171e03f87ec5481b06cdf2f4832e0d50

Sharing

Copy URL Twitter E-mail

General

Target

171e03f87ec5481b06cdf2f4832e0d50
Size

719KB
MD5

171e03f87ec5481b06cdf2f4832e0d50
SHA1

ca4fbcd018853acf64bae60b066a34fb0372ca03
SHA256

31710704d830a43be0ed06d1f81fdb2cc3b66c5b93b2c7a6897f59fec0958e7d
SHA512

b4aa576e6a1fcbe1e3ed4efd852db82a7fd39ce9db508146cbbe26776eb52fc677959f6e560956b571201bc390d5921902703c81b330237306e986763956accd
SSDEEP

12288:xwlt/xsaS4a7zaQDEk2KVqDCnumnIBX1vTEdY:xwvS2a7+IiDCumnIBBTT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
171e03f87ec5481b06cdf2f4832e0d50

Files

171e03f87ec5481b06cdf2f4832e0d50
.exe windows:4 windows x86 arch:x86

a90ff580fffe42effde246277d91fbdb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
VirtualAlloc
GetStringTypeA
CompareStringA
CompareStringW
SetEnvironmentVariableA
VirtualFree
HeapCreate
InterlockedExchange
IsBadWritePtr
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
InterlockedDecrement
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LCMapStringW
LCMapStringA
GetACP
HeapSize
TerminateProcess
GetTimeZoneInformation
HeapReAlloc
ExitProcess
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
GetTickCount
SetErrorMode
GetFileTime
GetFileSize
GetFileAttributesA
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
DuplicateHandle
WritePrivateProfileStringA
GetCurrentThread
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GlobalFree
FileTimeToLocalFileTime
FileTimeToSystemTime
LocalFree
MultiByteToWideChar
WideCharToMultiByte
GetWindowsDirectoryA
FlushInstructionCache
VirtualProtect
SetLastError
GetCurrentProcess
WriteProcessMemory
VirtualQuery
GetCurrentProcessId
GetSystemInfo
GetSystemTime
MulDiv
CreateThread
WaitForSingleObject
SetEvent
CloseHandle
CreateEventA
GlobalAlloc
GlobalLock
GlobalUnlock
HeapFree
GetProcessHeap
HeapAlloc
FreeLibrary
LoadLibraryA
GetTempPathA
GetTempFileNameA
GetModuleFileNameA
GetVersion
GetVersionExA
lstrcpyA
FindResourceA
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetModuleHandleA
GetProcAddress
LeaveCriticalSection
lstrcmpA
lstrcpynA
GetCurrentThreadId
lstrcmpiA
GetLastError
Sleep
InterlockedIncrement
FormatMessageA
lstrlenA
LocalAlloc

user32

RegisterClipboardFormatA
PostThreadMessageA
GrayStringA
TabbedTextOutA
MapDialogRect
SetWindowContextHelpId
TranslateMessage
PostQuitMessage
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
CheckRadioButton
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
SendDlgItemMessageA
PeekMessageA
AdjustWindowRectEx
GetTopWindow
IsChild
GetClassInfoA
RegisterClassA
GetDlgCtrlID
GetMessageTime
GetLastActivePopup
GetForegroundWindow
RegisterWindowMessageA
GetNextDlgTabItem
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
GetDlgItem
GetWindowTextLengthA
CreateIconIndirect
DrawTextExA
GetCapture
GetMessagePos
MapWindowPoints
CopyRect
CopyIcon
SystemParametersInfoA
LoadStringA
LoadImageA
DestroyCursor
CharUpperA
CharLowerA
GetWindowPlacement
DrawMenuBar
IsMenu
EqualRect
GetMenuItemID
GetSubMenu
ValidateRect
IntersectRect
GetWindowWord
SetWindowWord
SetRect
GetFocus
SetFocus
EnumChildWindows
DrawStateA
DestroyIcon
IsWindowEnabled
CharNextA
GetWindowTextA
CharUpperBuffA
GetIconInfo
GetDC
ShowScrollBar
SetScrollRange
SetScrollPos
SetScrollInfo
GetScrollRange
GetScrollPos
GetScrollInfo
EnableScrollBar
InflateRect
GetClassLongA
DrawIconEx
EnableMenuItem
DestroyMenu
GetMenuItemCount
wsprintfA
EnableWindow
SendMessageA
LoadIconA
AppendMenuA
GetSystemMenu
DrawIcon
GetClientRect
WinHelpA
GetSystemMetrics
IsIconic
CallNextHookEx
GetMenuState
CreatePopupMenu
InsertMenuItemA
GetMenuItemInfoA
GetDesktopWindow
LockWindowUpdate
ScreenToClient
IsWindowVisible
GetCursorPos
SetCapture
ReleaseCapture
DestroyWindow
DrawEdge
FillRect
DrawTextA
BeginPaint
SetCursor
GetNextDlgGroupItem
EndPaint
ClientToScreen
PtInRect
KillTimer
InvalidateRect
SetForegroundWindow
SetTimer
UpdateWindow
UnregisterClassA
LoadCursorA
RegisterClassExA
CreateWindowExA
GetKeyState
CopyAcceleratorTableA
GetMenu
SetMenu
OffsetRect
IsRectEmpty
GetPropA
GetClassNameA
GetActiveWindow
GetWindowLongA
GetParent
SetWindowsHookExA
MessageBoxA
UnhookWindowsHookEx
IsWindow
DispatchMessageA
GetMessageA
GetSysColor
GetSysColorBrush
DefWindowProcA
CallWindowProcA
RedrawWindow
SetWindowLongA
SetPropA
RemovePropA
SetWindowPos
SetWindowRgn
GetWindowRect
GetWindowDC
ReleaseDC
PostMessageA
ShowWindow
MoveWindow
IsZoomed
GetWindow
GetWindowInfo
DrawFrameControl
MessageBeep

