45da4c7fd026f8a0403e5726f8bc8ec1fe73cccedbe2c1d32ad229b2eab186d7

Sharing

Copy URL Twitter E-mail

General

Target

45da4c7fd026f8a0403e5726f8bc8ec1fe73cccedbe2c1d32ad229b2eab186d7
Size

7.8MB
MD5

d4770fda502e38b3c4eec708bf701580
SHA1

40541155c80c58e1d16492a2ce53e8a36d6432da
SHA256

45da4c7fd026f8a0403e5726f8bc8ec1fe73cccedbe2c1d32ad229b2eab186d7
SHA512

942e605108d542165f48a17749f1c6bc5b5f106c0b3689549e9b8fff72c40e1485c0fece1460ac5f6361af988f346ccfc8594aff2355192e68ab5aa535266d70
SSDEEP

98304:vEh/AKXipJEuZcsQXUJ0xJoOBAUZLFBe/v9qFLOAkGkzdnEVomFHKnP:vE54pcsQVxJoOVJZFLOyomFHKnP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45da4c7fd026f8a0403e5726f8bc8ec1fe73cccedbe2c1d32ad229b2eab186d7

Files

45da4c7fd026f8a0403e5726f8bc8ec1fe73cccedbe2c1d32ad229b2eab186d7
.exe windows:6 windows x64 arch:x64

3cb468aeb802687220277b9afd94a791

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

shlwapi

PathStripToRootW
StrFormatKBSizeW
PathFileExistsW
PathAddExtensionW
PathFindExtensionW
PathAppendW
PathIsRelativeW
PathIsDirectoryW
PathCanonicalizeW
PathRemoveArgsW
PathRemoveBackslashW
PathFindFileNameW
PathCombineW
PathAddBackslashW
PathRemoveFileSpecW
PathIsUNCW

advapi32

CloseServiceHandle
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
SystemFunction036
RegCloseKey
RegSetValueExW
StartServiceW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
OpenServiceW
QueryServiceConfigW
OpenSCManagerW
RegEnumKeyW
QueryServiceStatus
ControlService
DeleteService
RegDeleteValueW
RegGetValueW
RegOpenKeyExW

kernel32

GetModuleHandleExW
LoadLibraryExW
GlobalDeleteAtom
lstrcmpW
GlobalAddAtomW
GlobalFindAtomW
CreateActCtxW
ActivateActCtx
DeactivateActCtx
FindActCtxSectionStringW
QueryActCtxW
CompareStringW
GlobalSize
GetVersionExW
SetThreadPriority
GetVolumeInformationW
GetThreadLocale
GetCurrentThread
lstrcmpA
VerSetConditionMask
VerifyVersionInfoW
GlobalGetAtomNameW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalReAlloc
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GlobalFlags
VirtualProtect
GetCurrentDirectoryW
QueryPerformanceCounter
GetFileTime
SystemTimeToTzSpecificLocalTime
GetWindowsDirectoryW
SearchPathW
GetProfileIntW
GetTempFileNameW
GetUserDefaultLCID
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
SwitchToThread
GetExitCodeThread
QueryPerformanceFrequency
GetCPInfo
LCMapStringW
GetStringTypeW
EncodePointer
CreateFileMappingW
GetSystemTime
WriteConsoleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
FindFirstFileExW
GetTimeZoneInformation
EnumSystemLocalesW
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetConsoleOutputCP
ReadConsoleW
SetEnvironmentVariableW
SetStdHandle
VirtualQuery
HeapQueryInformation
GetCommandLineW
GetCommandLineA
ExitProcess
ExitThread
RtlPcToFileHeader
RtlUnwindEx
VirtualFree
VirtualAlloc
UnregisterWaitEx
UnregisterWait
RegisterWaitForSingleObject
GetDriveTypeW
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SignalObjectAndWait
CreateTimerQueue
GetModuleHandleA
FreeLibraryAndExitThread
GetThreadTimes
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
GetACP
GetSystemTimeAsFileTime
LockFileEx
UnlockFile
HeapCompact
CreateSemaphoreW
FlushFileBuffers
GetLogicalDriveStringsW
SetUnhandledExceptionFilter
GetSystemInfo
DeleteFileA
WaitForSingleObjectEx
LoadLibraryA
SetLastError
MapViewOfFile
ReleaseSemaphore
CreateFileA
FlushViewOfFile
GetFileAttributesA
GetDiskFreeSpaceA
GetTempPathA
HeapValidate
UnmapViewOfFile
GetFileAttributesW
CreateMutexW
GetTempPathW
UnlockFileEx
SetEndOfFile
GetFullPathNameA
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
GetFullPathNameW
HeapCreate
TryEnterCriticalSection
AreFileApisANSI
FindResourceExW
lstrlenW
FreeResource
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
ResumeThread
Sleep
MulDiv
FreeLibrary
GetModuleHandleW
CreateProcessW
Process32FirstW
Process32NextW
FormatMessageW
GetPrivateProfileStringW
CreateToolhelp32Snapshot
OpenProcess
TerminateProcess
GetPrivateProfileIntW
DosDateTimeToFileTime
GetFileType
SystemTimeToFileTime
LocalFileTimeToFileTime
DuplicateHandle
GetCurrentProcess
CreateDirectoryW
MoveFileW
GetSystemDirectoryW
CopyFileW
WritePrivateProfileStringW
lstrcmpiW
CreateThread
lstrcpyW
GetFileSize
SetFilePointerEx
GetLocalTime
FileTimeToLocalFileTime
DeleteFileW
lstrcatW
FileTimeToSystemTime
OutputDebugStringW
GetFileAttributesExW
SetFileAttributesW
CreateFileW
FindClose
SetFilePointer
RemoveDirectoryW
FindNextFileW
GetFileSizeEx
FindFirstFileW
ReadFile
ResetEvent
TerminateThread
SetThreadAffinityMask
InitializeCriticalSectionAndSpinCount
GetTickCount
GetProcAddress
LoadLibraryW
GetModuleFileNameW
InitializeCriticalSection
lstrcpynW
GetDiskFreeSpaceExW
CloseHandle
SetEvent
GetConsoleMode
CreateEventW
GetCurrentThreadId
WaitForSingleObject
GetDynamicTimeZoneInformation
WaitForMultipleObjects
WriteFile
WriteConsoleA
GetStdHandle
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
MultiByteToWideChar
GetLocaleInfoW
WideCharToMultiByte
GetProcessHeap
DeleteCriticalSection
HeapDestroy
DecodePointer
HeapAlloc
FindResourceW
LoadResource
RaiseException
HeapReAlloc
LockResource
HeapSize
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
HeapFree
SizeofResource
LocalFree
GetLastError
LocalAlloc
GetCurrentProcessId
FormatMessageA
SetErrorMode
RtlUnwind

