushFileBuffers
GetCurrentDirectoryA
GetFullPathNameA
FindFirstFileA
GetDriveTypeA
GetVolumeInformationW
ExpandEnvironmentStringsA
FormatMessageA
GetSystemDirectoryA
SleepEx
SetEnvironmentVariableA
CompareStringW
CompareStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
GetProcAddress
GetSystemInfo
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
QueryPerformanceCounter
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
GetStartupInfoA
GetFileType
SetHandleCount
ExitProcess
GetModuleFileNameA
GetStdHandle
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetCPInfo
LCMapStringW
LCMapStringA
RtlUnwind
GetStartupInfoW
VirtualQuery
GetModuleHandleA
GetSystemTimeAsFileTime
ExitThread
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
VirtualAlloc
VirtualFree
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedCompareExchange
GetLocalTime
LocalFree
LoadLibraryW
GetLastError
RaiseException
LocalAlloc
OpenProcess
GetSystemDirectoryW
RemoveDirectoryW
FindClose
FindNextFileW
FindFirstFileW
GetTickCount
GetFileAttributesW
SetEndOfFile
WriteFile
CreateDirectoryW
SetFilePointer
CreateToolhelp32Snapshot
GetVersionExW
WaitForSingleObject
Sleep
SetLastError
GetCurrentProcess
MoveFileExW
DeleteFileW
Process32NextW
Process32FirstW
GetPrivateProfileStringW
MultiByteToWideChar
GetModuleHandleW
InterlockedDecrement
CloseHandle
MapViewOfFileEx
FindResourceExW
CreateFileMappingW
InterlockedIncrement
FreeLibrary
GetStringTypeW
LockResource
GetPrivateProfileIntW
GlobalAlloc
GlobalLock
GetWindowsDirectoryW
GetFileSize
LeaveCriticalSection
GetModuleFileNameW
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
SizeofResource
GlobalUnlock
GlobalFree
lstrcmpiW
WideCharToMultiByte
GetCurrentThreadId
lstrlenW
ReadFile
FreeResource
CreateFileW
LoadLibraryExW
InterlockedExchange
FindResourceW
lstrlenA
LoadResource
UnmapViewOfFile

user32

EnumDisplaySettingsW
EnumDisplayDevicesW
GetSystemMetrics
UnregisterClassA
GetDesktopWindow
DestroyWindow
RegisterClassExW
RegisterWindowMessageW
GetDC
ReleaseDC
FindWindowW
DefWindowProcW
InflateRect
CreateWindowExW
SystemParametersInfoW
CopyRect
GetDlgItem
SetWindowPos
SendMessageW
SetWindowLongW
LoadCursorW
GetWindow
GetWindowRect
InvalidateRect
GetWindowLongW
GetClientRect
MapWindowPoints
IsWindow
CallWindowProcW
IsWindowVisible
UpdateLayeredWindow
BeginPaint
EndPaint
EnumDisplayDevicesA
GetFocus
PtInRect
IsChild
GetNextDlgTabItem
IsDialogMessageW
SetCursor
SetRect
ScreenToClient
MonitorFromWindow
GetMonitorInfoW
SetCapture
DrawIconEx
OffsetRect
ReleaseCapture
GetCursorPos
GetDlgCtrlID
SetRectEmpty
PeekMessageW
EqualRect
GetMessageW
TranslateMessage
DispatchMessageW
LoadIconW
SetFocus
DrawTextW
DestroyIcon
CharNextW
LoadImageW
LoadBitmapW
GetParent
ShowWindow

gdi32

RoundRect
CombineRgn
CreateRectRgnIndirect
GetClipRgn
MoveToEx
LineTo
TextOutW
GetTextExtentPoint32W
GetTextColor
SetBkMode
DeleteDC
GetStockObject
Rectangle
GetObjectW
SelectClipRgn
GetCurrentObject
CreateCompatibleBitmap
RestoreDC
CreateBitmap
CreateFontIndirectW
StretchBlt
CreatePen
SetTextColor
DeleteObject
SelectObject
SetStretchBltMode
CreateRectRgn
GetDeviceCaps
SaveDC
CreateDIBSection
ExtTextOutW
CreateCompatibleDC
SetBkColor
RectInRegion
CreateRoundRectRgn
BitBlt

