26e2b370aab37d2da0178c417c6ef698

Sharing

Copy URL Twitter E-mail

General

Target

26e2b370aab37d2da0178c417c6ef698
Size

848KB
MD5

26e2b370aab37d2da0178c417c6ef698
SHA1

96498fe139e3a2455be8f71f6b90cd3b0de4d236
SHA256

489120aa8f7c887f3073455cafd25f4e8d83c7abde5d3a4c5e6c2dfc0436f16c
SHA512

4d9cc21daba7370932efafcd9123bb652c2fba957adbfb159cab3b8ab058f3f27d0aa7111d4b008f7f56d8057858b6ba358082f0b037865f3aa2e860b603c44d
SSDEEP

24576:6stJkhJiatupC8CXoDDOXPT8/x1UmQ53d6:BLYR58Kb/TqYx3d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26e2b370aab37d2da0178c417c6ef698

Files

26e2b370aab37d2da0178c417c6ef698
.exe windows:5 windows x86 arch:x86

005520ceeede7fc16c3b0effbab9d167

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeW
LockFile
GlobalUnlock
DisconnectNamedPipe
MultiByteToWideChar
CopyFileW
InterlockedDecrement
lstrcmpW
GlobalSize
SetCurrentDirectoryW
GetCurrentProcessId
GetCommandLineW
GetOEMCP
FormatMessageW
MulDiv
DeleteCriticalSection
ReadFile
SetUnhandledExceptionFilter
HeapAlloc
GetConsoleMode
InitializeCriticalSection
HeapSetInformation
GlobalAddAtomW
GetTimeZoneInformation
ResumeThread
SetHandleCount
GetTempPathW
lstrcpyW
DuplicateHandle
InitializeCriticalSectionAndSpinCount
HeapSize
SetStdHandle
TlsAlloc
TlsGetValue
GetCPInfo
GetCurrentProcess
CreateNamedPipeW
SetLastError
OpenEventW
TlsFree
GlobalReAlloc
GetSystemTimeAsFileTime
LocalFree
GetStdHandle
CloseHandle
GetCurrentThreadId
GetEnvironmentStringsW
GetLocaleInfoW
HeapQueryInformation
GlobalFindAtomW
VirtualQuery
FindResourceW
WriteFile
CreateEventW
GetUserDefaultUILanguage
Sleep
IsProcessorFeaturePresent
WaitForSingleObject
SetEvent
GetOverlappedResult
GlobalAlloc
GlobalFlags
GetCurrentDirectoryW
SetThreadPriority
UnlockFile
LeaveCriticalSection
VirtualProtect
HeapFree
QueryPerformanceCounter
FindResourceExW
GetACP
HeapDestroy
GetFileType
lstrlenW
GlobalFree
GetFileAttributesExW
LoadLibraryExW
GetModuleFileNameW
LocalAlloc
InterlockedCompareExchange
lstrcmpA
GlobalGetAtomNameW
GetFileTime
FreeEnvironmentStringsW
TlsSetValue
HeapCreate
TerminateProcess
EnterCriticalSection
LocalReAlloc
WideCharToMultiByte
lstrcmpiW
GetLastError
LCMapStringW
InterlockedExchange
IsDebuggerPresent
FlushFileBuffers
GetStartupInfoW
ConnectNamedPipe
GetSystemDirectoryW
GetCurrentThread
SetFilePointer
RaiseException
FreeLibrary
GlobalDeleteAtom
IsValidCodePage
WriteConsoleW
VirtualAlloc
SetEndOfFile
GetVersionExW
GetProcessHeap
FileTimeToLocalFileTime
GetTickCount
GetTempFileNameW
CreateThread
LoadResource
FindClose
FindFirstFileW
FileTimeToSystemTime
GetConsoleCP
HeapReAlloc
RtlUnwind
UnhandledExceptionFilter
LockResource
CreateMutexW
GlobalHandle
ExitProcess
GetProfileIntW
GetWindowsDirectoryW
CreateFileW
ExitThread
GetNumberFormatW
GlobalLock
LoadLibraryW
GetSystemInfo
GetFullPathNameW
SearchPathW
SetEnvironmentVariableA
FreeResource
GetFileSize
GetVolumeInformationW
WaitForMultipleObjects
GetFileAttributesW
GetFileSizeEx
SizeofResource
InterlockedIncrement
TerminateThread
CompareStringW
GetProcAddress
GetModuleHandleW
lstrlenA