user32

GetWindowRgn
DestroyCursor
CreateMenu
GetComboBoxInfo
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
MapVirtualKeyExW
IsCharLowerW
IsClipboardFormatAvailable
SubtractRect
InvertRect
HideCaret
FrameRect
ReuseDDElParam
UnpackDDElParam
InsertMenuItemW
TranslateAcceleratorW
CharUpperBuffW
RegisterClipboardFormatW
CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableW
CharNextW
WaitMessage
GetUpdateRect
SetClassLongPtrW
DestroyAcceleratorTable
ModifyMenuW
CopyIcon
GetIconInfo
GetDoubleClickTime
LockWindowUpdate
BringWindowToTop
SetCursorPos
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
SetParent
DestroyIcon
MonitorFromPoint
UnionRect
EnableScrollBar
UpdateLayeredWindow
SetMenuDefaultItem
GetMenuDefaultItem
CreatePopupMenu
NotifyWinEvent
MessageBeep
DeleteMenu
IsZoomed
TrackMouseEvent
GetAsyncKeyState
RealChildWindowFromPoint
CopyImage
EnumDisplayMonitors
SetLayeredWindowAttributes
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
PostQuitMessage
DrawIconEx
IsRectEmpty
GetSysColorBrush
SetWindowRgn
CharUpperW
IntersectRect
SystemParametersInfoW
GetMenuItemInfoW
DestroyMenu
MapVirtualKeyW
GetKeyNameTextW
TranslateMessage
GetMessageW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
GetWindowThreadProcessId
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
RemoveMenu
InsertMenuW
GetMenuState
TranslateMDISysAccel
EnableWindow
LoadIconW
UnregisterClassW
SendMessageW
GetMenuStringW
OffsetRect
SetRectEmpty
SendDlgItemMessageA
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
IsDialogMessageW
SetWindowTextW
IsWindowEnabled
CheckDlgButton
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
InvalidateRect
DrawFrameControl
PtInRect
GetParent
DrawTextW
GetClientRect
GetSysColor
DrawFocusRect
CallWindowProcA
CopyRect
GetWindowLongPtrW
SetWindowLongPtrW
CallWindowProcW
GetWindowLongW
GetCursorPos
EnableMenuItem
KillTimer
LoadBitmapW
SetTimer
GetSubMenu
GetMenuItemCount
LoadMenuW
GetKeyState
IsWindow
IsWindowVisible
PostMessageW
MessageBoxW
LoadImageW
ReleaseCapture
DrawEdge
GetDesktopWindow
SetCursor
SetCapture
LoadCursorW
ClientToScreen
WindowFromPoint
FillRect
InflateRect
AppendMenuW
ReleaseDC
SetRect
GetDC
GetWindowRect
IsIconic
SetForegroundWindow
FindWindowW
GetClassInfoW
GetLastActivePopup
RegisterWindowMessageW
PostThreadMessageW
ChangeWindowMessageFilter
DrawIcon
GetSystemMetrics
GetSystemMenu
DrawStateW
UpdateWindow
GetClassNameW
DispatchMessageW
PeekMessageW
GetMessagePos
GetMessageTime
DefWindowProcW
RegisterClassW
GetClassInfoExW
CreateWindowExW
IsMenu
IsChild
DestroyWindow
SetWindowPos
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetDlgItem
GetDlgCtrlID
SetFocus
GetFocus
GetCapture
GetMenu
SetMenu
GetMenuItemID
SetScrollPos
TrackPopupMenu
SetActiveWindow
GetForegroundWindow
BeginPaint
EndPaint
ValidateRect
RedrawWindow
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindow
GetTopWindow
GetClassLongPtrW
SetWindowLongW
EqualRect
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
ScrollWindow

