8c53bc5c53467affe4564247c0aa60894c5259eef53b1dba48d14bde816cba4d

Sharing

Copy URL Twitter E-mail

General

Target

8c53bc5c53467affe4564247c0aa60894c5259eef53b1dba48d14bde816cba4d
Size

2.9MB
MD5

b0f214769460e344d641c397ac8fa97a
SHA1

46315cb636fa8a9954bf14c2650d4ede406373a2
SHA256

8c53bc5c53467affe4564247c0aa60894c5259eef53b1dba48d14bde816cba4d
SHA512

b5b6deaee37cf4788bca9a2c14bf621338ce783e8728d5ffb7ce42e65333c70648688847340eb44eacc3be7a43c53b8136b8c65a164b00a8ac311a79f26fc2b4
SSDEEP

49152:lltkG1afEVKy/qF+/9lkOL4viU3CnxLNuIGa/tPojzBIb8brKNbmZQjgapT6g31n:ztkG1YEoySa9eOMvikCnxLN01Ib8vEbx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c53bc5c53467affe4564247c0aa60894c5259eef53b1dba48d14bde816cba4d

Files

8c53bc5c53467affe4564247c0aa60894c5259eef53b1dba48d14bde816cba4d
.exe windows:6 windows x86 arch:x86

6876d8009a803eb21f33de57907ae698

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualQuery
HeapQueryInformation
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
RtlUnwind
OpenEventA
ReleaseSemaphore
ResetEvent
AreFileApisANSI
CopyFileExW
VirtualFree
VirtualAlloc
GetFileInformationByHandle
UnmapViewOfFile
lstrcpynW
GetACP
FindNextFileW
GetTimeZoneInformation
GetFileType
FindVolumeClose
FindNextVolumeW
FindFirstVolumeW
DeviceIoControl
GetDriveTypeW
GetLogicalDriveStringsW
SetConsoleCtrlHandler
GetStdHandle
SetFilePointerEx
RemoveDirectoryW
CreateDirectoryW
MoveFileExW
QueryPerformanceFrequency
GetSystemInfo
WaitForSingleObjectEx
RtlCaptureStackBackTrace
SetThreadUILanguage
SetThreadLocale
GetUserDefaultLangID
GetCPInfo
CompareStringEx
LCMapStringEx
GetLocaleInfoEx
GetStringTypeW
RaiseException
OutputDebugStringW
SetStdHandle
ExitProcess
GetDateFormatW
GetTimeFormatW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
GetConsoleOutputCP
GetConsoleMode
ReadConsoleW
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
WriteConsoleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
PeekNamedPipe
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetWindowsDirectoryW
SetFileAttributesW
LocalFileTimeToFileTime
GetFileSizeEx
GetFileAttributesExW
SetErrorMode
SystemTimeToTzSpecificLocalTime
FileTimeToLocalFileTime
GetUserDefaultLCID
SetFileTime
GetTempFileNameW
GetFileTime
GetProfileIntW
GetTickCount64
GetFileAttributesW
SearchPathW
FindResourceExW
lstrcmpiW
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
SizeofResource
FindClose
DeleteFileW
GetTempPathW
SetFilePointer
CreateFileW
VerifyVersionInfoW
VerSetConditionMask
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GlobalFlags
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GetThreadLocale
SystemTimeToFileTime
FileTimeToSystemTime
GlobalGetAtomNameW
InitializeCriticalSectionAndSpinCount
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcpyW
lstrcmpA
GetVersionExW
GetCurrentThread
GetCurrentDirectoryW
ResumeThread
SetThreadPriority
WaitForSingleObject
GetCurrentProcessId
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
LoadLibraryW
LoadLibraryA
GetModuleHandleA
GetModuleFileNameW
OutputDebugStringA
SetLastError
CopyFileW
MulDiv
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalAlloc
MultiByteToWideChar
DeleteCriticalSection
DecodePointer
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
HeapFree
GetProcessHeap
HeapAlloc
GetModuleHandleW
GetProcAddress
Sleep
SetEvent
CloseHandle
CreateEventA
LocalFree
WideCharToMultiByte
FormatMessageW
FormatMessageA
FindResourceW
LoadResource
LockResource

