388e35bb5991d466aad937b817b20ee0

Sharing

Copy URL

Twitter E-mail

General

Target

388e35bb5991d466aad937b817b20ee0
Size

406KB
MD5

388e35bb5991d466aad937b817b20ee0
SHA1

d21fb4a37b8a50e3af768f7db187de20f2acd344
SHA256

52f3f7745920729f71c1d27b9249a134264523ed083d91fdd3115544c647eeb5
SHA512

1d177c31900fc8f40bc46ca934e2bfae821f6ddf2447cc9861ffa8eb6ecebe0e8c69665fd03c3ba6f036ef8d4a32373204b8e9e5803fa32b1aca32af9cef6219
SSDEEP

12288:K83w3qF9uAvWR4126npWzdhlG8dj+6ciDeCm/yNyh56VOSsHYuCiDrPA6n/anhVA:K83w3qF9uAvWR4126npWzdhlG8dj+Hhp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
388e35bb5991d466aad937b817b20ee0

Files

388e35bb5991d466aad937b817b20ee0
.exe windows:4 windows x86 arch:x86

411739663ea4ee90142ea435538b0df7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
lstrlenA
GetTempPathA
GetTempFileNameA
lstrcpyA
GetPrivateProfileStringA
GetModuleFileNameA
LoadLibraryA
WaitForSingleObject
SetEvent
ResetEvent
CreateEventA
FormatMessageA
LocalFree
GetLastError
GetProfileStringA
GetVersionExA
lstrcpynA
GetTickCount
CopyFileA
GlobalReAlloc
WritePrivateProfileStringA
GetPrivateProfileIntA
CreateFileA
ReadFile
CloseHandle
_llseek
GlobalAlloc
GlobalLock
_hread
GlobalHandle
GlobalUnlock
GlobalFree
MultiByteToWideChar
FindResourceA
SizeofResource
LoadResource
LockResource
_hwrite
FreeResource
SystemTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetTimeZoneInformation
GetWindowsDirectoryA
_lopen
_lcreat
_lread
_lwrite
_lclose
lstrcatA
lstrcmpiA
GetEnvironmentStringsW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
HeapSize
GetCurrentProcess
TerminateProcess
WriteFile
GetLocalTime
GetSystemTime
HeapValidate
HeapReAlloc
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
CreateDirectoryA
RemoveDirectoryA
FindClose
FindFirstFileA
HeapAlloc
HeapFree
RtlUnwind
DeleteFileA
GetFileAttributesA
SetFileAttributesA
WideCharToMultiByte
RaiseException
InterlockedExchange
LocalAlloc
GetEnvironmentStrings
GetProcAddress
SetHandleCount
GetStdHandle
GetFileType
WinExec
CompareStringA
SetFilePointer
SetUnhandledExceptionFilter
SetStdHandle
FlushFileBuffers
IsBadReadPtr
IsBadCodePtr
GetCPInfo
SetEndOfFile
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
GetStringTypeA
GetStringTypeW

user32

LoadAcceleratorsA
SetWindowsHookA
OffsetRect
GetSystemMetrics
GetMessageA
RegisterClassA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
UnhookWindowsHook
LoadStringA
ShowWindow
GetWindowRect
MoveWindow
SendDlgItemMessageA
SetWindowTextA
GetWindow
GetDlgItemTextA
CharLowerA
SetDlgItemTextA
GetDlgItemInt
PostQuitMessage
IsZoomed
GetWindowPlacement
PtInRect
CheckDlgButton
SetDlgItemInt
InvalidateRect
LoadIconA
GetDlgItem
EnableWindow
CopyRect
LoadBitmapA
SetWindowPos
CreateWindowExA
SetWindowLongA
GetParent
GetWindowLongA
SetRect
DrawTextA
GetPropA
RemovePropA
SetPropA
GetClassNameA
GetKeyState
IsDialogMessageA
GetFocus
IsWindowEnabled
EmptyClipboard
SetClipboardData
BeginPaint
EndPaint
GetMenu
GetSubMenu
UpdateWindow
DialogBoxParamA
MessageBoxA
SendMessageA
SetRectEmpty
DefWindowProcA
IsIconic
IsDlgButtonChecked
CheckRadioButton
EndDialog
CloseClipboard
SetTimer
KillTimer
GetScrollRange
CharUpperBuffA
GetScrollInfo
LoadCursorA
SetCursor
GetCapture
GetClientRect
IsWindowVisible
WinHelpA
InvertRect
EnableScrollBar
SetActiveWindow
ReleaseCapture
SetCapture
ClientToScreen
GetDesktopWindow
PeekMessageA
CreateDialogParamA
GetScrollPos
ScrollWindow
SetScrollPos
GetDC
ReleaseDC
InflateRect
DrawTextExA
GetCursor
DestroyWindow
IsRectEmpty
SetScrollRange
DestroyCursor
GetWindowTextA
IsCharAlphaA
CharUpperA
IsCharAlphaNumericA
IsCharLowerA
IsCharUpperA
CallWindowProcA
GetCursorPos
ScreenToClient
GetSysColor
GetWindowTextLengthA
FillRect
wsprintfA
GetActiveWindow
PostMessageA
CallNextHookEx
CheckMenuItem
GetMenuItemCount
GetMenuItemInfoA
EnableMenuItem
MessageBeep
SetFocus
IsWindow
OpenClipboard
DrawMenuBar
SetMenu
wsprintfW

gdi32

SetBkMode
BitBlt
SelectObject
CreateCompatibleDC
GetStockObject
DeleteObject
GetObjectA
TextOutA
SetBkColor
SetTextColor
SetTextAlign
CreatePalette
CreateFontIndirectA
SetWindowOrgEx
CreateSolidBrush
SetRectRgn
ExtTextOutA
SelectClipRgn
CreateRectRgn
GetTextExtentPointA
GetTextMetricsA
PatBlt
CreatePatternBrush
CreateBitmap
SetViewportOrgEx
GetWindowOrgEx
LPtoDP
SetViewportExtEx
GetWindowExtEx
SetMapMode
GetDeviceCaps
EnumFontFamiliesA
CreatePen
RealizePalette
SelectPalette
LineTo
MoveToEx
CreateFontA
GetCharWidthA
CreateICA
EndPage
StartPage
StartDocA
EndDoc
AbortDoc
DeleteDC
CreateDCA
GetTextAlign

winspool.drv

OpenPrinterA
DeviceCapabilitiesA
GetPrinterA
ClosePrinter
DocumentPropertiesA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
PrintDlgA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegQueryValueA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHChangeNotify
ShellExecuteA

ole32

CoCreateInstance
CoInitialize
OleSetMenuDescriptor
StgCreateDocfile
CoUninitialize

rpcrt4

UuidToStringA
RpcStringFreeA

comctl32

InitCommonControlsEx
CreateToolbarEx

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

Sections

.text
Size: 216KB - Virtual size: 213KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

411739663ea4ee90142ea435538b0df7

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

rpcrt4

comctl32

version

Sections

.text Size: 216KB - Virtual size: 213KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 36KB - Virtual size: 49KB

.rsrc Size: 96KB - Virtual size: 92KB

.text
Size: 216KB - Virtual size: 213KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 36KB - Virtual size: 49KB

.rsrc
Size: 96KB - Virtual size: 92KB