5854280611f83c3fce3c4c77f2a458b3

Sharing

Copy URL Twitter E-mail

General

Target

5854280611f83c3fce3c4c77f2a458b3
Size

704KB
MD5

5854280611f83c3fce3c4c77f2a458b3
SHA1

3e03f2fa531c0dff5253293e98fcabf755ac50ce
SHA256

c61e2b864e5b70b6776b117d2cd4ae9cda7fae9db4f4a0d3f75b95634eb226a4
SHA512

435287c5db69edcc344610e02bbd720d4373e74a4be10169db7de8b465eefdb2b85ef3a051f47b77570096bace8f82dd6a374a3274c4f2cdb1f04dee89ab3a4b
SSDEEP

12288:gGjNcaIVAQjp96Z/hcqyp6FrUlgAWTkJLuqN:NjNcaIVAup0DS6lUlgAWWuqN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5854280611f83c3fce3c4c77f2a458b3

Files

5854280611f83c3fce3c4c77f2a458b3
.exe windows:4 windows x86 arch:x86

1d5f86592a518fed0255c4f89790df6a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

htonl
htons
WSASocketW
WSACreateEvent
WSAStartup
WSAConnect
shutdown
WSAGetOverlappedResult
WSAResetEvent
WSAWaitForMultipleEvents
WSAGetLastError
WSASend
WSARecv
WSACloseEvent
setsockopt
gethostbyname
ntohl
WSACleanup
closesocket

kernel32

LocalReAlloc
TlsFree
WritePrivateProfileStringW
GetCurrentDirectoryW
MoveFileW
GetStringTypeExW
FlushFileBuffers
LockFile
UnlockFile
GetFileSize
DuplicateHandle
GetCurrentProcess
GetVolumeInformationW
GetShortPathNameW
LocalFileTimeToFileTime
SetErrorMode
GetStartupInfoW
ExitProcess
RtlUnwind
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
TlsSetValue
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
SetUnhandledExceptionFilter
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
IsBadWritePtr
GetOEMCP
GetCPInfo
IsBadReadPtr
IsBadCodePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetDriveTypeA
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
InterlockedIncrement
SystemTimeToFileTime
GlobalFlags
RaiseException
GetDiskFreeSpaceW
GetFullPathNameW
GetTempFileNameW
GetFileTime
SetFileTime
GetFileAttributesW
GetCurrentThread
lstrcmpA
lstrcmpiA
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
LoadLibraryW
GetVersion
GlobalGetAtomNameW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
lstrlenA
LoadLibraryA
FreeLibrary
GetModuleHandleW
GetVersionExA
GetModuleHandleA
GetProcAddress
InterlockedDecrement
SetLastError
MulDiv
GlobalAlloc
FormatMessageW
lstrcpynW
LocalFree
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
CreateMutexW
GetLastError
DeleteCriticalSection
EnterCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
WideCharToMultiByte
WaitForSingleObject
TerminateThread
MultiByteToWideChar
lstrcmpW
GetTickCount
Sleep
GetModuleFileNameW
SetFileAttributesW
CreateFileW
SetFilePointer
ReadFile
SetEndOfFile
CloseHandle
DeleteFileW
WriteFile
FindFirstFileW
FindNextFileW
FindClose
lstrcmpiW
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcatW
CreateDirectoryW
GetLogicalDrives
GetDriveTypeW
CreateThread
SuspendThread
GetExitCodeThread
ResumeThread
lstrlenW
lstrcpyW
FindResourceW
LoadResource
LockResource
SizeofResource
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
TerminateProcess

