7b2d8d7773d02ae13127852d19706426

Sharing

Copy URL Twitter E-mail

General

Target

7b2d8d7773d02ae13127852d19706426
Size

1.0MB
MD5

7b2d8d7773d02ae13127852d19706426
SHA1

d1fdb7b6dfa32f5114e56a58de05f9408a294c87
SHA256

45368247cca77aef62b210c849f9ab8f515e13c2a22dcef6e18e1e61a93a025d
SHA512

ce027917e11e6a54c0131fc1548ff5b4fec052735a08edb788721f06f5cd8445072a2f441f35b3a1ab608992fdd8aab0d1d84461ac8354b4fb7886d466664dc4
SSDEEP

12288:ITm9tPgL0vYD01J/ECvHzgVXtU3WSJnowleZFsggJJAykGGOMqOk9TzBqg:Iq9GL0vYD0LJzgBtU3WSJnJYMg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b2d8d7773d02ae13127852d19706426

Files

7b2d8d7773d02ae13127852d19706426
.exe windows:4 windows x86 arch:x86

a2332b0110bac20861f6fab825512cf0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundA

ws2_32

send
inet_ntoa
gethostbyname
WSAAsyncSelect
bind
htons
socket
closesocket
inet_addr
recvfrom
connect
listen
getsockname
ntohs
accept
WSAGetLastError
recv
gethostname

kernel32

GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
TlsGetValue
GlobalFlags
GetProcessVersion
SizeofResource
LocalReAlloc
SetErrorMode
GetModuleHandleA
RtlUnwind
GetStartupInfoA
GetCommandLineA
RaiseException
HeapAlloc
HeapFree
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCurrentDirectoryA
GetTempFileNameA
GetOEMCP
CreateThread
ExitThread
ExitProcess
TerminateProcess
HeapSize
HeapReAlloc
SetStdHandle
GetFileType
UnhandledExceptionFilter
GetDiskFreeSpaceA
FindNextFileA
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetLocaleInfoA
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sleep
CreateDirectoryA
DeleteFileA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GlobalDeleteAtom
lstrcmpA
GetCurrentThread
GetVersionExA
GlobalGetAtomNameA
GlobalAddAtomA
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileTime
GetFileSize
GetFileAttributesA
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
FileTimeToLocalFileTime
FileTimeToSystemTime
SetLastError
GetShortPathNameA
lstrcmpiA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
FindFirstFileA
FindClose
lstrcpyA
GetProcAddress
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
WideCharToMultiByte
MultiByteToWideChar
InitializeCriticalSection
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
LocalAlloc
FormatMessageA
LocalFree
lstrlenA
FreeLibrary
lstrcpynA
FindResourceA
WaitForSingleObject
MulDiv
GetVersion
LoadResource
LockResource
GetVolumeInformationA
lstrcatA
GetCurrentThreadId
GlobalAlloc
SetVolumeLabelA
SetFileAttributesA
GlobalFree
GlobalLock
GlobalUnlock
GetDiskFreeSpaceExA
CreateFileA
CloseHandle
CreateMutexA
GetDriveTypeA
GetWindowsDirectoryA
TerminateThread
GetLastError
ReleaseMutex
FreeEnvironmentStringsA
GetExitCodeThread
FreeEnvironmentStringsW
GetCPInfo
GetACP
GetProfileStringA

