39973a2c33927b85cde6bbaab75d1bfb

Sharing

Copy URL

Twitter E-mail

General

Target

39973a2c33927b85cde6bbaab75d1bfb
Size

844KB
MD5

39973a2c33927b85cde6bbaab75d1bfb
SHA1

ac9e00e3f2936896075c68753327cd11a51e9762
SHA256

2a3c749fee003fe59402fe41297441d6706225d3f9d2da7b45fc7b1dba870990
SHA512

7f7057f8b19ade8360d93e997aa2a278a285b546f4cd0d5437606937f62eda6ac8998f7364de24a671ebbd6a210c07262fb9844cf8beb6a69af3b2db77851138
SSDEEP

24576:vNifIxtvBagPtzPw7BRDkRD/2ik2+xcaqv15mBTarnh:gfIx1BaA547rD6+12yYvvmBe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39973a2c33927b85cde6bbaab75d1bfb

Files

39973a2c33927b85cde6bbaab75d1bfb
.exe windows:5 windows x86 arch:x86

fac006f925c4f02aa936ea3a207a554b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeW
LockFile
GlobalUnlock
DisconnectNamedPipe
MultiByteToWideChar
CopyFileW
InterlockedDecrement
lstrcmpW
GlobalSize
SetCurrentDirectoryW
GetCurrentProcessId
GetCommandLineW
GetOEMCP
FormatMessageW
MulDiv
DeleteCriticalSection
ReadFile
SetUnhandledExceptionFilter
HeapAlloc
GetConsoleMode
InitializeCriticalSection
HeapSetInformation
GlobalAddAtomW
GetTimeZoneInformation
ResumeThread
SetHandleCount
GetTempPathW
lstrcpyW
DuplicateHandle
InitializeCriticalSectionAndSpinCount
HeapSize
SetStdHandle
TlsAlloc
TlsGetValue
GetCPInfo
GetCurrentProcess
CreateNamedPipeW
SetLastError
OpenEventW
TlsFree
GlobalReAlloc
GetSystemTimeAsFileTime
LocalFree
GetStdHandle
CloseHandle
GetCurrentThreadId
GetEnvironmentStringsW
GetLocaleInfoW
HeapQueryInformation
GlobalFindAtomW
VirtualQuery
FindResourceW
WriteFile
CreateEventW
GetUserDefaultUILanguage
Sleep
IsProcessorFeaturePresent
WaitForSingleObject
SetEvent
GetOverlappedResult
GlobalAlloc
GlobalFlags
GetCurrentDirectoryW
SetThreadPriority
UnlockFile
LeaveCriticalSection
VirtualProtect
HeapFree
QueryPerformanceCounter
FindResourceExW
GetACP
HeapDestroy
GetFileType
lstrlenW
GlobalFree
GetFileAttributesExW
LoadLibraryExW
GetModuleFileNameW
LocalAlloc
InterlockedCompareExchange
lstrcmpA
GlobalGetAtomNameW
GetFileTime
FreeEnvironmentStringsW
TlsSetValue
HeapCreate
TerminateProcess
EnterCriticalSection
LocalReAlloc
WideCharToMultiByte
lstrcmpiW
GetLastError
LCMapStringW
InterlockedExchange
IsDebuggerPresent
FlushFileBuffers
GetStartupInfoW
ConnectNamedPipe
GetSystemDirectoryW
GetCurrentThread
SetFilePointer
RaiseException
FreeLibrary
GlobalDeleteAtom
IsValidCodePage
WriteConsoleW
VirtualAlloc
SetEndOfFile
GetVersionExW
GetProcessHeap
FileTimeToLocalFileTime
GetTickCount
GetTempFileNameW
CreateThread
LoadResource
FindClose
FindFirstFileW
FileTimeToSystemTime
GetConsoleCP
HeapReAlloc
RtlUnwind
UnhandledExceptionFilter
LockResource
CreateMutexW
GlobalHandle
ExitProcess
GetProfileIntW
GetWindowsDirectoryW
CreateFileW
ExitThread
GetNumberFormatW
GlobalLock
LoadLibraryW
GetSystemInfo
GetFullPathNameW
SearchPathW
SetEnvironmentVariableA
FreeResource
GetFileSize
GetVolumeInformationW
WaitForMultipleObjects
GetFileAttributesW
GetFileSizeEx
SizeofResource
InterlockedIncrement
TerminateThread
CompareStringW
GetProcAddress
GetModuleHandleW
lstrlenA

