5368cbc5c2362b2542e1e6880f2b229e

Sharing

Copy URL Twitter E-mail

General

Target

5368cbc5c2362b2542e1e6880f2b229e
Size

3.8MB
MD5

5368cbc5c2362b2542e1e6880f2b229e
SHA1

d2afecad5d382768ed9c907616365813ea1f23a4
SHA256

b2e15b10649b74edd6d10e00a46d3faf1b3fc8a648ec4109b857611746a2ca96
SHA512

853611a2dcdfe88e4dc1a4ccfd3d24d37f91d184cf088cebbe63fbf338b872bdbe8991d7b8eb1923a22a9f594fd0873e580665a19668acd417b7d0096b38aeff
SSDEEP

98304:1EALLvXjd0m6H2b4NKQQM1VfzjQl9wMzeRT:eWQoupLMzs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5368cbc5c2362b2542e1e6880f2b229e

Files

5368cbc5c2362b2542e1e6880f2b229e
.exe windows:5 windows x86 arch:x86

c1f8d1a49de7af8e3428541c2bfcbde1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleA
GetStringTypeW
CreateFileA
SetEnvironmentVariableA
GetLocaleInfoA
WriteConsoleW
GetStringTypeA
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
QueryPerformanceCounter
VirtualFree
HeapDestroy
HeapCreate
GetStartupInfoA
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
GetFileType
SetStdHandle
HeapSize
ExitProcess
VirtualQuery
GetSystemInfo
VirtualAlloc
RtlUnwind
IsDebuggerPresent
UnhandledExceptionFilter
HeapReAlloc
HeapAlloc
GetSystemTimeAsFileTime
CreateThread
ExitThread
GetStartupInfoW
VirtualProtect
SearchPathW
GetProfileIntW
FileTimeToLocalFileTime
SetErrorMode
GetTempFileNameW
GetSystemDirectoryW
GetCurrentDirectoryW
WritePrivateProfileStringW
GetFullPathNameW
FindFirstFileW
FindClose
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
lstrcpyW
GlobalFlags
FileTimeToSystemTime
GetThreadLocale
lstrlenA
GlobalGetAtomNameW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
TlsGetValue
LocalAlloc
GetCurrentProcessId
InterlockedIncrement
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
LoadLibraryExW
CompareStringA
GetFileSize
DeleteCriticalSection
InitializeCriticalSection
GlobalReAlloc
EnterCriticalSection
LeaveCriticalSection
InterlockedExchange
RaiseException
GetModuleHandleA
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
CompareStringW
LoadLibraryA
FreeLibrary
lstrcmpW
GetVersionExA
GetCurrentThreadId
SetThreadPriority
SetLastError
GlobalFree
CopyFileW
GlobalSize
LocalFree
GetTickCount
GetTempPathW
GetModuleHandleW
IsBadReadPtr
FindResourceExW
GetFileTime
GetFileAttributesW
GetFileSizeEx
DeleteFileW
CreateFileW
FlushFileBuffers
WriteFile
ReadFile
SetFilePointer
GetVolumeInformationW
lstrlenW
GetProcessHeap
HeapFree
WideCharToMultiByte
GetUserDefaultLCID
GetLocaleInfoW
SuspendThread
GetCommandLineW
GlobalMemoryStatusEx
SetUnhandledExceptionFilter
GetProcAddress
LoadLibraryW
SetEvent
ResetEvent
CreateEventW
FreeResource
GlobalUnlock
GlobalLock
GlobalAlloc
ResumeThread
GetModuleFileNameW
MultiByteToWideChar
CloseHandle
MulDiv
InterlockedDecrement
FormatMessageW
GetLastError
GetCurrentProcess
TerminateProcess
Sleep
SetDllDirectoryW
WaitForSingleObject
FindResourceW
LoadResource
LockResource
SizeofResource
GetConsoleOutputCP

