4291e9206e6c732ec19cc35c7185de9a8eb657bbdf183015853c949aa968a00c

Sharing

Copy URL Twitter E-mail

General

Target

4291e9206e6c732ec19cc35c7185de9a8eb657bbdf183015853c949aa968a00c
Size

4.8MB
MD5

d20bba868cdf105e7a0a594244972962
SHA1

f77f65b950f998ac2e0dbdeeb7cfa289db439eac
SHA256

4291e9206e6c732ec19cc35c7185de9a8eb657bbdf183015853c949aa968a00c
SHA512

2fbad29dbaca91b0e95396e155a954e93c5d7774ca0547e6558f68cc588136de72fbd20949002e5356cdca8389516f5cea128fdcaec74948d2850ba6f194d506
SSDEEP

98304:GY1jT+POnNYUf12Tj7moV7bqUtk0808JjPc+cPcF7ZfDUXua0MofqdB:GYlN1qm2fqmAjPcDPcFdfDUaMofqdB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4291e9206e6c732ec19cc35c7185de9a8eb657bbdf183015853c949aa968a00c

Files

4291e9206e6c732ec19cc35c7185de9a8eb657bbdf183015853c949aa968a00c
.exe windows:6 windows x86 arch:x86

293c194fe3972c0085df28c0737488f7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

inet_addr
WSACleanup
WSAStartup

iphlpapi

GetIpForwardTable
GetAdaptersInfo

kernel32

FileTimeToLocalFileTime
SetFilePointerEx
WideCharToMultiByte
FindClose
GetCurrentProcess
TerminateProcess
GetModuleHandleA
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
LoadLibraryW
GetProcAddress
GetModuleHandleW
FreeLibrary
InitializeCriticalSectionEx
GetVersionExW
RaiseException
DecodePointer
CreateMutexW
OutputDebugStringW
FindFirstFileW
FindNextFileW
RemoveDirectoryW
DeleteFileW
GetSystemInfo
LoadLibraryExW
SizeofResource
SetFilePointer
SetFileAttributesW
LoadResource
FindResourceW
GetDiskFreeSpaceW
GetFileType
GetTickCount
HeapFree
HeapAlloc
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
MultiByteToWideChar
CreateFileW
GetModuleFileNameW
WriteFile
SetLastError
GetFileSizeEx
ReadFile
CreateDirectoryW
DeleteCriticalSection
ExitThread
CreateThread
RtlUnwind
InitializeSListHead
GetStartupInfoW
CloseHandle
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetEvent
Sleep
GetStringTypeW
GetCPInfo
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
FileTimeToSystemTime
GetFileSize
GetLastError
LCMapStringW
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
GetFileAttributesExW
ReadConsoleW
FindFirstFileExW
IsValidCodePage
EncodePointer
WaitForSingleObjectEx
GetEnvironmentStringsW
GetEnvironmentVariableW
GetCurrentProcessId
GlobalSize
MulDiv
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
VerSetConditionMask
VerifyVersionInfoW
CreateIoCompletionPort
PostQueuedCompletionStatus
GetQueuedCompletionStatus
TerminateThread
GetCurrentThreadId
SetThreadPriority
ResetEvent
CreateEventW
TlsFree
TlsGetValue
TlsAlloc
TlsSetValue
VirtualQuery
GetStdHandle
QueryPerformanceCounter
GetSystemTimeAsFileTime
SystemTimeToFileTime
QueryPerformanceFrequency
LocalFileTimeToFileTime
InitializeCriticalSectionAndSpinCount
GetCurrentDirectoryW
GetFileAttributesW
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
SetEndOfFile
WriteConsoleW
HeapSize
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
IsDebuggerPresent

user32

GetClassInfoExW
SetWindowLongW
IsWindow
GetWindowLongW
GetWindow
SetFocus
ShowWindow
GetWindowRect
GetMonitorInfoW
MonitorFromWindow
IsIconic
SetWindowPos
LoadImageW
GetSystemMetrics
SendMessageW
CallWindowProcW
SetPropW
GetPropW
GetDC
SetWindowTextW
InvalidateRect
ScreenToClient
GetKeyState
GetCursorPos
GetFocus
SetCapture
ReleaseCapture
CreateWindowExW
EndPaint
MoveWindow
GetUpdateRect
LoadCursorW
IntersectRect
UpdateLayeredWindow
PtInRect
OffsetRect
SetCursor
ClientToScreen
GetSysColor
GetAsyncKeyState
CharNextW
OpenClipboard
IsClipboardFormatAvailable
GetClipboardData
CloseClipboard
EmptyClipboard
SetClipboardData
IsZoomed
MonitorFromPoint
SetWindowRgn
MessageBoxW
SetForegroundWindow
IsWindowVisible
UnionRect
FindWindowW
GetDesktopWindow
MapWindowPoints
GetParent
PostThreadMessageW
ReleaseDC
PostQuitMessage
EnableWindow
RegisterClassW
WaitMessage
DefWindowProcW
DestroyWindow
GetClientRect
RegisterClassExW
DispatchMessageW
SetTimer
PeekMessageW
MsgWaitForMultipleObjectsEx
CallMsgFilterW
PostMessageW
UnregisterClassW
GetQueueStatus
TranslateMessage
KillTimer
BeginPaint
IsRectEmpty