advapi32

RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyW
RegOpenKeyExW
RegCreateKeyExW
RegQueryInfoKeyW
RegEnumKeyExW
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW

shell32

SHGetMalloc
ShellExecuteW
SHGetFolderPathW
SHGetSpecialFolderPathW
SHGetSpecialFolderLocation
SHGetPathFromIDListW

ole32

CoUninitialize
CoSetProxyBlanket
CoInitializeEx
CoTaskMemAlloc
CoInitializeSecurity
CreateStreamOnHGlobal
CoTaskMemFree
CoTaskMemRealloc
CoCreateInstance
CoCreateGuid

oleaut32

VarUI4FromStr
SysAllocString
SysFreeString
SysStringLen
VariantClear
VariantInit
SafeArrayUnlock
SafeArrayLock

shlwapi

PathFileExistsW
StrToIntW
PathAddBackslashW
PathAppendW
StrToIntA
PathFindFileNameW
PathRemoveFileSpecW

comctl32

InitCommonControlsEx
_TrackMouseEvent

msimg32

AlphaBlend

gdiplus

GdipGetImagePixelFormat
GdipCreateBitmapFromScan0
GdipDeleteFont
GdipClosePathFigure
GdipMeasureString
GdipDeletePath
GdipCreatePath
GdipCreateSolidFill
GdipDrawLinesI
GdipCreateStringFormat
GdipSetSmoothingMode
GdipFillRectangleI
GdipDeleteStringFormat
GdipSetStringFormatFlags
GdipSetStringFormatAlign
GdipDeletePen
GdipSetStringFormatLineAlign
GdipCreatePen1
GdipSetStringFormatTrimming
GdipTranslateWorldTransform
GdipAddPathPieI
GdipSetTextRenderingHint
GdipRotateWorldTransform
GdipDrawString
GdipResetWorldTransform
GdipAddPathRectangleI
GdipCloneBrush
GdipSetClipPath
GdipDeleteBrush
GdipCreateFont
GdipGetImageGraphicsContext
GdipGraphicsClear
GdipCloneImage
GdipDrawImageRectI
GdipCreateFontFromLogfontW
GdipDeleteGraphics
GdipNewPrivateFontCollection
GdipLoadImageFromFile
GdipCloneBitmapArea
GdipCreateFromHDC
GdipDeletePrivateFontCollection
GdipDisposeImage
GdiplusStartup
GdipPrivateAddFontFile
GdipDrawImageRectRectI
GdipGetFontCollectionFamilyCount
GdipCreateImageAttributes
GdipAlloc
GdipDisposeImageAttributes
GdiplusShutdown
GdipImageRotateFlip
GdipSetImageAttributesColorMatrix
GdipGetFontCollectionFamilyList
GdipCreateBitmapFromStream
GdipLoadImageFromStream
GdipCloneFontFamily
GdipDrawImageRectRect
GdipCreateHBITMAPFromBitmap
GdipFree
GdipDeleteFontFamily
GdipGetImageWidth
GdipDrawImagePointsRectI
GdipGetImageHeight
GdipSetInterpolationMode

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

iphlpapi

GetAdaptersInfo

psapi

GetProcessImageFileNameW
GetModuleFileNameExW

Sections

.text
Size: 544KB - Virtual size: 540KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 116KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 528KB - Virtual size: 525KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6acf2741f58e76c6edcbe39ab6befce0

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

msimg32

gdiplus

version

iphlpapi

psapi

Sections

.text Size: 544KB - Virtual size: 540KB

.rdata Size: 116KB - Virtual size: 113KB

.data Size: 16KB - Virtual size: 29KB

.rsrc Size: 528KB - Virtual size: 525KB

.text
Size: 544KB - Virtual size: 540KB

.rdata
Size: 116KB - Virtual size: 113KB

.data
Size: 16KB - Virtual size: 29KB

.rsrc
Size: 528KB - Virtual size: 525KB