adc0e28f10916f827fc25d7e09108273

Sharing

Copy URL Twitter E-mail

General

Target

adc0e28f10916f827fc25d7e09108273
Size

73KB
MD5

adc0e28f10916f827fc25d7e09108273
SHA1

67be407e1f5ab6b30b47fdf528a275a48da66790
SHA256

e5cf1e9a0d93b430b8aeab653a462b3fdc14e884e6e23727c455544095b3e0dd
SHA512

8bf99d59f9ad5d21426cebbcc4b37460a56dd2161902c8af1d6835b216aa5399a5878857e4f61b53452c144e980de73b0ca0c049e39ce1c4e71d0b8371ca4621
SSDEEP

1536:QHUkODiZuMz9kF2E9XW2pa+Uar5MWX5TySr7w0sZIsgRCRbnlsH:Q0kOQz9kME9m2pa+Ui5MWzr7w0MAQ9no

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
adc0e28f10916f827fc25d7e09108273

Files

adc0e28f10916f827fc25d7e09108273
.exe windows:4 windows x86 arch:x86

8fc5dcfff676e6e341594b28363f66ed

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathSearchAndQualifyW
StrFormatKBSizeW
PathCommonPrefixA
SHDeleteKeyW
PathGetCharTypeW
SHIsLowMemoryMachine
StrTrimA
StrCSpnIW
UrlUnescapeA
StrChrA
StrDupA
StrCSpnIA
UrlGetLocationA
SHRegCreateUSKeyA
PathUndecorateW
PathIsLFNFileSpecA
StrSpnW
SHRegEnumUSValueA
AssocQueryStringByKeyW
StrRetToBufA
StrRetToStrA
StrToIntW
UrlIsOpaqueA
PathStripPathW
StrCmpNA
AssocQueryStringW
PathIsNetworkPathA
SHOpenRegStream2W
SHRegDeleteEmptyUSKeyA
PathParseIconLocationA
SHRegGetUSValueA
SHSkipJunction
SHCopyKeyW
StrCmpIW
SHQueryInfoKeyA
AssocQueryStringByKeyA
UrlGetPartW
SHStrDupA
PathGetDriveNumberW
PathGetDriveNumberA
PathParseIconLocationW
PathBuildRootA
ColorAdjustLuma
StrIsIntlEqualA
PathUnquoteSpacesW
StrToIntExW
StrFormatByteSizeA
StrTrimW
StrStrIW
SHGetThreadRef
PathCompactPathA
StrChrW
StrRetToBufW
PathIsDirectoryW
PathMatchSpecW
PathRenameExtensionA
UrlCombineA
PathMakeSystemFolderA
PathRemoveBlanksW
SHDeleteValueW
PathRemoveExtensionA
SHRegCreateUSKeyW
StrCmpNW
SHDeleteKeyA
wnsprintfW
StrRStrIW
PathIsRootA
StrCatW
StrCmpW
StrRChrA

advapi32

QueryServiceConfigW
InitializeSid
InitiateSystemShutdownA
SetSecurityInfo
GetExplicitEntriesFromAclA
BuildTrusteeWithNameA
GetSidIdentifierAuthority
OpenSCManagerA
CryptDuplicateKey
CryptGenRandom
CryptVerifySignatureA
RegSaveKeyW
GetAuditedPermissionsFromAclW
LookupSecurityDescriptorPartsA
CryptSignHashW
GetSecurityDescriptorLength
GetSecurityInfoExA
IsValidAcl
CryptHashSessionKey
BuildSecurityDescriptorA
InitializeAcl
RegEnumKeyExW
RegRestoreKeyA
LogonUserA
GetEffectiveRightsFromAclA
SetNamedSecurityInfoW
GetOverlappedAccessResults
CryptEncrypt
EnumServicesStatusA
BackupEventLogW
GetSidSubAuthority
GetSecurityDescriptorOwner
SetSecurityDescriptorSacl
LookupAccountSidA
ClearEventLogW
RegOpenKeyA
NotifyBootConfigStatus
CryptExportKey
DeleteService
RegConnectRegistryW
PrivilegedServiceAuditAlarmW
RegQueryValueW
AllocateLocallyUniqueId
ImpersonateSelf
EqualPrefixSid
AbortSystemShutdownA
StartServiceA
ConvertSecurityDescriptorToAccessNamedW
CryptDecrypt
RegCreateKeyW
RegQueryInfoKeyW
CryptSetProvParam
GetFileSecurityW
MakeSelfRelativeSD
GetServiceDisplayNameW
GetAccessPermissionsForObjectW
RegisterServiceCtrlHandlerW
DuplicateTokenEx
CopySid
SetEntriesInAccessListW
BuildImpersonateTrusteeW
GetTrusteeTypeW
FindFirstFreeAce
IsValidSid

