992c812cdf84b9749bb1f59e91b27a75

Sharing

Copy URL Twitter E-mail

General

Target

992c812cdf84b9749bb1f59e91b27a75
Size

508KB
MD5

992c812cdf84b9749bb1f59e91b27a75
SHA1

01d34fb7f74cb6fb79dc49b8ed1d130add3ea7b4
SHA256

66385c74db618868145a9e751b8ba5f49431ad565f6b801679414864344ff185
SHA512

7246fb208ac69fa5c706ca57d9828e30fe361351a5b1bdf8da2d944839d39848a27c20980aa2a18cb68bf313313f024488ed45f3f3dcfdc3ac3015d14fd4bb59
SSDEEP

12288:tCDdwLHWpK6pansVmu3h3+/kMMnMMMMMZ9kaWHkxtlqvB60x0NTOK:tCRAmK6ICh3+MMMnMMMMMZ9JMcqZn0cK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
992c812cdf84b9749bb1f59e91b27a75

Files

992c812cdf84b9749bb1f59e91b27a75
.exe windows:4 windows x86 arch:x86

c3c910b26528e0c8b99c0eba9a39c899

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
RegCreateKeyW
RegSetValueExW
RegCloseKey
RegSetValueExA
OpenProcessToken
RegQueryInfoKeyA
RegDeleteValueA
RegDeleteKeyW
ReportEventA
RegisterEventSourceA
SetSecurityDescriptorDacl
RegSetValueA
DeregisterEventSource
RegOpenKeyExA
LookupPrivilegeValueA
RegOpenKeyW
RegEnumKeyW
RegOpenKeyA
RegDeleteValueW
RegEnumValueW
RegCreateKeyA
RegQueryValueExW
RegDeleteKeyA
RegEnumValueA
InitializeSecurityDescriptor
AdjustTokenPrivileges
RegEnumKeyA
RegQueryValueA

kernel32

SetErrorMode
FileTimeToLocalFileTime
_llseek
SystemTimeToFileTime
GetModuleFileNameW
WriteFile
GetSystemDefaultLCID
SetEnvironmentVariableA
GetDateFormatA
HeapAlloc
GetDriveTypeA
HeapDestroy
GetSystemDirectoryA
GlobalDeleteAtom
FreeEnvironmentStringsW
GetVolumeInformationA
GetUserDefaultLCID
SetEndOfFile
lstrcmpiW
GetACP
MoveFileA
CreateFileA
EnterCriticalSection
InterlockedIncrement
DuplicateHandle
ReadFile
CreateProcessA
_lwrite
WideCharToMultiByte
RtlUnwind
TlsFree
GetSystemDefaultLangID
CreateSemaphoreA
SetCurrentDirectoryA
InitializeCriticalSection
IsDBCSLeadByte
FlushInstructionCache
HeapCreate
GetCurrentProcessId
DeleteFileA
FreeResource
InterlockedDecrement
HeapFree
GetTempFileNameA
GetFileType
LoadResource
GetLocaleInfoA
SetHandleCount
GetTickCount
GetCommandLineA
GetCurrentProcess
GetVersionExA
lstrcmpA
GlobalSize
FreeLibrary
GetCurrentDirectoryA
CreateThread
GlobalAddAtomA
FormatMessageA
ResumeThread
GetTempPathA
FileTimeToSystemTime
CreateProcessW
CloseHandle
FindResourceA
GetEnvironmentStringsW
ExitProcess
Sleep
ExitThread
GlobalLock
UnlockFile
CompareStringW
VirtualFree
SearchPathA
SetEvent
_lclose
GetLastError
GlobalFree
LoadLibraryExA
ResetEvent
GetModuleFileNameA
SetLastError
VirtualAlloc
FindFirstFileA
lstrcpyA
WaitForSingleObject
GetStdHandle
FlushFileBuffers
SetStdHandle
LockFile
GetShortPathNameA
SizeofResource
LCMapStringA
GetEnvironmentStrings
SetFileAttributesA
RaiseException
GetSystemTime
GetCPInfo
LeaveCriticalSection
IsBadCodePtr
GetUserDefaultLangID
LockResource
LoadLibraryA
GetStringTypeA
GetTimeZoneInformation
DeleteCriticalSection
FormatMessageW
UnhandledExceptionFilter
GetFileAttributesA
GetSystemInfo
CreateDirectoryA
FreeEnvironmentStringsA
GlobalUnlock
GetStringTypeExA
GlobalHandle
FindNextFileA
_lread
CreateEventA
IsBadReadPtr
HeapReAlloc
lstrcatA
VirtualQuery
GlobalAlloc
lstrcpynA
lstrcmpiA
VirtualProtect
GetStartupInfoA
GetProcAddress
CompareStringA
GetCurrentThreadId
WinExec
GetProfileStringA
GetFullPathNameA
MulDiv
GetWindowsDirectoryA
lstrlenA
GetVersion
GetLocalTime
SetLocalTime
GetStringTypeW
GetExitCodeProcess
TlsGetValue
FindClose
GetFileTime
TlsAlloc
LCMapStringW
RemoveDirectoryA
GetOEMCP
SetFilePointer
MultiByteToWideChar
GlobalReAlloc
ReleaseSemaphore
SetFileTime
TerminateProcess
HeapSize
GetModuleHandleA
TlsSetValue

