3cf8186aa7874771795573ec579a9aef

Sharing

Copy URL Twitter E-mail

General

Target

3cf8186aa7874771795573ec579a9aef
Size

534KB
MD5

3cf8186aa7874771795573ec579a9aef
SHA1

62945362eba3486095bd3ec17d36e1036091228b
SHA256

80963fc94ed91da4fbd3e5c76b0c9ab0bcb2d0024e34eb1cc1b446b350e62d27
SHA512

2160300ea086cc0c2cec5f177d498db8650e9d8326de5eef9c9f14460a25bbff9071e7d38c59620bc0fd399c62737f4966e7a78db23a3cfe21264081f804eaf4
SSDEEP

12288:0MMnMMMMMCraM0y3Se1+tQ+cANnmOGLUlTas4/450JVeJAnJ3cOSU3ZS:0MMnMMMMMCWMd3Sew2zANRGoaqWJVeOy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cf8186aa7874771795573ec579a9aef

Files

3cf8186aa7874771795573ec579a9aef
.exe windows:4 windows x86 arch:x86

3b9f01da3af14b104aabe2c7e620701a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rtutils

TraceDumpExA

shell32

SHGetPathFromIDListW
SHGetFolderPathAndSubDirW
ShellAboutW
SHAppBarMessage
ExtractIconW
SHBindToParent
ExtractAssociatedIconExW
SHFileOperationW
ShellExecuteExW
SHGetFolderPathW
Shell_NotifyIconA
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetFileInfoW
SHGetPathFromIDListA
ExtractIconExW
Shell_NotifyIconW
SHGetFolderLocation
ShellExecuteW
SHGetSpecialFolderPathW
ShellExecuteA
SHCreateShellItem
SHSetLocalizedName
SHGetDesktopFolder
SHGetInstanceExplorer
SHPathPrepareForWriteW
SHChangeNotify
DragQueryFileW
SHGetDataFromIDListW

kernel32

VirtualAlloc

advapi32

GetLengthSid
RegOpenKeyW
OpenThreadToken
DuplicateTokenEx
RegCreateKeyExW
CryptHashData
ConvertStringSidToSidW
CreateProcessAsUserW
GetTraceEnableLevel
IsTextUnicode
RegQueryValueW
RegDeleteValueW
CryptAcquireContextW
RegisterTraceGuidsW
ConvertSidToStringSidW
GetTraceEnableFlags
SetThreadToken
RegSetValueExW
RegEnumKeyW
RegEnumValueW
ImpersonateSelf
RegCreateKeyA
RegEnumValueA
RegOpenKeyExW
CryptReleaseContext
CryptGetHashParam
RegEnumKeyExW
RegSetValueExA
RegQueryValueExW
SetTokenInformation
TraceEvent
GetTokenInformation
CryptDestroyHash
GetTraceLoggerHandle
GetUserNameW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegDeleteKeyA
TraceMessage
OpenProcessToken
RegQueryValueExA
RegDeleteKeyW
RegQueryInfoKeyW
RegOpenCurrentUser
UnregisterTraceGuids
RegDeleteValueA
RegOpenKeyExA
RegCreateKeyExA
CryptCreateHash
RegCloseKey

