67a733d94bc7edb68d2f47f7cb5d6aa3

Sharing

Copy URL

Twitter E-mail

General

Target

67a733d94bc7edb68d2f47f7cb5d6aa3
Size

1.3MB
MD5

67a733d94bc7edb68d2f47f7cb5d6aa3
SHA1

0361a5dab3f2d3c279bb46224486d8efc2935884
SHA256

35b27cbb5445f74c33d734a8406a7a2a7bd23d4f8e637de3125bd766654c0920
SHA512

1ad3841bfa6aee35adb2accccee7f47c2598cffeb936d62cb5acecc7de457880c4f414dd7263cc74e4da9c68965bcc5bd247f2091fcda5010a22142aff6c4e29
SSDEEP

24576:dDzQZ0HdUb7Rl5HBnAwnVAVjW+c4zbN6ZPTqHTNNR76:FynVAVrRbN8PTcTNN9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67a733d94bc7edb68d2f47f7cb5d6aa3

Files

67a733d94bc7edb68d2f47f7cb5d6aa3
.exe windows:4 windows x86 arch:x86

770f38c076bbdac3a19be05a85c91d7b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
LCMapStringA
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
GetStdHandle
GetFileType
CompareStringW
SetEnvironmentVariableA
RtlUnwind
SetHandleCount
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetACP
HeapSize
RaiseException
IsBadCodePtr
GetCommandLineA
MulDiv
GlobalAlloc
GetStartupInfoA
HeapReAlloc
HeapAlloc
HeapFree
GetLocalTime
GetSystemTime
GetTimeZoneInformation
TerminateProcess
GetDriveTypeA
CompareStringA
SetStdHandle
GetVersion
FindFirstFileA
FindClose
GetTempPathA
GetTempFileNameA
GetModuleFileNameA
lstrcpyA
InitializeCriticalSection
CreateThread
LoadLibraryA
DeleteFileA
GetProcAddress
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
Sleep
ExitProcess
FindResourceA
LoadResource
LockResource
SizeofResource
CreateFileA
WriteFile
GetTickCount
GetFileTime
GetProfileStringA
GetFileSize
FileTimeToLocalFileTime
FileTimeToSystemTime
GetVolumeInformationA
UnlockFile
SetEndOfFile
SetFilePointer
LockFile
FlushFileBuffers
DuplicateHandle
ReadFile
GetCurrentProcess
WritePrivateProfileStringA
SetErrorMode
GetThreadLocale
GetOEMCP
GlobalFlags
GetCPInfo
GetProcessVersion
TlsSetValue
TlsGetValue
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
LocalAlloc
DeleteCriticalSection
TlsAlloc
GetLastError
lstrcpynA
GetCurrentThread
InterlockedIncrement
FormatMessageA
LocalFree
lstrcatA
SetLastError
InterlockedDecrement
lstrcmpiA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalDeleteAtom
GlobalAddAtomA
GlobalFindAtomA
FindNextFileA
GetModuleHandleA
GetCurrentDirectoryA
GetFileAttributesA
GetFullPathNameA
GlobalLock
WideCharToMultiByte
CloseHandle
MultiByteToWideChar
lstrlenA
GlobalUnlock
GlobalFree
lstrcmpA

user32

MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
CharNextA
GetSysColorBrush
LoadCursorA
GetDesktopWindow
GetClassNameA
DestroyMenu
LoadStringA
wvsprintfA
MapDialogRect
SetWindowContextHelpId
WindowFromPoint
EndDialog
CreateDialogIndirectParamA
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
PostQuitMessage
GrayStringA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
MapWindowPoints
GetFocus
SetActiveWindow
IsWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
IsWindowVisible
GetTopWindow
MessageBoxA
IsChild
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
IntersectRect
PostThreadMessageA
RegisterClipboardFormatA
CharUpperA
UpdateWindow
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
DrawTextA
GetDC
ReleaseDC
IsIconic
GetSystemMetrics
DrawIcon
GetSystemMenu
AppendMenuA
LoadIconA
PostMessageA
KillTimer
EnableWindow
SetCursor
GetWindowLongA
SendMessageA
CopyRect
FrameRect
InflateRect
FillRect
GetSysColor
OffsetRect
DrawStateA
DrawFocusRect
GetActiveWindow
GetParent
GetCapture
SetCapture
GetClientRect
PtInRect
ReleaseCapture
InvalidateRect
LoadImageA
RedrawWindow
DestroyCursor
DispatchMessageA
PeekMessageA
ClientToScreen
ShowCaret
ExcludeUpdateRgn
HideCaret
IsWindowUnicode
UnregisterClassA
DefDlgProcA

gdi32

CreateFontIndirectA
CreateCompatibleDC
DeleteDC
CreateDIBSection
StretchDIBits
BitBlt
MoveToEx
ExtCreatePen
LineTo
GetStockObject
RealizePalette
CreateRectRgn
CombineRgn
CreateDIBitmap
GetClipBox
RectVisible
SaveDC
RestoreDC
OffsetViewportOrgEx
SetViewportExtEx
SetViewportOrgEx
ScaleViewportExtEx
CreateFontA
SetWindowExtEx
SelectObject
IntersectClipRect
ScaleWindowExtEx
GetViewportExtEx
GetWindowExtEx
ExtTextOutA
Escape
PtVisible
DPtoLP
GetMapMode
GetTextColor
GetBkColor
LPtoDP
SetMapMode
ExtTextOutW
SetTextAlign
StrokeAndFillPath
CreateHatchBrush
TextOutW
SetBkMode
CreatePen
GetTextExtentPoint32A
BeginPath
EndPath
StrokePath
TextOutA
GetObjectA
PatBlt
SetBkColor
SetTextColor
CreateBitmap
SetStretchBltMode
StretchBlt
SelectClipRgn
CreatePolygonRgn
FillRgn
DeleteObject
CreateSolidBrush
GetDeviceCaps
GetDIBits
GetTextExtentPointA

comdlg32

GetOpenFileNameA
GetFileTitleA
GetSaveFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyA
RegCreateKeyExA

shell32

ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetFolderPathA
DragQueryFileA
DragFinish
SHGetFileInfoA

comctl32

ImageList_Destroy
ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
OleInitialize
OleIsCurrentClipboard
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
CoTaskMemAlloc
CoTaskMemFree
OleFlushClipboard

olepro32

ord253

oleaut32

SysStringLen
SysFreeString
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysAllocStringByteLen
VariantChangeType
SysAllocString

Sections

.text
Size: 828KB - Virtual size: 832KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 89KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 177KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 202KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

770f38c076bbdac3a19be05a85c91d7b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 828KB - Virtual size: 832KB

.rdata Size: 89KB - Virtual size: 92KB

.data Size: 177KB - Virtual size: 252KB

.rsrc Size: 46KB - Virtual size: 48KB

.tc Size: 202KB - Virtual size: 204KB

.text
Size: 828KB - Virtual size: 832KB

.rdata
Size: 89KB - Virtual size: 92KB

.data
Size: 177KB - Virtual size: 252KB

.rsrc
Size: 46KB - Virtual size: 48KB

.tc
Size: 202KB - Virtual size: 204KB