gdi32

GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
CreateRoundRectRgn
CreateDIBSection
RealizePalette
SetPixel
StretchBlt
SetDIBColorTable
Rectangle
GetRgnBox
OffsetRgn
RoundRect
CreatePalette
GetPaletteEntries
EnumFontFamiliesExW
GetNearestPaletteIndex
LPtoDP
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
SetPixelV
GetTextFaceW
EnumFontFamiliesW
CreateDIBitmap
Polyline
Polygon
CreatePolygonRgn
GetTextColor
GetBkColor
Ellipse
CreateEllipticRgn
DPtoLP
SetRectRgn
GetMapMode
CombineRgn
CreateFontIndirectW
PatBlt
CreateRectRgnIndirect
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
GetSystemPaletteEntries
ExtSelectClipRgn
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
TextOutW
MoveToEx
SetTextAlign
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
DeleteDC
ExtTextOutW
SetBkColor
SetTextColor
GetTextMetricsW
DeleteObject
GetTextExtentPoint32W
CreateSolidBrush
GetDeviceCaps
CreateCompatibleDC
SelectObject
CreateCompatibleBitmap
BitBlt
GetStockObject
GetObjectW
CopyMetaFileW
CreateDCW
CreateBitmap
CreateHatchBrush
CreatePen
CreatePatternBrush
CreateRectRgn
Escape
ExcludeClipRect
GetClipBox
GetTextCharsetInfo

msimg32

TransparentBlt
AlphaBlend

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

shell32

DragQueryFileW
DragFinish
SHAppBarMessage
SHGetDesktopFolder
ShellExecuteA
SHFileOperationW
ord165
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
Shell_NotifyIconW
ShellExecuteW
SHGetFileInfoW

comctl32

ImageList_EndDrag
ImageList_AddMasked
ImageList_BeginDrag
ImageList_DragMove
ImageList_DragEnter
ImageList_DragShowNolock
InitCommonControlsEx

uxtheme

IsAppThemed
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetThemeSysColor
DrawThemeParentBackground
DrawThemeText
GetWindowTheme
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
GetCurrentThemeName

ole32

CoRegisterMessageFilter
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CreateStreamOnHGlobal
CoInitializeEx
OleRun
CoCreateInstance
CoUninitialize
CoInitialize
CoRevokeClassObject

oleaut32

GetErrorInfo
OleCreateFontIndirect
LoadTypeLi
VarBstrFromDate
SysAllocString
SysFreeString
VariantClear
VariantChangeType
SysStringLen
VariantInit
SysAllocStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy

oledlg

OleUIBusyW

gdiplus

GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipGetImageWidth
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight

winhttp

WinHttpCrackUrl
WinHttpConnect
WinHttpSetTimeouts
WinHttpSendRequest
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpReceiveResponse
WinHttpOpen
WinHttpQueryHeaders
WinHttpReadData
WinHttpQueryDataAvailable

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

dbghelp

MiniDumpWriteDump

iphlpapi

GetAdaptersAddresses

ws2_32

WSAGetLastError
getaddrinfo
ntohs
htons
freeaddrinfo
ioctlsocket
getsockname
getpeername
WSAStartup
shutdown
closesocket
bind
WSACleanup
recv
send
WSASend
ntohl
InetNtopW
inet_addr
select
__WSAFDIsSet
socket
connect
listen
accept
setsockopt

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

imm32

ImmGetContext
ImmReleaseContext
ImmGetOpenStatus

winmm

PlaySoundW

Sections

.text
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 193KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gehcont
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3cb468aeb802687220277b9afd94a791

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

advapi32

kernel32

user32

gdi32

msimg32

winspool.drv

shell32

comctl32

uxtheme

ole32

oleaut32

oledlg

gdiplus

winhttp

version

dbghelp

iphlpapi

ws2_32

oleacc

imm32

winmm

Sections

.text Size: 4.1MB - Virtual size: 4.1MB

.rdata Size: 2.0MB - Virtual size: 2.0MB

.data Size: 99KB - Virtual size: 143KB

.pdata Size: 193KB - Virtual size: 193KB

.gehcont Size: 512B - Virtual size: 40B

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.reloc Size: 78KB - Virtual size: 78KB

.text
Size: 4.1MB - Virtual size: 4.1MB

.rdata
Size: 2.0MB - Virtual size: 2.0MB

.data
Size: 99KB - Virtual size: 143KB

.pdata
Size: 193KB - Virtual size: 193KB

.gehcont
Size: 512B - Virtual size: 40B

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

.reloc
Size: 78KB - Virtual size: 78KB