7ee81c85cc995f287a2f88e9b279536a

Sharing

Copy URL Twitter E-mail

General

Target

7ee81c85cc995f287a2f88e9b279536a
Size

476KB
MD5

7ee81c85cc995f287a2f88e9b279536a
SHA1

ff53b62ee3a3250d30da1dde12e1ccabc70bc33c
SHA256

7dd3719bcafa559e34ac1fc512da79b72ea51353674454bc1c07bf1018f53835
SHA512

fc31db7ce5f04aae0fab5bb5b9dca6739668acf5c2773aaf7b66abe46281bba8b7c7030e3c8014b363eaeb3750fe04eee8a706dc2c9ee64b5bc4d57e4e2c2d30
SSDEEP

12288:hMdNwa1cmcfgUrnocxc7wFvaF86BGsnlXIH81xJ:2w+cmcfFPx59CIwb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7ee81c85cc995f287a2f88e9b279536a

Files

7ee81c85cc995f287a2f88e9b279536a
.exe windows:4 windows x86 arch:x86

1aa3ad01bd0194caafa7a9eb27341185

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\bodeoqj

Imports

comctl32

CreatePropertySheetPageW
ImageList_GetIcon
ImageList_Destroy
ImageList_Draw
ord17
ImageList_GetImageInfo
ImageList_Remove
ImageList_ReplaceIcon
InitCommonControlsEx

oleaut32

LoadTypeLi

gdi32

PlayMetaFileRecord
SetAbortProc
SelectClipRgn
ArcTo
SetBrushOrgEx
CloseMetaFile
EndPath
SetROP2
GetBkMode
PtVisible
ExcludeClipRect
FrameRgn
GetTextCharacterExtra
GetTextExtentPoint32A
BeginPath
GetBitmapDimensionEx
CopyMetaFileA
CreateDIBPatternBrushPt
GetCurrentPositionEx
TextOutA
DeleteDC
MaskBlt
CreateBitmapIndirect
PolyPolyline
SetPixel
CreateCompatibleBitmap
BitBlt
CreateMetaFileA
CreateICA
ExtCreatePen
GetClipRgn
SelectObject
StrokeAndFillPath
IntersectClipRect
GetWindowOrgEx
RoundRect
CreateFontIndirectA
GetCurrentObject
CreateRectRgnIndirect
DeleteMetaFile
CreateCompatibleDC
Pie
Arc
GetOutlineTextMetricsA
GetTextMetricsA
SetColorAdjustment
GetBoundsRect
EnumMetaFile
RealizePalette
SetMapperFlags
FloodFill
SetBkColor
CreateBrushIndirect
GetNearestPaletteIndex
PolyDraw
CloseFigure
DeleteObject
FillRgn
SetBitmapDimensionEx

user32

RedrawWindow
GetSysColor
TranslateMessage
GetActiveWindow
SetWindowTextW
LoadCursorW
BeginDeferWindowPos
KillTimer
SetParent
RemoveMenu
CallWindowProcW
DestroyCaret
SendDlgItemMessageA
DrawFocusRect
SetWindowPos
GetWindowDC
DefFrameProcW
GetMenuState
FillRect
GetWindow
GetSystemMetrics
GetDlgItem
ClientToScreen
CopyImage
SendMessageA
SetCapture
FindWindowW
ScrollWindow
DefWindowProcA
FrameRect
BringWindowToTop
DrawStateW
SetWindowLongA
MoveWindow
RegisterWindowMessageA
RegisterWindowMessageW
DefMDIChildProcW
DestroyMenu
GetWindowThreadProcessId
GetParent
ScreenToClient
GetCursorPos
ShowWindow
GetSystemMenu
DrawEdge
CheckMenuItem
LoadImageW
IsWindowEnabled
EnableMenuItem
MessageBeep
GetMenuCheckMarkDimensions
GetClientRect
OffsetRect
SetCursor
GetKeyState
GetForegroundWindow
IsDialogMessageW
RegisterClipboardFormatW
PeekMessageW
WindowFromPoint
DispatchMessageW
GetSysColorBrush
MessageBoxW
GetFocus
SetForegroundWindow
SetScrollInfo
CloseClipboard
GetUpdateRect
ReuseDDElParam
DrawMenuBar
GetWindowTextLengthW
PostThreadMessageW
LockWindowUpdate
BeginPaint
GetScrollPos
GetMessageTime
UpdateWindow
MapWindowPoints
CreateDialogIndirectParamW
GetMessageW
SetMenuItemInfoW
SetWindowLongW
InsertMenuW
ReleaseCapture
SetScrollPos
RegisterClassW
GetCapture
DrawFrameControl
SetDlgItemTextW
GetMenuItemInfoW
GetDlgCtrlID
GetDCEx
DrawTextW
InflateRect
GetAsyncKeyState
IsZoomed
EnumChildWindows
CopyRect
EmptyClipboard
GetDesktopWindow
GetMessagePos
CheckDlgButton
TranslateMDISysAccel
DeferWindowPos
MessageBoxA
DestroyWindow
LoadStringW
ShowScrollBar
AdjustWindowRectEx
GetScrollInfo
IntersectRect
GetWindowLongW
CreatePopupMenu
OpenClipboard
CallNextHookEx
SetActiveWindow
UnregisterClassW
LoadMenuW
EndDialog
IsRectEmpty
SetWindowTextA
PtInRect
IsWindow
GetMenuStringW
DeleteMenu
GetWindowTextW
WaitForInputIdle
IsIconic
GetNextDlgTabItem
CopyIcon
PostMessageW
ValidateRect
CreateWindowExW
GetMenuItemID
GetMenuDefaultItem
TrackPopupMenu
SetCursorPos
DrawIcon
UnhookWindowsHookEx
GetDC
GetTopWindow
IsMenu
GetIconInfo
LoadIconW
GetClassNameW
EndPaint
EndDeferWindowPos
SetRect
GetMenu
GetNextDlgGroupItem
DestroyIcon
SetWindowRgn
IsClipboardFormatAvailable
SendMessageW
SystemParametersInfoA
ChildWindowFromPoint
EnableWindow
SendDlgItemMessageW
IsWindowVisible
InvalidateRect
SetWindowPlacement
SetDlgItemInt
DestroyCursor
EqualRect
ReleaseDC
SetMenu
GetMenuItemCount
GetWindowLongA
DefWindowProcW
CreateMenu
GetSubMenu
ShowOwnedPopups
GetAncestor
GetLastActivePopup
DestroyAcceleratorTable
wsprintfA
GetWindowRect
GetClipboardData
IsChild
PostQuitMessage
SetTimer
GetWindowPlacement
DrawIconEx
RegisterClassExW
SetFocus
GetDoubleClickTime
SystemParametersInfoW
MapDialogRect
SetClipboardData