user32

GetAncestor
IsWindowEnabled
GetSysColorBrush
PostMessageA
GetClipboardData
DdeInitializeW
MessageBoxExA
MapWindowPoints
AdjustWindowRectEx
GetWindowDC
DdeCreateDataHandle
RegisterWindowMessageA
OpenClipboard
DispatchMessageW
MonitorFromWindow
IntersectRect
SetMenuDefaultItem
CharLowerW
GetWindowTextLengthW
GetMenuItemInfoW
CheckRadioButton
GetClassWord
WaitMessage
EmptyClipboard
DrawEdge
GetClassInfoW
CheckMenuItem
GetMenuItemCount
InvalidateRect
VkKeyScanExW
GetMenuStringW
GetDC
GetNextDlgTabItem
GetDlgCtrlID
DeferWindowPos
SetScrollInfo
GetMessagePos
LockSetForegroundWindow
DdeCreateStringHandleW
IsDialogMessageW
TrackPopupMenu
BeginDeferWindowPos
DdeGetData
WaitForInputIdle
UpdateWindow
PostQuitMessage
DdeUninitialize
ShowScrollBar
DrawIconEx
GetLastInputInfo
DialogBoxParamA
GetWindowPlacement
DialogBoxIndirectParamA
GetProcessWindowStation
UnregisterClassW
TrackMouseEvent
EndDeferWindowPos
SetWindowRgn
MessageBoxIndirectA
MonitorFromPoint
SystemParametersInfoW
RegisterClipboardFormatA
MapVirtualKeyW
CallNextHookEx
IsDlgButtonChecked
SetRectEmpty
AnimateWindow
SetCapture
DeleteMenu
DestroyMenu
SendMessageW
DestroyWindow
GetWindowTextW
UnhookWindowsHookEx
GetClientRect
LoadBitmapW
CloseClipboard
DdeQueryStringW
LoadMenuW
CharNextA
SetForegroundWindow
SetWindowPos
SendDlgItemMessageW
IsIconic
SetWindowPlacement
SetTimer
EnumChildWindows
CharLowerBuffW
GetMenuItemID
GetAsyncKeyState
SetWindowTextW
MessageBeep
RegisterClassExW
WindowFromPoint
GetFocus
CharPrevA
IsCharAlphaNumericW
MessageBoxIndirectW
SetMenu
CopyIcon
SetWindowsHookExW
GetComboBoxInfo
GetWindowLongA
RemoveMenu
GetWindowThreadProcessId
EnumDisplaySettingsW
EndDialog
SetActiveWindow
GetCapture
LoadCursorW
GetClipboardFormatNameW
SetDlgItemInt
DdeNameService
ChangeClipboardChain
FillRect
SendNotifyMessageW
CallMsgFilterW
LoadImageW
GetPropA
SetDlgItemTextW
GetMenuItemInfoA
SetCursor
SetMenuItemInfoW
BeginPaint
InsertMenuItemW
FindWindowW
EnumWindows
GetSysColor
UpdateLayeredWindow
EqualRect
DdeFreeStringHandle
CreateMenu
GetDlgItemTextW
PtInRect
GetKeyNameTextW
GetWindowRgnBox
CreateWindowExW
KillTimer
DrawFocusRect
AttachThreadInput
ShowCaret
CreatePopupMenu
GetClassLongW
GetSystemMenu
GetParent
CreateDialogParamW
AllowSetForegroundWindow
RegisterWindowMessageW
SetCursorPos
GetShellWindow
SendMessageTimeoutW
WinHelpW
TranslateAcceleratorW
SendMessageA
TranslateMessage
GetMenuState
DefWindowProcW
LoadStringW
DrawTextW
SetMenuItemBitmaps
EnableWindow
AppendMenuW
PeekMessageA
GetMenuDefaultItem
DrawTextExW
HideCaret
GetDlgItem
GetIconInfo
wsprintfW
LoadIconW
GetWindowRect
ShowWindow
SendMessageTimeoutA
DdeDisconnect
LoadStringA
DestroyIcon
MessageBoxW
CharPrevW
SetPropA
DdeFreeDataHandle
MoveWindow
MsgWaitForMultipleObjectsEx
GetDialogBaseUnits
GetCursorPos
MsgWaitForMultipleObjects
CharNextW
LoadCursorA
FindWindowExW
GetTopWindow
EnableMenuItem
RemovePropW
GetMonitorInfoW
EndMenu
InflateRect
DialogBoxParamW
IsWindowUnicode
PeekMessageW
EnumDesktopWindows
ScreenToClient
RegisterClassW
MessageBoxExW
DrawFrameControl
GetMessageW
ReleaseDC
TrackPopupMenuEx
SystemParametersInfoA
IsWindowVisible
GetForegroundWindow
SetClipboardViewer
IsChild
GetMessageA
CheckDlgButton
GetDesktopWindow
RedrawWindow
GetSystemMetrics
UnionRect
EnumThreadWindows
SetWindowLongW
IsMenu
GetSubMenu
CreateIconIndirect
GetMessageTime
NotifyWinEvent
ChildWindowFromPoint
MapDialogRect
DefWindowProcA
InsertMenuW
ShowOwnedPopups
SetParent
GetWindowLongW
GetLastActivePopup
RegisterClipboardFormatW
DestroyAcceleratorTable
GetCursor
IsHungAppWindow
GetWindowInfo
PostMessageW
GetActiveWindow
IsWindow
OffsetRect
CharUpperW
LoadAcceleratorsW
IsRectEmpty
CopyImage
SetFocus
MonitorFromRect
CopyRect
GetClassInfoExW
DdeConnect
CheckMenuRadioItem
DialogBoxIndirectParamW
ClientToScreen
GetKeyboardLayout
GetDoubleClickTime
GetScrollInfo
RemovePropA
PostThreadMessageW
SetWindowLongA
DispatchMessageA
GetPropW
SetPropW
SetRect
GetWindow
SetScrollPos
DdeClientTransaction
GetKeyState
FindWindowA
CallWindowProcW
PostThreadMessageA
ReleaseCapture
AdjustWindowRect
EndPaint
SetClipboardData
GetClassNameW