user32

SetLayeredWindowAttributes
SetParent
NotifyWinEvent
SendMessageW
ShowWindow
TranslateAcceleratorW
GetMenuCheckMarkDimensions
CopyAcceleratorTableW
GrayStringW
RegisterClipboardFormatW
DestroyIcon
MapWindowPoints
DeferWindowPos
IsZoomed
RegisterWindowMessageW
LockWindowUpdate
RealChildWindowFromPoint
EnumDisplayMonitors
CheckDlgButton
InsertMenuW
RemoveMenu
RegisterClassW
DispatchMessageW
GetWindowPlacement
BringWindowToTop
SetScrollInfo
GetForegroundWindow
GetDlgItem
CheckMenuItem
SubtractRect
GetMenuStringW
IsCharLowerW
GetMenuItemInfoW
PostMessageW
DrawFrameControl
SetScrollPos
EqualRect
RemovePropW
EnableScrollBar
EnableWindow
CreateAcceleratorTableW
SetCursorPos
SetWindowLongW
GetParent
CreatePopupMenu
LoadAcceleratorsW
IsWindowVisible
ScrollWindow
KillTimer
GetWindowTextLengthW
DrawIcon
DestroyCursor
IsIconic
GetMenuItemCount
EndDialog
GetScrollRange
SetFocus
GetMenuDefaultItem
SetRectEmpty
CallNextHookEx
DrawMenuBar
ToUnicodeEx
OffsetRect
HideCaret
TranslateMDISysAccel
ValidateRect
MapVirtualKeyExW
InvalidateRect
GetScrollPos
ReleaseDC
GetSysColorBrush
TranslateMessage
GetWindowTextW
CopyRect
MoveWindow
GetWindowDC
SendDlgItemMessageW
GetLastActivePopup
DrawTextW
LoadBitmapW
GetDlgCtrlID
SetCursor
SetRect
ScreenToClient
CharUpperW
MessageBoxW
CloseClipboard
GetClassNameW
ShowScrollBar
DrawTextExW
DialogBoxParamW
GetMenu
UnhookWindowsHookEx
GetMonitorInfoW
CopyImage
DrawFocusRect
BeginPaint
SetWindowPlacement
GetNextDlgGroupItem
OpenClipboard
ModifyMenuW
GetWindowRect
MonitorFromWindow
InvertRect
EndPaint
IsChild
WaitMessage
IsDialogMessageW
GetSubMenu
GetWindowRgn
GetDoubleClickTime
DefWindowProcW
GetTopWindow
SetWindowsHookExW
RedrawWindow
IsMenu
EndDeferWindowPos
TabbedTextOutW
DestroyAcceleratorTable
SetForegroundWindow
PostThreadMessageW
CreateDialogIndirectParamW
GetKeyboardState
ClientToScreen
GetDC
GetClassLongW
PtInRect
MessageBeep
SetScrollRange
SetWindowTextW
IsWindow
CopyIcon
DefMDIChildProcW
GetWindowLongW
SetWindowRgn
AppendMenuW
SystemParametersInfoW
GetMenuItemID
GetClassInfoW
BeginDeferWindowPos
SetClassLongW
GetCapture
SetActiveWindow
GetMessageTime
PeekMessageW
IsWindowEnabled
LoadImageW
ReleaseCapture
GetSysColor
LoadIconW
IntersectRect
LoadCursorW
GetScrollInfo
MapVirtualKeyW
DestroyWindow
GetKeyState
DestroyMenu
GetKeyboardLayout
GetActiveWindow
GetSystemMenu
WinHelpW
SetMenuItemBitmaps
InsertMenuItemW
FrameRect
CreateMenu
SetCapture
ShowOwnedPopups
GetClassInfoExW
DrawIconEx
GetFocus
DeleteMenu
GetSystemMetrics
SetMenuDefaultItem
GetMenuState
SetWindowPos
UnpackDDElParam
GetWindowThreadProcessId
LoadMenuW
AdjustWindowRectEx
GetCursorPos
GetDesktopWindow
UnionRect
WindowFromPoint
GetKeyNameTextW
IsClipboardFormatAvailable
CallWindowProcW
SetClipboardData
GetIconInfo
MapDialogRect
UpdateWindow
GetUpdateRect
IsRectEmpty
UpdateLayeredWindow
PostQuitMessage
FillRect
ReuseDDElParam
GetPropW
GetMessagePos
EnableMenuItem
DefFrameProcW
EmptyClipboard
MonitorFromPoint
GetAsyncKeyState
SetTimer
CreateWindowExW
GetNextDlgTabItem
DrawEdge
GetMessageW
TrackPopupMenu
CharUpperBuffW
GetWindow
GetClientRect
SendDlgItemMessageA
SetMenu
DrawStateW
SetPropW
EnumWindows
InflateRect

