3df6763ce2c2af24b193ab2285657ad83496b789e4f700773859237b24ad1e8d

Sharing

Copy URL Twitter E-mail

General

Target

3df6763ce2c2af24b193ab2285657ad83496b789e4f700773859237b24ad1e8d
Size

3.3MB
MD5

849aec54052e55ae884dadefd7c34620
SHA1

adb41612869737de7b539a901ab486b998a63b91
SHA256

3df6763ce2c2af24b193ab2285657ad83496b789e4f700773859237b24ad1e8d
SHA512

22847f36b89e50ebd39903b494554cb4bf5b565702a9414e9ed01424f5f52922325b6760ac146f50b3b2849da8835bda0f20f8fd444c4c669a9341f4b33308bd
SSDEEP

98304:xrTqRmu94JLNBo6oCVAgxaXCncl1wXrYTYy:xromT5W6o5l1wXrYTY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3df6763ce2c2af24b193ab2285657ad83496b789e4f700773859237b24ad1e8d

Files

3df6763ce2c2af24b193ab2285657ad83496b789e4f700773859237b24ad1e8d
.exe windows:6 windows x86 arch:x86

ca8ba2322069f44aa10bd2e26b23d20b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SignalObjectAndWait
CreateTimerQueue
WriteConsoleW
CreateDirectoryW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
ReadConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
EnumSystemLocalesW
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetStdHandle
GetFileType
ReleaseSemaphore
VirtualQuery
VirtualAlloc
HeapQueryInformation
FreeLibraryAndExitThread
ExitThread
CreateThread
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
ExitProcess
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
FormatMessageA
GetSystemTime
LockFileEx
HeapCompact
GetSystemInfo
DeleteFileA
CreateFileA
FlushViewOfFile
GetDiskFreeSpaceA
GetTempPathA
HeapValidate
UnmapViewOfFile
CreateMutexW
UnlockFileEx
GetFullPathNameA
HeapCreate
AreFileApisANSI
GetCPInfo
GetStringTypeW
LCMapStringW
QueryPerformanceFrequency
TryEnterCriticalSection
SwitchToThread
InterlockedPopEntrySList
QueryDepthSList
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
WaitForSingleObjectEx
ResetEvent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetUserDefaultLCID
GetTempFileNameW
UnregisterWaitEx
GetDiskFreeSpaceW
SetErrorMode
GetProfileIntW
SearchPathW
GetTempPathW
FindResourceExW
GetWindowsDirectoryW
FindNextFileW
GetFileTime
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
lstrcmpiW
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
FlushFileBuffers
FindFirstFileW
FindClose
GetFileSize
GetFileAttributesW
DeleteFileW
GetCurrentDirectoryW
VerifyVersionInfoW
VerSetConditionMask
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
SystemTimeToFileTime
GlobalGetAtomNameW
GlobalFlags
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
ResumeThread
SetThreadPriority
CreateEventW
SetEvent
lstrcmpA
GetVersionExW
GetCurrentThread
GetThreadLocale
InitializeCriticalSectionAndSpinCount
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryA
LoadLibraryExW
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
CopyFileW
FormatMessageW
MulDiv
GlobalSize
FreeResource
SetLastError
GetLocalTime
GetNativeSystemInfo
GetCurrentProcess
WriteProcessMemory
OutputDebugStringA
GlobalFree
GlobalUnlock
GlobalLock
SizeofResource
GlobalAlloc
WriteFile
CreateFileW
GetModuleHandleW
GetProcessId
MapViewOfFile
CreateFileMappingW
OpenFileMappingW
LocalFree
LocalAlloc
WaitForSingleObject
lstrcpyW
LoadLibraryW
CloseHandle
TerminateProcess
GetExitCodeProcess
GetProcessHeap
DeleteCriticalSection
HeapDestroy
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
HeapFree
GetFileAttributesA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetTickCount
GetProcAddress
GetModuleHandleA
OutputDebugStringW
GetLastError
WideCharToMultiByte
Sleep
WinExec
GetCurrentProcessId
MultiByteToWideChar
GetModuleFileNameW
FindResourceW
LoadResource
LockResource
SetStdHandle