ntdll

RtlAdjustPrivilege
RtlAddAccessAllowedObjectAce
NtQuerySemaphore
NtQueueApcThread

psapi

GetProcessImageFileNameW

ddraw

DirectDrawCreate

gdi32

SetRectRgn
SetViewportOrgEx
SetStretchBltMode
GetObjectA
CreateSolidBrush
SetLayout
GetBrushOrgEx
CreateRectRgn
CreateMetaFileW
Rectangle
GetDeviceCaps
LineTo
SetBrushOrgEx
GetTextExtentPointW
SelectObject
DeleteEnhMetaFile
SetTextColor
GetTextMetricsW
TextOutA
GetTextExtentPoint32A
CombineRgn
SetWindowExtEx
OffsetWindowOrgEx
OffsetRgn
CreatePalette
GetTextColor
IntersectClipRect
GetBkColor
CreateCompatibleBitmap
RestoreDC
GetDCOrgEx
SetPaletteEntries
SetMapMode
StretchBlt
CreatePatternBrush
GetRegionData
GetTextExtentPoint32W
CreatePolygonRgn
StretchDIBits
RealizePalette
CreateRectRgnIndirect
GetTextCharset
DeleteObject
CreateFontW
SetBkMode
PlayEnhMetaFile
CreatePen
CreateEnhMetaFileA
SetTextAlign
CreateDIBPatternBrushPt
CreateFontIndirectW
CreateFontIndirectA
EqualRgn
CreateDIBSection
SelectPalette
GetRgnBox
GetPixel
DeleteDC
SetDCPenColor
GetTextExtentExPointI
ExtCreateRegion
SaveDC
GetDIBits
CreateCompatibleDC
GetClipBox
CloseEnhMetaFile
GetStockObject
GetPaletteEntries
MoveToEx
TextOutW
LPtoDP
SetBkColor
RectVisible
CreateBitmap
PatBlt
CreateDCA
GetObjectW
CreateHalftonePalette
GetLayout
GetTextAlign
SetViewportExtEx
ExtTextOutW
GetBkMode
SetWindowOrgEx
GetSystemPaletteEntries
CreateDCW
GetGlyphIndicesW
CloseMetaFile
BitBlt

uxtheme

GetThemeFont
GetThemeMetric
OpenThemeData
IsThemeActive
SetWindowTheme
GetThemeBackgroundContentRect
IsAppThemed
GetThemeBackgroundExtent
GetThemeAppProperties
DrawThemeParentBackground
GetThemeColor
DrawThemeBackground
CloseThemeData
GetThemePartSize
GetThemeMargins

Sections

.text
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 258KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 193KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3b9f01da3af14b104aabe2c7e620701a

Headers

File Characteristics

Imports

rtutils

shell32

kernel32

advapi32

user32

ntdll

psapi

ddraw

gdi32

uxtheme

Sections

.text Size: 1024B - Virtual size: 996B

.rsrc Size: 68KB - Virtual size: 67KB

.rdata Size: 258KB - Virtual size: 257KB

.data Size: 193KB - Virtual size: 2.0MB

.idata Size: 12KB - Virtual size: 12KB

.text
Size: 1024B - Virtual size: 996B

.rsrc
Size: 68KB - Virtual size: 67KB

.rdata
Size: 258KB - Virtual size: 257KB

.data
Size: 193KB - Virtual size: 2.0MB

.idata
Size: 12KB - Virtual size: 12KB