user32

RegisterClipboardFormatW
GetSysColorBrush
IsRectEmpty
SetRect
SetTimer
KillTimer
WindowFromPoint
CharUpperW
CharNextW
CopyAcceleratorTableW
InvalidateRgn
SetCapture
GetNextDlgGroupItem
MessageBeep
PostThreadMessageW
GetDCEx
LockWindowUpdate
SetParent
ReleaseCapture
LoadAcceleratorsW
InvalidateRect
InsertMenuItemW
CreatePopupMenu
SetRectEmpty
BringWindowToTop
SetMenu
TranslateAcceleratorW
SetMenuItemBitmaps
ModifyMenuW
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapW
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
RegisterWindowMessageW
WinHelpW
GetCapture
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
GetClassInfoExW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SendDlgItemMessageW
SendDlgItemMessageA
GetFocus
SetFocus
IsChild
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
SetWindowContextHelpId
TrackPopupMenu
GetKeyState
SetForegroundWindow
IsWindowVisible
GetMenu
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetClassInfoW
RegisterClassW
UnregisterClassW
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
CopyRect
PtInRect
GetWindow
GetSysColor
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
UnhookWindowsHookEx
GetMenuState
GetMenuItemID
GetMenuItemCount
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
MessageBoxW
UpdateWindow
MapDialogRect
GetMessageW
TranslateMessage
ValidateRect
ShowOwnedPopups
PostQuitMessage
IsZoomed
SystemParametersInfoW
GetMenuItemInfoW
RegisterHotKey
UnregisterHotKey
GetSystemMetrics
PostMessageW
DestroyIcon
GetCursorPos
IsWindow
ScreenToClient
GetClientRect
LoadMenuW
GetSubMenu
EnableMenuItem
SendMessageW
LoadCursorW
SetCursor
InflateRect
wsprintfW
UnpackDDElParam
ReuseDDElParam
DestroyMenu
EnableWindow
LoadIconW
DrawIcon
GetClassLongW

gdi32

SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
CreateBitmap
CreateCompatibleDC
RectVisible
CreateCompatibleBitmap
CreateRectRgnIndirect
PatBlt
GetTextMetricsW
ScaleViewportExtEx
CombineRgn
GetMapMode
DPtoLP
StretchDIBits
GetCharWidthW
CreateFontW
GetBkColor
GetTextColor
GetRgnBox
PtVisible
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
DeleteObject
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetTextColor
SetBkMode
SetBkColor
RestoreDC
SaveDC
GetDeviceCaps
GetStockObject
GetObjectW
CreateSolidBrush
GetTextExtentPoint32W
SetRectRgn
CreateFontIndirectW
TextOutW

comdlg32

GetSaveFileNameW
GetFileTitleW
GetOpenFileNameW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegSetValueW
RegOpenKeyW
RegQueryValueExW
RegOpenKeyExW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
SetFileSecurityW
GetFileSecurityW
RegCreateKeyExW
RegSetValueExW
RegCreateKeyW
RegCloseKey

shell32

DragFinish
SHFileOperationW
ShellExecuteExW
ord165
SHGetPathFromIDListW
ExtractIconW
DragQueryFileW
ShellExecuteW
SHGetFileInfoW
SHBrowseForFolderW

comctl32

ImageList_ReplaceIcon
ImageList_SetImageCount
ImageList_GetImageCount
ord17
ImageList_Draw
ImageList_GetImageInfo
ImageList_Destroy
ImageList_Create

shlwapi

PathFindFileNameW
PathStripToRootW
PathFindExtensionW
PathIsUNCW

oledlg

OleUIBusyW

ole32

OleFlushClipboard
CoRegisterMessageFilter
CoRevokeClassObject
CoTaskMemFree
OleIsCurrentClipboard
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc

oleaut32

SysStringLen
VariantCopy
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocString
OleCreateFontIndirect
SysFreeString

Sections

.text
Size: 300KB - Virtual size: 298KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 260KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1d5f86592a518fed0255c4f89790df6a

Headers

File Characteristics

Imports

ws2_32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 300KB - Virtual size: 298KB

.rdata Size: 84KB - Virtual size: 83KB

.data Size: 12KB - Virtual size: 23KB

.rsrc Size: 260KB - Virtual size: 257KB

.reloc Size: 44KB - Virtual size: 40KB

.text
Size: 300KB - Virtual size: 298KB

.rdata
Size: 84KB - Virtual size: 83KB

.data
Size: 12KB - Virtual size: 23KB

.rsrc
Size: 260KB - Virtual size: 257KB

.reloc
Size: 44KB - Virtual size: 40KB