ole32

OleLoad
OleSave

ddraw

DirectDrawEnumerateA

ws2_32

WSAConnect
setsockopt

samlib

SamLookupNamesInDomain
SamConnect
SamConnectWithCreds

user32

GetMenuItemID
GetClassInfoExA
DdeGetData
PeekMessageA
WaitMessage
GetPropA
EndDialog
DestroyIcon
VkKeyScanW
GetDoubleClickTime
OemToCharA
CharPrevA
GetForegroundWindow
CharNextA
GetDC
GetWindowDC
DefMDIChildProcA
EnableWindow
GetSubMenu
GetAsyncKeyState
SendMessageA
DrawMenuBar
LoadBitmapA
GetWindowLongA
LoadImageA
AdjustWindowRectEx
BringWindowToTop
MessageBoxIndirectA
UpdateWindow
DrawFrameControl
ReleaseCapture
GetQueueStatus
DispatchMessageA
MessageBeep
IsRectEmpty
CopyAcceleratorTableA
GetSystemMetrics
DdeQueryStringA
BeginDeferWindowPos
IsWindow
DialogBoxParamA
AdjustWindowRect
GetWindowThreadProcessId
CreatePopupMenu
LoadIconA
GetWindowRect
IsWindowEnabled
SetWindowsHookExW
keybd_event
GetDCEx
IsWindowVisible
LoadStringA
DdeCmpStringHandles
PtInRect
GetMenu
GetCaretPos
GetUpdateRgn
PeekMessageW
SubtractRect
VkKeyScanA
CheckMenuItem
DestroyWindow
IsIconic
GetWindow
DefFrameProcA
RemoveMenu
GetMenuState
SetMenu
GetKeyboardState
SetRect
CreateAcceleratorTableA
GetMenuItemInfoA
DdeQueryConvInfo
GetUpdateRect
GetIconInfo
SendDlgItemMessageA
GetCursor
TabbedTextOutA
InsertMenuA
DestroyMenu
DeleteMenu
GetSystemMenu
EnumClipboardFormats
ShowWindow
AppendMenuA
KillTimer
SetWindowPos
PostThreadMessageA
LockWindowUpdate
TrackPopupMenu
SetWindowContextHelpId
SetCapture
SetWindowRgn
DeferWindowPos
FindWindowW
GetClassNameA
SetWindowLongA
DestroyCursor
CharUpperBuffW
CreateMenu
MoveWindow
ClientToScreen
DdeCreateStringHandleA
ShowCursor
SetMenuDefaultItem
ScreenToClient
GetMenuItemCount
PostMessageA
DdeDisconnect
GetWindowTextA
FindWindowA
GetKeyboardLayout
CloseClipboard
GetCursorPos
DdePostAdvise
FillRect
CharUpperA
CreateCursor
GetDlgItem
GetScrollPos
CharLowerBuffA
EnableMenuItem
SetForegroundWindow
DrawFocusRect
GetLastActivePopup
CharToOemBuffA
IntersectRect
RegisterClipboardFormatA
CallNextHookEx
GetClipboardData
GetMessagePos
SetCaretPos
DrawIcon
DdeFreeDataHandle
DdeSetUserHandle
EndPaint
WindowFromPoint
SetFocus
AttachThreadInput
SetCursor
GetTabbedTextExtentA
InvalidateRgn
DdeInitializeA
RegisterClassA
CharLowerBuffW
GetParent
LoadCursorA
wsprintfA
GetFocus
CopyRect
RegisterClassExA
CharLowerA
CreateIcon
SystemParametersInfoA
ToAscii
IsZoomed
SetMenuItemInfoA
DestroyAcceleratorTable
MessageBoxA
ClipCursor
IsClipboardFormatAvailable
RemovePropA
GetClipboardFormatNameA
DdeGetLastError
DdeUninitialize
CreateCaret
GetDesktopWindow
MsgWaitForMultipleObjects
MapWindowPoints
CharUpperBuffA
ShowCaret
DdeConnect
OpenClipboard
DestroyCaret
UnregisterClassA
SetKeyboardState
DdeCreateDataHandle
DefWindowProcA
BeginPaint
InflateRect
IsDialogMessageA
PostMessageW
OffsetRect
ReleaseDC
GetActiveWindow
TranslateMessage
FrameRect
SetCursorPos
SetDlgItemTextA
SetWindowsHookExA
WinHelpA
EqualRect
DdeNameService
GetScrollInfo
SetParent
CreateDialogParamA
InvalidateRect
SetClipboardData
SetScrollRange
HideCaret
CreateWindowExA
EndDeferWindowPos
TranslateMDISysAccel
EnumThreadWindows
SetScrollInfo
DdeAbandonTransaction
GetMessageTime
ShowScrollBar
EmptyClipboard
CallWindowProcA
SetScrollPos
GetCapture
DrawTextA
DdeClientTransaction
GetClassInfoA
GetWindowTextLengthA
GetClientRect
SetTimer
SetWindowTextA
SetPropA
ModifyMenuA
GetCaretBlinkTime
GetSysColor
GetMenuStringA
UnhookWindowsHookEx
GetKeyState
SetActiveWindow
CharToOemA
IsChild
PostQuitMessage
WaitForInputIdle
DdeFreeStringHandle
GetWindowRgn
IsCharAlphaA
LoadAcceleratorsA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 155KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 207KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c3c910b26528e0c8b99c0eba9a39c899

Headers

File Characteristics

Imports

advapi32

kernel32

ole32

ddraw

ws2_32

samlib

user32

Sections

.text Size: 1KB - Virtual size: 1KB

.idata Size: 11KB - Virtual size: 10KB

.data Size: 155KB - Virtual size: 1.0MB

.rsrc Size: 132KB - Virtual size: 131KB

.rdata Size: 207KB - Virtual size: 207KB

.text
Size: 1KB - Virtual size: 1KB

.idata
Size: 11KB - Virtual size: 10KB

.data
Size: 155KB - Virtual size: 1.0MB

.rsrc
Size: 132KB - Virtual size: 131KB

.rdata
Size: 207KB - Virtual size: 207KB