260daac0874413fb86e981c302100161

Sharing

Copy URL Twitter E-mail

General

Target

260daac0874413fb86e981c302100161
Size

632KB
MD5

260daac0874413fb86e981c302100161
SHA1

dd31f337873c5ce5f0e78d36daaebc672a48e2f8
SHA256

eb020271d527ea8e5b5556c0083b7d27eddcbff916660a6dc53c91d5c7ee058e
SHA512

73b9c12e2c9994886014e4a23098e63250153944e8ef9ea5872947887336e4e5d16809fb934c03c5e48c1301cf4c0c5cfd279db0fb1b79979e842ee4b0c186ef
SSDEEP

12288:ZBKCOK6p2GJ6CSGFCR1BmC1xkrF95OX3ZDTAcF7fUuIYK:CK6p2/5RqC1xkrF9kX3ZDTZdUuIZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
260daac0874413fb86e981c302100161

Files

260daac0874413fb86e981c302100161
.exe windows:4 windows x86 arch:x86

3a070e8de0e45619d5643fb5a33af3f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetOEMCP
SetErrorMode
WritePrivateProfileStringA
GetCurrentDirectoryA
GetTickCount
HeapReAlloc
VirtualProtect
VirtualAlloc
VirtualQuery
RtlUnwind
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
GetCommandLineA
GetStartupInfoA
RaiseException
HeapSize
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
TerminateProcess
UnhandledExceptionFilter
GetCPInfo
IsDebuggerPresent
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetConsoleCP
GetConsoleMode
GetDriveTypeA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
GetFileTime
GetFileAttributesA
InterlockedIncrement
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
GetFullPathNameA
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetThreadLocale
InterlockedDecrement
GetModuleFileNameW
FileTimeToSystemTime
GetCurrentProcessId
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
FreeResource
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
SetLastError
lstrcmpA
FileTimeToLocalFileTime
FileTimeToDosDateTime
FindResourceExA
GetSystemInfo
GetModuleHandleA
GetVolumeInformationA
Sleep
GetCurrentProcess
GetExitCodeProcess
ExitProcess
GetExitCodeThread
LoadLibraryA
GetProcAddress
FreeLibrary
GlobalFree
GetTempFileNameA
MulDiv
SetFilePointer
GetModuleFileNameA
GetTempPathA
GetVersionExA
CreateDirectoryA
FindFirstFileA
FindNextFileA
FindClose
GetFileSize
ReadFile
DeleteFileA
CreateFileA
WriteFile
GetLocalTime
lstrcatA
CreateSemaphoreA
LocalAlloc
LocalHandle
LocalFree
ReleaseSemaphore
lstrcpyA
OpenMutexA
CreateThread
TerminateThread
RemoveDirectoryA
CopyFileA
GetProcessHeap
HeapAlloc
HeapFree
CreateMutexA
WaitForSingleObject
ReleaseMutex
CloseHandle
lstrlenA
CompareStringW
CompareStringA
lstrlenW
GetVersion
FindResourceA
LoadResource
LockResource
SizeofResource
GetLastError
WideCharToMultiByte
MultiByteToWideChar
SetUnhandledExceptionFilter
InterlockedExchange

user32

PostThreadMessageA
UnregisterClassA
GetSysColorBrush
DestroyMenu
SetWindowContextHelpId
MapDialogRect
SetCursor
GetMessageA
TranslateMessage
ValidateRect
PostQuitMessage
GetCursorPos
WindowFromPoint
EndPaint
BeginPaint
GrayStringA
DrawTextExA
TabbedTextOutA
GetWindowThreadProcessId
ShowWindow
MoveWindow
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetFocus
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetLastActivePopup
DispatchMessageA
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
RegisterClipboardFormatA
TrackPopupMenu
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
EqualRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetMenuItemID
GetSubMenu
CharNextA
LoadCursorA
ScreenToClient
DestroyCursor
GetActiveWindow
GetCaretPos
ClientToScreen
EnableMenuItem
CheckMenuItem
CreatePopupMenu
wvsprintfA
GetDesktopWindow
GetMenuState
GetMenuItemCount
AppendMenuA
DrawEdge
GetDC
DrawTextA
GetWindow
GetClassNameA
SetWindowTextA
GetKeyState
IsCharAlphaNumericA
GetForegroundWindow
FindWindowA
KillTimer
InvalidateRgn
IsRectEmpty
CopyAcceleratorTableA
MessageBeep
MapWindowPoints
SetTimer
UpdateWindow
IsZoomed
IsIconic
DrawIcon
GetNextDlgGroupItem
GetParent
PostMessageA
DrawIconEx
ReleaseCapture
SetCapture
GetCapture
IsWindowVisible
InvalidateRect
PtInRect
CopyRect
DestroyIcon
ReleaseDC
GetWindowDC
GetClientRect
GetWindowRect
FrameRect
InflateRect
GetSystemMetrics
DrawStateA
LoadImageA
SetForegroundWindow
SetRect
SendMessageA
EnableWindow
CharUpperA
MessageBoxA

gdi32

ExtSelectClipRgn
DeleteDC
GetStockObject
CreateRectRgnIndirect
GetTextColor
GetRgnBox
MoveToEx
LineTo
SetMapMode
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
GetMapMode
CreateFontA
SetBkMode
RestoreDC
SaveDC
CreateBitmap
GetObjectA
SetTextColor
GetClipBox
CopyMetaFileA
SetBkColor
CreateSolidBrush
DeleteObject
EndDoc
EndPage
StartPage
StartDocA
GetDeviceCaps
SelectObject
GetBkColor
CreatePen
SetPixel
BitBlt
RoundRect
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
GetTextExtentPoint32A

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
LookupAccountNameA
GetUserNameA
GetFileSecurityA
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
GetLengthSid
InitializeAcl
GetAclInformation
GetAce
EqualSid
AddAce
AddAccessAllowedAceEx
SetSecurityDescriptorDacl
GetSecurityDescriptorControl
SetSecurityDescriptorControl
SetFileSecurityA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

shlwapi

PathFileExistsA
PathFindExtensionA
PathStripToRootA
PathIsUNCA
StrToIntExA
PathFindFileNameA

oledlg

ord8

ole32

OleFlushClipboard
OleIsCurrentClipboard
CLSIDFromString
CLSIDFromProgID
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoRegisterMessageFilter
CoGetClassObject
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleCreateStaticFromData
OleSetContainedObject
CoInitialize
CoUninitialize
CoCreateInstance
CoRevokeClassObject
StgOpenStorageOnILockBytes
CreateStreamOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize

oleaut32

SysAllocString
OleCreateFontIndirect
SafeArrayDestroy
VariantCopy
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantInit
VariantChangeType
VariantClear
SysAllocStringByteLen
SysStringLen
SysFreeString
SysAllocStringLen

urlmon

URLDownloadToFileA

wpcap

pcap_findalldevs
pcap_freealldevs

Sections

.text
Size: 412KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3a070e8de0e45619d5643fb5a33af3f3

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

urlmon

wpcap

Sections

.text Size: 412KB - Virtual size: 408KB

.rdata Size: 120KB - Virtual size: 118KB

.data Size: 12KB - Virtual size: 26KB

.rsrc Size: 84KB - Virtual size: 82KB

.text
Size: 412KB - Virtual size: 408KB

.rdata
Size: 120KB - Virtual size: 118KB

.data
Size: 12KB - Virtual size: 26KB

.rsrc
Size: 84KB - Virtual size: 82KB