11b2bf216687a49ac0fdbdfde31adc7e

Sharing

Copy URL Twitter E-mail

General

Target

11b2bf216687a49ac0fdbdfde31adc7e
Size

248KB
MD5

11b2bf216687a49ac0fdbdfde31adc7e
SHA1

44b107df1f911bfb94a2039b29fe084713cbd8bf
SHA256

e98765ec0b90332f5d32549b8b4bdbe0d7579d032e19b56ecd6ada431c46e281
SHA512

6271141b02c2f4a5d77fe1a2f8794c364df7cda00a5ac83b46ab6a013d213bcd40db188a5099445ed27e7a09739c91f45fd8f8b920931e79bc8c33e99a3e8b3b
SSDEEP

6144:tpRqvCaXtLkLHVlpQI+pKQVZDERnsVVoA5mQ3h3+vZtkMMnMMMMMaw9KvaWS2vqQ:tCDdwLHWpK6pansVmu3h3+/kMMnMMMML

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11b2bf216687a49ac0fdbdfde31adc7e

Files

11b2bf216687a49ac0fdbdfde31adc7e
.exe windows:4 windows x86 arch:x86

c3c910b26528e0c8b99c0eba9a39c899

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
RegCreateKeyW
RegSetValueExW
RegCloseKey
RegSetValueExA
OpenProcessToken
RegQueryInfoKeyA
RegDeleteValueA
RegDeleteKeyW
ReportEventA
RegisterEventSourceA
SetSecurityDescriptorDacl
RegSetValueA
DeregisterEventSource
RegOpenKeyExA
LookupPrivilegeValueA
RegOpenKeyW
RegEnumKeyW
RegOpenKeyA
RegDeleteValueW
RegEnumValueW
RegCreateKeyA
RegQueryValueExW
RegDeleteKeyA
RegEnumValueA
InitializeSecurityDescriptor
AdjustTokenPrivileges
RegEnumKeyA
RegQueryValueA

kernel32

SetErrorMode
FileTimeToLocalFileTime
_llseek
SystemTimeToFileTime
GetModuleFileNameW
WriteFile
GetSystemDefaultLCID
SetEnvironmentVariableA
GetDateFormatA
HeapAlloc
GetDriveTypeA
HeapDestroy
GetSystemDirectoryA
GlobalDeleteAtom
FreeEnvironmentStringsW
GetVolumeInformationA
GetUserDefaultLCID
SetEndOfFile
lstrcmpiW
GetACP
MoveFileA
CreateFileA
EnterCriticalSection
InterlockedIncrement
DuplicateHandle
ReadFile
CreateProcessA
_lwrite
WideCharToMultiByte
RtlUnwind
TlsFree
GetSystemDefaultLangID
CreateSemaphoreA
SetCurrentDirectoryA
InitializeCriticalSection
IsDBCSLeadByte
FlushInstructionCache
HeapCreate
GetCurrentProcessId
DeleteFileA
FreeResource
InterlockedDecrement
HeapFree
GetTempFileNameA
GetFileType
LoadResource
GetLocaleInfoA
SetHandleCount
GetTickCount
GetCommandLineA
GetCurrentProcess
GetVersionExA
lstrcmpA
GlobalSize
FreeLibrary
GetCurrentDirectoryA
CreateThread
GlobalAddAtomA
FormatMessageA
ResumeThread
GetTempPathA
FileTimeToSystemTime
CreateProcessW
CloseHandle
FindResourceA
GetEnvironmentStringsW
ExitProcess
Sleep
ExitThread
GlobalLock
UnlockFile
CompareStringW
VirtualFree
SearchPathA
SetEvent
_lclose
GetLastError
GlobalFree
LoadLibraryExA
ResetEvent
GetModuleFileNameA
SetLastError
VirtualAlloc
FindFirstFileA
lstrcpyA
WaitForSingleObject
GetStdHandle
FlushFileBuffers
SetStdHandle
LockFile
GetShortPathNameA
SizeofResource
LCMapStringA
GetEnvironmentStrings
SetFileAttributesA
RaiseException
GetSystemTime
GetCPInfo
LeaveCriticalSection
IsBadCodePtr
GetUserDefaultLangID
LockResource
LoadLibraryA
GetStringTypeA
GetTimeZoneInformation
DeleteCriticalSection
FormatMessageW
UnhandledExceptionFilter
GetFileAttributesA
GetSystemInfo
CreateDirectoryA
FreeEnvironmentStringsA
GlobalUnlock
GetStringTypeExA
GlobalHandle
FindNextFileA
_lread
CreateEventA
IsBadReadPtr
HeapReAlloc
lstrcatA
VirtualQuery
GlobalAlloc
lstrcpynA
lstrcmpiA
VirtualProtect
GetStartupInfoA
GetProcAddress
CompareStringA
GetCurrentThreadId
WinExec
GetProfileStringA
GetFullPathNameA
MulDiv
GetWindowsDirectoryA
lstrlenA
GetVersion
GetLocalTime
SetLocalTime
GetStringTypeW
GetExitCodeProcess
TlsGetValue
FindClose
GetFileTime
TlsAlloc
LCMapStringW
RemoveDirectoryA
GetOEMCP
SetFilePointer
MultiByteToWideChar
GlobalReAlloc
ReleaseSemaphore
SetFileTime
TerminateProcess
HeapSize
GetModuleHandleA
TlsSetValue

