6ca4ab1db5595f850954b973bcb9a0f0a2fcc4763edf9d186cc6cc0d828f3c2d

Sharing

Copy URL Twitter E-mail

General

Target

6ca4ab1db5595f850954b973bcb9a0f0a2fcc4763edf9d186cc6cc0d828f3c2d
Size

7.7MB
MD5

d9fce64c8d36e1e698e15df237a7dbc0
SHA1

614d7b4957adb897fd6dd7a9384186ee83bfbe8b
SHA256

6ca4ab1db5595f850954b973bcb9a0f0a2fcc4763edf9d186cc6cc0d828f3c2d
SHA512

a82d70e75c6d7084a1a491e0450fc661926e255820299e2161276a4e85099e7a8bb909547c12a43a12012e9a4e02421c0bb84dbb5fd501420806246560f834ab
SSDEEP

49152:BSUr6DxXsFwZPgR6ChvURX9Z/TnqyoJGX3l+vF2keyg7XiwZY4X04F0Y6:JrQ/Pg91URXP/TnqBGX3l+v4klg7XiU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ca4ab1db5595f850954b973bcb9a0f0a2fcc4763edf9d186cc6cc0d828f3c2d

Files

6ca4ab1db5595f850954b973bcb9a0f0a2fcc4763edf9d186cc6cc0d828f3c2d
.exe windows:5 windows x86 arch:x86

d44cc36e9724a8f31d208e9913c17e48

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceFrequency
VirtualQuery
VirtualAlloc
GetSystemInfo
HeapQueryInformation
GetFileType
SetStdHandle
GetModuleHandleExW
GetStdHandle
ExitThread
CreateThread
GetCommandLineW
GetCommandLineA
RtlUnwind
OutputDebugStringW
ExitProcess
GetStringTypeW
GetACP
LCMapStringW
GetConsoleCP
ReadConsoleW
GetConsoleMode
SetFilePointerEx
GetTimeZoneInformation
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
WaitForSingleObjectEx
ResetEvent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SearchPathW
GetProfileIntW
GetTempPathW
GetTempFileNameW
VerifyVersionInfoW
VerSetConditionMask
GetWindowsDirectoryW
GetTickCount
FindResourceExW
lstrcpyW
SetErrorMode
VirtualProtect
GlobalGetAtomNameW
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
FileTimeToLocalFileTime
GetThreadLocale
lstrcmpiW
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
FindClose
DeleteFileW
CopyFileW
FormatMessageW
MulDiv
LocalFree
GlobalSize
GetCurrentProcessId
ResumeThread
SuspendThread
SetThreadPriority
CreateEventW
WaitForSingleObject
SetEvent
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
GlobalFree
GlobalFindAtomW
GlobalAddAtomW
LoadLibraryW
LoadLibraryA
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetSystemDirectoryW
SetLastError
EncodePointer
OutputDebugStringA
lstrcmpW
lstrcmpA
GlobalDeleteAtom
LoadLibraryExW
FreeLibrary
GetVersionExW
GetCurrentThreadId
GetCurrentThread
FreeResource
GlobalUnlock
GlobalLock
GlobalAlloc
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
lstrlenW
GetProcessHeap
CreateMutexW
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
HeapFree
ReadFile
CloseHandle
CreateFileW
Sleep
GetCurrentDirectoryW
WinExec
GetModuleFileNameW
FindResourceW
LoadResource
LockResource
SizeofResource
GetLastError
FreeLibraryAndExitThread
WriteConsoleW

user32

MapVirtualKeyW
GetKeyNameTextW
CharUpperW
GetMenuItemInfoW
DestroyMenu
InflateRect
IsDialogMessageW
SetWindowTextW
CheckDlgButton
MoveWindow
ShowWindow
ClientToScreen
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
RemoveMenu
InsertMenuW
GetMenuState
GetMenuStringW
GetWindowThreadProcessId
SetCursor
ShowOwnedPopups
TranslateMessage
GetMessageW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetDesktopWindow
IsWindowEnabled
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
MapDialogRect
SetWindowContextHelpId
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
SetWindowsHookExW
GetWindow
LoadMenuW
GetTopWindow
GetClassNameW
GetClassLongW
EqualRect
GetSysColor
MapWindowPoints
MessageBoxW
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
EndPaint
BeginPaint
GetMenuDefaultItem
TrackPopupMenu
GetMenuItemCount
GetMenuItemID
GetSubMenu
UnionRect
GetSystemMenu
SetParent
FindWindowW
SendMessageW
GetClassInfoW
LoadIconW
GetSystemMetrics
SetMenu
GetMenu
GetCapture
GetKeyState
GetFocus
SetFocus
GetDlgCtrlID
GetDlgItem
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
WaitMessage
WindowFromPoint
CopyImage
DeleteMenu
RealChildWindowFromPoint
SendDlgItemMessageA
SetRectEmpty
OffsetRect
GetSysColorBrush
GetAsyncKeyState
CharNextW
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
IsChild
IsMenu
CreateWindowExW
DestroyIcon
BringWindowToTop
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
GetLastActivePopup
LoadImageW
GetDC
GetClientRect
SetTimer
IsIconic
DrawIcon
SetRect
InvalidateRect
KillTimer
GetWindowRect
SetForegroundWindow
PostMessageW
LoadBitmapW
SystemParametersInfoW
GetComboBoxInfo
RegisterDeviceNotificationW
GetWindowLongW
SetWindowLongW
SetLayeredWindowAttributes
SetWindowPos
GetCursorPos
CreatePopupMenu
AppendMenuW
EnableWindow
GetParent
UnregisterClassW
PtInRect
FillRect
UpdateWindow
CopyRect
ReleaseDC
SetWindowRgn
IsRectEmpty
IntersectRect
IsZoomed
ScreenToClient
SetCapture
ReleaseCapture
IsWindow
LoadCursorW
UpdateLayeredWindow
PostQuitMessage
UnhookWindowsHookEx
RegisterWindowMessageW
DrawFocusRect
DrawIconEx
GetIconInfo
EnableScrollBar
UnpackDDElParam
ReuseDDElParam
TrackMouseEvent
GetForegroundWindow
RegisterClipboardFormatW
DispatchMessageW
PeekMessageW
GetMessagePos
GetMessageTime
DefWindowProcW
CallWindowProcW
RegisterClassW
GetClassInfoExW
HideCaret
InvertRect
NotifyWinEvent
EnumDisplayMonitors
SetClassLongW
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
DrawEdge
DrawFrameControl
SetCursorPos
CopyIcon
FrameRect
PostThreadMessageW
LockWindowUpdate
MonitorFromPoint
DestroyCursor
GetWindowRgn
CreateMenu
SubtractRect
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
GetUpdateRect
IsClipboardFormatAvailable
CharUpperBuffW
ModifyMenuW
GetDoubleClickTime
SetMenuDefaultItem
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
SetActiveWindow

