bdf75dc9ee1f58f212088607c92aa5f1bf7da14a2c1ac029245dd948a8bd15e8

Sharing

Copy URL Twitter E-mail

General

Target

bdf75dc9ee1f58f212088607c92aa5f1bf7da14a2c1ac029245dd948a8bd15e8
Size

3.0MB
MD5

645b5ba026d3ceb6af60a766ccbd9d96
SHA1

7d7bace62b3401cc867730e955f6245e6d7d5294
SHA256

bdf75dc9ee1f58f212088607c92aa5f1bf7da14a2c1ac029245dd948a8bd15e8
SHA512

69540495fbe4079703128eb03fbfbce8e1e6a8a4ea363250e04fd78b601d95ae1228839145d09327e667fa81a0d5f5245620cae0b37521a8485999d01bdd2d04
SSDEEP

49152:d0k+Pd6dNZbio3JDberqZlucepOcnw6u4:d0k+YNZbio5Hem3EOcwp4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdf75dc9ee1f58f212088607c92aa5f1bf7da14a2c1ac029245dd948a8bd15e8

Files

bdf75dc9ee1f58f212088607c92aa5f1bf7da14a2c1ac029245dd948a8bd15e8
.exe windows:4 windows x86 arch:x86

6bc7cd536d8e1f6cd6ec0b03c718fd4a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx
ImageList_ReplaceIcon
ImageList_GetImageInfo
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_DrawEx
ImageList_Destroy
ImageList_AddMasked
ImageList_Add
_TrackMouseEvent

kernel32

SetEvent
SetFileAttributesW
SetFileTime
SetLastError
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SuspendThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnlockFile
UnmapViewOfFile
VirtualAlloc
VirtualProtect
SetErrorMode
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
WriteFile
WritePrivateProfileStringW
LCMapStringA
GetStringTypeA
InterlockedIncrement
InterlockedDecrement
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
SetHandleCount
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetVersion
GetStartupInfoA
RtlUnwind
SetEnvironmentVariableA
SetEndOfFile
SearchPathW
ResumeThread
ResetEvent
ReadFile
RaiseException
QueryPerformanceCounter
OutputDebugStringW
OutputDebugStringA
OpenProcess
OpenFileMappingW
MultiByteToWideChar
MulDiv
MoveFileW
MapViewOfFile
lstrlenW
lstrcpynW
lstrcmpW
lstrcmpiW
lstrcmpA
LockResource
LockFile
LocalReAlloc
LocalFree
LocalFileTimeToFileTime
LocalAlloc
LoadResource
LoadLibraryExW
LoadLibraryExA
LCMapStringW
IsValidCodePage
IsProcessorFeaturePresent
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GlobalUnlock
GlobalSize
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalGetAtomNameW
GlobalFree
GlobalFlags
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVolumeInformationW
GetVersionExW
GetUserDefaultLangID
GetTimeZoneInformation
GetTimeFormatW
GetThreadLocale
GetTempPathW
GetTempFileNameW
GetSystemInfo
GetSystemDirectoryW
GetStringTypeW
GetStringTypeExW
GetStdHandle
GetStartupInfoW
GetShortPathNameW
GetProfileIntW
GetProcessHeap
GetProcAddress
GetPrivateProfileStringW
GetPrivateProfileSectionNamesW
GetPrivateProfileIntW
GetOEMCP
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetLocalTime
GetLocaleInfoW
GetLastError
GetFullPathNameW
GetFileType
GetFileTime
GetFileAttributesW
GetFileAttributesExW
GetEnvironmentStringsW
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryW
GetCPInfo
GetConsoleMode
GetConsoleCP
GetCommandLineW
GetACP
FreeResource
FreeLibraryAndExitThread
FreeEnvironmentStringsW
FormatMessageW
FlushFileBuffers
FindResourceW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
ExpandEnvironmentStringsW
ExitProcess
EnumResourceTypesW
EnumResourceNamesW
EnumResourceLanguagesW
DuplicateHandle
DeleteFileW
DeleteCriticalSection
CreateThread
CreateFileW
CreateFileMappingW
CreateEventW
CreateDirectoryW
CompareStringW
CompareStringA
CloseHandle
GetSystemTimeAsFileTime
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
GetTickCount
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
FreeLibrary
VirtualQuery

