98b553d84d8afdaccaaa39fa4558d53b

Sharing

Copy URL Twitter E-mail

General

Target

98b553d84d8afdaccaaa39fa4558d53b
Size

1.0MB
MD5

98b553d84d8afdaccaaa39fa4558d53b
SHA1

cec64ab0f73ef55f4b70234606a5f2f15535c07f
SHA256

af8168b3da6dab5297497efda69d387df53503390c2081d70e4e7c3691d689b2
SHA512

91ea0811e995df032b9b6fbfb8519e033e5dcc3057e952483a380532e73b9f6acb65fddbc194e02a78f626e7429e5e309ac7248f8d222c0de84f415ce2471b34
SSDEEP

12288:mWdpojWg/TKNavU79vPj2i8CRUDRLqP1X6u3IZ3JoUnUKkzGkzBcLorFrX/:mWdimD9URLxqI/oyUlz9OLoZrX/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98b553d84d8afdaccaaa39fa4558d53b

Files

98b553d84d8afdaccaaa39fa4558d53b
.exe windows:4 windows x86 arch:x86

6197771b1325dd5c3bd77637aabacf5f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

listen
WSASocketA
WSAGetLastError
bind
socket
htons
sendto
select
__WSAFDIsSet
closesocket
WSASend
WSARecv
setsockopt
recvfrom
WSAAccept
WSAConnect
WSARecvFrom
getsockname
gethostbyname
inet_ntoa
ntohs
recv
ntohl
inet_addr
WSASendTo
connect
send
htonl

kernel32

SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationA
GetFullPathNameA
GetThreadLocale
GetFileAttributesA
GetFileTime
GetCurrentDirectoryA
RtlUnwind
GetTimeZoneInformation
RaiseException
HeapAlloc
GetStartupInfoA
GetCommandLineA
ExitProcess
GetACP
HeapReAlloc
HeapSize
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
SizeofResource
GlobalFlags
lstrcmpA
GetCurrentThread
lstrcpynA
MulDiv
SetLastError
WaitForSingleObject
FormatMessageA
LocalFree
FileTimeToLocalFileTime
MultiByteToWideChar
WideCharToMultiByte
InterlockedIncrement
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalDeleteAtom
GetModuleHandleA
GlobalLock
GlobalUnlock
LockResource
FindResourceA
LoadResource
GetFileSize
ReadFile
GetProcessHeap
HeapFree
MapViewOfFile
GetCurrentProcessId
DuplicateHandle
DeviceIoControl
UnmapViewOfFile
OpenProcess
TerminateProcess
SetEvent
CreateEventA
CreateFileA
WriteFile
FindFirstFileA
FindNextFileA
FindClose
GetWindowsDirectoryA
TerminateThread
GlobalAlloc
GlobalFree
FileTimeToSystemTime
GetComputerNameA
GetLastError
CreateThread
lstrcatA
lstrlenA
WinExec
lstrcpyA
GetCurrentProcess
GlobalFindAtomA
GlobalAddAtomA
CloseHandle
GetLocaleInfoA
CreateMailslotA
LoadLibraryA
GetProcAddress
FreeLibrary
GetSystemTime
DeleteFileA
InterlockedDecrement
CopyFileA
GetVersionExA
Sleep
GetTickCount
CreateDirectoryA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WritePrivateProfileStringA
GetModuleFileNameA
GetPrivateProfileIntA
GetLocalTime
GetPrivateProfileStringA
GetProfileStringA
SetErrorMode

