9211965d5d13aa6aec06685b4426c5c49a4c120ca40ee3d78c5d5a5698a70275

Sharing

Copy URL Twitter E-mail

General

Target

9211965d5d13aa6aec06685b4426c5c49a4c120ca40ee3d78c5d5a5698a70275
Size

984KB
MD5

04965025d9033b23f6ee417a5eacb0e3
SHA1

191adb347c2c8a7ac06881a0f15e94e6075c62cd
SHA256

9211965d5d13aa6aec06685b4426c5c49a4c120ca40ee3d78c5d5a5698a70275
SHA512

d4c83d183cb17e93003a073d0a4a4e456602654955bb826ef1ac48fbb91d475e07813484ae546804b8a004b4fbd3ce1a5324fdf785d625c82080a3fa411311ae
SSDEEP

12288:hHgo8EThJCLrbmMTwm/67HtZXMv4v4XTlIXfSj:pgoJThErCMTAPXMvicpoS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9211965d5d13aa6aec06685b4426c5c49a4c120ca40ee3d78c5d5a5698a70275

Files

9211965d5d13aa6aec06685b4426c5c49a4c120ca40ee3d78c5d5a5698a70275
.exe windows:4 windows x86 arch:x86

30aff41f531ae112651921a0c0acdf8b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

StretchBlt
GetStockObject
Rectangle
PtInRegion
FrameRgn
LineTo
MoveToEx
IntersectClipRect
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
CreateDIBSection
GetClipBox
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
PatBlt
DPtoLP
LPtoDP
GetTextExtentPointA
SelectObject
ExtCreateRegion
DeleteDC
ExcludeClipRect
CreatePen
Ellipse
GetObjectA
GetPixel
DeleteObject
GetDeviceCaps
EnumFontFamiliesA
CreateFontIndirectA
GetTextColor
GetBkColor
CreateRectRgn
CombineRgn
FillRgn
GetTextExtentPoint32A
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
SetTextColor
CreateFontA
CreateDIBitmap

msimg32

TransparentBlt
AlphaBlend

kernel32

LeaveCriticalSection
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
GetProcessVersion
GetCPInfo
GetOEMCP
GetFileAttributesA
GetFileTime
SetErrorMode
RtlUnwind
GetSystemTimeAsFileTime
RaiseException
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapAlloc
HeapFree
TerminateProcess
SetStdHandle
GetFileType
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetACP
HeapReAlloc
HeapSize
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalHandle
DeleteCriticalSection
MulDiv
GetModuleHandleA
OutputDebugStringA
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
ReleaseMutex
DeleteFileA
OpenMutexA
LoadLibraryA
FreeLibrary
MapViewOfFile
OpenFileMappingA
UnmapViewOfFile
WaitForSingleObject
GlobalFree
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
ReadFile
GetFileSize
CreateFileA
GetPrivateProfileStringA
WritePrivateProfileStringA
WritePrivateProfileStructA
GetPrivateProfileStructA
GetPrivateProfileIntA
lstrlenA
GetTickCount
GetCurrentThreadId
FindClose
FindFirstFileA
LoadResource
FindResourceA
LockResource
GetProcAddress
lstrcpyA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
lstrcatA
GetVersion
SetLastError
WideCharToMultiByte
TlsFree
LocalFree
FormatMessageA
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
lstrcpynA
GetCurrentThread
lstrcmpA
FileTimeToSystemTime
FileTimeToLocalFileTime
DuplicateHandle
GetCurrentProcess
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationA
GetFullPathNameA
GetThreadLocale
GlobalFlags
SizeofResource
LocalAlloc
InitializeCriticalSection
TlsAlloc
GetProfileStringA

user32

BeginPaint
EndPaint
TabbedTextOutA
GrayStringA
ValidateRect
TranslateMessage
GetMessageA
PostQuitMessage
SetWindowContextHelpId
MapDialogRect
DestroyMenu
CharUpperA
CharNextA
GetDesktopWindow
GetSysColorBrush
CopyAcceleratorTableA
GetNextDlgGroupItem
MessageBeep
GetWindowDC
PostThreadMessageA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
TrackPopupMenu
GetWindowTextLengthA
GetDlgCtrlID
GetKeyState
GetClassLongA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
SetWindowPos
ShowWindow
SystemParametersInfoA
GetWindowPlacement
GetMenuCheckMarkDimensions
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
RegisterClipboardFormatA
EnableMenuItem
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
GetDlgItem
IsWindowEnabled
GetWindow
GetScrollInfo
KillTimer
SetTimer
IsRectEmpty
wsprintfA
MapVirtualKeyA
OffsetRect
InflateRect
GetClassNameA
SetPropA
CallNextHookEx
RemovePropA
CreateWindowExA
SetFocus
SetWindowLongA
GetWindowTextA
DestroyWindow
CallWindowProcA
FillRect
TrackMouseEvent
IsWindow
AppendMenuA
CopyRect
GetMenuState
GetMenuItemInfoA
DestroyIcon
UpdateWindow
GetCursorPos
CreatePopupMenu
LoadStringA
FindWindowA
IsIconic
GetSystemMetrics
DrawIcon
LoadIconA
UnhookWindowsHookEx
SetWindowsHookExA
LoadBitmapA
PtInRect
MoveWindow
IsDialogMessageA
SetWindowTextA
GetMenuItemID
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
AdjustWindowRectEx
IsWindowVisible
SetScrollInfo
GetTopWindow
MessageBoxA
IsChild
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
IntersectRect
GetSubMenu
SetRect
ScreenToClient
LoadImageA
GetWindowRect
RedrawWindow
RegisterWindowMessageA
DrawTextA
SetCursor
PostMessageA
SetActiveWindow
GetDC
ReleaseDC
GetActiveWindow
GetParent
GetCapture
SetCapture
ClientToScreen
WindowFromPoint
ReleaseCapture
GetWindowLongA
SendMessageA
DefWindowProcA
GetSysColor
LoadCursorA
EnableWindow
InvalidateRect
SetWindowRgn
GetClientRect
SendDlgItemMessageA
GetPropA
UnregisterClassA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegSetValueExA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

comctl32

_TrackMouseEvent
ImageList_Destroy
ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CreateStreamOnHGlobal
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
OleInitialize

olepro32

ord251
ord253

oleaut32

SysStringLen
SysAllocStringByteLen
VariantCopy
SysAllocString
VariantChangeType
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString

Sections

.text
Size: 500KB - Virtual size: 497KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 695KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 360KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

30aff41f531ae112651921a0c0acdf8b

Headers

File Characteristics

Imports

gdi32

msimg32

kernel32

user32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 500KB - Virtual size: 497KB

.rdata Size: 104KB - Virtual size: 101KB

.data Size: 16KB - Virtual size: 695KB

.rsrc Size: 360KB - Virtual size: 356KB

.text
Size: 500KB - Virtual size: 497KB

.rdata
Size: 104KB - Virtual size: 101KB

.data
Size: 16KB - Virtual size: 695KB

.rsrc
Size: 360KB - Virtual size: 356KB