8c66121593c214fe87da75ef279999a7

Sharing

Copy URL

Twitter E-mail

General

Target

8c66121593c214fe87da75ef279999a7
Size

457KB
MD5

8c66121593c214fe87da75ef279999a7
SHA1

99df6c95ab58321a37ea28fa8a81f1c6fba86cdc
SHA256

e16526568dea309c1d5bddb6885ff61d4ba4e379c8addff73b44c8146579a3e7
SHA512

3b79c1d490fada157977f3f3ae8252ca8a7c44ea371a2c59e76078f5ccff980b08d287f7e75aeddddc886d56c628152eb007222c87d879e9ed9cb4bfda4506d9
SSDEEP

12288:RuKZw/VXRT3ebeZp7PCOt4IPPYEKgxnQQ4TPqqt:RuWwP6yn7RYEKgxnZV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c66121593c214fe87da75ef279999a7

Files

8c66121593c214fe87da75ef279999a7
.exe windows:4 windows x86 arch:x86

dd485c3da8d12c05ef868d1f2f5fed8a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

NtQuerySemaphore
NtSetSystemInformation
RtlAddAccessAllowedObjectAce
RtlAdjustPrivilege

uxtheme

SetWindowTheme
CloseThemeData
GetThemeColor
GetThemeFont
GetThemeMetric
IsThemeActive
GetThemeBackgroundExtent
GetThemePartSize
GetThemeBackgroundContentRect
GetThemeAppProperties
DrawThemeBackground
OpenThemeData
IsAppThemed
DrawThemeParentBackground
GetThemeMargins

