97806360af475eac02173e07d93ec6e6

Sharing

Copy URL Twitter E-mail

General

Target

97806360af475eac02173e07d93ec6e6
Size

570KB
MD5

97806360af475eac02173e07d93ec6e6
SHA1

7c3481cf6b12eb1e3060f2149c850ce9432510d0
SHA256

f163d9872dc6147b7d01e9f0408f3a71d75bf82adcae300ed9f2e20013aa5996
SHA512

dca1b95cf90e8025e8ba066b5dca1fab9e3a34093026bf26f1faf98ddc9bd3f1b4e5de1cab6231e6c703061c8631abfd6e3c89065cead0d21889d6de4b15cc0e
SSDEEP

6144:pqv+YFQ14un4pYaTHAOg1XQ8tDS8e/6ATkoVLqw:pqPQ14uDkgOgNtfYkxw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97806360af475eac02173e07d93ec6e6

Files

97806360af475eac02173e07d93ec6e6
.exe windows:4 windows x86 arch:x86

fd25753f53003a7834d45ec5c5a6dec6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

sndPlaySoundA
timeSetEvent
timeKillEvent

msvfw32

DrawDibEnd
DrawDibChangePalette
DrawDibSetPalette
DrawDibGetPalette
DrawDibProfileDisplay
DrawDibGetBuffer
DrawDibDraw
DrawDibRealize
DrawDibBegin
DrawDibOpen
DrawDibClose
DrawDibTime
DrawDibStop
DrawDibStart

kernel32

GetProcessVersion
GetCPInfo
GetOEMCP
TlsSetValue
LocalReAlloc
TlsGetValue
WritePrivateProfileStringA
GetFileAttributesA
GetFileSize
GetFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
HeapAlloc
HeapReAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetStartupInfoA
GetCommandLineA
ExitProcess
RtlUnwind
RaiseException
CreateThread
ExitThread
SetErrorMode
TlsAlloc
HeapFree
GetLastError
HeapCreate
VirtualFree
VirtualAlloc
TlsFree
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalHandle
GlobalFlags
LocalAlloc
FindFirstFileA
GetFullPathNameA
GetVolumeInformationA
FindClose
DeleteFileA
LockFile
SetEndOfFile
UnlockFile
WriteFile
FlushFileBuffers
SetFilePointer
DuplicateHandle
ReadFile
CreateFileA
SuspendThread
lstrcmpA
GetCurrentThread
ResumeThread
LocalFree
MultiByteToWideChar
lstrcpynA
GetModuleFileNameA
MulDiv
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
SetLastError
GetVersion
GlobalAddAtomA
GlobalGetAtomNameA
lstrcmpiA
FindResourceA
GlobalFindAtomA
GlobalDeleteAtom
GetCurrentProcess
LoadResource
GetVersionExA
HeapSize
WideCharToMultiByte
GetModuleHandleA
CloseHandle
SetEvent
GetProcAddress
WaitForSingleObject
CreateEventA
GetSystemDirectoryA
SetFileAttributesA
LockResource
lstrcatA
lstrlenA
WinExec
lstrcpyA
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
ReadProcessMemory
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalReAlloc
GlobalFree
OpenProcess
WriteProcessMemory
GetACP
HeapDestroy
TerminateProcess
IsBadWritePtr

user32

GetTopWindow
SetFocus
DispatchMessageA
PeekMessageA
MapWindowPoints
SendDlgItemMessageA
AdjustWindowRectEx
ScreenToClient
IsDialogMessageA
MoveWindow
ShowWindow
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
BeginPaint
EndPaint
TabbedTextOutA
GrayStringA
LoadStringA
DestroyMenu
ValidateRect
TranslateMessage
GetMessageA
PostQuitMessage
CharUpperA
GetClassNameA
GetSysColorBrush
RegisterClassA
GetMenu
GetWindowTextLengthA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
CallNextHookEx
GetClassLongA
WindowFromPoint
GetLastActivePopup
GetForegroundWindow
SystemParametersInfoA
WinHelpA
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
IsWindowEnabled
CreateIconFromResourceEx
CreateIconFromResource
GetIconInfo
CreateIconIndirect
MessageBoxA
GetWindow
IsWindowVisible
GetWindowTextA
FindWindowA
EnumWindows
GetClassInfoA
UnhookWindowsHookEx
SetWindowsHookExA
GetWindowThreadProcessId
GetMenuItemCount
RemoveMenu
SetWindowRgn
SetWindowPos
GetDlgItem
SetWindowTextA
SetScrollRange
EnableScrollBar
GetScrollPos
GetScrollRange
SetScrollPos
LoadMenuA
LoadImageA
GetCursorPos
SetForegroundWindow
TrackPopupMenu
PostMessageA
GetMenuItemID
LoadIconA
GetSubMenu
SetMenuDefaultItem
RegisterWindowMessageA
UpdateWindow
MessageBeep
LoadCursorA
CopyIcon
GetParent
GetDC
ReleaseDC
IsWindow
SetCursor
InvalidateRect
RemovePropA
SetPropA
SetWindowLongA
GetPropA
CallWindowProcA
GetAsyncKeyState
GetFocus
GetClientRect
ScrollDC
DrawTextA
FillRect
InflateRect
CopyRect
DrawFocusRect
OffsetRect
SetRect
EnableWindow
SetCapture
ReleaseCapture
GetCapture
GetMessageTime
GetMessagePos
wsprintfA
GetWindowRect
ClientToScreen
PtInRect
RedrawWindow
SetTimer
KillTimer
GetSysColor
GetSystemMetrics
SendMessageA
GetWindowPlacement
IsIconic
DrawIcon
AppendMenuA
UnregisterClassA

gdi32

DeleteObject
CombineRgn
ExtCreateRegion
DeleteDC
GetDIBits
GetStockObject
FrameRgn
SetROP2
OffsetRgn
CreateRectRgn
CreateDIBitmap
RealizePalette
CreatePalette
GetClipBox
SetTextColor
SetBkColor
CreateBitmap
SaveDC
RestoreDC
SelectPalette
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetDIBitsToDevice
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
CreateFontA
MoveToEx
LineTo
SetTextAlign
GetDeviceCaps
PtVisible
RectVisible
ExtTextOutA
Escape
TextOutA
CreateCompatibleBitmap
GetTextExtentPoint32A
CreatePen
CreateSolidBrush
GetBkColor
CreateDIBSection
SelectObject
CreateCompatibleDC
BitBlt
CreateFontIndirectA
GetObjectA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

AdjustTokenPrivileges
RegCreateKeyExA
OpenProcessToken
LookupPrivilegeValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegQueryValueA
RegCloseKey

shell32

Shell_NotifyIconA
ShellExecuteA

comctl32

ord17

Sections

.text
Size: 132KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fd25753f53003a7834d45ec5c5a6dec6

Headers

File Characteristics

Imports

winmm

msvfw32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

Sections

.text Size: 132KB - Virtual size: 128KB

.rdata Size: 32KB - Virtual size: 28KB

.data Size: 12KB - Virtual size: 128KB

.rsrc Size: 16KB - Virtual size: 13KB

.text
Size: 132KB - Virtual size: 128KB

.rdata
Size: 32KB - Virtual size: 28KB

.data
Size: 12KB - Virtual size: 128KB

.rsrc
Size: 16KB - Virtual size: 13KB