kernel32

GenerateConsoleCtrlEvent
VerLanguageNameA
SetMessageWaitingIndicator
GetStringTypeExW
SetFileApisToOEM
GetCalendarInfoW
ReadConsoleInputW
CreateEventA
GetThreadSelectorEntry
GetModuleFileNameW
SetSystemPowerState
GetPrivateProfileSectionNamesW
GetStringTypeExA
WaitForMultipleObjectsEx
GetCurrentDirectoryW
GetThreadPriority
OpenEventW
WriteFile
PurgeComm
SetFileAttributesA
lstrcmpiW
WaitNamedPipeA
GetTapePosition
ExpandEnvironmentStringsA
SetConsoleCursorPosition
OutputDebugStringA
GetFileAttributesW
Thread32First
FlushInstructionCache
LockFile
GetProcessTimes
PulseEvent
FindAtomW
VirtualProtect
GetSystemTimeAsFileTime
DeleteFileW
GetUserDefaultLCID
GetNumberFormatA
PrepareTape
GetConsoleMode
GetDiskFreeSpaceA
GetFileAttributesA
GetCommModemStatus
GetDiskFreeSpaceExW
GlobalSize
CreateProcessA
WriteConsoleOutputW
FillConsoleOutputAttribute
GetWriteWatch
IsValidLocale
CreateDirectoryA
GetCurrentDirectoryA
FoldStringW
FileTimeToDosDateTime
CreateToolhelp32Snapshot
IsBadStringPtrA
InitializeCriticalSectionAndSpinCount
IsBadStringPtrW
FindFirstChangeNotificationA
WriteFileGather
GetNumberFormatW
ReadConsoleOutputW
IsValidCodePage
TerminateThread
AreFileApisANSI
FindFirstFileExA
EnumCalendarInfoExA
SetThreadIdealProcessor
GetModuleHandleW
lstrcmpW
CreateTapePartition
SetConsoleScreenBufferSize
CreateSemaphoreA
VirtualFreeEx
OpenFileMappingA
WritePrivateProfileSectionA
GetFileAttributesExW
GetDriveTypeW
TlsAlloc
GetCurrentProcess
HeapFree

ole32

OleCreateMenuDescriptor
CoResumeClassObjects
OleDuplicateData
CoRegisterSurrogate
ProgIDFromCLSID
CoFreeUnusedLibraries
CoQueryReleaseObject
ReadStringStream
OleSetAutoConvert
CoSuspendClassObjects
CoIsHandlerConnected
StgOpenStorageEx
CoUnmarshalInterface
OleDestroyMenuDescriptor
PropVariantCopy
UtGetDvtd32Info
CoInitializeEx
CoDisconnectObject
CoTreatAsClass
OleRun
CLSIDFromProgID
CoGetCallContext
CoTaskMemRealloc
GetHookInterface
OleBuildVersion
IsAccelerator
OleConvertOLESTREAMToIStorageEx
CoLockObjectExternal
OleCreateLink
DllDebugObjectRPCHook
StgCreateDocfile
RevokeDragDrop
PropVariantClear
OleConvertOLESTREAMToIStorage
StringFromIID
BindMoniker
StgIsStorageFile
OleSetContainedObject
ReleaseStgMedium
CoRevokeClassObject
OleGetIconOfFile
ReadOleStg
CoUnmarshalHresult
StgCreateDocfileOnILockBytes
SetDocumentBitStg
CreateDataCache
GetClassFile
CoReleaseServerProcess
OleSave
CoCreateInstance
WriteClassStm
OleDraw
WriteStringStream
MonikerCommonPrefixWith
OleCreate
FreePropVariantArray
OleQueryLinkFromData
CoFileTimeToDosDateTime
CoSwitchCallContext
CoGetInstanceFromFile
OpenOrCreateStream
WriteOleStg
GetHGlobalFromILockBytes
CoUninitialize
StgGetIFillLockBytesOnILockBytes
CoGetInstanceFromIStorage
CoFileTimeNow
StgIsStorageILockBytes
CoGetInterfaceAndReleaseStream
OleSetClipboard
WriteFmtUserTypeStg
CoMarshalHresult
OleCreateDefaultHandler
ReadClassStm
OleIsRunning
CoQueryProxyBlanket
GetConvertStg
SetConvertStg
CoGetMalloc

user2

GetLastActivePopup
CloseWindowStation
FreeDDElParam
GetWindow
ShowCursor
CreateCursor
LookupIconIdFromDirectory
GetScrollInfo
GetDoubleClickTime
AppendMenuW
CheckMenuItem
FlashWindowEx
FillRect
GetInputDesktop
GetClassWord
AdjustWindowRectEx
VkKeyScanExW
DestroyWindow
GetClassLongW
WindowFromDC
GetCursor
GetTitleBarInfo
SetFocus
GetTopWindow
ReleaseDC
GetDlgItemTextW
CloseClipboard
SetScrollInfo
LoadBitmapW
IsCharAlphaNumericA
LockWindowUpdate
RedrawWindow
ReplyMessage
GetMenuItemRect
DispatchMessageA
CopyIcon
DdeFreeDataHandle
UnloadKeyboardLayout
ValidateRect
CharToOemBuffA
ImpersonateDdeClientWindow
SendMessageW
CallMsgFilter
OemToCharBuffA
OpenDesktopW
SetMenuItemBitmaps
InsertMenuA
CreateIconIndirect
OemKeyScan
SetKeyboardState
GetOpenClipboardWindow
CreateAcceleratorTableW
GetKBCodePage
DestroyMenu
MenuItemFromPoint
EnumDisplaySettingsA
GetClipboardOwner
DdeCreateStringHandleW
GetCaretBlinkTime
DefFrameProcW
DrawIconEx
GetActiveWindow
SendInput
ChangeDisplaySettingsA
GetClassInfoExA
EnumWindowStationsA
ChangeDisplaySettingsExA
SendNotifyMessageW
SendDlgItemMessageA
GetClipboardFormatNameA
SetForegroundWindow
GetWindowDC
SendIMEMessageExA
RegisterWindowMessageW
InvalidateRect
CloseWindow
OpenDesktopA
MapVirtualKeyW

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8fc5dcfff676e6e341594b28363f66ed

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

advapi32

kernel32

ole32

user2

Sections

.text Size: 61KB - Virtual size: 61KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 8KB

.text
Size: 61KB - Virtual size: 61KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 8KB