winspool.drv

GetPrinterA
ClosePrinter
DocumentPropertiesA
ord204
OpenPrinterA
GetJobA

shell32

ExtractIconA
ord155
Shell_NotifyIconA

comdlg32

GetFileTitleW
GetOpenFileNameW

winmm

waveInClose
waveInAddBuffer
waveInOpen
waveInPrepareHeader
waveInStart
mixerSetControlDetails
mixerOpen
mixerClose
waveOutPrepareHeader
waveInReset
waveOutPause
waveOutWrite
waveInUnprepareHeader

kernel32

GetFileSize
GetTimeFormatA
DebugBreak
MultiByteToWideChar
LeaveCriticalSection
lstrcmpA
CompareStringW
GetVersionExA
ReadFile
IsBadReadPtr
GetThreadLocale
CreateMutexW
GetUserDefaultLCID
GetTimeZoneInformation
GlobalAlloc
GlobalDeleteAtom
GetCurrentProcess
HeapDestroy
GetStringTypeW
GetCPInfo
SetFilePointer
IsBadCodePtr
RaiseException
SetHandleCount
FormatMessageA
VirtualQuery
GetOEMCP
WaitForSingleObject
ExitProcess
LCMapStringW
EnterCriticalSection
GetLastError
GetTickCount
IsValidLocale
GetModuleFileNameA
TlsGetValue
SetConsoleCtrlHandler
GetLocaleInfoA
IsBadWritePtr
GetStartupInfoW
GetACP
GetModuleFileNameW
GlobalSize
RtlUnwind
SetLastError
FindNextFileA
HeapReAlloc
SetStdHandle
WideCharToMultiByte
InterlockedIncrement
GetSystemInfo
GetLocaleInfoW
InterlockedExchange
GetStdHandle
GetDateFormatA
TlsFree
FlushFileBuffers
VirtualProtect
LCMapStringA
SetErrorMode
IsValidCodePage
CompareStringA
UnhandledExceptionFilter
GetModuleHandleA
GetCommandLineW
HeapCreate
FreeEnvironmentStringsA
GetStringTypeA
GetCurrentProcessId
VirtualFree
LoadLibraryA
GetCurrentThread
GetSystemTimeAsFileTime
GetStartupInfoA
FindFirstFileA
FindClose
FatalAppExitA
VirtualAlloc
GetEnvironmentStringsW
TlsAlloc
WriteFile
SuspendThread
OutputDebugStringA
CloseHandle
QueryPerformanceCounter
DeleteCriticalSection
LoadResource
HeapValidate
GetEnvironmentStrings
GetModuleHandleW
GetProcAddress
GetCurrentThreadId
HeapFree
FreeEnvironmentStringsW
InitializeCriticalSection
GetFileType
FileTimeToLocalFileTime
ExitThread
HeapAlloc
InterlockedDecrement
TerminateProcess
SetUnhandledExceptionFilter
LocalFileTimeToFileTime
TlsSetValue
SetEnvironmentVariableA
DeleteFileA
GetCommandLineA

Sections

.text
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 268KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1aa3ad01bd0194caafa7a9eb27341185

Headers

File Characteristics

PDB Paths

Imports

comctl32

oleaut32

gdi32

user32

winspool.drv

shell32

comdlg32

winmm

kernel32

Sections

.text Size: 120KB - Virtual size: 119KB

.rdata Size: 268KB - Virtual size: 266KB

.data Size: 64KB - Virtual size: 83KB

.rsrc Size: 20KB - Virtual size: 19KB

.text
Size: 120KB - Virtual size: 119KB

.rdata
Size: 268KB - Virtual size: 266KB

.data
Size: 64KB - Virtual size: 83KB

.rsrc
Size: 20KB - Virtual size: 19KB