advapi32

RegQueryValueExW
RegOpenKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegDeleteValueW

shell32

ShellExecuteW
SHBrowseForFolderW
SHGetFolderPathW
SHGetPathFromIDListW
SHGetSpecialFolderPathW
SHChangeNotify

ole32

CoInitialize
CoTaskMemFree
CoCreateInstance
CoUninitialize
CreateStreamOnHGlobal

shlwapi

PathIsRelativeW
PathFileExistsW

winmm

timeGetTime
timeSetEvent
timeKillEvent

comctl32

_TrackMouseEvent
ord17

gdiplus

GdipMeasureString
GdipFillPath
GdipFillEllipseI
GdipDrawEllipseI
GdipDrawString
GdipSetStringFormatLineAlign
GdipSetStringFormatFlags
GdipSetStringFormatTrimming
GdipDeleteStringFormat
GdipStringFormatGetGenericTypographic
GdipCloneStringFormat
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipDrawPath
GdipDrawRectangleI
GdipDrawBezierI
GdipDrawLineI
GdipFillRectangle
GdipDeletePath
GdipTransformPath
GdipIsOutlineVisiblePathPointI
GdipIsVisiblePathPointI
GdipGetPathWorldBoundsI
GdipAddPathPolygonI
GdipAddPathPieI
GdipAddPathArcI
GdipAddPathEllipseI
GdipAddPathRectangleI
GdipAddPathCurveI
GdipAddPathBezierI
GdipAddPathLine2I
GdipAddPathLineI
GdipClosePathFigure
GdipStartPathFigure
GdipGetPathFillMode
GdipSetPathFillMode
GdipResetPath
GdipClonePath
GdipCreatePath
GdipCreateTexture
GdipCreateBitmapFromHBITMAP
GdipCreateSolidFill
GdipGetPenDashStyle
GdipSetPenDashStyle
GdipGetPenLineJoin
GdipSetPenLineJoin
GdipGetPenDashCap197819
GdipGetPenEndCap
GdipGetPenStartCap
GdipSetPenDashCap197819
GdipSetPenEndCap
GdipSetPenStartCap
GdipSetPenColor
GdipGetPenWidth
GdipSetPenWidth
GdipClonePen
GdipLoadImageFromFile
GdipImageRotateFlip
GdipDrawImageRect
GdipSetWorldTransform
GdipRotateMatrix
GdipTranslateMatrix
GdipCreatePen2
GdipSetLineBlend
GdipCloneBrush
GdipDeleteBrush
GdipCreateLineBrushFromRect
GdipDrawArc
GdipDeletePen
GdipCreatePen1
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipDeleteMatrix
GdipCreateMatrix
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCreateHBITMAPFromBitmap
GdipImageSelectActiveFrame
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipCreateBitmapFromStream
GdipDisposeImage
GdipCloneImage
GdipAlloc
GdipFree
GdipCreateBitmapFromFile
GdiplusShutdown
GdiplusStartup
GdipScaleMatrix
GdipSetStringFormatAlign

imm32

ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext

msimg32

AlphaBlend

gdi32

StretchBlt
CreateFontIndirectW
DeleteDC
SaveDC
CreateDIBSection
SetWindowOrgEx
GetObjectW
CreateRoundRectRgn
GetDeviceCaps
GetObjectA
RestoreDC
BitBlt
GetWindowOrgEx
SelectObject
GetStockObject
CreateRectRgnIndirect
DeleteObject
ExtSelectClipRgn
CreateCompatibleDC
SetStretchBltMode

comdlg32

GetOpenFileNameW
GetSaveFileNameW

Sections

.text
Size: 599KB - Virtual size: 598KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 189KB - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15.3MB - Virtual size: 15.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

293c194fe3972c0085df28c0737488f7

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

iphlpapi

kernel32

user32

advapi32

shell32

ole32

shlwapi

winmm

comctl32

gdiplus

imm32

msimg32

gdi32

comdlg32

Sections

.text Size: 599KB - Virtual size: 598KB

.rdata Size: 189KB - Virtual size: 189KB

.data Size: 18KB - Virtual size: 32KB

.rsrc Size: 15.3MB - Virtual size: 15.3MB

.reloc Size: 32KB - Virtual size: 31KB

.text
Size: 599KB - Virtual size: 598KB

.rdata
Size: 189KB - Virtual size: 189KB

.data
Size: 18KB - Virtual size: 32KB

.rsrc
Size: 15.3MB - Virtual size: 15.3MB

.reloc
Size: 32KB - Virtual size: 31KB