user32

FrameRect
UpdateLayeredWindow
PostThreadMessageW
CreateAcceleratorTableW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
DestroyAcceleratorTable
SetClassLongW
GetDoubleClickTime
CopyIcon
GetIconInfo
SetCursorPos
GetMenuDefaultItem
SetMenuDefaultItem
IsMenu
SetParent
LockWindowUpdate
IsZoomed
GetAsyncKeyState
NotifyWinEvent
GetSystemMenu
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsW
InsertMenuItemW
BringWindowToTop
TranslateAcceleratorW
RegisterClipboardFormatW
MessageBeep
GetNextDlgGroupItem
DeleteMenu
WaitMessage
UnregisterClassW
CharUpperW
UnionRect
SetWindowRgn
DrawFocusRect
DrawFrameControl
DrawEdge
DrawIconEx
CharNextW
ReleaseCapture
SetCapture
InvalidateRgn
CopyAcceleratorTableW
GetWindowThreadProcessId
GetSysColorBrush
MapVirtualKeyW
GetKeyNameTextW
ShowOwnedPopups
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
WindowFromPoint
EmptyClipboard
CloseClipboard
SetClipboardData
DestroyIcon
CopyImage
OpenClipboard
SetRectEmpty
DrawStateW
LoadMenuW
SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
InflateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
EnableMenuItem
CheckMenuItem
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
CharUpperBuffW
CheckDlgButton
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
GetClassNameW
RemovePropW
GetFocus
GetForegroundWindow
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
ShowScrollBar
GetClientRect
KillTimer
SetTimer
PostMessageW
EnableWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
CopyRect
PtInRect
GetMenu
SetWindowLongW
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowTextLengthW
GetWindowTextW
GetScrollPos
SetScrollPos
SetFocus
GetUpdateRect
SubtractRect
IsClipboardFormatAvailable
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
IsCharLowerW
MapVirtualKeyExW
CreateMenu
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
SetWindowsHookExW
CallNextHookEx
DestroyCursor
GetWindowRgn
UpdateWindow
SendMessageW
CreatePopupMenu
AppendMenuW
GetCursorPos
ScreenToClient
GetParent
GetWindowRect
MessageBoxW
GetPropW
SetPropW
GetWindow
RedrawWindow
InvalidateRect
SetCursor
LoadCursorW
SetRect
LoadImageW
GetDC
ReleaseDC
FillRect
LoadIconW
IsIconic
GetSystemMetrics
DrawIcon
LoadBitmapW
IsWindowVisible
SetWindowPos
SetForegroundWindow
IsRectEmpty
GetSysColor
RemoveMenu
GetSubMenu
GetMenuItemCount
InsertMenuW
GetMenuItemID
GetMenuStringW
GetMenuState
ValidateRect
PeekMessageW
GetKeyState
GetActiveWindow
DispatchMessageW
TranslateMessage
GetMessageW
EnableScrollBar

gdi32

GetRgnBox
GetBkColor
GetTextColor
CreateEllipticRgn
CreatePolygonRgn
Polyline
Ellipse
Polygon
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
Rectangle
CreateRoundRectRgn
OffsetRgn
CreatePalette
GetPaletteEntries
RoundRect
ExtFloodFill
SetPaletteEntries
GetViewportOrgEx
LPtoDP
PtInRegion
FillRgn
DPtoLP
GetBoundsRect
GetNearestPaletteIndex
GetSystemPaletteEntries
EnumFontFamiliesExW
GetWindowOrgEx
GetTextFaceW
SetPixelV
ExtTextOutW
TextOutW
RectVisible
SetRectRgn
GetMapMode
GetTextMetricsW
CreateRectRgnIndirect
CreateDIBSection
SetPixel
StretchBlt
CombineRgn
RealizePalette
SetDIBColorTable
CreateHatchBrush
CreatePen
GetObjectType
SelectPalette
CreateBitmap
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetDeviceCaps
PatBlt
GetObjectW
FrameRgn
PtVisible
GetPixel
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
DeleteObject
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
CopyMetaFileW
SelectObject
CreateCompatibleBitmap
GetStockObject
CreatePatternBrush
CreateFontW
CreateSolidBrush
CreateFontIndirectW
GetTextExtentPoint32W
BitBlt
CreateCompatibleDC
DeleteDC
Escape

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegQueryValueW
CryptImportKey
CryptSetKeyParam
CryptDestroyKey
CryptReleaseContext
CryptDecrypt
OpenProcessToken
GetTokenInformation
AdjustTokenPrivileges
RegCreateKeyExW
RegEnumKeyExW
RegDeleteValueW
RegSetValueExW
CryptAcquireContextW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shell32

SHGetSpecialFolderPathW
SHAppBarMessage
SHGetFileInfoW
DragFinish
DragQueryFileW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteW

comctl32

_TrackMouseEvent
InitCommonControlsEx
ImageList_GetIconSize

shlwapi

PathRemoveFileSpecW
PathFindFileNameW
PathFindExtensionW
PathStripToRootW
SHSetValueW
PathIsUNCW

oledlg

OleUIBusyW

ole32

OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoInitializeEx
CoUninitialize
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromProgID
CoRegisterMessageFilter
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CoSetProxyBlanket
CoCreateInstance
CreateStreamOnHGlobal
CoInitialize
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
DoDragDrop
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleGetClipboard
OleLockRunning
OleDuplicateData
OleCreateMenuDescriptor
CLSIDFromString

oleaut32

SysAllocString
SysFreeString
VariantInit
VariantClear
VariantChangeType
SysStringLen
SysAllocStringLen
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect

gdiplus

GdipGetImageGraphicsContext
GdiplusShutdown
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdiplusStartup
GdipImageSelectActiveFrame
GdipDrawImageRectI
GdipDeleteGraphics
GdipCreateFromHDC
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipGetImageWidth
GdipGetImageHeight
GdipLoadImageFromStreamICM
GdipDisposeImage
GdipCloneImage
GdipFree
GdipAlloc
GdipDrawImageI

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 290KB - Virtual size: 289KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c1f8d1a49de7af8e3428541c2bfcbde1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

gdiplus

imm32

winmm

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 290KB - Virtual size: 289KB

.data Size: 25KB - Virtual size: 53KB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.reloc Size: 154KB - Virtual size: 153KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 290KB - Virtual size: 289KB

.data
Size: 25KB - Virtual size: 53KB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

.reloc
Size: 154KB - Virtual size: 153KB