user32

TranslateMessage
GetActiveWindow
GetCursorPos
IsZoomed
GetAsyncKeyState
DestroyAcceleratorTable
CreatePopupMenu
SetWindowRgn
WindowFromPoint
GetMessageW
SystemParametersInfoW
GetMenuItemInfoW
SetClassLongW
SetParent
NotifyWinEvent
UpdateLayeredWindow
SetCapture
ReleaseCapture
KillTimer
EnableScrollBar
SetCursor
SetRectEmpty
InvalidateRect
EnableWindow
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
IntersectRect
UnionRect
OffsetRect
LoadCursorW
MonitorFromPoint
PostQuitMessage
SetWindowContextHelpId
MapDialogRect
CreateDialogIndirectParamW
EndDialog
GetNextDlgTabItem
GetDesktopWindow
ShowOwnedPopups
DrawStateW
SendDlgItemMessageA
GetSysColorBrush
RealChildWindowFromPoint
CopyImage
BringWindowToTop
LoadAcceleratorsW
TranslateAcceleratorW
SendMessageW
GetClientRect
GetMessagePos
ScreenToClient
ClientToScreen
PtInRect
GetDC
ReleaseDC
LoadMenuW
GetSubMenu
GetParent
GetMenuItemCount
GetMenuItemID
ModifyMenuW
GetSystemMetrics
GetSysColor
SetRect
FillRect
CopyRect
IsRectEmpty
DrawEdge
IsCharAlphaNumericW
InsertMenuItemW
LoadImageW
DrawFocusRect
InflateRect
GetScrollPos
RedrawWindow
GetWindowLongW
IsChild
LoadIconW
GetSystemMenu
AppendMenuW
EnumChildWindows
SetTimer
IsIconic
DrawIcon
GetWindowRect
GetMenu
UnregisterClassW
GetMenuStringW
GetMenuState
InsertMenuW
RemoveMenu
IsWindow
GetKeyNameTextW
TranslateMDISysAccel
CopyAcceleratorTableW
SetLayeredWindowAttributes
EnumDisplayMonitors
LockWindowUpdate
DrawFrameControl
DrawIconEx
DeleteMenu
TrackMouseEvent
CharUpperW
MessageBeep
GetMenuDefaultItem
SetMenuDefaultItem
IsClipboardFormatAvailable
FrameRect
PostThreadMessageW
GetUpdateRect
RegisterClipboardFormatW
SetCursorPos
CharNextW
InvalidateRgn
GetNextDlgGroupItem
CreateMenu
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableW
GetWindowRgn
SubtractRect
GetDoubleClickTime
GetIconInfo
CopyIcon
CharUpperBuffW
GetComboBoxInfo
MapVirtualKeyW
RegisterWindowMessageW
DispatchMessageW
PeekMessageW
GetMessageTime
PostMessageW
DefWindowProcW
CallWindowProcW
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
IsMenu
DestroyWindow
GetScrollRange
SetWindowPos
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsWindowVisible
GetDlgItem
GetDlgCtrlID
SetFocus
GetFocus
GetKeyState
GetCapture
SetMenu
TrackPopupMenu
DestroyCursor
IsCharLowerW
MapVirtualKeyExW
DestroyMenu
GetWindowThreadProcessId
GetWindowDC
TabbedTextOutW
UpdateWindow
SetActiveWindow
GetForegroundWindow
SetForegroundWindow
wsprintfW
DestroyIcon
HideCaret
InvertRect
BeginPaint
EndPaint
ValidateRect
ScrollWindow
SetScrollPos
UnpackDDElParam
ReuseDDElParam
WaitMessage
GrayStringW
DrawTextExW
DrawTextW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
IsDialogMessageW
SetWindowTextW
IsWindowEnabled
CheckDlgButton
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
SetWindowLongW
EqualRect
MapWindowPoints
MessageBoxW
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
SetScrollRange

