a3749630fd98c24a925b3c42a278b423

Sharing

Copy URL Twitter E-mail

General

Target

a3749630fd98c24a925b3c42a278b423
Size

7.7MB
MD5

a3749630fd98c24a925b3c42a278b423
SHA1

2e50fe47da010ad6d87bc18873e0de6f1ff8d8ce
SHA256

380300df5088d32c3c89afcc5d202eb5bcd0d5e555369e54e8738b2f5810b235
SHA512

ece9671fc293c9cdb403a674d304e81a8fc08cc38d2a29f1c955b1df6962d534858101478907470fe22d1d75dc47a0f6db4f0f1437b109b0ba10a4417d70e444
SSDEEP

196608:PKGQwksOT5JiMfwZnz4sVrl3qtrYpr0fUZTKX+wBY:PB7ZM5uMqlqtkC8Z8+wy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3749630fd98c24a925b3c42a278b423

Files

a3749630fd98c24a925b3c42a278b423
.exe windows:5 windows x86 arch:x86

552b5a55af7e3151c51eec7a5d462754

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundA
sndPlaySoundA
timeGetTime

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

kernel32

OpenProcess
LocalFree
OutputDebugStringA
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
WriteConsoleW
CreateFileW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsValidCodePage
EnterCriticalSection
RaiseException
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
DecodePointer
FindClose
TerminateProcess
WideCharToMultiByte
GetVersionExA
FindFirstFileA
DeleteFileA
CreateFileA
FindResourceW
FindResourceA
GetModuleHandleA
lstrcmpiA
GetSystemInfo
WinExec
CloseHandle
WriteFile
SizeofResource
LoadResource
Sleep
ResumeThread
GetProcAddress
LockResource
FreeResource
CreateMutexA
ReleaseMutex
GetLastError
GetVolumeInformationA
GetCurrentDirectoryA
GlobalUnlock
GlobalLock
GlobalAlloc
FormatMessageA
CopyFileA
Process32Next
CreateToolhelp32Snapshot
GetUserDefaultLangID
ReadFile
CreateDirectoryA
GetFileAttributesA
InterlockedDecrement
MultiByteToWideChar
SetLastError
GlobalSize
GlobalFree
MulDiv
FlushFileBuffers
GetFileSize
GetFullPathNameA
LockFile
SetEndOfFile
SetFilePointer
UnlockFile
DuplicateHandle
GetCurrentProcess
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
LoadLibraryA
LoadLibraryW
GetThreadLocale
EncodePointer
GetCurrentThreadId
GetSystemDirectoryW
FreeLibrary
LoadLibraryExW
GlobalDeleteAtom
lstrcmpW
GlobalAddAtomA
GlobalFindAtomA
GlobalGetAtomNameA
CompareStringA
SetEvent
WaitForSingleObject
CreateEventA
SetThreadPriority
SuspendThread
GetCurrentThread
lstrcmpA
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetCurrentProcessId
LocalAlloc
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
InitializeCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalReAlloc
FileTimeToLocalFileTime
GetFileAttributesExA
GetFileSizeEx
GetFileTime
SetErrorMode
GlobalFlags
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
VirtualProtect
GetOEMCP
GetCPInfo
GetACP
lstrcpyA
FindNextFileA
FindResourceExW
GetTickCount
GetWindowsDirectoryA
VerSetConditionMask
VerifyVersionInfoA
GetTempFileNameA
GetUserDefaultLCID
GetTempPathA
GetProfileIntA
SearchPathA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
ResetEvent
WaitForSingleObjectEx
CreateEventW
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
SwitchToThread
CompareStringW
LCMapStringW
GetStringTypeW
RtlUnwind
GetLocalTime
GetTimeZoneInformation
VirtualAlloc
VirtualQuery
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
HeapQueryInformation
SetStdHandle
GetFileType
QueryPerformanceFrequency
ExitProcess
GetStdHandle
IsValidLocale
EnumSystemLocalesW
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetConsoleCP
FindFirstFileExA
VirtualQuery
GetSystemTimeAsFileTime
GetModuleHandleA
CreateEventA
GetModuleFileNameW
LoadLibraryA
TerminateProcess
GetCurrentProcess
CreateToolhelp32Snapshot
Thread32First
GetCurrentProcessId
GetCurrentThreadId
OpenThread
Thread32Next
CloseHandle
SuspendThread
ResumeThread
WriteProcessMemory
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
GetProcessAffinityMask
SetProcessAffinityMask
GetCurrentThread
SetThreadAffinityMask
Sleep
FreeLibrary
GetTickCount
SystemTimeToFileTime
FileTimeToSystemTime
GlobalFree
LocalAlloc
LocalFree
GetProcAddress
ExitProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleW
LoadResource
MultiByteToWideChar
FindResourceExW
FindResourceExA
WideCharToMultiByte
GetThreadLocale
GetUserDefaultLCID
GetSystemDefaultLCID
EnumResourceNamesA
EnumResourceNamesW
EnumResourceLanguagesA
EnumResourceLanguagesW
EnumResourceTypesA
EnumResourceTypesW
CreateFileW
LoadLibraryW
GetLastError
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetCommandLineA
RaiseException
RtlUnwind
HeapFree
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
HeapReAlloc
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
WriteFile
SetFilePointer
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
SetStdHandle
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

