f84609aa60c51a9526b95240fce68f3e5cef3de92aa4a7df2037bd56178d4d4f

Sharing

Copy URL

Twitter E-mail

General

Target

f84609aa60c51a9526b95240fce68f3e5cef3de92aa4a7df2037bd56178d4d4f
Size

192KB
MD5

f45ce7259628a8af875bd938e9c0fd0e
SHA1

7619f428773532c580cdb9fc805929f514d0438b
SHA256

f84609aa60c51a9526b95240fce68f3e5cef3de92aa4a7df2037bd56178d4d4f
SHA512

bd1c05c993ae828df49c8bbeb88d84b49e95b1fd2c59cc9ec27ac71de8dd6ef756c2e037a063f7cf1f35966fa47e9545354fefa5ed9f7e880951b39a5225e3ab
SSDEEP

3072:t634Ok6QQlZ4wm/xTUeBVG5AslxGw9WJwdAKXGSBlxMrOiQXMhCs:c34OkelZXm/x4eBVG5AsnaLKXRK5Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f84609aa60c51a9526b95240fce68f3e5cef3de92aa4a7df2037bd56178d4d4f

Files

f84609aa60c51a9526b95240fce68f3e5cef3de92aa4a7df2037bd56178d4d4f
.exe windows:4 windows x86 arch:x86

63ec53efd50251efd7f0c84e90fbda1f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

packdll

ord13
ord8
ord14
ord19

kernel32

GlobalHandle
TlsFree
TlsSetValue
LocalReAlloc
TlsGetValue
lstrcmpiW
GlobalFlags
GetProcessVersion
SetErrorMode
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
GetStartupInfoW
ExitProcess
RtlUnwind
CreateDirectoryW
TlsAlloc
HeapFree
RaiseException
CreateThread
HeapReAlloc
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GetCPInfo
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
LocalAlloc
lstrcpynW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LoadLibraryA
FreeLibrary
GetVersion
lstrcatW
GlobalAddAtomW
GlobalFindAtomW
lstrcpyW
GetModuleHandleW
LockResource
FindResourceW
LoadResource
MulDiv
GetModuleHandleA
GetProcAddress
SetLastError
LocalFree
CreateEventW
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
WaitForSingleObject
VirtualProtect
lstrcmpW
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
lstrlenA
lstrlenW
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
WritePrivateProfileStringW
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalReAlloc
GlobalFree
GetPrivateProfileIntA
GetCurrentDirectoryW
CreateProcessW
GetTickCount
MultiByteToWideChar
GetLocalTime
CreateFileW
GetFileSize
DeleteFileW
CopyFileW
SetFileAttributesW
ExitThread
Sleep
GetCurrentDirectoryA
CreateMutexW
GetLastError
CloseHandle
GetCurrentProcess
TerminateProcess
GetModuleFileNameW
SetCurrentDirectoryW
GetCommandLineW
HeapAlloc

user32

GetSubMenu
GetMenuItemCount
GetMenu
RegisterClassW
wsprintfW
WinHelpW
GetCapture
GetTopWindow
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
SendDlgItemMessageA
SendDlgItemMessageW
UpdateWindow
IsDialogMessageW
SetWindowTextW
LoadStringW
LoadCursorW
GetClassNameW
PtInRect
GetSysColorBrush
DestroyMenu
GetDlgCtrlID
CreateWindowExW
SetPropW
UnhookWindowsHookEx
GetPropW
GetMenuItemID
RemovePropW
DefWindowProcW
GetMessageTime
GetMessagePos
GetForegroundWindow
GetWindow
SetWindowLongW
SetWindowPos
SystemParametersInfoW
IsIconic
GetWindowPlacement
EndDialog
SetActiveWindow
IsWindow
GetSystemMetrics
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
GrayStringW
DrawTextW
TabbedTextOutW
ClientToScreen
GetMenuCheckMarkDimensions
LoadBitmapW
GetMenuState
ModifyMenuW
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
PeekMessageW
GetCursorPos
SetWindowsHookExW
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongW
SetCursor
PostQuitMessage
EnableWindow
SetRect
GetDC
ReleaseDC
ScreenToClient
SetWindowRgn
GetDesktopWindow
GetWindowRect
SendMessageW
LoadIconW
LoadImageA
LoadImageW
FindWindowW
SetForegroundWindow
GetClassInfoW
PostMessageW
RegisterWindowMessageW
ShowWindow
MessageBoxW
CallWindowProcW
GetWindowTextW
IsWindowVisible
UnregisterClassW

gdi32

SetTextColor
DeleteDC
DeleteObject
SetBkColor
StretchBlt
BitBlt
CreateBitmap
CreateCompatibleBitmap
CreateFontIndirectW
GetObjectW
CombineRgn
ExtCreateRegion
CreateDIBSection
SaveDC
RestoreDC
GetStockObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
CreateCompatibleDC
GetDeviceCaps
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SelectObject

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW

comctl32

ord17

wininet

InternetOpenW
InternetCloseHandle
HttpQueryInfoW
InternetCrackUrlW
InternetReadFile
InternetConnectW
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestW
InternetSetOptionExW

Sections

.text
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

63ec53efd50251efd7f0c84e90fbda1f

Headers

File Characteristics

Imports

packdll

kernel32

user32

gdi32

winspool.drv

advapi32

comctl32

wininet

Sections

.text Size: 112KB - Virtual size: 108KB

.rdata Size: 24KB - Virtual size: 21KB

.data Size: 16KB - Virtual size: 31KB

.rsrc Size: 36KB - Virtual size: 33KB

.text
Size: 112KB - Virtual size: 108KB

.rdata
Size: 24KB - Virtual size: 21KB

.data
Size: 16KB - Virtual size: 31KB

.rsrc
Size: 36KB - Virtual size: 33KB