af08b96bdc3f8a2c140b2905df2facea915c0a34a2cf13f5c945d03a2f907034

Sharing

Copy URL Twitter E-mail

General

Target

af08b96bdc3f8a2c140b2905df2facea915c0a34a2cf13f5c945d03a2f907034
Size

2.2MB
MD5

3d691be94ea51927a31773a016ffb6c7
SHA1

2b66103be98d3a67e3ddcd2673deb70c9d0c8602
SHA256

af08b96bdc3f8a2c140b2905df2facea915c0a34a2cf13f5c945d03a2f907034
SHA512

125309794eb9b77204c4bf0a02797c833fe640f2b7fe515c58cdba25e03a4c28c8662ed4f1c8c9c3f866a8d770f7f6cf5e6acf0b4eeaaa8d077092e41906cb14
SSDEEP

24576:ZSsM5fFaFR3IuSIOq7qT+tf4jgHaLIZuz9HIN7ScWrEH78:Z1WUdltHWIZKI9ScS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af08b96bdc3f8a2c140b2905df2facea915c0a34a2cf13f5c945d03a2f907034

Files

af08b96bdc3f8a2c140b2905df2facea915c0a34a2cf13f5c945d03a2f907034
.exe windows:5 windows x86 arch:x86

d1a463d92866e039e51db312cee2baf0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateDIBSection
GetObjectW
TextOutW
GetTextFaceW
CreatePen
SetTextColor
LineTo
MoveToEx
GetDIBits
GetTextExtentPointW
SetPixelV
SetBkMode
SetBkColor
SelectObject
Rectangle
PtInRegion
OffsetRgn
GetStockObject
GetDeviceCaps
EnumFontFamiliesW
GetTextMetricsW
BitBlt
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreateFontIndirectW
CreateDIBPatternBrushPt
CreateCompatibleDC
CreateCompatibleBitmap
CombineRgn
GetTextExtentPoint32W

comctl32

ImageList_LoadImageW
ImageList_Create
ImageList_Destroy
CreateStatusWindowW
InitCommonControlsEx
ImageList_ReplaceIcon

msimg32

AlphaBlend

winmm

PlaySoundW

gdiplus

GdiplusShutdown
GdipCloneImage
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdiplusStartup
GdipImageSelectActiveFrame
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipCreateBitmapFromStream
GdipCreateFromHDC
GdipDeleteGraphics
GdipImageGetFrameCount
GdipFree
GdipAlloc
GdipDrawImageRectI
GdipSaveImageToFile
GdipCreateBitmapFromHBITMAP
GdipGetImageEncodersSize
GdipGetImagePixelFormat
GdipBitmapGetPixel
GdipGetImageEncoders

msvfw32

MCIWndCreateW

wininet

DeleteUrlCacheEntryW

oledlg

OleUIAddVerbMenuW
OleUIInsertObjectW

advapi32

IsTextUnicode
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegSetValueExW

shlwapi

StrTrimW
PathFileExistsW
PathAppendW
PathFindExtensionW
PathFindFileNameW
PathIsDirectoryW
PathRemoveFileSpecW
StrCmpNIW
PathAddExtensionW
SHStrDupW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

urlmon

URLDownloadToFileW

kernel32

GetConsoleMode
GetConsoleCP
GetFileType
GetUserDefaultLCID
IsValidLocale
LCMapStringW
HeapReAlloc
HeapSize
GetStringTypeW
GetACP
GetModuleHandleExW
ExitProcess
GetCommandLineW
GetCommandLineA
TlsFree
TlsSetValue
TlsGetValue
SetFilePointerEx
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
TlsAlloc
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LoadLibraryExA
VirtualFree
VirtualAlloc
VerSetConditionMask
DecodePointer
InterlockedDecrement
FreeResource
LockResource
FreeLibrary
GetProcAddress
GlobalAlloc
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
GetShortPathNameW
GetCurrentProcess
GetExitCodeProcess
RaiseException
CreateThread
GetCurrentThreadId
GetLastError
SetLastError
DebugBreak
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
WaitForSingleObject
Sleep
LoadResource
SizeofResource
GetStdHandle
WriteFile
ReadFile
FlushFileBuffers
FindClose
CloseHandle
DuplicateHandle
MulDiv
GetTickCount
CreatePipe
PeekNamedPipe
lstrcmpA
lstrcmpW
lstrcmpiW
lstrcpynW
lstrlenA
lstrlenW
LoadLibraryW
LoadLibraryExW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
CreateProcessW
GetEnvironmentVariableW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
FindResourceW
FindResourceExW
EnumResourceTypesW
EnumResourceNamesW
EnumResourceLanguagesW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetTempPathW
GetTempFileNameW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
RemoveDirectoryW
GetFullPathNameW
CreateFileW
SetFileAttributesW
GetFileAttributesW
DeleteFileW
FindFirstFileW
FindNextFileW
CopyFileW
MoveFileExW
IsBadReadPtr
VerifyVersionInfoW
MultiByteToWideChar
WideCharToMultiByte
GetLocaleInfoW
GetThreadLocale
SetThreadLocale
GetUserDefaultLangID
EnumSystemLocalesW
GlobalSize
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
SetPriorityClass
IsProcessorFeaturePresent
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
GetProcessHeap
HeapFree
HeapAlloc
EncodePointer
OutputDebugStringW
IsDebuggerPresent
SetStdHandle
WriteConsoleW
ReadConsoleW
InterlockedIncrement
SetEndOfFile

