96d3c6574ee4fab5aed425ed50ac3a1f

Sharing

Copy URL Twitter E-mail

General

Target

96d3c6574ee4fab5aed425ed50ac3a1f
Size

1.3MB
MD5

96d3c6574ee4fab5aed425ed50ac3a1f
SHA1

83f7eca73b7b7e9d9bb8b812fbde93e23c5bcb5a
SHA256

8eb4cea703961e2df36364846dd98b42e6b92516bdef7eb5a29bfa5749000144
SHA512

5de3042d6fa53b990c33323aa3b21adf772d869e28af2c50d9cf6e1dfefc3d564657fe2848b12b300f4bfc9e42fd1f189064918df8380dcb3e8651cb6d9dc928
SSDEEP

24576:ed88QVkaVSGykIrgE5qvmyMycqhD08aaOlh49QuMT0sfCl:emDpSG96gEUBMRhlh49Qk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96d3c6574ee4fab5aed425ed50ac3a1f

Files

96d3c6574ee4fab5aed425ed50ac3a1f
.exe windows:4 windows x86 arch:x86

968d8fb2a87c4b610369c97e00a27367

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx
ImageList_DragMove
ImageList_EndDrag
ImageList_GetImageCount
ImageList_BeginDrag
ImageList_Remove
_TrackMouseEvent
ImageList_LoadImageW
FlatSB_SetScrollProp
ImageList_DragLeave
ImageList_DragEnter
ImageList_Draw
ImageList_DragShowNolock
CreatePropertySheetPageW
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_GetIconSize
ImageList_Destroy
PropertySheetW
DestroyPropertySheetPage
ImageList_Create
ord8
ImageList_AddMasked

winmm

waveOutPause
waveOutGetVolume
waveOutGetPosition
waveOutRestart
waveOutReset
waveOutPrepareHeader
waveOutOpen
waveOutGetDevCapsW
waveOutWrite
waveOutClose
waveOutGetNumDevs
waveOutSetVolume
waveOutUnprepareHeader

wininet

InternetConnectW
InternetReadFileExA
InternetGetCookieW
InternetOpenW
InternetCrackUrlW
InternetCloseHandle
HttpOpenRequestW
HttpQueryInfoW
InternetSetOptionW
HttpSendRequestW
InternetSetStatusCallbackW
InternetReadFile

msvcrt

__wgetmainargs
_wcmdln
_itoa
_stricmp
_strnicmp
_wcsupr
strstr
_itow
_mbsupr
_initterm
_strlwr
strncpy
_atoi64
isalpha
isalnum
isspace
strncmp
strcpy
log10
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_ultoa
sqrt
_mbschr
fabs
wcspbrk
swprintf
sprintf
_mbscmp
_wcsdup
srand
rand
log
pow
isleadbyte
iswalnum
calloc
swscanf
_mbsinc
floor
atoi
strchr
iswspace
strcmp
_wtoi
_mbsicmp
_wcslwr
sscanf
vsprintf
_mbslwr
_mbsstr
_wcsnicmp
labs
abs
wcsncpy
memcmp
strrchr
wcsstr
??2@YAPAXI@Z
vswprintf
wcsncmp
_purecall
_beginthreadex
_wcsicmp
wcscpy
wcscmp
realloc
??3@YAXPAX@Z
memset
wcsrchr
wcslen
strlen
malloc
free
memmove
wcscat
wcschr
memcpy
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
?terminate@@YAXXZ
_except_handler3
atof
tan
towupper
sin
_clearfp
_controlfp
__CxxFrameHandler
cos
_CxxThrowException

kernel32

GetDriveTypeW
lstrlenA
lstrcpyA
lstrcatA
QueryPerformanceCounter
GetVersionExA
DeviceIoControl
GetCurrentThread
SearchPathW
GetVolumeInformationW
SetEndOfFile
GetSystemTimeAsFileTime
GetFileTime
CreateFileA
CreateFileMappingA
SetFileTime
GetFileAttributesA
GetVersion
GetLocaleInfoA
FindResourceW
LoadResource
InterlockedIncrement
InterlockedDecrement
CreateDirectoryW
InitializeCriticalSection
WideCharToMultiByte
SizeofResource
GetVersionExW
GetFileAttributesW
GetModuleFileNameW
GetACP
lstrlenW
RaiseException
InterlockedExchange
GetLastError
GetThreadLocale
LockResource
DeleteCriticalSection
SetErrorMode
HeapAlloc
GetCurrentProcess
HeapFree
WaitForSingleObject
SetEvent
GetTickCount
VirtualFree
GetProcessHeap
TlsSetValue
TerminateThread
LeaveCriticalSection
MulDiv
FlushInstructionCache
VirtualAlloc
EnterCriticalSection
ResetEvent
CreateEventW
GetSystemInfo
GetCurrentThreadId
CloseHandle
DeleteFileW
SuspendThread
ResumeThread
ExitProcess
TlsGetValue
FreeLibrary
SetUnhandledExceptionFilter
GetModuleHandleW
VirtualQueryEx
LoadLibraryW
GetStartupInfoW
GetProcAddress
GetModuleFileNameA
lstrcmpiW
WaitForMultipleObjects
ReadDirectoryChangesW
CreateFileW
GetOverlappedResult
GetFullPathNameW
GetEnvironmentVariableW
FindFirstFileW
SetEnvironmentVariableW
IsBadWritePtr
SetLastError
FindClose
lstrcatW
FindNextFileW
lstrcpyW
lstrcpynW
HeapReAlloc
GetFileSize
SetFilePointer
FreeResource
MapViewOfFile
UnmapViewOfFile
WriteFile
GetCPInfoExW
EnumSystemCodePagesW
CreateFileMappingW
EnumResourceLanguagesW
SetFileAttributesW
ReadFile
CreateThread
lstrcmpW
GlobalLock
IsBadReadPtr
GlobalAlloc
Sleep
GlobalUnlock
MoveFileW
CreateProcessW
LoadLibraryExW
CopyFileW
SetThreadPriority
GetLocalTime
GetCurrentProcessId
SetCurrentDirectoryW
GetTempFileNameW
MultiByteToWideChar
GetTempPathW
GlobalFree
DosDateTimeToFileTime
InterlockedExchangeAdd
CompareFileTime
InterlockedCompareExchange
GetCommandLineA
TlsAlloc
GetWindowsDirectoryW
TlsFree
SystemTimeToFileTime
FormatMessageW
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalFree
LCMapStringW