rtutils

TraceDumpExA
TraceDumpExW

user32

GetDialogBaseUnits
GetSystemMetrics
DialogBoxIndirectParamW
GetClassLongW
GetWindowTextLengthW
SetForegroundWindow
CheckDlgButton
IsCharAlphaNumericW
GetWindowRect
IsIconic
LoadCursorA
LoadAcceleratorsW
GetDoubleClickTime
MessageBoxIndirectW
MapWindowPoints
MsgWaitForMultipleObjects
ShowScrollBar
DdeCreateStringHandleW
ShowOwnedPopups
GetClipboardFormatNameW
PeekMessageA
SetRect
EnumChildWindows
EndMenu
SetPropW
AttachThreadInput
LoadIconW
GetClientRect
DdeDisconnect
GetClassNameW
GetWindowInfo
GetLastActivePopup
GetMenuItemCount
GetKeyboardLayout
IsRectEmpty
GetDC
SendMessageW
SetActiveWindow
IsMenu
DrawEdge
SystemParametersInfoA
GetClassInfoW
CreateWindowExW
GetKeyState
GetSysColorBrush
SetParent
CharUpperW
DdeClientTransaction
MsgWaitForMultipleObjectsEx
LoadMenuW
DefWindowProcA
LoadCursorW
ScreenToClient
GetForegroundWindow
HideCaret
EnumDisplaySettingsW
CheckRadioButton
WaitForInputIdle
DialogBoxParamW
DeleteMenu
TrackMouseEvent
EmptyClipboard
SetScrollPos
SetRectEmpty
EndDeferWindowPos
DdeUninitialize
GetWindowThreadProcessId
IsWindow
SendDlgItemMessageW
CreateMenu
MapVirtualKeyW
RegisterClipboardFormatW
GetDlgItemTextW
DrawFocusRect
LockSetForegroundWindow
LoadStringA
EnumWindows
DrawTextW
GetMessageW
ReleaseDC
DispatchMessageW
BeginDeferWindowPos
RegisterClipboardFormatA
GetWindow
GetProcessWindowStation
GetWindowDC
GetAncestor
UnhookWindowsHookEx
SetWindowTextW
RegisterClassW
ChildWindowFromPoint
CheckMenuItem
BeginPaint
GetMenuStringW
TranslateAcceleratorW
SetCursorPos
WindowFromPoint
DdeQueryStringW
OpenClipboard
GetTopWindow
CopyRect
CheckMenuRadioItem
NotifyWinEvent
MoveWindow
LoadStringW
InsertMenuW
IsDlgButtonChecked
DdeNameService
GetNextDlgTabItem
FindWindowW
SendNotifyMessageW
SendMessageA
DdeConnect
SetWindowPlacement
EnumDesktopWindows
GetMessagePos
DdeFreeStringHandle
AdjustWindowRect
SetWindowLongA
EnumThreadWindows
IsDialogMessageW
MonitorFromRect
DeferWindowPos
SetTimer
MonitorFromPoint
GetDesktopWindow
RemovePropW
GetPropW
EndPaint
GetAsyncKeyState
DestroyIcon
CharLowerBuffW
GetWindowLongA
OffsetRect
RegisterClassExW
GetIconInfo
GetDlgItem
DrawTextExW
PeekMessageW
EnableWindow
GetMessageTime
GetWindowPlacement
DialogBoxParamA
GetMessageA
InvalidateRect
GetMenuDefaultItem
FillRect
WinHelpW
GetClassInfoExW
CopyIcon
FindWindowExW
RemovePropA
GetFocus
PtInRect
wsprintfW
SetClipboardData
GetCursor
GetCapture
GetLastInputInfo
IsHungAppWindow
TranslateMessage
UnionRect
MessageBeep
DestroyAcceleratorTable
CharNextA
SendMessageTimeoutW
IntersectRect
GetWindowRgnBox
DrawFrameControl
GetShellWindow
DdeCreateDataHandle
DefWindowProcW
SetPropA
GetClassWord
CharNextW
DestroyMenu
SetWindowRgn
MessageBoxIndirectA
IsWindowVisible
CallMsgFilterW
ReleaseCapture
MessageBoxExW
DdeGetData
SetDlgItemInt
GetDlgCtrlID
CreatePopupMenu
ShowWindow
MessageBoxW
SetCursor
RegisterWindowMessageW
SystemParametersInfoW
GetMonitorInfoW
UnregisterClassW
GetWindowLongW
AppendMenuW
SetScrollInfo
SetMenuItemBitmaps
PostMessageA
GetActiveWindow
KillTimer
InflateRect
RemoveMenu
GetCursorPos
GetClipboardData
IsWindowEnabled
GetMenuItemInfoA
AnimateWindow
SetWindowLongW
AllowSetForegroundWindow
EqualRect
UpdateWindow
CopyImage
InsertMenuItemW
UpdateLayeredWindow
RegisterWindowMessageA
ChangeClipboardChain
WaitMessage
GetMenuItemID
TrackPopupMenu
PostThreadMessageA
SetMenuDefaultItem
GetSystemMenu
VkKeyScanExW
SetCapture
CharPrevW
CharPrevA
PostThreadMessageW
SetDlgItemTextW
MapDialogRect
DdeFreeDataHandle
SetWindowPos
GetParent
GetSysColor
IsWindowUnicode
GetSubMenu
SetWindowsHookExW
SetMenuItemInfoW
ShowCaret
CallNextHookEx
DrawIconEx
PostQuitMessage
GetPropA
DdeInitializeW
SetMenu
GetScrollInfo
TrackPopupMenuEx
FindWindowA
PostMessageW
GetKeyNameTextW
MessageBoxExA
MonitorFromWindow
DestroyWindow
SendMessageTimeoutA
CloseClipboard
DispatchMessageA
SetFocus
GetWindowTextW
AdjustWindowRectEx
CharLowerW
CallWindowProcW
GetMenuState
EndDialog
CreateDialogParamW
LoadBitmapW
IsChild
EnableMenuItem
GetMenuItemInfoW
DialogBoxIndirectParamA
ClientToScreen
RedrawWindow
SetClipboardViewer
CreateIconIndirect
LoadImageW
GetComboBoxInfo

psapi

GetProcessImageFileNameW

kernel32

VirtualAlloc

advapi32

ConvertSidToStringSidW
RegSetValueExW
GetUserNameW
RegEnumKeyExW
OpenProcessToken
IsTextUnicode
TraceEvent
RegQueryValueW
SetTokenInformation
RegDeleteValueW
RegCloseKey
RegCreateKeyA
RegCreateKeyExW
RegSetValueExA
RegEnumValueA
GetLengthSid
ImpersonateSelf
RegDeleteValueA
GetTraceEnableLevel
RegEnumValueW
ConvertStringSidToSidW
CryptGetHashParam
DuplicateTokenEx
RegOpenKeyW
RegEnumKeyW
CryptReleaseContext
GetTraceLoggerHandle
TraceMessage
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetTraceEnableFlags
RegOpenKeyExA
RegisterTraceGuidsW
CryptAcquireContextW
RegDeleteKeyW
RegDeleteKeyA
CryptHashData
CreateProcessAsUserW
RegQueryInfoKeyW
CryptDestroyHash
GetTokenInformation
UnregisterTraceGuids
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExA
CryptCreateHash
RegQueryValueExA
SetThreadToken
OpenThreadToken
RegOpenCurrentUser

