391abb0312b417037117b47b2df98038

Sharing

Copy URL

Twitter E-mail

General

Target

391abb0312b417037117b47b2df98038
Size

822KB
MD5

391abb0312b417037117b47b2df98038
SHA1

ada869784e15fff09e2c9f6f72b889f182898dc4
SHA256

3bf407f4392ac187581604eb0fbc884c2b31785992549c449f53d2b441629105
SHA512

c5d33e3bbeb8f2a5d5059414338181b82103b8cc20572607e7082c9ed1ea828b930037b5e58314d60ad83e3b6fc6f90e8f0cef55b45efdd80d3714c5bdc7353f
SSDEEP

12288:a6zSfx3u4SguXKvoCmxlNG/svLfbkmbfeXuoTRsInBDuc+13qtUMcK:xefpSgiK1gG/KDbkcEuY2InY6CMN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
391abb0312b417037117b47b2df98038

Files

391abb0312b417037117b47b2df98038
.exe windows:5 windows x86 arch:x86

4498e81d2657cd7a7972f3ba4fbdc4d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
LocalAlloc
Sleep
VirtualProtect

user32

GetDesktopWindow
GetKeyboardLayout
SetScrollPos
WaitMessage
SetScrollInfo
GetFocus
EnableMenuItem
ShowCursor
EnumThreadWindows
GetScrollInfo
PtInRect
TranslateMDISysAccel
SetCursor
GetTopWindow
SetWindowTextA
SetTimer
GetMenuItemCount
RemovePropA
FindWindowA
InvalidateRect
LoadIconA
EndPaint
SetWindowLongA
DestroyMenu
GetCursorPos
ShowScrollBar
GetClassInfoA
RemoveMenu
FillRect
SetParent
ClientToScreen
GetClassNameA
LoadKeyboardLayoutA
GetWindowLongA
RegisterClassA
CharToOemA
IsIconic
GetWindowTextA
GetScrollPos
EnableWindow
GetForegroundWindow
IntersectRect
SetMenu
TrackPopupMenu
GetCursor
GetKeyNameTextA
ReleaseDC
GetWindowRect
PostMessageA
GetScrollRange
GetParent
SendMessageA
SetClassLongA
SetPropA
CreatePopupMenu
DrawIconEx
GetMenuState
FrameRect
GetIconInfo
GetSubMenu
IsRectEmpty
SetForegroundWindow
MessageBoxA
LoadStringA
SetScrollRange
RedrawWindow
GetSystemMenu
SetFocus
SetWindowPlacement
GetWindowPlacement
SystemParametersInfoA
CreateIcon
OffsetRect
GetPropA
DrawEdge
DestroyIcon
IsWindow
IsZoomed
GetSysColorBrush
PeekMessageA
DefWindowProcA
DispatchMessageA
EqualRect
CallNextHookEx
ShowOwnedPopups
DefFrameProcA
CharLowerBuffA
MsgWaitForMultipleObjects
GetDCEx
IsDialogMessageA
InsertMenuA
RegisterClipboardFormatA
CharLowerA
SetWindowPos
SetMenuItemInfoA
WinHelpA
GetSystemMetrics
ScrollWindow
GetMenuItemInfoA
CallWindowProcA
SetRect
GetDC
PostQuitMessage
InsertMenuItemA
IsWindowEnabled
CreateMenu
DrawMenuBar
MapWindowPoints
SetCapture
GetSysColor
ShowWindow
IsChild
KillTimer
CreateWindowExA
EnumWindows
GetActiveWindow
GetKeyState
UnhookWindowsHookEx
UpdateWindow
OemToCharA
DrawIcon
DrawFrameControl
GetKeyboardLayoutList
GetLastActivePopup
GetMenuStringA
DestroyWindow
ReleaseCapture
MapVirtualKeyA
DrawTextA
DefMDIChildProcA
DeleteMenu
DestroyCursor
GetWindowDC
UnregisterClassA
GetMenuItemID
InflateRect
GetCapture
AdjustWindowRectEx
LoadCursorA
GetWindowThreadProcessId
RegisterWindowMessageA
ActivateKeyboardLayout
CharNextA
GetMenu
ScreenToClient
WindowFromPoint
CheckMenuItem
LoadBitmapA
BeginPaint
SetWindowsHookExA
GetKeyboardState
GetWindow
GetClientRect
GetClipboardData
IsWindowVisible
EnableScrollBar
TranslateMessage
SetActiveWindow