MapWindowPoints
GetSysColor
CopyRect
EqualRect
PtInRect
SetWindowLongA
GetClassLongA
GetClassNameA
GetTopWindow
GetLastActivePopup
GetWindow
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
SetScrollInfo
GetScrollInfo
WinHelpA
MonitorFromWindow
GetMonitorInfoA
CharNextA
OffsetRect
ShowWindow
CheckDlgButton
SendDlgItemMessageA
IsWindowEnabled
IsDialogMessageA
CreateDialogIndirectParamA
EndDialog
GetNextDlgTabItem
GetActiveWindow
GetDesktopWindow
GetMessageA
TranslateMessage
GetCursorPos
PostQuitMessage
ShowOwnedPopups
SetCursor
GetWindowThreadProcessId
SetWindowContextHelpId
MapDialogRect
SetRectEmpty
DrawTextA
DrawTextExA
GrayStringA
TabbedTextOutA
GetWindowDC
ClientToScreen
FillRect
InflateRect
IntersectRect
WindowFromPoint
GetSysColorBrush
RealChildWindowFromPoint
DestroyMenu
GetMenuItemInfoA
CopyImage
GetAsyncKeyState
CopyAcceleratorTableA
InvalidateRgn
SetRect
IsRectEmpty
IsClipboardFormatAvailable
MessageBeep
DeleteMenu
DestroyIcon
GetNextDlgGroupItem
TrackMouseEvent
LoadImageW
RegisterClipboardFormatA
CreatePopupMenu
GetMenuDefaultItem
DrawFocusRect
LoadImageA
SetScrollPos
EnableScrollBar
HideCaret
InvertRect
LoadCursorW
NotifyWinEvent
MapVirtualKeyA
GetKeyNameTextA
SetLayeredWindowAttributes
EnumDisplayMonitors
SetParent
EmptyClipboard
MessageBoxA
DrawEdge
DrawFrameControl
IsZoomed
LoadMenuW
GetSystemMenu
BringWindowToTop
SetCursorPos
CopyIcon
FrameRect
DrawIcon
PostThreadMessageA
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
InsertMenuItemA
UnpackDDElParam
ReuseDDElParam
UnionRect
UpdateLayeredWindow
MonitorFromPoint
GetComboBoxInfo
WaitMessage
GetKeyboardLayout
IsCharLowerA
MapVirtualKeyExA
GetKeyboardState
ToAsciiEx
LoadAcceleratorsW
CreateAcceleratorTableA
DestroyAcceleratorTable
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuA
CharUpperBuffA
GetUpdateRect
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
SubtractRect
CreateMenu
GetWindowRgn
DestroyCursor
ScrollWindow
RedrawWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
SetFocus
GetDlgCtrlID
GetDlgItem
IsIconic
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsMenu
IsWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
PeekMessageA
DispatchMessageA
RegisterWindowMessageA
SetMenuItemInfoA
ScreenToClient
AdjustWindowRectEx
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
DrawStateA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
GetScrollPos
CheckMenuItem
GetFocus
CharUpperA
RemoveMenu
AppendMenuA
SystemParametersInfoA
DrawIconEx
LoadIconW
LoadIconA
GetWindowLongA
SetWindowRgn
ReleaseCapture
SetCapture
LoadCursorA
SetClassLongA
SetWindowTextA
InvalidateRect
MoveWindow
GetParent
ReleaseDC
GetDC
LoadBitmapW
UnregisterClassA
KillTimer
SendMessageA
GetClientRect
GetSystemMetrics
SetTimer
PostMessageA
GetWindowRect
EnableWindow
SetClipboardData
CloseClipboard
OpenClipboard
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringA
GetIconInfo
GetProcessWindowStation
GetUserObjectInformationW
CharUpperBuffW
MessageBoxW
GetProcessWindowStation
GetUserObjectInformationW

