71e0bcf1ef7753748c6e17d7d1be3766

Sharing

Copy URL

Twitter E-mail

General

Target

71e0bcf1ef7753748c6e17d7d1be3766
Size

584KB
MD5

71e0bcf1ef7753748c6e17d7d1be3766
SHA1

5edf11fe542fe831a4a12d14289b10597ef8207d
SHA256

ddc857bcdadac57ebcfdab0e6bf2d5adc7e5d0c112135c93f0e7c7ccac6fbdbf
SHA512

6a656ad065a4511de4a6491d321f60355419647d64716f42ede2c63c59180e8db714273662b1d0cd63fca64457c9fb9cf2b9acf2e1878fd70f3abcbd48742774
SSDEEP

6144:63Dzn6lQJm6d71qxgmDkQb/PfSrkZR5o4lG9iC5RpAV5/SVQ:aDzEWTqxg+ky/3SgZQgGMC5Rpy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71e0bcf1ef7753748c6e17d7d1be3766

Files

71e0bcf1ef7753748c6e17d7d1be3766
.exe windows:4 windows x86 arch:x86

901691f73ae15357f6a8c7ca1ccc5f9b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadLocale
GetFileAttributesA
GetFileTime
GetCPInfo
GetOEMCP
SetErrorMode
RtlUnwind
HeapFree
HeapAlloc
GetStartupInfoA
GetCommandLineA
ExitProcess
RaiseException
GetTimeZoneInformation
GetSystemTime
GetACP
HeapReAlloc
HeapSize
SetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetFullPathNameA
GetProfileStringA
GetVolumeInformationA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetProcessVersion
WritePrivateProfileStringA
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
MulDiv
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GetProcAddress
GlobalUnlock
SetLastError
FileTimeToLocalFileTime
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LoadLibraryA
LocalAlloc
FreeLibrary
lstrcpynA
EnterCriticalSection
FormatMessageA
LocalFree
WaitForSingleObject
InterlockedDecrement
InterlockedIncrement
GlobalLock
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
GetTickCount
FileTimeToSystemTime
GetCurrentProcess
DuplicateHandle
GetModuleHandleA
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
lstrcmpiA
SystemTimeToFileTime
lstrcpyA
lstrlenA
MultiByteToWideChar
LocalFileTimeToFileTime
lstrcmpA
SetFilePointer
IsBadReadPtr
CreateFileW
SetFileTime
CreateDirectoryW
GlobalAlloc
GlobalFree
CreateProcessA
GetLocalTime
CreateDirectoryA
CreateFileA
GetFileSize
ReadFile
WriteFile
GetCurrentDirectoryA
FindFirstFileA
DeleteFileA
FindClose
CreateToolhelp32Snapshot
Process32First
OpenProcess
GetPriorityClass
TerminateProcess
GetExitCodeProcess
CloseHandle
Process32Next
GetModuleFileNameA
SetCurrentDirectoryA
CreateMutexA
GetLastError
ReleaseMutex
Sleep
HeapCreate
GetVersionExA

user32

RegisterClipboardFormatA
PostThreadMessageA
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
MapDialogRect
GetWindow
SetWindowContextHelpId
SetFocus
ShowWindow
SetWindowPos
MoveWindow
SetWindowLongA
GetDlgCtrlID
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
GetSysColorBrush
GetDlgItem
wsprintfA
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
CharNextA
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
SetCursor
FrameRect
GetSystemMetrics
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
InflateRect
IsRectEmpty
LoadImageA
GetDesktopWindow
LoadStringA
GetParent
InvalidateRect
GetWindowRect
PostMessageA
GetSysColor
RegisterWindowMessageA
LoadIconA
DestroyMenu
MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
EnableWindow
KillTimer
SetTimer
GetClientRect
IsIconic
SendMessageA
LoadBitmapA
MessageBoxA
PostQuitMessage
FindWindowA
PtInRect
GetClassNameA
LoadCursorA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
UpdateWindow
MapWindowPoints
AdjustWindowRectEx
ScreenToClient
CopyRect
GetActiveWindow
CharUpperA
ClientToScreen

gdi32

SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
SetMapMode
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
PatBlt
GetMapMode
DPtoLP
GetTextColor
GetBkColor
LPtoDP
SetBkMode
GetStockObject
RestoreDC
SaveDC
DeleteDC
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
SelectObject
CreateCompatibleBitmap
DeleteObject
BitBlt
CreateCompatibleDC
GetObjectA
CreateDIBitmap
GetTextExtentPointA
CreateFontIndirectA

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

comctl32

ord17

oledlg

ord8

ole32

OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString

olepro32

ord253

oleaut32

SysFreeString
VariantCopy
VariantChangeType
SysAllocString
SysAllocStringByteLen
SysAllocStringLen
SysStringLen
VariantTimeToSystemTime
VariantClear

urlmon

URLDownloadToFileA

wininet

InternetGetLastResponseInfoA
InternetQueryDataAvailable
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetSetOptionExA
InternetGetConnectedState
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetQueryOptionA
InternetOpenA
InternetCloseHandle
InternetOpenUrlA

iphlpapi

GetAdaptersInfo

netapi32

Netbios

Sections

.text
Size: 208KB - Virtual size: 205KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 236KB - Virtual size: 233KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

901691f73ae15357f6a8c7ca1ccc5f9b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

oledlg

ole32

olepro32

oleaut32

urlmon

wininet

iphlpapi

netapi32

Sections

.text Size: 208KB - Virtual size: 205KB

.rdata Size: 116KB - Virtual size: 114KB

.data Size: 20KB - Virtual size: 33KB

.rsrc Size: 236KB - Virtual size: 233KB

.text
Size: 208KB - Virtual size: 205KB

.rdata
Size: 116KB - Virtual size: 114KB

.data
Size: 20KB - Virtual size: 33KB

.rsrc
Size: 236KB - Virtual size: 233KB