9a5475ee5d39d4599b4527b6133a0b4f

Sharing

Copy URL Twitter E-mail

General

Target

9a5475ee5d39d4599b4527b6133a0b4f
Size

548KB
MD5

9a5475ee5d39d4599b4527b6133a0b4f
SHA1

9afb2a7ea3b37431ba92b8442e83f09558abf946
SHA256

9045b5539d73dfca9ee8ef313c374ad39777a44a96108aa4c835e45c31b76441
SHA512

151ff31b5fbf92b63b118aa3564597a087e3803204a145bbf34b49d932d6ba1ef02d904855c45d9cd195a661b91f71c2cee0d9bab8dff229a0fe04161e8c2054
SSDEEP

6144:SC29gyyU8mkOn7vq2O6HmclVvp8SD/WAi45tz+ie/ao4lG9iC5RoW4MR58U5Bl:SC2O5Vr0VvDDuj45tSD5gGMC5RoB03X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a5475ee5d39d4599b4527b6133a0b4f

Files

9a5475ee5d39d4599b4527b6133a0b4f
.exe windows:4 windows x86 arch:x86

6bdf9f7f9d5c46e57812cf0877413d4e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

shlwapi

StrRetToStrA
PathRemoveFileSpecA
PathCompactPathA
SHDeleteKeyA

netapi32

Netbios

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

user32

DefWindowProcA
IsRectEmpty
GetCursorPos
GrayStringA
DrawTextA
TabbedTextOutA
SetWindowRgn
LoadMenuA
FillRect
DrawStateA
EndPaint
DrawFocusRect
GetSubMenu
TrackPopupMenuEx
ClientToScreen
WindowFromPoint
GetActiveWindow
GetNextDlgTabItem
GetWindowLongA
DestroyIcon
BeginPaint
UpdateWindow
ShowWindow
CreateWindowExA
GetMessageA
UnregisterClassA
DestroyWindow
SetWindowLongA
TrackPopupMenu
SetMenuDefaultItem
DrawEdge
GetCapture
ReleaseCapture
DestroyCursor
DestroyMenu
CopyRect
SetRectEmpty
UnionRect
InflateRect
GetSysColor
GetFocus
SetFocus
GetParent
SetRect
GetTopWindow
GetNextDlgGroupItem
LoadBitmapA
SetWindowTextA
FrameRect
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
PostThreadMessageA
RegisterClipboardFormatA
MessageBeep
CopyAcceleratorTableA
GetSysColorBrush
GetClassNameA
GetDesktopWindow
CharUpperA
LoadStringA
CharNextA
GetWindowDC
MapWindowPoints
MessageBoxExA
EnumDisplayDevicesA
GetDC
ReleaseDC
SetWindowPos
SystemParametersInfoA
InvalidateRect
SetCursor
OffsetRect
TrackMouseEvent
GetWindowRect
LoadCursorA
RegisterWindowMessageA
EnableWindow
IsWindow
KillTimer
SetTimer
IsIconic
DrawIcon
ScreenToClient
GetClientRect
PtInRect
SetForegroundWindow
SendMessageA
PostMessageA
PostQuitMessage
TranslateMessage
DispatchMessageA
LoadIconA
FindWindowA
GetLastActivePopup
BringWindowToTop
IsChild
WinHelpA
GetClassInfoA
RegisterClassA
wsprintfA
GetMenu
AdjustWindowRectEx
GetMenuItemCount
GetMenuItemID
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
IntersectRect
GetWindowPlacement
MoveWindow
GetDlgCtrlID
GetWindowTextLengthA
GetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
MapDialogRect
GetWindow
SetWindowContextHelpId
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
GetDlgItem
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetKeyState
CallNextHookEx
GetSystemMetrics
MessageBoxA
IsWindowEnabled
SetWindowsHookExA
PeekMessageA
IsWindowVisible
ValidateRect