gdi32

GetViewportExtEx
GetWindowExtEx
PtVisible
Escape
GetMapMode
DPtoLP
GetTextColor
GetBkColor
LPtoDP
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
ExtTextOutA
CreatePatternBrush
SetBrushOrgEx
PatBlt
UnrealizeObject
GetTextMetricsA
GetRgnBox
IntersectClipRect
GetTextExtentPoint32A
TextOutA
GetClipRgn
SelectClipRgn
CreatePen
MoveToEx
LineTo
ExcludeClipRect
DeleteObject
PtInRegion
StretchDIBits
RectVisible
GetClipBox
ExtSelectClipRgn
SetStretchBltMode
SetDIBitsToDevice
CreateDIBSection
CreateDIBitmap
SaveDC
RestoreDC
Polygon
StretchBlt
CreateCompatibleDC
CreateCompatibleBitmap
GetDeviceCaps
SelectPalette
RealizePalette
CreateBitmap
SetBkColor
GetObjectA
CreateICA
GetDIBits
DeleteDC
GetRegionData
ExtCreateRegion
GetTextExtentPointA
CreateSolidBrush
SetTextColor
CreateFontIndirectA
SelectObject
SetBkMode
GetStockObject
BitBlt
CreateRectRgnIndirect
OffsetRgn
CreateRectRgn
CombineRgn
GetPixel

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA

shell32

ExtractIconExA

comctl32

ord17
ImageList_DrawEx
ImageList_GetIconSize
_TrackMouseEvent
ImageList_Draw
ImageList_GetIcon
ImageList_Destroy
ImageList_GetImageCount

oledlg

ord8

ole32

CoTaskMemAlloc
CLSIDFromString
CLSIDFromProgID
CoUninitialize
CoInitialize
CoCreateInstance
OleRun
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoTaskMemFree

olepro32

ord253

oleaut32

SysFreeString
SysAllocStringByteLen
SysStringByteLen
VariantInit
VariantClear
VariantCopy
SafeArrayPutElement
SafeArrayCreate
SysAllocString
VariantChangeType
SysAllocStringLen
SysStringLen
VariantTimeToSystemTime
GetErrorInfo

ws2_32

WSAStartup
gethostbyname
inet_ntoa

imagehlp

ImageDirectoryEntryToData

Sections

.text
Size: 418KB - Virtual size: 417KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 204KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a90ff580fffe42effde246277d91fbdb

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

ws2_32

imagehlp

Sections

.text Size: 418KB - Virtual size: 417KB

.rdata Size: 65KB - Virtual size: 64KB

.data Size: 31KB - Virtual size: 113KB

.rsrc Size: 204KB - Virtual size: 203KB

.text
Size: 418KB - Virtual size: 417KB

.rdata
Size: 65KB - Virtual size: 64KB

.data
Size: 31KB - Virtual size: 113KB

.rsrc
Size: 204KB - Virtual size: 203KB