gdi32

SetWindowOrgEx
RealizePalette
SetViewportOrgEx
RectVisible
CreateCompatibleBitmap
GetBrushOrgEx
PatBlt
GetTextMetricsA
DeleteObject
SetBrushOrgEx
SelectObject
SetDIBColorTable
GetCurrentPositionEx
SetWinMetaFileBits
MoveToEx
SetBkColor
GetDCOrgEx
CreateHalftonePalette
SetPixel
GetWinMetaFileBits
DeleteDC
CreateFontIndirectA
CreateSolidBrush
GetDIBColorTable
StretchBlt
CreateBrushIndirect
SelectPalette
GetEnhMetaFileHeader
SetEnhMetaFileBits
GetPaletteEntries
SetROP2
GetPixel
GetBitmapBits
PlayEnhMetaFile
UnrealizeObject
ChoosePixelFormat
SetStretchBltMode
SetBkMode
CreateDIBSection
MaskBlt
GetStockObject
Polyline
LineTo
GetObjectA
CreatePenIndirect
RestoreDC
GetDIBits
GetEnhMetaFilePaletteEntries
Rectangle
GetWindowOrgEx
CopyEnhMetaFileA
GetTextExtentPoint32A
GetEnhMetaFileBits
BitBlt
SaveDC
SetTextColor
CreateCompatibleDC
IntersectClipRect
GetClipBox
GetSystemPaletteEntries
CreatePalette
GetDeviceCaps
CreateDIBitmap
DeleteEnhMetaFile
CreateBitmap
ExcludeClipRect

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

oleaut32

VariantChangeType
VariantInit
VariantClear
SafeArrayCreate
SafeArrayGetUBound
VariantCopy
SafeArrayPtrOfIndex
SafeArrayGetLBound

comctl32

ImageList_DragShowNolock
ImageList_BeginDrag
ImageList_DrawEx
ImageList_SetIconSize
ImageList_DragMove
ImageList_DragEnter
ImageList_EndDrag
ImageList_Destroy
ImageList_GetImageCount
ImageList_Remove
ImageList_Add
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_GetIconSize
ImageList_Draw
ImageList_SetDragCursorImage
ImageList_DragLeave
ImageList_Read
ImageList_Write
ImageList_GetDragImage
ImageList_ReplaceIcon
ImageList_Create

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

netapi32

NetApiBufferSize

secur32

FreeCredentialsHandle

wldap32

ord99

msvcrt

exit

Sections

.text
Size: 480KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.zond
Size: 512B - Virtual size: 107B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.xas
Size: 224KB - Virtual size: 223KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.donc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fonb
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.eeee
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4498e81d2657cd7a7972f3ba4fbdc4d5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

oleaut32

comctl32

version

netapi32

secur32

wldap32

msvcrt

Sections

.text Size: 480KB - Virtual size: 480KB

.zond Size: 512B - Virtual size: 107B

.xas Size: 224KB - Virtual size: 223KB

.donc Size: 48KB - Virtual size: 47KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 150KB

.fonb Size: 48KB - Virtual size: 48KB

.eeee Size: 3KB - Virtual size: 3KB

.rsrc Size: 5KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 480KB - Virtual size: 480KB

.zond
Size: 512B - Virtual size: 107B

.xas
Size: 224KB - Virtual size: 223KB

.donc
Size: 48KB - Virtual size: 47KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 150KB

.fonb
Size: 48KB - Virtual size: 48KB

.eeee
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 5KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 3KB