user32

SetLayeredWindowAttributes
SetParent
NotifyWinEvent
SendMessageW
ShowWindow
TranslateAcceleratorW
GetMenuCheckMarkDimensions
CopyAcceleratorTableW
GrayStringW
RegisterClipboardFormatW
DestroyIcon
MapWindowPoints
DeferWindowPos
IsZoomed
RegisterWindowMessageW
LockWindowUpdate
RealChildWindowFromPoint
EnumDisplayMonitors
CheckDlgButton
InsertMenuW
RemoveMenu
RegisterClassW
DispatchMessageW
GetWindowPlacement
BringWindowToTop
SetScrollInfo
GetForegroundWindow
GetDlgItem
CheckMenuItem
SubtractRect
GetMenuStringW
IsCharLowerW
GetMenuItemInfoW
PostMessageW
DrawFrameControl
SetScrollPos
EqualRect
RemovePropW
EnableScrollBar
EnableWindow
CreateAcceleratorTableW
SetCursorPos
SetWindowLongW
GetParent
CreatePopupMenu
LoadAcceleratorsW
IsWindowVisible
ScrollWindow
KillTimer
GetWindowTextLengthW
DrawIcon
DestroyCursor
IsIconic
GetMenuItemCount
EndDialog
GetScrollRange
SetFocus
GetMenuDefaultItem
SetRectEmpty
CallNextHookEx
DrawMenuBar
ToUnicodeEx
OffsetRect
HideCaret
TranslateMDISysAccel
ValidateRect
MapVirtualKeyExW
InvalidateRect
GetScrollPos
ReleaseDC
GetSysColorBrush
TranslateMessage
GetWindowTextW
CopyRect
MoveWindow
GetWindowDC
SendDlgItemMessageW
GetLastActivePopup
DrawTextW
LoadBitmapW
GetDlgCtrlID
SetCursor
SetRect
ScreenToClient
CharUpperW
MessageBoxW
CloseClipboard
GetClassNameW
ShowScrollBar
DrawTextExW
DialogBoxParamW
GetMenu
UnhookWindowsHookEx
GetMonitorInfoW
CopyImage
DrawFocusRect
BeginPaint
SetWindowPlacement
GetNextDlgGroupItem
OpenClipboard
ModifyMenuW
GetWindowRect
MonitorFromWindow
InvertRect
EndPaint
IsChild
WaitMessage
IsDialogMessageW
GetSubMenu
GetWindowRgn
GetDoubleClickTime
DefWindowProcW
GetTopWindow
SetWindowsHookExW
RedrawWindow
IsMenu
EndDeferWindowPos
TabbedTextOutW
DestroyAcceleratorTable
SetForegroundWindow
PostThreadMessageW
CreateDialogIndirectParamW
GetKeyboardState
ClientToScreen
GetDC
GetClassLongW
PtInRect
MessageBeep
SetScrollRange
SetWindowTextW
IsWindow
CopyIcon
DefMDIChildProcW
GetWindowLongW
SetWindowRgn
AppendMenuW
SystemParametersInfoW
GetMenuItemID
GetClassInfoW
BeginDeferWindowPos
SetClassLongW
GetCapture
SetActiveWindow
GetMessageTime
PeekMessageW
IsWindowEnabled
LoadImageW
ReleaseCapture
GetSysColor
LoadIconW
IntersectRect
LoadCursorW
GetScrollInfo
MapVirtualKeyW
DestroyWindow
GetKeyState
DestroyMenu
GetKeyboardLayout
GetActiveWindow
GetSystemMenu
WinHelpW
SetMenuItemBitmaps
InsertMenuItemW
FrameRect
CreateMenu
SetCapture
ShowOwnedPopups
GetClassInfoExW
DrawIconEx
GetFocus
DeleteMenu
GetSystemMetrics
SetMenuDefaultItem
GetMenuState
SetWindowPos
UnpackDDElParam
GetWindowThreadProcessId
LoadMenuW
AdjustWindowRectEx
GetCursorPos
GetDesktopWindow
UnionRect
WindowFromPoint
GetKeyNameTextW
IsClipboardFormatAvailable
CallWindowProcW
SetClipboardData
GetIconInfo
MapDialogRect
UpdateWindow
GetUpdateRect
IsRectEmpty
UpdateLayeredWindow
PostQuitMessage
FillRect
ReuseDDElParam
GetPropW
GetMessagePos
EnableMenuItem
DefFrameProcW
EmptyClipboard
MonitorFromPoint
GetAsyncKeyState
SetTimer
CreateWindowExW
GetNextDlgTabItem
DrawEdge
GetMessageW
TrackPopupMenu
CharUpperBuffW
GetWindow
GetClientRect
SendDlgItemMessageA
SetMenu
DrawStateW
SetPropW
EnumWindows
InflateRect