user32

EndDialog
IsDialogMessageA
SetWindowTextA
ShowWindow
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
GetMenuCheckMarkDimensions
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
GetDesktopWindow
CharUpperA
ShowOwnedPopups
ValidateRect
TranslateMessage
GetMessageA
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
ReleaseCapture
DestroyMenu
SetMenu
ReuseDDElParam
UnpackDDElParam
InvalidateRect
BringWindowToTop
PtInRect
IsZoomed
OffsetRect
InflateRect
RedrawWindow
SetCapture
SetCursorPos
DestroyCursor
IntersectRect
SetParent
IsRectEmpty
AppendMenuA
DeleteMenu
GetSystemMenu
WindowFromPoint
SetRect
FindWindowA
FillRect
PostQuitMessage
MapDialogRect
GetClassNameA
GetSysColorBrush
LoadStringA
InvertRect
GetDCEx
LockWindowUpdate
InsertMenuA
GetMenuStringA
GetActiveWindow
GetNextDlgTabItem
SetActiveWindow
IsWindow
SetFocus
GetSysColor
SystemParametersInfoA
DeferWindowPos
GetClientRect
BeginDeferWindowPos
EndDeferWindowPos
IsWindowVisible
ScreenToClient
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsWindowEnabled
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetMenuItemID
GetMenu
TrackPopupMenu
SetWindowPlacement
GetWindowPlacement
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
SetPropA
UnhookWindowsHookEx
GetLastActivePopup
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetWindow
GetWindowRect
SetWindowPos
RegisterWindowMessageA
GetParent
IsClipboardFormatAvailable
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
MessageBoxA
GetWindowLongA
SetWindowLongA
LoadImageA
DestroyIcon
RegisterClipboardFormatA
UpdateWindow
GetAsyncKeyState
SetCursor
IsIconic
LoadIconA
GetForegroundWindow
SetForegroundWindow
LoadMenuA
GetSubMenu
GetCursorPos
MessageBeep
CopyRect
SendDlgItemMessageA
GetSystemMetrics
CreateDialogIndirectParamA
DispatchMessageA
GetFocus
MapWindowPoints
UnregisterHotKey
LoadBitmapA
ClientToScreen
RegisterHotKey
LoadCursorA
KillTimer
SetTimer
PostMessageA
SendMessageA
EnableWindow
AdjustWindowRectEx
EqualRect
DefWindowProcA
GetKeyState
PeekMessageA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
CharNextA
IsWindowUnicode

gdi32

SetTextColor
CreateBitmap
DeleteDC
GetObjectA
SaveDC
RestoreDC
GetStockObject
SelectObject
SetBkMode
SetMapMode
SetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetWindowExtEx
GetClipBox
SelectClipRgn
ScaleWindowExtEx
IntersectClipRect
ExcludeClipRect
SetTextAlign
CreateDIBitmap
DeleteObject
CreateRectRgn
GetDeviceCaps
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
PatBlt
CreateRectRgnIndirect
StretchDIBits
CreateCompatibleDC
CreateCompatibleBitmap
GetTextExtentPointA
GetTextMetricsA
LPtoDP
CreateFontIndirectA
SetRectRgn
CombineRgn
BitBlt
SetBkColor
CreateSolidBrush

comdlg32

GetOpenFileNameA
GetFileTitleA
GetSaveFileNameA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

GetFileSecurityA
SetFileSecurityA
RegCreateKeyA
RegDeleteKeyA
RegEnumKeyA
RegCreateKeyExA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueA
RegCloseKey
RegSetValueA
RegQueryValueExA
RegDeleteValueA
RegSetValueExA

shell32

ExtractIconA
DragQueryFileA
Shell_NotifyIconA
SHFileOperationA
ShellExecuteA
DragFinish
SHGetFileInfoA

comctl32

ord17
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_Create
CreatePropertySheetPageA
PropertySheetA
DestroyPropertySheetPage
ImageList_GetIcon
ImageList_Remove

wsock32

inet_ntoa
WSACleanup
WSAStartup

wininet

InternetOpenUrlA
InternetWriteFile
InternetReadFile
InternetOpenA
InternetCloseHandle
HttpQueryInfoA
FtpOpenFileA
InternetCrackUrlA
FtpCreateDirectoryA
InternetQueryOptionA
InternetGetLastResponseInfoA
InternetQueryDataAvailable
InternetCanonicalizeUrlA
FtpSetCurrentDirectoryA
InternetConnectA
InternetSetStatusCallback
InternetSetFilePointer

Sections

.text
Size: 434KB - Virtual size: 436KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 72KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 228KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 277KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cas
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a2332b0110bac20861f6fab825512cf0

Headers

File Characteristics

Imports

winmm

ws2_32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

wsock32

wininet

Sections

.text Size: 434KB - Virtual size: 436KB

.rdata Size: 72KB - Virtual size: 76KB

.data Size: 228KB - Virtual size: 248KB

.idata Size: 11KB - Virtual size: 12KB

.rsrc Size: 277KB - Virtual size: 280KB

.cas Size: 34KB - Virtual size: 36KB

.text
Size: 434KB - Virtual size: 436KB

.rdata
Size: 72KB - Virtual size: 76KB

.data
Size: 228KB - Virtual size: 248KB

.idata
Size: 11KB - Virtual size: 12KB

.rsrc
Size: 277KB - Virtual size: 280KB

.cas
Size: 34KB - Virtual size: 36KB