gdi32

SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceA
ExtFloodFill
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
OffsetRgn
Rectangle
LPtoDP
Polyline
Polygon
CreateDIBitmap
CopyMetaFileA
CreateDCA
GetDeviceCaps
CreateBitmap
SetBkColor
SetTextColor
GetBkColor
GetStockObject
GetTextColor
CreateHatchBrush
RealizePalette
GetSystemPaletteEntries
EnumFontFamiliesA
GetNearestPaletteIndex
CreatePalette
EnumFontFamiliesExA
GetTextMetricsA
GetRgnBox
GetTextExtentPoint32A
DPtoLP
SetRectRgn
PatBlt
GetMapMode
CreateRectRgnIndirect
CreateFontIndirectA
CombineRgn
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
DeleteDC
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontA
CreatePen
CreateSolidBrush
Ellipse
GetPixel
RoundRect
SelectObject
SetPixel
StretchBlt
GetObjectA
CreateRoundRectRgn
CreatePatternBrush
GetTextCharsetInfo
CreateDIBSection
SetDIBColorTable
ExtTextOutA
TextOutA
MoveToEx
GetPaletteEntries
CreateEllipticRgn
SetTextAlign
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteObject
CreateRectRgn
CreatePolygonRgn

advapi32

RegEnumValueA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegEnumKeyExA
RegQueryValueA
RegEnumKeyA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA

shell32

DragAcceptFiles
DragFinish
DragQueryFileA
ShellExecuteA
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetFileInfoA
Shell_NotifyIconA
SHAppBarMessage
SHBrowseForFolderA

msimg32

AlphaBlend
TransparentBlt

comctl32

_TrackMouseEvent

shlwapi

PathIsDirectoryA
PathIsUNCA
PathStripToRootA
PathFindExtensionA
PathFindFileNameA
StrFormatKBSizeA
PathRemoveFileSpecW
PathSearchAndQualifyA

uxtheme

GetThemeSysColor
GetWindowTheme
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
GetCurrentThemeName
GetThemeColor
DrawThemeBackground
CloseThemeData
OpenThemeData
DrawThemeParentBackground
DrawThemeText

oledlg

ord8

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

wininet

InternetSetStatusCallback
InternetGetLastResponseInfoA
InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetReadFile
InternetConnectA
InternetCloseHandle
InternetOpenA
InternetSetOptionA
HttpOpenRequestA
HttpAddRequestHeadersA
HttpSendRequestA
HttpQueryInfoA

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

ole32

OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
OleRun
CoRevokeClassObject
CreateStreamOnHGlobal
CoInitializeEx
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
CoInitialize
CLSIDFromProgID
CoCreateGuid
CLSIDFromString
ReleaseStgMedium
OleDuplicateData

oleaut32

VariantInit
VariantCopy
VariantClear
VariantChangeType
SysFreeString
SysStringByteLen
VarBstrFromDate
SysAllocStringByteLen
SysAllocStringLen
OleCreateFontIndirect
LoadTypeLi
GetErrorInfo
SysAllocString
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen

wtsapi32

WTSSendMessageW

Sections

.text
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.msix0
Size: - Virtual size: 6.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.msix1
Size: 7.3MB - Virtual size: 7.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 401KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

552b5a55af7e3151c51eec7a5d462754

Headers

DLL Characteristics

File Characteristics

Imports

winmm

version

kernel32

user32

gdi32

advapi32

shell32

msimg32

comctl32

shlwapi

uxtheme

oledlg

gdiplus

oleacc

wininet

imm32

winspool.drv

ole32

oleaut32

wtsapi32

Sections

.text Size: - Virtual size: 1.6MB

.rdata Size: - Virtual size: 364KB

.data Size: - Virtual size: 46KB

.msix0 Size: - Virtual size: 6.5MB

.msix1 Size: 7.3MB - Virtual size: 7.3MB

.rsrc Size: 401KB - Virtual size: 400KB

.text
Size: - Virtual size: 1.6MB

.rdata
Size: - Virtual size: 364KB

.data
Size: - Virtual size: 46KB

.msix0
Size: - Virtual size: 6.5MB

.msix1
Size: 7.3MB - Virtual size: 7.3MB

.rsrc
Size: 401KB - Virtual size: 400KB