abcee3e5f1ce4b0eb560a9919b92e0a8

Sharing

Copy URL Twitter E-mail

General

Target

abcee3e5f1ce4b0eb560a9919b92e0a8
Size

268KB
MD5

abcee3e5f1ce4b0eb560a9919b92e0a8
SHA1

d017c44592bae849bf371ede705ba496c34b244c
SHA256

dd41b0d73fdb330b4241ad517dcdfb6abff7b4bc4948be8a1f90850d68562303
SHA512

e6bf985edfdcc9fcd0ee8aa2c65ddbb2556d203529d8d1a50bf5a77bbb38e2feccf72cca59e4eff972a0ba35d133a2a3466e80894ba4cab0a755cdd40b32e029
SSDEEP

6144:qLtyJc3SMesTMW3vY7l+66/VoB1X3jGmzr:JJqSMesQWfGl+66/Voum

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abcee3e5f1ce4b0eb560a9919b92e0a8

Files

abcee3e5f1ce4b0eb560a9919b92e0a8
.exe windows:4 windows x86 arch:x86

2e22531ae51639158c92163276bf23a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetGetLastResponseInfoA
HttpSendRequestExA
HttpEndRequestA
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetOpenA
InternetConnectA
InternetQueryDataAvailable
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetCloseHandle
InternetOpenUrlA
HttpQueryInfoA
InternetSetOptionExA

oleacc

AccessibleObjectFromEvent

hurlhook

?InitDll@@YGHPAUHWND__@@@Z

htshook

ord3
ord1
ord4

kernel32

WritePrivateProfileStringA
GetCPInfo
GetOEMCP
SizeofResource
GetFileSize
GetFileTime
SetErrorMode
RtlUnwind
ExitProcess
TerminateProcess
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetStartupInfoA
GetCommandLineA
RaiseException
TlsAlloc
ExitThread
GetACP
SetStdHandle
GetFileType
HeapReAlloc
HeapSize
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalFlags
GetProcessVersion
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
TlsGetValue
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
MulDiv
SetLastError
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LocalAlloc
EnterCriticalSection
FindResourceA
LoadResource
LockResource
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GlobalDeleteAtom
lstrcmpA
GetProfileStringA
GetCurrentThread
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalLock
GlobalUnlock
SuspendThread
GetCurrentThreadId
SetThreadPriority
ResumeThread
lstrcpynA
lstrcmpiA
InterlockedDecrement
InterlockedIncrement
GetFileAttributesExA
GlobalAlloc
GlobalFree
Process32First
Process32Next
GetFileAttributesA
SetEvent
CreateToolhelp32Snapshot
Module32First
GetTickCount
CreateEventA
WaitForSingleObject
Sleep
GetShortPathNameA
GetVersionExA
OpenProcess
CloseHandle
MultiByteToWideChar
WinExec
CreateMutexA
ReleaseMutex
GetModuleFileNameA
GetPrivateProfileStringA
lstrlenA
DeleteFileA
MoveFileA
CopyFileA
FreeLibrary
LoadLibraryA
GetProcAddress
OutputDebugStringA
lstrlenW
WideCharToMultiByte
GetLastError
FormatMessageA
LocalFree
LocalReAlloc
TlsSetValue
TlsFree
GlobalReAlloc
FlushFileBuffers
GlobalHandle
CreateThread

user32

CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
InvalidateRect
InflateRect
RegisterClipboardFormatA
PostThreadMessageA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
DestroyMenu
LoadStringA
GetDesktopWindow
MapDialogRect
SetWindowContextHelpId
EndDialog
CreateDialogIndirectParamA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
SetActiveWindow
IsWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
CopyRect
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetDlgCtrlID
DestroyWindow
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
SetCursor
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
PostQuitMessage
GetWindowTextLengthA
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
PeekMessageA
GetCursorPos
SetWindowsHookExA
PtInRect
GetSysColorBrush
CharUpperA
GrayStringA
DrawTextA
GetMenuCheckMarkDimensions
IsWindowUnicode
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
EnableWindow
SetWinEventHook
EnumChildWindows
RegisterWindowMessageA
SendMessageTimeoutA
IsWindowVisible
EnumWindows
GetLastInputInfo
KillTimer
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
SetTimer
GetParent
PostMessageA
GetClassNameA
GetForegroundWindow
GetWindowTextA
GetWindowThreadProcessId
FindWindowA
DefDlgProcA
LoadIconA
LoadCursorA
RegisterClassA
wsprintfA
SendMessageA
MessageBoxA
CreateWindowExA

gdi32

GetWindowExtEx
CreateSolidBrush
PtVisible
DeleteObject
RectVisible
TextOutA
ExtTextOutA
Escape
GetViewportExtEx
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
PatBlt
CreateCompatibleDC
BitBlt
GetTextExtentPointA
GetDeviceCaps
GetObjectA
SetBkColor
CreateDIBitmap
SetTextColor
GetClipBox
CreateBitmap
IntersectClipRect
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegOpenKeyExA
RegOpenKeyA
RegEnumKeyA
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA

comctl32

ord17

oledlg

ord8

ole32

CoInitialize
CLSIDFromString
CLSIDFromProgID
CoDisconnectObject
CoTaskMemAlloc
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoCreateInstance
CoUninitialize
CoTaskMemFree
CoInitializeEx
CoInitializeSecurity
CoGetClassObject

olepro32

ord253

oleaut32

VariantTimeToSystemTime
LoadTypeLi
SysStringLen
SysAllocStringByteLen
SysAllocString
VariantChangeType
VariantCopy
SysAllocStringLen
SysFreeString
VariantClear

urlmon

URLDownloadToFileA

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.text
Size: 184KB - Virtual size: 181KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2e22531ae51639158c92163276bf23a9

Headers

File Characteristics

Imports

wininet

oleacc

hurlhook

htshook

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

oledlg

ole32

olepro32

oleaut32

urlmon

version

Sections

.text Size: 184KB - Virtual size: 181KB

.rdata Size: 44KB - Virtual size: 42KB

.data Size: 24KB - Virtual size: 42KB

.rsrc Size: 12KB - Virtual size: 9KB

.text
Size: 184KB - Virtual size: 181KB

.rdata
Size: 44KB - Virtual size: 42KB

.data
Size: 24KB - Virtual size: 42KB

.rsrc
Size: 12KB - Virtual size: 9KB