862dad14dbcbcc4c7470a791a10d5613

Sharing

Copy URL

Twitter E-mail

General

Target

862dad14dbcbcc4c7470a791a10d5613
Size

912KB
MD5

862dad14dbcbcc4c7470a791a10d5613
SHA1

3f843842314b04abb522f11363b968bd15de6881
SHA256

bcfb1e4ca5fee8d62562d771d4d4a8235a32e22f32e86b2c2f856f221deebb50
SHA512

ad38ef1cfd9664fb3e45719113622ca743c49861e348b792ce93cf165f800c6b25a82d64a91fd4c0e20db15a590c879d28dbcd55a47fa42280f6e7fd0c8c32d3
SSDEEP

24576:ijvZmfka8+bZmdQ/UVbkVcACl9rzhyyBGMF8RvqTBt0+Qa2QhnS0lL:ijME07/OYOHlWyBhyvIOkI01

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
862dad14dbcbcc4c7470a791a10d5613

Files

862dad14dbcbcc4c7470a791a10d5613
.exe windows:5 windows x86 arch:x86

95c4821e5bc6c12250a2b360b58d486f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

msvcrt

wcslen
wcscmp
_vsnwprintf
memmove
_wtoi
wcschr
_wcsicmp
wcsstr
_snwprintf
swscanf
free
__CxxFrameHandler
_wcsdup
_endthreadex
_beginthreadex
memset
_CxxThrowException
malloc
_except_handler3
realloc
labs
_expand
memcpy
_msize
wcstoul
wcstol
iswdigit
iswspace
_ultow
_ltow
wcscpy
wcsncpy
_controlfp
??1type_info@@UAE@XZ
ctime
mktime
gmtime
localtime
time
?terminate@@YAXXZ
_vsnprintf
_onexit
__dllonexit
__set_app_type
__p__fmode
__p__commode
_c_exit
__setusermatherr
_initterm
__wgetmainargs
_amsg_exit
_wcmdln
exit
_cexit
_XcptFilter
_exit
_adjust_fdiv

user32

DestroyMenu
RegisterClipboardFormatW
PostThreadMessageW
MessageBoxA
CharNextW
CharUpperW
LoadCursorW
GetSysColorBrush
wsprintfW
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
MoveWindow
SetWindowTextW
IsDialogMessageW
RegisterWindowMessageW
WinHelpW
GetClassLongW
SetPropW
GetPropW
RemovePropW
SendDlgItemMessageW
SendDlgItemMessageA
IsChild
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
GetClassInfoW
CreateWindowExW
GetClassInfoExW
UnregisterClassW
RegisterClassW
GetMenu
AdjustWindowRectEx
ScreenToClient
EqualRect
GetScrollInfo
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
CopyRect
PtInRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetMenuItemID
GetMenuItemCount
GetSubMenu
DestroyWindow
IsWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
SetWindowContextHelpId
MapDialogRect
SetWindowPos
ShowWindow
GetAsyncKeyState
SetFocus
GetDlgItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
SetWindowsHookExW
CallNextHookEx
GetMessageW
GetNextDlgGroupItem
ReleaseCapture
TranslateMessage
DispatchMessageW
IsWindowVisible
SetCapture
InvalidateRgn
CopyAcceleratorTableW
SetRect
MessageBoxW
IsRectEmpty
GetKeyState
GetCursorPos
ValidateRect
SetCursor
PostQuitMessage
GetDesktopWindow
GetWindowThreadProcessId
GetClassNameW
SendMessageTimeoutW
SetForegroundWindow
PostMessageW
OffsetRect
SystemParametersInfoW
GetClientRect
GetFocus
InvalidateRect
GetWindowRect
GetSysColor
LoadBitmapW
GetWindowLongW
SetWindowLongW
GetSystemMetrics
MessageBeep
LoadIconW
DrawFocusRect
FillRect
PeekMessageW
IsWindowEnabled
GetCapture
GetActiveWindow
EnableWindow
GetParent
GetWindow
SetActiveWindow
LockWindowUpdate
UpdateWindow
ReleaseDC
GetDC
SendMessageW
EndDialog

kernel32

GlobalDeleteAtom
FreeLibrary
GlobalAlloc
lstrcmpW
GlobalLock
WideCharToMultiByte
MultiByteToWideChar
GetCurrentThreadId
GetCurrentThread
lstrlenW
GetModuleFileNameW
SetThreadPriority
ResumeThread
SetEvent
SuspendThread
CreateEventW
lstrcpynW
SetLastError
LoadLibraryA
GetModuleHandleA
GetFileAttributesW
VirtualProtect
OutputDebugStringA
GlobalFree
GlobalUnlock
LocalFree
FormatMessageW
GetVersionExA
lstrcatW
lstrlenA
GlobalFindAtomW
InterlockedDecrement
RaiseException
InitializeCriticalSection
DeleteCriticalSection
WritePrivateProfileStringW
lstrcmpiW
InterlockedIncrement
GlobalFlags
LocalAlloc
LeaveCriticalSection
GlobalReAlloc
GlobalHandle
EnterCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileW
GetVolumeInformationW
GetFullPathNameW
CreateFileW
FindResourceExW
FileTimeToSystemTime
SetErrorMode
FileTimeToLocalFileTime
GetFileTime
GetTickCount
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
GetSystemInfo
VirtualQuery
LoadLibraryExW
GetSystemDirectoryW
FormatMessageA
GetModuleHandleW
GetProcAddress
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcpyW
LoadLibraryW
OpenProcess
WaitForSingleObject
CloseHandle
CreateProcessW
GetUserDefaultUILanguage
IsValidLocale
GetLocaleInfoW
FreeResource
SizeofResource
MulDiv
FindResourceW
LoadResource
LockResource
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
CreateMutexW
GetLastError
ReleaseMutex
GlobalAddAtomW

psapi

EnumProcesses
EnumProcessModules
GetModuleBaseNameW

winmm

joyConfigChanged
midiConnect
midiDisconnect

gdi32

SetBkColor
SaveDC
RestoreDC
SetBkMode
SetMapMode
SetTextAlign
GetViewportExtEx
GetWindowExtEx
SetTextColor
RectVisible
TextOutW
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
GetStockObject
GetClipBox
CreateBitmap
CreateCompatibleDC
SelectObject
DeleteDC
GetTextExtentPoint32W
DeleteObject
GetTextAlign
GetTextColor
GetBkColor
CreateSolidBrush
GetDeviceCaps
GetObjectW
PtVisible
GetMapMode
GetRgnBox
CreateRectRgnIndirect
EnumFontFamiliesExW
CreateFontIndirectW

comctl32

PropertySheetW

Sections

.text
Size: 399KB - Virtual size: 399KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 496KB - Virtual size: 495KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 6KB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

95c4821e5bc6c12250a2b360b58d486f

Headers

File Characteristics

Imports

winspool.drv

msvcrt

user32

kernel32

psapi

winmm

gdi32

comctl32

Sections

.text Size: 399KB - Virtual size: 399KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 496KB - Virtual size: 495KB

.edata Size: 6KB - Virtual size: 3.3MB

.text
Size: 399KB - Virtual size: 399KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 496KB - Virtual size: 495KB

.edata
Size: 6KB - Virtual size: 3.3MB