ole32

OleLoad
OleSave

ddraw

DirectDrawEnumerateA

ws2_32

WSAConnect
setsockopt

samlib

SamLookupNamesInDomain
SamConnect
SamConnectWithCreds

user32

GetMenuItemID
GetClassInfoExA
DdeGetData
PeekMessageA
WaitMessage
GetPropA
EndDialog
DestroyIcon
VkKeyScanW
GetDoubleClickTime
OemToCharA
CharPrevA
GetForegroundWindow
CharNextA
GetDC
GetWindowDC
DefMDIChildProcA
EnableWindow
GetSubMenu
GetAsyncKeyState
SendMessageA
DrawMenuBar
LoadBitmapA
GetWindowLongA
LoadImageA
AdjustWindowRectEx
BringWindowToTop
MessageBoxIndirectA
UpdateWindow
DrawFrameControl
ReleaseCapture
GetQueueStatus
DispatchMessageA
MessageBeep
IsRectEmpty
CopyAcceleratorTableA
GetSystemMetrics
DdeQueryStringA
BeginDeferWindowPos
IsWindow
DialogBoxParamA
AdjustWindowRect
GetWindowThreadProcessId
CreatePopupMenu
LoadIconA
GetWindowRect
IsWindowEnabled
SetWindowsHookExW
keybd_event
GetDCEx
IsWindowVisible
LoadStringA
DdeCmpStringHandles
PtInRect
GetMenu
GetCaretPos
GetUpdateRgn
PeekMessageW
SubtractRect
VkKeyScanA
CheckMenuItem
DestroyWindow
IsIconic
GetWindow
DefFrameProcA
RemoveMenu
GetMenuState
SetMenu
GetKeyboardState
SetRect
CreateAcceleratorTableA
GetMenuItemInfoA
DdeQueryConvInfo
GetUpdateRect
GetIconInfo
SendDlgItemMessageA
GetCursor
TabbedTextOutA
InsertMenuA
DestroyMenu
DeleteMenu
GetSystemMenu
EnumClipboardFormats
ShowWindow
AppendMenuA
KillTimer
SetWindowPos
PostThreadMessageA
LockWindowUpdate
TrackPopupMenu
SetWindowContextHelpId
SetCapture
SetWindowRgn
DeferWindowPos
FindWindowW
GetClassNameA
SetWindowLongA
DestroyCursor
CharUpperBuffW
CreateMenu
MoveWindow
ClientToScreen
DdeCreateStringHandleA
ShowCursor
SetMenuDefaultItem
ScreenToClient
GetMenuItemCount
PostMessageA
DdeDisconnect
GetWindowTextA
FindWindowA
GetKeyboardLayout
CloseClipboard
GetCursorPos
DdePostAdvise
FillRect
CharUpperA
CreateCursor
GetDlgItem
GetScrollPos
CharLowerBuffA
EnableMenuItem
SetForegroundWindow
DrawFocusRect
GetLastActivePopup
CharToOemBuffA
IntersectRect
RegisterClipboardFormatA
CallNextHookEx
GetClipboardData
GetMessagePos
SetCaretPos
DrawIcon
DdeFreeDataHandle
DdeSetUserHandle
EndPaint
WindowFromPoint
SetFocus
AttachThreadInput
SetCursor
GetTabbedTextExtentA
InvalidateRgn
DdeInitializeA
RegisterClassA
CharLowerBuffW
GetParent
LoadCursorA
wsprintfA
GetFocus
CopyRect
RegisterClassExA
CharLowerA
CreateIcon
SystemParametersInfoA
ToAscii
IsZoomed
SetMenuItemInfoA
DestroyAcceleratorTable
MessageBoxA
ClipCursor
IsClipboardFormatAvailable
RemovePropA
GetClipboardFormatNameA
DdeGetLastError
DdeUninitialize
CreateCaret
GetDesktopWindow
MsgWaitForMultipleObjects
MapWindowPoints
CharUpperBuffA
ShowCaret
DdeConnect
OpenClipboard
DestroyCaret
UnregisterClassA
SetKeyboardState
DdeCreateDataHandle
DefWindowProcA
BeginPaint
InflateRect
IsDialogMessageA
PostMessageW
OffsetRect
ReleaseDC
GetActiveWindow
TranslateMessage
FrameRect
SetCursorPos
SetDlgItemTextA
SetWindowsHookExA
WinHelpA
EqualRect
DdeNameService
GetScrollInfo
SetParent
CreateDialogParamA
InvalidateRect
SetClipboardData
SetScrollRange
HideCaret
CreateWindowExA
EndDeferWindowPos
TranslateMDISysAccel
EnumThreadWindows
SetScrollInfo
DdeAbandonTransaction
GetMessageTime
ShowScrollBar
EmptyClipboard
CallWindowProcA
SetScrollPos
GetCapture
DrawTextA
DdeClientTransaction
GetClassInfoA
GetWindowTextLengthA
GetClientRect
SetTimer
SetWindowTextA
SetPropA
ModifyMenuA
GetCaretBlinkTime
GetSysColor
GetMenuStringA
UnhookWindowsHookEx
GetKeyState
SetActiveWindow
CharToOemA
IsChild
PostQuitMessage
WaitForInputIdle
DdeFreeStringHandle
GetWindowRgn
IsCharAlphaA
LoadAcceleratorsA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 155KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 207KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c3c910b26528e0c8b99c0eba9a39c899

Headers

File Characteristics

Imports

advapi32

kernel32

ole32

ddraw

ws2_32

samlib

user32

Sections

.text Size: 1KB - Virtual size: 1KB

.idata Size: 11KB - Virtual size: 10KB

.data Size: 155KB - Virtual size: 1.0MB

.rsrc Size: 132KB - Virtual size: 131KB

.rdata Size: 207KB - Virtual size: 207KB

.text
Size: 1KB - Virtual size: 1KB

.idata
Size: 11KB - Virtual size: 10KB

.data
Size: 155KB - Virtual size: 1.0MB

.rsrc
Size: 132KB - Virtual size: 131KB

.rdata
Size: 207KB - Virtual size: 207KB