gdi32

GetStockObject
CreateFontIndirectW
CreateRectRgn
CombineRgn
CopyMetaFileW
CreateDCW
CreateHatchBrush
CreatePen
CreatePatternBrush
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
SetPixel
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
GetMapMode
PatBlt
SetRectRgn
DPtoLP
GetTextExtentPoint32W
GetBkColor
GetTextColor
GetRgnBox
GetTextMetricsW
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
Rectangle
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceW
CreateSolidBrush
GetPixel
SetTextColor
SetBkColor
SelectObject
CreateBitmap
GetDIBits
GetObjectW
DeleteDC
BitBlt
CreateFontW
CreateCompatibleBitmap
DeleteObject
StretchBlt
CreateCompatibleDC
OffsetWindowOrgEx
GetDeviceCaps

msimg32

TransparentBlt
AlphaBlend

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegQueryValueW
RegOpenKeyExW
RegEnumKeyExW
RegEnumValueW
RegCloseKey
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW

shell32

Shell_NotifyIconW
SHGetFileInfoW
DragQueryFileW
DragFinish
SHAppBarMessage
SHBrowseForFolderW
ShellExecuteW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW

comctl32

InitCommonControlsEx
_TrackMouseEvent

shlwapi

PathFindFileNameW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
PathFindExtensionW
StrFormatKBSizeW

uxtheme

GetCurrentThemeName
GetThemeSysColor
DrawThemeText
DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
DrawThemeParentBackground
OpenThemeData
CloseThemeData
GetThemeColor
GetWindowTheme
GetThemePartSize
IsAppThemed

ole32

OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CoInitializeEx
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoInitialize
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
CoUninitialize
IsAccelerator
CreateStreamOnHGlobal

oleaut32

VariantClear
VariantInit
SysAllocStringLen
SysFreeString
SysAllocString
SysStringLen
VariantChangeType
VariantCopy
VarBstrFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
LoadTypeLi
OleCreateFontIndirect

oledlg

OleUIBusyW

gdiplus

GdipReleaseDC
GdipDrawImageRectI
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetInterpolationMode
GdipSetPixelOffsetMode
GdipLoadImageFromFileICM
GdipFree
GdipAlloc
GdipCloneImage
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageRectRect
GdipDisposeImage
GdipCreateBitmapFromFile
GdipCreateHBITMAPFromBitmap
GdipLoadImageFromStream
GdipNewPrivateFontCollection
GdipDeletePrivateFontCollection
GdipDeleteFontFamily
GdipGetImageGraphicsContext
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream

winmm

PlaySoundW

keyboardhook

??1CKeyboardHook@@UAE@XZ
?StartHook@CKeyboardHook@@QAEHPAUHWND__@@@Z
?StopHook@CKeyboardHook@@QAEHXZ
??0CKeyboardHook@@QAE@XZ

hid

HidD_GetHidGuid
HidD_GetPreparsedData
HidP_GetCaps
HidD_FreePreparsedData
HidD_SetFeature
HidD_GetFeature
HidD_GetAttributes

setupapi

SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

Sections

.text
Size: 1.9MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 393KB - Virtual size: 393KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.giats
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.2MB - Virtual size: 5.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 157KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d44cc36e9724a8f31d208e9913c17e48

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

winmm

keyboardhook

hid

setupapi

oleacc

imm32

Sections

.text Size: 1.9MB - Virtual size: 1.8MB

.rdata Size: 393KB - Virtual size: 393KB

.data Size: 25KB - Virtual size: 61KB

.gfids Size: 106KB - Virtual size: 106KB

.giats Size: 512B - Virtual size: 16B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 5.2MB - Virtual size: 5.2MB

.reloc Size: 157KB - Virtual size: 156KB

.text
Size: 1.9MB - Virtual size: 1.8MB

.rdata
Size: 393KB - Virtual size: 393KB

.data
Size: 25KB - Virtual size: 61KB

.gfids
Size: 106KB - Virtual size: 106KB

.giats
Size: 512B - Virtual size: 16B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 5.2MB - Virtual size: 5.2MB

.reloc
Size: 157KB - Virtual size: 156KB