8ea57927b1f70ce40224b3220993ad9c

Sharing

Copy URL

Twitter E-mail

General

Target

8ea57927b1f70ce40224b3220993ad9c
Size

860KB
MD5

8ea57927b1f70ce40224b3220993ad9c
SHA1

0ad2701dcf04f20f3e36e39ed1e7df340cf82972
SHA256

e29a507eb692eb3d8f114caaceeb816ddc938f15f4a7564b750bd67071410f0d
SHA512

9a6445b4787dbae5a0fe260aea5f07a979bbb0fca13215602a571a01defe8dc58c019ba84248c8d65c63164434558a59866e81799ff0a51ff9a3c65faae4faeb
SSDEEP

24576:wGsR2PafTuPOMnbOv2IhXlBOoWfMAK7E3p:wGsM6TuPv6OhMASE3p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ea57927b1f70ce40224b3220993ad9c

Files

8ea57927b1f70ce40224b3220993ad9c
.exe windows:4 windows x86 arch:x86

d429ed7a076474f46f108dd3bfa321e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapReAlloc
ExitThread
GetCommandLineA
GetStartupInfoA
RtlUnwind
ExitProcess
HeapSize
GetACP
IsValidCodePage
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
CloseHandle
WideCharToMultiByte
SizeofResource
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LockResource
LoadResource
TerminateProcess
GetTickCount
GetFileTime
GetFileAttributesA
FileTimeToLocalFileTime
SetErrorMode
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
FindResourceExW
FindResourceW
WriteProcessMemory
InterlockedCompareExchange
lstrcpynA
lstrcatA
CreateMutexA
FindResourceA
ReleaseMutex
Sleep
CreateThread
TerminateThread
SuspendThread
ResumeThread
WaitForSingleObject
HeapAlloc
GetProcessHeap
HeapFree
GetModuleHandleA
ResetEvent
CreateEventA
lstrlenW
lstrcmpiA
GetVersion
CompareStringW
lstrlenA
InterlockedExchange
MultiByteToWideChar
CompareStringA
GetLastError
CreateProcessA
GetPrivateProfileStringA
GetModuleFileNameA
lstrcpyA
OpenProcess
VirtualAllocEx
ReadProcessMemory
VirtualFreeEx
SetEvent
WaitForMultipleObjects
CreateFileA
RaiseException
WriteFile
ReadFile
FileTimeToSystemTime
GetThreadLocale
GetOEMCP
GetCPInfo
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GlobalFlags
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WritePrivateProfileStringA
GetCurrentProcessId
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
InterlockedDecrement
GetModuleFileNameW
GlobalAlloc
FormatMessageA
LocalFree
MulDiv
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
LoadLibraryA
lstrcmpW
GetProcAddress
GetVersionExA
SetLastError
FindResourceExA

user32

ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
GetCursorPos
WindowFromPoint
GetMenuStringA
AppendMenuA
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
IsWindowEnabled
ShowWindow
MoveWindow
IsDialogMessageA
GetWindowDC
SendDlgItemMessageA
SetForegroundWindow
SendMessageA
EnableWindow
BeginPaint
EndPaint
LoadCursorA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsWindow
SetFocus
GetWindowTextLengthA
GetLastActivePopup
GetMenuItemInfoA
DestroyMenu
UnregisterClassA
SetActiveWindow
DispatchMessageA
ValidateRect
TranslateMessage
GetMessageA
SetCursor
MapDialogRect
SetWindowContextHelpId
GetSysColorBrush
InflateRect
PostMessageA
SetWindowPos
LoadIconA
GetWindowLongA
SetWindowLongA
KillTimer
DestroyIcon
CopyAcceleratorTableA
IsRectEmpty
SetRect
InvalidateRgn
SetCapture
ReleaseCapture
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatA
PostThreadMessageA
IsWindowVisible
SetParent
GetWindowRect
FindWindowA
LoadImageA
PostQuitMessage
UpdateWindow
RedrawWindow
CharUpperA
SystemParametersInfoA
BringWindowToTop
GetWindow
GetWindowTextA
SetWindowTextA
GetDlgItem
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
TrackPopupMenuEx
TrackPopupMenu
GetKeyState
SetScrollPos
GetClientRect
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
MessageBoxA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
GetScrollInfo
PtInRect
GetDlgCtrlID
CallWindowProcA
OffsetRect
IntersectRect
IsIconic
GetWindowPlacement
InvalidateRect
CreateWindowExA
GetSystemMetrics
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
GetForegroundWindow
RegisterClassExA
DefWindowProcA
GetParent
SetWindowRgn
DrawStateA
GetSystemMenu
CreateIconFromResourceEx
LookupIconIdFromDirectoryEx
CopyImage
InsertMenuItemA
IsMenu
GetMenuDefaultItem
SetMenuItemInfoA
FrameRect
UnionRect
GetMenuItemRect
SetRectEmpty
LoadStringA
LoadStringW
LoadBitmapW
LoadIconW
LoadCursorW
LoadImageW
CreatePopupMenu
SetMenuDefaultItem
IsZoomed
SetTimer
EnableScrollBar
LoadMenuA
DestroyCursor
GetComboBoxInfo
DrawFocusRect
GetAsyncKeyState
GetKeyNameTextA
MapVirtualKeyA
RegisterWindowMessageA
CopyRect
GetDesktopWindow
FindWindowExA
MapWindowPoints
GetWindowThreadProcessId
DestroyWindow
CharNextA