user32

UnhookWindowsHookEx
SetWindowsHookExW
ShowScrollBar
FindWindowExW
WindowFromDC
FrameRect
SetClassLongW
MessageBoxA
IntersectRect
CheckMenuRadioItem
GetMenuItemRect
GetForegroundWindow
LockWindowUpdate
CharLowerW
EnumWindows
GetClassLongW
DrawEdge
ExitWindowsEx
WindowFromPoint
CallNextHookEx
GetWindowDC
PostQuitMessage
OpenIcon
IsMenu
GetSystemMenu
InvertRect
RegisterClipboardFormatW
InsertMenuItemW
GetMenuStringW
CheckRadioButton
GetKeyNameTextW
MapVirtualKeyW
OemToCharBuffW
CharNextA
DrawStateW
EndDialog
SendDlgItemMessageW
GetDesktopWindow
GetSysColor
LoadStringW
CheckDlgButton
CreatePopupMenu
IsDlgButtonChecked
SetMenuDefaultItem
AdjustWindowRectEx
UpdateWindow
SetWindowTextW
UnionRect
GetActiveWindow
EnableWindow
FindWindowW
EndPaint
ClientToScreen
SetCursor
GetMessagePos
SetTimer
ScreenToClient
TrackPopupMenu
IsIconic
FillRect
GetMenuItemID
SetCapture
KillTimer
GetSubMenu
DrawIconEx
OpenClipboard
DeleteMenu
GetParent
CreateCursor
LoadCursorW
DrawFocusRect
BeginPaint
PtInRect
GetClassInfoExW
GetIconInfo
GetDC
GetCapture
RegisterClassExW
OffsetRect
SetCursorPos
LoadMenuW
ReleaseDC
GetWindowRgn
GetCursorPos
GetMenuItemCount
InsertMenuW
DeferWindowPos
ReleaseCapture
BeginDeferWindowPos
DestroyMenu
GetDlgCtrlID
RegisterHotKey
EndDeferWindowPos
SetMenuItemInfoW
CallWindowProcW
DefWindowProcW
CheckMenuItem
GetWindow
DestroyWindow
GetMessageA
GetWindowRect
GetMessageW
PostMessageW
DrawTextW
MsgWaitForMultipleObjects
GetClientRect
CloseClipboard
TranslateAcceleratorW
GetDlgItemInt
DestroyAcceleratorTable
SetActiveWindow
IsChild
InvalidateRgn
SetParent
CreateAcceleratorTableW
GetMenuItemInfoW
SetDlgItemInt
IsDialogMessageW
BringWindowToTop
GetClassNameW
EnableMenuItem
SetWindowRgn
EmptyClipboard
DestroyIcon
UnregisterHotKey
GetSystemMetrics
SystemParametersInfoW
LoadIconW
SetRect
InflateRect
SetRectEmpty
UnregisterClassW
LoadImageW
RegisterWindowMessageW
DispatchMessageW
MapWindowPoints
SendMessageW
SetDlgItemTextW
IsWindowVisible
MessageBoxW
DispatchMessageA
CreateWindowExW
IsWindow
CreateDialogParamW
LoadBitmapW
SetClipboardData
DrawFrameControl
CopyRect
GetWindowThreadProcessId
MoveWindow
GetKeyState
DrawTextA
ModifyMenuW
DestroyCursor
IsRectEmpty
GetSysColorBrush
GetDlgItemTextW
GetWindowTextLengthW
CharNextW
DialogBoxIndirectParamW
GetFocus
DialogBoxParamW
MessageBeep
SetForegroundWindow
IsWindowEnabled
ShowWindow
SetWindowPos
RedrawWindow
SetWindowLongW
GetDlgItem
IsWindowUnicode
PeekMessageW
GetWindowLongW
InvalidateRect
TranslateMessage
wsprintfW
GetWindowTextW
TrackPopupMenuEx
SetFocus
AppendMenuW