gdi32

GetStockObject
GetTextExtentPointW
ExtTextOutW
SetWindowExtEx
CreateRectRgn
IntersectClipRect
GetTextAlign
CreateDCA
SetWindowOrgEx
CloseEnhMetaFile
SetBrushOrgEx
PatBlt
Rectangle
SetRectRgn
GetTextCharset
CreateMetaFileW
CreateFontIndirectA
DeleteEnhMetaFile
GetPaletteEntries
GetClipBox
CombineRgn
CreateSolidBrush
SetViewportOrgEx
GetBkColor
CreateRectRgnIndirect
GetGlyphIndicesW
RectVisible
GetTextExtentExPointI
GetLayout
GetObjectA
CreatePalette
RealizePalette
OffsetRgn
SetStretchBltMode
CloseMetaFile
TextOutA
MoveToEx
GetDIBits
DeleteDC
GetTextExtentPoint32A
SetViewportExtEx
LineTo
CreateEnhMetaFileA
SetDCPenColor
GetDCOrgEx
CreatePen
SetMapMode
LPtoDP
CreateFontW
PlayEnhMetaFile
GetRgnBox
GetObjectW
StretchDIBits
CreateBitmap
CreateDIBPatternBrushPt
CreateFontIndirectW
GetSystemPaletteEntries
SaveDC
SetPaletteEntries
CreateHalftonePalette
GetDeviceCaps
SetBkMode
CreateCompatibleBitmap
EqualRgn
GetBkMode
SetBkColor
GetTextMetricsW
CreatePatternBrush
GetBrushOrgEx
GetRegionData
GetPixel
SetTextAlign
RestoreDC
GetTextExtentPoint32W
GetTextColor
OffsetWindowOrgEx
SetTextColor
SelectPalette
CreatePolygonRgn
CreateDIBSection
SelectObject
ExtCreateRegion
SetLayout
TextOutW
DeleteObject
StretchBlt
BitBlt
CreateDCW
CreateCompatibleDC

shell32

SHGetFolderPathW
SHGetInstanceExplorer
SHGetFileInfoW
ExtractIconW
ShellAboutW
SHGetPathFromIDListW
ShellExecuteW
DragQueryFileW
ExtractAssociatedIconExW
SHChangeNotify
SHGetFolderPathAndSubDirW
ShellExecuteExW
SHGetFolderLocation
SHGetPathFromIDListA
SHGetDesktopFolder
SHGetDataFromIDListW
SHPathPrepareForWriteW
SHSetLocalizedName
ExtractIconExW
SHBrowseForFolderW
SHAppBarMessage
SHGetSpecialFolderPathW
SHBindToParent
SHFileOperationW
SHGetSpecialFolderLocation
SHCreateShellItem
ShellExecuteA
Shell_NotifyIconW
Shell_NotifyIconA

ddraw

DirectDrawCreate

Sections

.text
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 399KB - Virtual size: 399KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dd485c3da8d12c05ef868d1f2f5fed8a

Headers

File Characteristics

Imports

ntdll

uxtheme

rtutils

user32

psapi

kernel32

advapi32

gdi32

shell32

ddraw

Sections

.text Size: 1024B - Virtual size: 1012B

.data Size: 4KB - Virtual size: 2.4MB

.idata Size: 12KB - Virtual size: 12KB

.rdata Size: 38KB - Virtual size: 38KB

.rsrc Size: 399KB - Virtual size: 399KB

.text
Size: 1024B - Virtual size: 1012B

.data
Size: 4KB - Virtual size: 2.4MB

.idata
Size: 12KB - Virtual size: 12KB

.rdata
Size: 38KB - Virtual size: 38KB

.rsrc
Size: 399KB - Virtual size: 399KB