gdi32

SetBkColor
PatBlt
CreateRectRgnIndirect
GetDeviceCaps
CreateDCW
CopyMetaFileW
DeleteDC
SelectObject
CreateFontIndirectW
GetObjectW
CreateSolidBrush
GetStockObject
GetTextExtentPoint32W
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateDIBSection
CombineRgn
GetMapMode
SetRectRgn
DPtoLP
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetTextMetricsW
CreateEllipticRgn
SetTextColor
GetBkColor
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
Rectangle
SetPixel
GetRgnBox
OffsetRgn
EnumFontFamiliesExW
GetWindowOrgEx
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
RealizePalette
StretchBlt
SetDIBColorTable
GetViewportOrgEx
LPtoDP
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
RoundRect
ExtFloodFill
SetPaletteEntries
GetTextFaceW
SetPixelV
CreateBitmap
CreateHatchBrush
CreatePen
CreatePatternBrush
CreateRectRgn
DeleteObject
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
Ellipse
GetTextColor

msimg32

TransparentBlt
AlphaBlend

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

RegSetValueExA
SetSecurityDescriptorDacl
RegLoadKeyW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
OpenProcessToken
ImpersonateSelf
LookupPrivilegeValueW
AdjustTokenPrivileges
RegQueryInfoKeyW
RegCreateKeyW
InitializeSecurityDescriptor
OpenSCManagerW
CloseServiceHandle
OpenServiceW
QueryServiceConfigW
RegCloseKey
RegOpenKeyExW
RegUnLoadKeyW

shell32

SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
ShellExecuteW
SHGetDesktopFolder
DragQueryFileW
DragFinish
SHAppBarMessage
SHGetFileInfoW

comctl32

ImageList_ReplaceIcon
InitCommonControlsEx

shlwapi

PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW

uxtheme

GetWindowTheme
IsAppThemed
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
GetThemeSysColor

ole32

IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleGetClipboard
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleInitialize
CreateStreamOnHGlobal
StgCreateDocfileOnILockBytes
CoGetClassObject
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
OleLockRunning
CoDisconnectObject
CoInitializeEx
CoInitialize
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
OleUninitialize
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
CoRevokeClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries

oleaut32

LoadTypeLi
VarBstrFromDate
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocString
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysFreeString
OleCreateFontIndirect

oledlg

OleUIBusyW

gdiplus

GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipCreateFromHDC
GdipDeleteGraphics
GdipDrawImageRectI
GdipGetImageGraphicsContext
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDrawImageI
GdipSetInterpolationMode
GdipGetImageWidth

ws2_32

WSACleanup
WSAStartup

oleacc

LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

dbgeng

DebugCreate

setupapi

SetupDiGetDeviceInstanceIdW
SetupDiEnumDriverInfoW
SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
CM_Get_DevNode_Status
SetupOpenInfFileW
SetupGetInfInformationW
SetupQueryInfFileInformationW
SetupCloseInfFile
SetupEnumInfSectionsW
SetupFindFirstLineW
SetupGetFieldCount
SetupFindNextLine
SetupGetIntField
SetupGetStringFieldW
SetupGetTargetPathW
SetupGetSourceFileLocationW
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDriverInfoList
SetupDiBuildDriverInfoList
SetupDiGetDriverInfoDetailW

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 450KB - Virtual size: 450KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6876d8009a803eb21f33de57907ae698

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

ws2_32

oleacc

imm32

winmm

dbgeng

setupapi

Sections

.text Size: 2.1MB - Virtual size: 2.1MB

.rdata Size: 450KB - Virtual size: 450KB

.data Size: 39KB - Virtual size: 57KB

.rsrc Size: 94KB - Virtual size: 94KB

.reloc Size: 164KB - Virtual size: 163KB

.text
Size: 2.1MB - Virtual size: 2.1MB

.rdata
Size: 450KB - Virtual size: 450KB

.data
Size: 39KB - Virtual size: 57KB

.rsrc
Size: 94KB - Virtual size: 94KB

.reloc
Size: 164KB - Virtual size: 163KB