85b121ae29d77915b48511a2ece7cc74878c219767e20544267a33abd411ebf0

Sharing

Copy URL Twitter E-mail

General

Target

85b121ae29d77915b48511a2ece7cc74878c219767e20544267a33abd411ebf0
Size

695KB
MD5

7e006c1a06aff6493668a55063b11503
SHA1

0df60b5106e1954f3aab2880853613fb8acbdf1e
SHA256

85b121ae29d77915b48511a2ece7cc74878c219767e20544267a33abd411ebf0
SHA512

d1121beb63bf2b0ffabcf1f2688e8f94cb60c92c511bd5d79a80c43357fbf796633c13b6e05b22a6bdc8315d682827ab0ceffe1f2d070c52d0765a186ed716e8
SSDEEP

12288:bTP8um6dNXHy7OeJXec5fqku0VUdCJanjBBdgEKJSTsJ7ltyN9w9t:PP8uLdSiYqkYYAnj/dg6Tkyzw9t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85b121ae29d77915b48511a2ece7cc74878c219767e20544267a33abd411ebf0

Files

85b121ae29d77915b48511a2ece7cc74878c219767e20544267a33abd411ebf0
.exe windows:5 windows x86 arch:x86

13f8a8ee634cc599bcef22445ba028ac

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableA
CompareStringW
CompareStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringA
InitializeCriticalSectionAndSpinCount
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlushFileBuffers
GetStartupInfoA
GetFileType
SetHandleCount
SetFilePointer
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
GetModuleHandleA
GetModuleFileNameA
GetStdHandle
HeapCreate
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
Process32NextW
GetStartupInfoW
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TlsFree
TlsAlloc
ReleaseMutex
HeapWalk
HeapLock
OpenThread
HeapUnlock
TlsSetValue
OutputDebugStringW
WaitForSingleObject
TlsGetValue
GetFileSizeEx
ReadFile
SetFilePointerEx
SetEndOfFile
LocalFileTimeToFileTime
GetSystemTimeAsFileTime
SystemTimeToFileTime
CreateFileA
VirtualAlloc
DeleteFileW
GlobalLock
GlobalUnlock
TerminateProcess
GlobalAlloc
GlobalFree
LocalFree
WriteFile
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
InterlockedCompareExchange
Sleep
FreeResource
GetSystemWindowsDirectoryW
GetVersionExW
CreateProcessW
CreateFileW
DeviceIoControl
lstrcmpiW
LoadLibraryExW
MultiByteToWideChar
FreeLibrary
InitializeCriticalSection
lstrlenW
GetModuleFileNameW
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
CreateMutexW
OpenProcess
GetModuleHandleW
GetProcAddress
CreateToolhelp32Snapshot
LCMapStringW
Process32FirstW
CloseHandle
GetCurrentProcessId
GetCurrentProcess
FlushInstructionCache
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
RaiseException
GetLastError
GetCurrentThreadId
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
SetLastError
GetCommandLineW
LeaveCriticalSection
ExitProcess
EnterCriticalSection
lstrcpyW

user32

CloseClipboard
EmptyClipboard
GetClipboardData
OpenClipboard
ChangeClipboardChain
SendMessageW
SetClipboardViewer
SetWindowPos
GetSystemMetrics
GetWindowRect
GetParent
UnhookWindowsHookEx
GetWindowLongW
MessageBoxW
ShowWindow
CreateWindowExW
GetClassInfoExW
LoadCursorW
RegisterClassExW
DispatchMessageW
TranslateMessage
GetMessageW
DefWindowProcW
DestroyWindow
CharNextW
SetWindowLongW
CallNextHookEx
ReleaseDC
GetDC
InvalidateRect
FillRect
InflateRect
GetClientRect
GetDlgItem
BeginPaint
EndPaint
GetKeyState
CallWindowProcW
IsWindow
FindWindowExW
UnregisterClassA
IntersectRect
SetWindowsHookExW
EqualRect
SetFocus
SetWindowTextW
GetSysColorBrush
SetCursor
ReleaseCapture
ScreenToClient
DrawTextW
UpdateWindow
RedrawWindow
CreateDialogParamW
SetClipboardData
GetWindow
PtInRect
IsWindowVisible
IsRectEmpty
KillTimer
MoveWindow
SetTimer
GetCursorPos
CopyRect
GetAsyncKeyState
SetClassLongW
PostMessageW
GetWindowTextW
SetRect
wsprintfW

gdi32

SelectPalette
RealizePalette
Ellipse
Polygon
GetPixel
SetROP2
SetBkMode
SetTextColor
GetDIBits
CreateDCW
SaveDC
SetMapMode
SetViewportOrgEx
SetWindowOrgEx
MoveToEx
LineTo
RestoreDC
CreateDIBSection
CreateCompatibleBitmap
GetStockObject
CreateSolidBrush
CreatePen
Rectangle
EnumFontFamiliesExW
CreateFontW
EnumFontFamiliesW
CreateCompatibleDC
SelectObject
BitBlt
SetStretchBltMode
StretchBlt
DeleteDC
GetObjectW
DeleteObject
GetDeviceCaps

comdlg32

GetSaveFileNameW

advapi32

RegDeleteKeyW
RegQueryValueExW
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegQueryValueExA

shell32

ShellExecuteW
SHGetFolderPathW
SHGetSpecialFolderPathW
CommandLineToArgvW

ole32

CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoInitialize
CoUninitialize
CoTaskMemRealloc
CreateStreamOnHGlobal
RevokeDragDrop

oleaut32

VarUI4FromStr
SysAllocString
SysFreeString

shlwapi

PathAppendW
PathFileExistsW
PathAddBackslashW
PathFindFileNameW
PathFindExtensionW
PathCombineW
SHSetValueW
SHGetValueW
StrCmpIW
StrCmpW
PathRemoveFileSpecW

comctl32

InitCommonControlsEx
_TrackMouseEvent

msimg32

AlphaBlend

gdiplus

GdipAlloc
GdiplusStartup
GdiplusShutdown
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipSetClipPath
GdipDrawPath
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipAddPathRectangle
GdipAddPathLineI
GdipDeletePath
GdipCreatePath
GdipSetPenLineJoin
GdipSetPenEndCap
GdipSetPenStartCap
GdipDeletePen
GdipCreatePen1
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipSaveImageToFile
GdipCloneImage
GdipDisposeImage
GdipFree

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

psapi

GetModuleFileNameExW

wintrust

WTHelperProvDataFromStateData
WinVerifyTrust

crypt32

CertGetNameStringW

Sections

.text
Size: 474KB - Virtual size: 474KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 89KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

13f8a8ee634cc599bcef22445ba028ac

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

msimg32

gdiplus

version

psapi

wintrust

crypt32

Sections

.text Size: 474KB - Virtual size: 474KB

.rdata Size: 84KB - Virtual size: 83KB

.data Size: 10KB - Virtual size: 23KB

.rsrc Size: 20KB - Virtual size: 20KB

.reloc Size: 89KB - Virtual size: 92KB

.text
Size: 474KB - Virtual size: 474KB

.rdata
Size: 84KB - Virtual size: 83KB

.data
Size: 10KB - Virtual size: 23KB

.rsrc
Size: 20KB - Virtual size: 20KB

.reloc
Size: 89KB - Virtual size: 92KB