user32

SetClipboardData
EmptyClipboard
IsClipboardFormatAvailable
CharUpperW
CharLowerW
CharNextW
SetFocus
GetFocus
GetKeyState
GetAsyncKeyState
SetCapture
ReleaseCapture
SetTimer
KillTimer
EnableWindow
LoadAcceleratorsW
CreateAcceleratorTableW
DestroyAcceleratorTable
TranslateAcceleratorW
GetSystemMetrics
LoadMenuW
LoadMenuIndirectW
GetMenu
SetMenu
GetSystemMenu
CreatePopupMenu
DestroyMenu
CheckMenuItem
EnableMenuItem
GetSubMenu
GetMenuItemCount
InsertMenuW
RemoveMenu
DeleteMenu
TrackPopupMenu
TrackPopupMenuEx
DrawTextW
UpdateWindow
SetForegroundWindow
GetDC
GetWindowDC
ReleaseDC
BeginPaint
EndPaint
SetWindowRgn
GetWindowRgn
InvalidateRect
InvalidateRgn
RedrawWindow
GetScrollPos
ShowScrollBar
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
GetClientRect
GetWindowRect
AdjustWindowRectEx
MessageBoxW
SetCursor
CloseClipboard
ClientToScreen
CreateDialogParamW
MapWindowPoints
GetSysColor
GetSysColorBrush
DrawFocusRect
FillRect
SetRect
CopyRect
InflateRect
OffsetRect
EqualRect
PtInRect
GetWindowLongW
SetWindowLongW
GetDesktopWindow
GetParent
EnumChildWindows
FindWindowW
FindWindowExW
GetClassNameW
GetTopWindow
GetWindow
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
CheckMenuRadioItem
LoadBitmapW
LoadCursorW
LoadCursorFromFileW
DestroyCursor
LoadIconW
DestroyIcon
LoadImageW
DrawIconEx
GetIconInfo
LoadStringW
IsDialogMessageW
MapDialogRect
SetScrollInfo
GetGuiResources
SystemParametersInfoW
MonitorFromPoint
MonitorFromWindow
GetMonitorInfoW
GetComboBoxInfo
IsWindowEnabled
SetPropW
GetPropW
RemovePropW
EnumPropsW
CreateIconFromResourceEx
GetClipboardData
RegisterClipboardFormatW
CreateIconFromResource
SetRectEmpty
IsZoomed
OpenClipboard
GetDialogBaseUnits
GetDlgCtrlID
SendDlgItemMessageW
SendDlgItemMessageA
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
BringWindowToTop
IsIconic
IsWindowVisible
GetClassInfoExW
SetDlgItemTextW
SetDlgItemTextA
GetDlgItemInt
SetDlgItemInt
GetDlgItem
EndDialog
DialogBoxIndirectParamW
DialogBoxParamW
GetCursorPos
CreateDialogIndirectParamW
EndDeferWindowPos
RegisterWindowMessageW
DrawFrameControl
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
GetMessagePos
DeferWindowPos
BeginDeferWindowPos
SetWindowPos
MoveWindow
ShowWindowAsync
ShowWindow
DestroyWindow
IsChild
IsWindow
ScreenToClient
CreateWindowExW
RegisterClassExW
UnregisterClassW
CallWindowProcW
PostQuitMessage
DefWindowProcW
PostMessageW
SendMessageW
GetMessageTime
GetDlgItemTextW

shell32

DragQueryFileW
DragAcceptFiles
ShellExecuteW
ExtractIconW
SHGetPathFromIDListW
SHBrowseForFolderW
DragFinish

ole32

CoCreateInstance
StringFromCLSID
OleIsRunning
OleDraw
CLSIDFromString
CLSIDFromProgID
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
OleInitialize
OleUninitialize
OleLockRunning
CreateStreamOnHGlobal
StgCreateDocfile
OleSave
OleCreate
WriteClassStg
CoGetClassObject

oleaut32

SysStringLen
VariantClear
SysAllocStringLen
SysAllocString
LoadRegTypeLi
LoadTypeLi
VariantInit
VarUI4FromStr
SysFreeString
OleCreateFontIndirect

comdlg32

ChooseFontW
GetFileTitleW
GetSaveFileNameW
GetOpenFileNameW

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 914KB - Virtual size: 914KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d1a463d92866e039e51db312cee2baf0

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

comctl32

msimg32

winmm

gdiplus

msvfw32

wininet

oledlg

advapi32

shlwapi

version

urlmon

kernel32

user32

shell32

ole32

oleaut32

comdlg32

Sections

.text Size: 1.0MB - Virtual size: 1.0MB

.rdata Size: 156KB - Virtual size: 155KB

.data Size: 11KB - Virtual size: 37KB

.rsrc Size: 914KB - Virtual size: 914KB

.reloc Size: 51KB - Virtual size: 50KB

.text
Size: 1.0MB - Virtual size: 1.0MB

.rdata
Size: 156KB - Virtual size: 155KB

.data
Size: 11KB - Virtual size: 37KB

.rsrc
Size: 914KB - Virtual size: 914KB

.reloc
Size: 51KB - Virtual size: 50KB