gdi32

CreateBitmap
CreateRectRgn
CreateRoundRectRgn
DeleteObject
SelectClipRgn
GetViewportExtEx
GetWindowExtEx
BitBlt
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreateCompatibleDC
GetStockObject
CreatePen
ExtCreatePen
CreateSolidBrush
CreateFontIndirectA
GetTextExtentPoint32A
GetTextMetricsA
CreateRectRgnIndirect
CombineRgn
GetMapMode
PatBlt
DPtoLP
GetBkColor
GetTextColor
GetRgnBox
GetClipBox
SetTextColor
SetBkColor
GetObjectA
GetDeviceCaps
SaveDC
RestoreDC
SetBkMode
SetStretchBltMode
CreateCompatibleBitmap
Rectangle
CreateEllipticRgn
GetDIBits
StretchBlt
CreateDIBitmap
GetBkMode
CreateBrushIndirect
SetBitmapBits
GetBitmapBits
SetPixel
CreateFontA
SetMapMode
ExcludeClipRect
LineTo
MoveToEx

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegOpenKeyA
RegQueryValueExA
RegNotifyChangeKeyValue
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA

shell32

ShellExecuteA
SHAppBarMessage
Shell_NotifyIconA

comctl32

ImageList_GetIconSize
ImageList_Draw
ImageList_DrawEx
ImageList_GetImageInfo
_TrackMouseEvent
InitCommonControlsEx
ImageList_GetImageCount

shlwapi

PathIsUNCA
PathStripToRootA
PathFindFileNameA
PathFindExtensionA
PathRenameExtensionA
PathRemoveFileSpecA

oledlg

ord8

ole32

OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleRun
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
CoRevokeClassObject
CoTaskMemAlloc
CoTaskMemFree
OleIsCurrentClipboard
OleFlushClipboard
CoUninitialize
CoInitialize
CoRegisterMessageFilter

oleaut32

VariantInit
SysAllocStringLen
SysStringLen
SysFreeString
SysAllocStringByteLen
SafeArrayGetUBound
SafeArrayGetLBound
VariantCopy
VariantChangeType
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysAllocString
VariantClear
SafeArrayGetVartype

imagehlp

ImageDirectoryEntryToData

msimg32

AlphaBlend

Sections

.text
Size: 626KB - Virtual size: 626KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 541B - Virtual size: 541B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d429ed7a076474f46f108dd3bfa321e6

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

imagehlp

msimg32

Sections

.text Size: 626KB - Virtual size: 626KB

.rdata Size: 149KB - Virtual size: 149KB

.data Size: 35KB - Virtual size: 35KB

.tls Size: 541B - Virtual size: 541B

.rsrc Size: 34KB - Virtual size: 34KB

.text
Size: 626KB - Virtual size: 626KB

.rdata
Size: 149KB - Virtual size: 149KB

.data
Size: 35KB - Virtual size: 35KB

.tls
Size: 541B - Virtual size: 541B

.rsrc
Size: 34KB - Virtual size: 34KB