winmm

waveOutGetNumDevs
waveOutGetDevCapsA

crypt32

CryptUnprotectData

kernel32

FreeLibrary
SetCurrentDirectoryA
FindFirstFileA
MoveFileA
ExitProcess
GetVersionExA
MulDiv
TerminateThread
GetProcAddress
SetFileAttributesA
LeaveCriticalSection
EnterCriticalSection
GetTickCount
MultiByteToWideChar
GetFileAttributesA
GetModuleHandleA
GetVersion
CreateFileA
ReadFile
SetFilePointer
GetFileSize
InitializeCriticalSection
DeleteCriticalSection
FindClose
FindNextFileA
GetShortPathNameA
MoveFileExA
ExpandEnvironmentStringsA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetLocalTime
WideCharToMultiByte
LocalFree
lstrcpynA
lstrcmpA
lstrcpyA
lstrlenA
SizeofResource
LockResource
LoadResource
FindResourceA
GlobalUnlock
GetModuleFileNameA
GlobalAlloc
CreateEventA
GlobalFree
WaitForSingleObject
ResetEvent
SetEvent
GetPriorityClass
FormatMessageA
GetComputerNameA
GlobalMemoryStatus
GetLogicalDriveStringsA
GetVolumeInformationA
GetDiskFreeSpaceExA
GetDriveTypeA
GetProfileStringA
QueryPerformanceCounter
QueryPerformanceFrequency
HeapFree
HeapAlloc
GetProcessHeap
WriteFile
GetCurrentThreadId
GetCurrentThread
GlobalDeleteAtom
InterlockedIncrement
InterlockedDecrement
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
lstrcatA
SetLastError
GetThreadLocale
DuplicateHandle
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFullPathNameA
LocalAlloc
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
WritePrivateProfileStringA
GetCurrentDirectoryA
GetProcessVersion
GetCPInfo
GetOEMCP
GetFileTime
SetErrorMode
RtlUnwind
CreateThread
ExitThread
GetTimeZoneInformation
GetSystemTime
GetStartupInfoA
GetCommandLineA
RaiseException
GetACP
SetStdHandle
GetFileType
HeapReAlloc
HeapSize
UnhandledExceptionFilter
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
LoadLibraryA
GetSystemDirectoryA
Process32First
lstrcmpiA
OpenProcess
GetExitCodeProcess
TerminateProcess
Process32Next
DeleteFileA
GetCurrentProcess
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateProcessA
Sleep
CreateMutexA
GetLastError
ReleaseMutex
CreateToolhelp32Snapshot
Module32First
CloseHandle
GlobalLock

gdi32

RectVisible
PtVisible
LPtoDP
GetMapMode
DPtoLP
GetBkColor
CreateSolidBrush
BeginPath
TextOutA
Escape
GetTextExtentPoint32A
GetTextMetricsA
StretchBlt
SelectClipRgn
CreateRectRgn
GetClipBox
SaveDC
RestoreDC
SetBkMode
SetMapMode
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
MoveToEx
LineTo
GetTextExtentPointA
CreateDIBitmap
PatBlt
GetTextColor
CreatePen
GetWindowExtEx
GetViewportExtEx
PolyBezierTo
GetCurrentPositionEx
SetViewportOrgEx
EndPath
StrokeAndFillPath
PathToRegion
CombineRgn
GetPixel
CreateBitmap
SetBkColor
SetTextColor
CreateCompatibleBitmap
GetStockObject
ExtTextOutA
SelectObject
CreateDCA
DeleteDC
GetDeviceCaps
CreateFontA
GetObjectA
CreateFontIndirectA
DeleteObject
CreateCompatibleDC
BitBlt

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegDeleteKeyA
RegEnumKeyExA
RegOpenKeyA
RegEnumValueA
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
CryptAcquireContextA
CryptReleaseContext

shell32

SHFileOperationA
ShellExecuteExA
SHGetDesktopFolder
SHGetSpecialFolderLocation
ShellExecuteA
SHGetSpecialFolderPathA
Shell_NotifyIconA
SHGetFileInfoA
SHGetMalloc

comctl32

ord17
_TrackMouseEvent
ImageList_Destroy
ImageList_LoadImageA

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CoTaskMemFree
OleUninitialize
OleInitialize
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CreateStreamOnHGlobal
CoTaskMemAlloc
CoInitialize

olepro32

ord253
ord251

oleaut32

VariantClear
VariantChangeType
SysAllocString
VariantTimeToSystemTime
SysStringLen
SysAllocStringByteLen
VariantCopy
SysAllocStringLen
SysFreeString

urlmon

URLDownloadToFileA

wininet

HttpSendRequestA
HttpOpenRequestA
InternetQueryDataAvailable
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetSetOptionExA
InternetOpenUrlA
InternetCloseHandle
InternetOpenA
InternetQueryOptionA
InternetCanonicalizeUrlA
InternetCrackUrlA
DeleteUrlCacheEntry
InternetGetConnectedState
InternetCheckConnectionA
InternetGetLastResponseInfoA
InternetConnectA

rpcrt4

RpcStringFreeA
UuidToStringA
UuidCreate

Sections

.text
Size: 348KB - Virtual size: 344KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6bdf9f7f9d5c46e57812cf0877413d4e

Headers

File Characteristics

Imports

iphlpapi

shlwapi

netapi32

version

user32

winmm

crypt32

kernel32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

urlmon

wininet

rpcrt4

Sections

.text Size: 348KB - Virtual size: 344KB

.rdata Size: 144KB - Virtual size: 143KB

.data Size: 20KB - Virtual size: 39KB

.rsrc Size: 32KB - Virtual size: 29KB

.text
Size: 348KB - Virtual size: 344KB

.rdata
Size: 144KB - Virtual size: 143KB

.data
Size: 20KB - Virtual size: 39KB

.rsrc
Size: 32KB - Virtual size: 29KB