user32

GetMessageW
GetIconInfo
DrawIconEx
CopyImage
LoadImageW
DestroyIcon
IsRectEmpty
DrawFocusRect
WindowFromPoint
SetCursor
KillTimer
SetTimer
ReleaseCapture
SetCapture
GetNextDlgGroupItem
GetMenuItemInfoW
DestroyMenu
MapVirtualKeyW
GetKeyNameTextW
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
IntersectRect
InflateRect
InvalidateRect
DrawStateW
CharNextW
OffsetRect
SetRectEmpty
SendDlgItemMessageA
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
IsDialogMessageW
SetWindowTextW
CheckDlgButton
SetDlgItemTextW
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindow
GetTopWindow
GetClassNameW
GetClassLongW
SetWindowLongW
PtInRect
EqualRect
CopyRect
MapWindowPoints
AdjustWindowRectEx
MonitorFromPoint
WaitMessage
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
EnableWindow
SendMessageW
GetWindowTextLengthW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
DrawEdge
ScrollWindow
RedrawWindow
ValidateRect
GetForegroundWindow
UpdateWindow
ShowOwnedPopups
RealChildWindowFromPoint
GetSysColorBrush
LoadCursorW
GetAsyncKeyState
TrackMouseEvent
CopyAcceleratorTableW
InvalidateRgn
SetRect
SetLayeredWindowAttributes
EnumDisplayMonitors
IsZoomed
CharUpperW
GetSystemMenu
DeleteMenu
SetWindowRgn
MessageBeep
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
UnionRect
SetMenuDefaultItem
UpdateLayeredWindow
EnableScrollBar
TranslateMessage
LoadIconW
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
MessageBoxA
RegisterWindowMessageW
UnregisterClassW
PostMessageW
LoadMenuW
EnableMenuItem
GetSubMenu
GetCursorPos
SetForegroundWindow
UnregisterHotKey
RegisterHotKey
SystemParametersInfoW
MessageBoxW
EnumWindows
GetWindowThreadProcessId
GetWindowTextW
IsWindow
DestroyWindow
CreateDialogIndirectParamW
EndDialog
GetDlgItem
GetNextDlgTabItem
GetActiveWindow
IsWindowEnabled
SetActiveWindow
GetWindowLongW
GetDesktopWindow
GetParent
GetMenuStringW
GetMenuState
GetMenuItemID
GetMenuItemCount
InsertMenuW
AppendMenuW
RemoveMenu
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW
GetDC
GetWindowDC
ReleaseDC
BeginPaint
EndPaint
ClientToScreen
ScreenToClient
GetSysColor
FillRect
GetLastActivePopup
GetWindowRect
DispatchMessageW
PeekMessageW
GetMessagePos
GetMessageTime
DefWindowProcW
CallWindowProcW
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
IsMenu
IsChild
SetWindowPos
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsWindowVisible
GetDlgCtrlID
SetFocus
GetFocus
GetKeyState
GetCapture
GetMenu
SetMenu
TrackPopupMenu
DrawFrameControl
HideCaret
InvertRect
SetClassLongW
SetParent
BringWindowToTop
SetCursorPos
CopyIcon
FrameRect
RegisterClipboardFormatW
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
LoadAcceleratorsW
CreateAcceleratorTableW
DestroyAcceleratorTable
LockWindowUpdate
CharUpperBuffW
ModifyMenuW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
PostThreadMessageW
GetDoubleClickTime
GetComboBoxInfo
IsCharLowerW
MapVirtualKeyExW
IsClipboardFormatAvailable
GetUpdateRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SubtractRect
CreateMenu
DestroyCursor
GetWindowRgn
SetScrollPos

gdi32

Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
GetObjectW
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetBkColor
DeleteObject
CombineRgn
CreateFontIndirectW
CreateRectRgnIndirect
GetMapMode
PatBlt
SetRectRgn
DPtoLP
GetTextExtentPoint32W
GetTextMetricsW
GetRgnBox
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
CreateRoundRectRgn
CreateDIBSection
RealizePalette
SetPixel
StretchBlt
SetDIBColorTable
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
Rectangle
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
LPtoDP
OffsetRgn
RoundRect
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetWindowOrgEx
GetViewportOrgEx
SetPixelV
GetTextFaceW
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
CreateBitmap
BitBlt
GetDeviceCaps
CreateDCW
CopyMetaFileW
DeleteDC
CreateSolidBrush
GetTextColor
CreateFontW

msimg32

TransparentBlt
AlphaBlend

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey

shell32

ShellExecuteW
ShellExecuteExW
SHGetFileInfoW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHAppBarMessage
SHBrowseForFolderW
DragFinish
DragQueryFileW
Shell_NotifyIconW

shlwapi

PathFindFileNameW
PathFileExistsW
PathStripToRootW
StrFormatKBSizeW
PathRemoveFileSpecW
PathFindExtensionW
PathIsUNCW

uxtheme

DrawThemeText
DrawThemeParentBackground
IsAppThemed
CloseThemeData
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
OpenThemeData
GetCurrentThemeName
DrawThemeBackground
GetThemeColor
GetWindowTheme

ole32

IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
CoRegisterMessageFilter
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CoInitialize
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoInitializeEx
CoRevokeClassObject

oleaut32

SafeArrayDestroy
SystemTimeToVariantTime
OleCreateFontIndirect
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysAllocString
SysStringLen
SysFreeString
LoadTypeLi
VariantCopy
VarBstrFromDate
GetErrorInfo
VariantTimeToSystemTime

oledlg

OleUIBusyW

softlic32

ks_cmd

gdiplus

GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImagePaletteSize
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePalette
GdipGetImagePixelFormat
GdiplusShutdown

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 450KB - Virtual size: 449KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 364KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 170KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca8ba2322069f44aa10bd2e26b23d20b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

shlwapi

uxtheme

ole32

oleaut32

oledlg

softlic32

gdiplus

version

oleacc

imm32

winmm

Sections

.text Size: 2.3MB - Virtual size: 2.3MB

.rdata Size: 450KB - Virtual size: 449KB

.data Size: 35KB - Virtual size: 57KB

.rsrc Size: 364KB - Virtual size: 364KB

.reloc Size: 170KB - Virtual size: 169KB

.text
Size: 2.3MB - Virtual size: 2.3MB

.rdata
Size: 450KB - Virtual size: 449KB

.data
Size: 35KB - Virtual size: 57KB

.rsrc
Size: 364KB - Virtual size: 364KB

.reloc
Size: 170KB - Virtual size: 169KB