a3bd53426f4ff3a22e883176038d011a

Sharing

Copy URL Twitter E-mail

General

Target

a3bd53426f4ff3a22e883176038d011a
Size

267KB
MD5

a3bd53426f4ff3a22e883176038d011a
SHA1

6cb02c950f115a3e837c52d552b69ba4dff48e23
SHA256

c19bead046235504293fc6d0b07079e3a7c9e61dd306e9b7abe2b7a44d158166
SHA512

f229674e1d16cc7f212f01debb623bc22795a78c3a12101fbd4a1f2511b30218a87680d6336223dbbc6dbb8e136c08677b901b497714c4f7b30a2ed88eadefbc
SSDEEP

3072:eV3+esHaap0xzwvtcDCajR2bzMbUP/Sa5B6Bt/0i+xjtjc27qDc+/8yalI07q:E+esrp0tTL8TTEtihe2Ic88yc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3bd53426f4ff3a22e883176038d011a

Files

a3bd53426f4ff3a22e883176038d011a
.exe windows:4 windows x86 arch:x86

f6fdf10c15d667ea8fb1ab16e1223194

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx

kernel32

GetLocaleInfoW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadLocale
GetTickCount
GetTimeZoneInformation
GetUserDefaultLCID
GetVersion
GetVolumeInformationW
GlobalAddAtomW
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomW
GlobalFlags
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalUnlock
HeapCreate
HeapDestroy
HeapReAlloc
HeapSize
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByteEx
IsDebuggerPresent
IsValidCodePage
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
GetLocaleInfoA
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LocalReAlloc
LockFile
LockResource
MulDiv
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReadFile
RtlUnwind
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnlockFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WideCharToMultiByte
WriteConsoleA
WriteFile
WritePrivateProfileStringW
lstrcmpA
lstrcmpW
lstrlenA
lstrlenW
GetLastError
GetFullPathNameW
GetFileType
GetFileTime
GetFileSize
GetFileAttributesW
GetEnvironmentStringsW
GetEnvironmentStringsA
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetConsoleOutputCP
GetConsoleMode
GetConsoleCP
GetCommandLineA
GetCPInfo
GetACP
FreeResource
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FormatMessageW
FlushFileBuffers
FindResourceW
FindFirstFileW
FindClose
FileTimeToSystemTime
EnterCriticalSection
FileTimeToLocalFileTime
ExitProcess
EnumSystemLocalesA
LoadLibraryA
CloseHandle
EnumResourceLanguagesW
CompareStringA
CompareStringW
ConvertDefaultLocale
CreateDirectoryW
CreateFileA
CreateFileW
DeleteCriticalSection
DuplicateHandle

user32

GetWindowThreadProcessId
GrayStringW
IntersectRect
InvalidateRect
InvalidateRgn
IsChild
IsDialogMessageW
IsIconic
IsWindow
IsWindowEnabled
IsWindowVisible
LoadBitmapW
LoadCursorW
LoadIconW
LoadImageW
MapDialogRect
MapWindowPoints
MessageBeep
MessageBoxW
ModifyMenuW
MoveWindow
OffsetRect
PeekMessageW
PostMessageW
PostQuitMessage
PostThreadMessageW
PtInRect
RedrawWindow
RegisterClassW
GetWindowTextW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemovePropW
ScreenToClient
SendDlgItemMessageA
SendDlgItemMessageW
SendMessageW
SetActiveWindow
SetCapture
SetCursor
SetFocus
SetForegroundWindow
SetMenuItemBitmaps
SetPropW
SetRect
SetWindowContextHelpId
SetWindowLongW
SetWindowPos
GetWindow
SetWindowsHookExW
TabbedTextOutW
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UnregisterClassW
UpdateWindow
ValidateRect
WinHelpW
GetWindowRect
GetWindowPlacement
GetWindowLongW
RegisterClipboardFormatW
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSysColorBrush
GetSysColor
GetSubMenu
GetPropW
GetParent
GetNextDlgTabItem
GetNextDlgGroupItem
GetMessageW
GetMessageTime
GetMessagePos
GetMessageA
GetMenuItemCount
GetMenuCheckMarkDimensions
GetMenu
GetLastActivePopup
GetKeyState
GetForegroundWindow
GetFocus
GetDlgItem
GetDlgCtrlID
GetDC
GetCursorPos
GetClientRect
GetClassNameW
GetClassInfoW
GetClassInfoExW
GetCapture
GetActiveWindow
EqualRect
EndPaint
EndDialog
EnableWindow
EnableMenuItem
DrawTextW
DrawTextExW
DispatchMessageW
DestroyWindow
DestroyMenu
DefWindowProcW
CreateWindowExW
CreateDialogIndirectParamW
CopyRect
CopyAcceleratorTableW
ClientToScreen
CheckMenuItem
CharUpperW
CharNextW
CallWindowProcW
CallNextHookEx
BeginPaint
AdjustWindowRectEx
GetMenuState
SetWindowTextW
GetMenuItemID
GetDesktopWindow
GetClassLongW