user32

SetWindowContextHelpId
DestroyMenu
WindowFromPoint
GetClassNameA
GetDesktopWindow
GetSysColorBrush
CharUpperA
CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
RegisterClipboardFormatA
PostThreadMessageA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
wvsprintfA
GetMenuCheckMarkDimensions
GetMenuState
SetMenuItemBitmaps
EnableMenuItem
IsDialogMessageA
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
CopyRect
IsWindowVisible
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
GetMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
CallWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
IsWindowEnabled
RegisterClassExA
LoadBitmapA
UpdateWindow
PostQuitMessage
KillTimer
FillRect
DefWindowProcA
RegisterClassA
LoadCursorA
CopyIcon
GetDC
ReleaseDC
InflateRect
GetSysColor
SetCursor
ReleaseCapture
RedrawWindow
SetCapture
MessageBeep
MessageBoxA
MsgWaitForMultipleObjects
GetPropA
SetWindowLongA
RemovePropA
GetWindowThreadProcessId
EnumThreadWindows
ExitWindowsEx
SetWindowTextA
GetMenuStringA
ModifyMenuA
LoadMenuA
GetMenuItemCount
GetSubMenu
GetMenuItemID
CheckMenuItem
GetCursorPos
UnregisterHotKey
RegisterHotKey
GetSystemMetrics
DrawIcon
GetSystemMenu
AppendMenuA
LoadIconA
LoadImageA
wsprintfA
IsIconic
GetMessageA
TranslateMessage
ValidateRect
MapDialogRect
GetAsyncKeyState
GrayStringA
DrawTextA
TrackPopupMenu
TabbedTextOutA
ShowWindow
SetForegroundWindow
GetLastActivePopup
FindWindowA
PostMessageA
SetTimer
InvalidateRect
PtInRect
LoadStringA
GetKeyState
MoveWindow
IsWindow
GetClientRect
GetDlgItem
GetWindowRect
ScreenToClient
EnableWindow
GetParent
GetWindow
SendMessageA
IsWindowUnicode
DefDlgProcA
DrawFocusRect
ExcludeUpdateRgn
ShowCaret
HideCaret
UnregisterClassA
GetNextDlgTabItem

gdi32

GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreatePen
CreateSolidBrush
CreateHatchBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
DPtoLP
GetTextColor
GetBkColor
LPtoDP
LineTo
MoveToEx
IntersectClipRect
DeleteObject
SetViewportOrgEx
SetMapMode
SetBkMode
RestoreDC
SaveDC
DeleteDC
PatBlt
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
GetTextExtentPointA
CreateDIBitmap
GetTextExtentPoint32A
GetObjectA
CreateFontIndirectA
GetStockObject
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx

comdlg32

GetOpenFileNameA
GetFileTitleA
GetSaveFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegDeleteValueA
RegQueryValueExA
RegOpenKeyExA
StartServiceA
ControlService
CloseServiceHandle
OpenServiceA
QueryServiceStatus
OpenSCManagerA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCreateKeyExA
RegCreateKeyA
RegSetValueExA
RegCloseKey
EnumServicesStatusA
QueryServiceConfigA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
DeleteService
CreateServiceA
RegQueryValueA

shell32

Shell_NotifyIconA
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA

comctl32

ord17
ImageList_Destroy
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA

oledlg

ord8

ole32

OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
CLSIDFromProgID
CoInitialize
CoCreateInstance
CoUninitialize
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject

olepro32

ord253

oleaut32

VariantChangeType
SysAllocString
VariantCopy
VariantClear
SysAllocStringLen
VariantTimeToSystemTime
SysStringLen
SysStringByteLen
SysAllocStringByteLen
SysFreeString

wininet

HttpOpenRequestA
GetUrlCacheEntryInfoA
InternetReadFile
HttpQueryInfoA
InternetCloseHandle
HttpSendRequestA
HttpAddRequestHeadersA
InternetOpenA
InternetConnectA
InternetOpenUrlA

iphlpapi

CreateIpForwardEntry
GetIfTable
SendARP
GetIpForwardTable

wsock32

WSAStartup
WSACleanup

Sections

.text
Size: 496KB - Virtual size: 492KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 738KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 460KB - Virtual size: 459KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6197771b1325dd5c3bd77637aabacf5f

Headers

File Characteristics

Imports

ws2_32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wininet

iphlpapi

wsock32

Sections

.text Size: 496KB - Virtual size: 492KB

.rdata Size: 68KB - Virtual size: 66KB

.data Size: 28KB - Virtual size: 738KB

.rsrc Size: 460KB - Virtual size: 459KB

.text
Size: 496KB - Virtual size: 492KB

.rdata
Size: 68KB - Virtual size: 66KB

.data
Size: 28KB - Virtual size: 738KB

.rsrc
Size: 460KB - Virtual size: 459KB