gdi32

TextOutW
EnumFontFamiliesW
FrameRgn
SetTextAlign
RectVisible
Polygon
CreateCompatibleBitmap
GetTextCharsetInfo
PtVisible
ExtFloodFill
CreateDCW
GetTextColor
CreateRectRgn
Ellipse
IntersectClipRect
SetTextColor
SetMapMode
CreateDIBSection
SelectPalette
GetLayout
CreateRoundRectRgn
PtInRegion
SetPixel
SetROP2
Escape
SetRectRgn
PatBlt
CreateRectRgnIndirect
GetStockObject
SetLayout
CreateCompatibleDC
GetWindowExtEx
CreatePatternBrush
SetViewportOrgEx
CreateHatchBrush
GetObjectType
SelectObject
Polyline
GetBitmapBits
SaveDC
ScaleWindowExtEx
SetWindowOrgEx
GetBkColor
SetPixelV
GetDeviceCaps
DeleteDC
Rectangle
FillRgn
OffsetRgn
GetClipBox
GetSystemPaletteEntries
GetViewportOrgEx
ExtTextOutW
GetPixel
CombineRgn
CreateDIBitmap
GetNearestPaletteIndex
MoveToEx
EnumFontFamiliesExW
CreateEllipticRgn
CreateSolidBrush
GetTextExtentPoint32W
SetWindowExtEx
SetViewportExtEx
GetTextMetricsW
GetViewportExtEx
GetTextFaceW
SetPaletteEntries
ExtSelectClipRgn
OffsetViewportOrgEx
CreatePolygonRgn
RestoreDC
CopyMetaFileW
CreatePen
CreateFontIndirectW
OffsetWindowOrgEx
LPtoDP
SelectClipRgn
SetPolyFillMode
SetBkColor
DPtoLP
SetDIBColorTable
LineTo
CreatePalette
ScaleViewportExtEx
DeleteObject
RealizePalette
GetObjectW
ExcludeClipRect
CreateBitmap
BitBlt
GetPaletteEntries
GetWindowOrgEx
StretchBlt
GetRgnBox
GetBoundsRect
SetBkMode

comdlg32

GetOpenFileNameW
GetFileTitleW

advapi32

RegOpenKeyExW
RegDeleteValueW
IsValidSid
SetSecurityDescriptorSacl
InitializeSecurityDescriptor
ConvertSidToStringSidW
RegEnumKeyExW
RegQueryValueExW
OpenProcessToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetTokenInformation
OpenThreadToken
SetSecurityDescriptorDacl
RegCreateKeyExW
GetSecurityDescriptorSacl
RegCloseKey
RegSetValueExW
RegDeleteKeyW

shell32

SHGetFileInfoW
SHGetPathFromIDListW
SHAppBarMessage
SHGetDesktopFolder
DragQueryFileW
SHGetFolderLocation
ShellExecuteExW
DragFinish
SHGetSpecialFolderLocation
ShellExecuteW
SHBrowseForFolderW

ole32

CoTaskMemFree
OleTranslateAccelerator
OleDestroyMenuDescriptor
CoLockObjectExternal
ReleaseStgMedium
CLSIDFromString
CoTaskMemAlloc
OleCreateMenuDescriptor
OleLockRunning
CoInitialize
CoInitializeEx
OleGetClipboard
OleDuplicateData
IsAccelerator
RevokeDragDrop
CreateStreamOnHGlobal
CoUninitialize
RegisterDragDrop
DoDragDrop
CoCreateInstance

oleaut32

VariantTimeToSystemTime
VarBstrFromDate
SysAllocStringByteLen
VariantClear
SysAllocString
SysStringByteLen
SysAllocStringLen
VariantInit
SysStringLen
SystemTimeToVariantTime
SysFreeString
VariantChangeType

comctl32

ImageList_GetIconSize

shlwapi

PathFindExtensionW
PathIsUNCW
PathStripToRootW
PathRemoveFileSpecW
PathFindFileNameW
ord215

winmm

PlaySoundW

msimg32

AlphaBlend
TransparentBlt

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

gdiplus

GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipSetInterpolationMode
GdipGetImageWidth
GdipGetImagePaletteSize
GdiplusShutdown
GdipGetImagePixelFormat
GdipCreateBitmapFromStream
GdipGetImageGraphicsContext
GdipAlloc
GdipDisposeImage
GdipCreateBitmapFromScan0
GdipDeleteGraphics
GdipCloneImage
GdipCreateFromHDC
GdipGetImagePalette
GdipBitmapLockBits
GdipFree
GdipDrawImageRectI
GdipBitmapUnlockBits
GdipDrawImageI
GdipGetImageHeight

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

Exports

Exports

MyCopyMemory

Sections

.text
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ssw
Size: - Virtual size: 5.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qqw
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ttw
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ddw
Size: 293KB - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fac006f925c4f02aa936ea3a207a554b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

winmm

msimg32

imm32

gdiplus

oleacc

Exports

Exports

Sections

.text Size: 192KB - Virtual size: 191KB

.ssw Size: - Virtual size: 5.4MB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 512B - Virtual size: 24B

.qqw Size: 147KB - Virtual size: 146KB

.ttw Size: 147KB - Virtual size: 146KB

.ddw Size: 293KB - Virtual size: 293KB

.tls Size: 512B - Virtual size: 57B

.rsrc Size: 33KB - Virtual size: 32KB

.reloc Size: 14KB - Virtual size: 14KB

.text
Size: 192KB - Virtual size: 191KB

.ssw
Size: - Virtual size: 5.4MB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 512B - Virtual size: 24B

.qqw
Size: 147KB - Virtual size: 146KB

.ttw
Size: 147KB - Virtual size: 146KB

.ddw
Size: 293KB - Virtual size: 293KB

.tls
Size: 512B - Virtual size: 57B

.rsrc
Size: 33KB - Virtual size: 32KB

.reloc
Size: 14KB - Virtual size: 14KB