shlwapi

PathIsUNCW
PathFindFileNameW
PathFindExtensionW
PathStripToRootW

oleaut32

VariantChangeType
SafeArrayDestroy
VariantTimeToSystemTime
VariantInit
VariantCopy
VariantClear
OleCreateFontIndirect
SystemTimeToVariantTime
SysStringLen
SysFreeString
SysAllocStringLen
SysAllocString

wininet

HttpOpenRequestW
HttpSendRequestW
InternetCloseHandle
InternetConnectW
InternetGetLastResponseInfoW
InternetReadFile
FtpRenameFileW

gdi32

CreateBitmap
CreateFontIndirectW
CreateRectRgnIndirect
CreateSolidBrush
DeleteDC
DeleteObject
Escape
ExtSelectClipRgn
GdiPlayPageEMF
GetBkColor
GetClipBox
GetDeviceCaps
GetMapMode
GetRgnBox
GetStockObject
GetTextColor
GetWindowExtEx
OffsetViewportOrgEx
PtVisible
RectVisible
RestoreDC
ScaleViewportExtEx
SelectObject
SetBkMode
SetMapMode
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
StretchBlt
TextOutW
CreateCompatibleDC

shell32

SHGetFolderPathW
ShellExecuteW

ole32

CoFreeUnusedLibraries
OleUninitialize
OleInitialize
OleIsCurrentClipboard
CLSIDFromString
CLSIDFromProgID
OleFlushClipboard
OleCreateFromFile
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
CoRevokeClassObject
CoRegisterMessageFilter
StgOpenStorageOnILockBytes

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

comdlg32

GetSaveFileNameW
GetFileTitleW

advapi32

IsWellKnownSid
RegQueryValueW
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegEnumKeyW
RegOpenKeyExW
RegOpenKeyW
RegQueryValueExW

oledlg

OleUIBusyW

Exports

Exports

DeleteConfigFiles

Sections

.text
Size: 58KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f6fdf10c15d667ea8fb1ab16e1223194

Headers

File Characteristics

Imports

comctl32

kernel32

user32

shlwapi

oleaut32

wininet

gdi32

shell32

ole32

winspool.drv

comdlg32

advapi32

oledlg

Exports

Exports

Sections

.text Size: 58KB - Virtual size: 60KB

.rdata Size: 136KB - Virtual size: 136KB

.data Size: 41KB - Virtual size: 160KB

.idata Size: 9KB - Virtual size: 11KB

.rsrc Size: 21KB - Virtual size: 23KB

.text
Size: 58KB - Virtual size: 60KB

.rdata
Size: 136KB - Virtual size: 136KB

.data
Size: 41KB - Virtual size: 160KB

.idata
Size: 9KB - Virtual size: 11KB

.rsrc
Size: 21KB - Virtual size: 23KB