gdi32

GetClipBox
SetStretchBltMode
GetObjectW
SelectPalette
StretchDIBits
OffsetWindowOrgEx
RealizePalette
SaveDC
ExtCreateRegion
IntersectClipRect
DPtoLP
PtInRegion
CreateBitmap
GetDIBits
StretchBlt
GetDeviceCaps
CreateFontIndirectW
CreateDIBSection
LPtoDP
SetDIBitsToDevice
SetWindowOrgEx
GetStockObject
SetPixel
CreatePen
Polygon
GetPixel
LineTo
MoveToEx
CreateSolidBrush
CreatePatternBrush
CreateRoundRectRgn
OffsetRgn
CombineRgn
CreateRectRgnIndirect
GetRegionData
ExcludeClipRect
SetBrushOrgEx
FrameRgn
PatBlt
GetWindowOrgEx
GetTextMetricsW
RestoreDC
BitBlt
SetTextColor
GetCurrentObject
SetBkColor
SetBkMode
DeleteObject
SelectObject
SelectClipRgn
CreateCompatibleDC
CreateCompatibleBitmap
ExtTextOutW
CreateRectRgn
CreateBrushIndirect
DeleteDC

comdlg32

GetOpenFileNameW
ChooseFontW
ChooseColorW
GetSaveFileNameW

advapi32

RegOpenKeyExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumValueW
RegEnumKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegQueryValueExW

shell32

ord155
SHGetPathFromIDListW
SHGetMalloc
SHGetFileInfoW
SHGetSpecialFolderLocation
SHAddToRecentDocs
SHBrowseForFolderW
SHGetDesktopFolder
SHChangeNotify
Shell_NotifyIconW
DragQueryFileW
SHFileOperationW
ShellExecuteW
SHGetSpecialFolderPathW
ExtractIconExW
ShellExecuteA

ole32

OleUninitialize
CoGetClassObject
RegisterDragDrop
ReleaseStgMedium
DoDragDrop
OleDuplicateData
OleSetClipboard
OleInitialize
CoTaskMemRealloc
RevokeDragDrop
CoTaskMemAlloc
CoInitialize
CoUninitialize
CoTaskMemFree
StringFromGUID2
CreateStreamOnHGlobal
CLSIDFromString
OleGetClipboard
OleLockRunning
StringFromCLSID
CoCreateInstance
ProgIDFromCLSID
CoFreeUnusedLibraries
CLSIDFromProgID

oleaut32

VarUI4FromStr
LoadRegTypeLi
SysStringByteLen
OleCreateFontIndirect
SysAllocStringLen
VariantInit
LoadTypeLi
VariantClear
SysStringLen
DispCallFunc
SysAllocString
VarDecFromStr
VarDecCmp
VarR8FromStr
VarI4FromStr
VarDateFromStr
OleLoadPicture
SysFreeString

ttpcomm

ord91
ord92
ord206
ord202
ord205
ord204
ord101
ord80
ord81
ord82
ord105
ord102
ord90
ord4
ord93
ord106
ord59
ord73
ord61
ord58
ord50
ord71
ord64
ord76
ord55
ord67
ord56
ord72
ord69
ord74
ord57
ord66
ord65
ord79
ord70
ord68
ord54
ord53
ord62
ord60
ord75
ord78
ord51
ord13
ord52
ord11
ord14
ord12
ord10
ord401
ord400
ord302
ord201
ord3
ord200
ord1
ord104
ord103
ord100

msvfw32

DrawDibClose
DrawDibOpen
DrawDibDraw

msacm32

acmStreamUnprepareHeader
acmStreamClose
acmStreamPrepareHeader
acmStreamConvert
acmStreamOpen
acmStreamReset
acmStreamSize

Exports

Exports

CreateSoundBuffer
CreateStdContent
CreateStreamOnFile
CreateStreamOnInet
GetSoundCodecName
_set_security_error_handler

Sections

.text
Size: 877KB - Virtual size: 876KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tc
Size: 244KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

968d8fb2a87c4b610369c97e00a27367

Headers

File Characteristics

Imports

comctl32

winmm

wininet

msvcrt

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

ttpcomm

msvfw32

msacm32

Exports

Exports

Sections

.text Size: 877KB - Virtual size: 876KB

.rdata Size: 118KB - Virtual size: 118KB

.data Size: 21KB - Virtual size: 30KB

.rsrc Size: 39KB - Virtual size: 39KB

.tc Size: 244KB - Virtual size: 248KB

.text
Size: 877KB - Virtual size: 876KB

.rdata
Size: 118KB - Virtual size: 118KB

.data
Size: 21KB - Virtual size: 30KB

.rsrc
Size: 39KB - Virtual size: 39KB

.tc
Size: 244KB - Virtual size: 248KB