gdi32

TextOutW
EnumFontFamiliesW
FrameRgn
SetTextAlign
RectVisible
Polygon
CreateCompatibleBitmap
GetTextCharsetInfo
PtVisible
ExtFloodFill
CreateDCW
GetTextColor
CreateRectRgn
Ellipse
IntersectClipRect
SetTextColor
SetMapMode
CreateDIBSection
SelectPalette
GetLayout
CreateRoundRectRgn
PtInRegion
SetPixel
SetROP2
Escape
SetRectRgn
PatBlt
CreateRectRgnIndirect
GetStockObject
SetLayout
CreateCompatibleDC
GetWindowExtEx
CreatePatternBrush
SetViewportOrgEx
CreateHatchBrush
GetObjectType
SelectObject
Polyline
GetBitmapBits
SaveDC
ScaleWindowExtEx
SetWindowOrgEx
GetBkColor
SetPixelV
GetDeviceCaps
DeleteDC
Rectangle
FillRgn
OffsetRgn
GetClipBox
GetSystemPaletteEntries
GetViewportOrgEx
ExtTextOutW
GetPixel
CombineRgn
CreateDIBitmap
GetNearestPaletteIndex
MoveToEx
EnumFontFamiliesExW
CreateEllipticRgn
CreateSolidBrush
GetTextExtentPoint32W
SetWindowExtEx
SetViewportExtEx
GetTextMetricsW
GetViewportExtEx
GetTextFaceW
SetPaletteEntries
ExtSelectClipRgn
OffsetViewportOrgEx
CreatePolygonRgn
RestoreDC
CopyMetaFileW
CreatePen
CreateFontIndirectW
OffsetWindowOrgEx
LPtoDP
SelectClipRgn
SetPolyFillMode
SetBkColor
DPtoLP
SetDIBColorTable
LineTo
CreatePalette
ScaleViewportExtEx
DeleteObject
RealizePalette
GetObjectW
ExcludeClipRect
CreateBitmap
BitBlt
GetPaletteEntries
GetWindowOrgEx
StretchBlt
GetRgnBox
GetBoundsRect
SetBkMode

comdlg32

GetOpenFileNameW
GetFileTitleW

advapi32

RegOpenKeyExW
RegDeleteValueW
IsValidSid
SetSecurityDescriptorSacl
InitializeSecurityDescriptor
ConvertSidToStringSidW
RegEnumKeyExW
RegQueryValueExW
OpenProcessToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetTokenInformation
OpenThreadToken
SetSecurityDescriptorDacl
RegCreateKeyExW
GetSecurityDescriptorSacl
RegCloseKey
RegSetValueExW
RegDeleteKeyW

shell32

SHGetFileInfoW
SHGetPathFromIDListW
SHAppBarMessage
SHGetDesktopFolder
DragQueryFileW
SHGetFolderLocation
ShellExecuteExW
DragFinish
SHGetSpecialFolderLocation
ShellExecuteW
SHBrowseForFolderW

ole32

CoTaskMemFree
OleTranslateAccelerator
OleDestroyMenuDescriptor
CoLockObjectExternal
ReleaseStgMedium
CLSIDFromString
CoTaskMemAlloc
OleCreateMenuDescriptor
OleLockRunning
CoInitialize
CoInitializeEx
OleGetClipboard
OleDuplicateData
IsAccelerator
RevokeDragDrop
CreateStreamOnHGlobal
CoUninitialize
RegisterDragDrop
DoDragDrop
CoCreateInstance

oleaut32

VariantTimeToSystemTime
VarBstrFromDate
SysAllocStringByteLen
VariantClear
SysAllocString
SysStringByteLen
SysAllocStringLen
VariantInit
SysStringLen
SystemTimeToVariantTime
SysFreeString
VariantChangeType

comctl32

ImageList_GetIconSize

shlwapi

PathFindExtensionW
PathIsUNCW
PathStripToRootW
PathRemoveFileSpecW
PathFindFileNameW
SHCopyKeyA

winmm

PlaySoundW

msimg32

AlphaBlend
TransparentBlt

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

gdiplus

GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipSetInterpolationMode
GdipGetImageWidth
GdipGetImagePaletteSize
GdiplusShutdown
GdipGetImagePixelFormat
GdipCreateBitmapFromStream
GdipGetImageGraphicsContext
GdipAlloc
GdipDisposeImage
GdipCreateBitmapFromScan0
GdipDeleteGraphics
GdipCloneImage
GdipCreateFromHDC
GdipGetImagePalette
GdipBitmapLockBits
GdipFree
GdipDrawImageRectI
GdipBitmapUnlockBits
GdipDrawImageI
GdipGetImageHeight

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

Exports

Exports

MyCopyMemory

Sections

.text
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ffc
Size: - Virtual size: 200KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qqw
Size: 500KB - Virtual size: 499KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vvw
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

005520ceeede7fc16c3b0effbab9d167

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

winmm

msimg32

imm32

gdiplus

oleacc

Exports

Exports

Sections

.text Size: 166KB - Virtual size: 165KB

.ffc Size: - Virtual size: 200KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 512B - Virtual size: 20B

.qqw Size: 500KB - Virtual size: 499KB

.vvw Size: 160KB - Virtual size: 159KB

.rsrc Size: 1024B - Virtual size: 712B

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 166KB - Virtual size: 165KB

.ffc
Size: - Virtual size: 200KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 512B - Virtual size: 20B

.qqw
Size: 500KB - Virtual size: 499KB

.vvw
Size: 160KB - Virtual size: 159KB

.rsrc
Size: 1024B - Virtual size: 712B

.reloc
Size: 5KB - Virtual size: 4KB