user32

SendDlgItemMessageA
SendDlgItemMessageW
SendMessageTimeoutW
SendMessageW
SetActiveWindow
SetCapture
SetClipboardData
SetCursorPos
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetMenu
SetMenuDefaultItem
SetMenuItemBitmaps
SetMenuItemInfoW
SetParent
SetPropW
SetRectEmpty
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetWindowContextHelpId
SetWindowLongA
SetWindowLongW
SetWindowPos
SetWindowRgn
SetWindowsHookExW
SetWindowTextW
ShowCaret
ShowOwnedPopups
ShowScrollBar
ShowWindow
SystemParametersInfoW
TabbedTextOutW
ToUnicodeEx
TrackPopupMenu
TrackPopupMenuEx
TranslateAcceleratorW
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnionRect
UnregisterClassW
UnregisterHotKey
UpdateWindow
ValidateRect
VkKeyScanExW
WaitMessage
WinHelpW
wsprintfW
MessageBoxW
MessageBeep
MapWindowPoints
MapVirtualKeyW
MapVirtualKeyExW
MapDialogRect
LookupIconIdFromDirectoryEx
LockWindowUpdate
LoadMenuW
LoadMenuIndirectW
LoadImageW
LoadIconW
LoadCursorW
LoadBitmapW
LoadAcceleratorsW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsMenu
IsIconic
IsDlgButtonChecked
IsDialogMessageW
IsClipboardFormatAvailable
IsChild
IsCharLowerW
InvertRect
InvalidateRgn
InvalidateRect
IntersectRect
InsertMenuW
InsertMenuItemW
InflateRect
HideCaret
GrayStringW
GetWindowThreadProcessId
GetWindowTextW
GetWindowTextLengthW
GetWindowRgn
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowLongA
GetWindowDC
GetUserObjectInformationW
GetTopWindow
GetTabbedTextExtentW
GetTabbedTextExtentA
GetSystemMetrics
GetSystemMenu
ScrollWindow
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetNextDlgTabItem
GetNextDlgGroupItem
GetMessageW
GetMessageTime
GetMessagePos
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenuDefaultItem
GetMenuCheckMarkDimensions
GetMenu
GetLastActivePopup
GetKeyState
GetKeyNameTextW
GetKeyboardState
GetKeyboardLayoutList
GetKeyboardLayout
GetIconInfo
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDlgItemTextW
GetDlgCtrlID
GetDialogBaseUnits
GetDesktopWindow
GetDCEx
GetCursorPos
GetClipboardData
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetClassInfoExW
GetCapture
GetAsyncKeyState
GetActiveWindow
FrameRect
FindWindowW
FindWindowExW
FillRect
EqualRect
EnumWindows
EnumDesktopWindows
EnumChildWindows
EndPaint
ReuseDDElParam
UnpackDDElParam
EndDialog
EndDeferWindowPos
EnableWindow
EnableMenuItem
LoadStringW
AppendMenuW
AttachThreadInput
BeginDeferWindowPos
BeginPaint
EmptyClipboard
DrawTextW
DrawTextExW
DrawStateW
DrawMenuBar
DrawIconEx
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DestroyAcceleratorTable
DeleteMenu
DefWindowProcW
DefFrameProcW
CreateWindowExW
CreatePopupMenu
ScreenToClient
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterHotKey
RegisterClipboardFormatW
RegisterClassW
BringWindowToTop
CallNextHookEx
CallWindowProcW
CharNextW
CharUpperW
CheckDlgButton
CheckMenuItem
CheckMenuRadioItem
CheckRadioButton
ClientToScreen
CloseClipboard
CloseDesktop
CopyAcceleratorTableW
CopyIcon
CopyRect
CreateDialogIndirectParamW
CreateIconFromResourceEx
CreateIconIndirect
CreateMenu
RedrawWindow
PtInRect
PostThreadMessageW
PostQuitMessage
PostMessageW
PeekMessageW
OpenInputDesktop
OpenClipboard
OffsetRect
GetSysColorBrush
MoveWindow
IsRectEmpty

gdi32

Ellipse
EndDoc
EndPage
EndPath
EnumFontFamiliesExW
Escape
ExcludeClipRect
ExtCreatePen
ExtCreateRegion
ExtSelectClipRgn
ExtTextOutW
FillRgn
FrameRgn
GdiFlush
GetBitmapBits
GetBkColor
GetBkMode
GetCharWidthW
GetClipBox
GetClipRgn
GetCurrentObject
GetCurrentPositionEx
GetDeviceCaps
GetDIBits
GetMapMode
GetNearestColor
GetObjectA
GetObjectW
GetPixel
GetPolyFillMode
GetRegionData
GetRgnBox
GetROP2
GetStockObject
GetStretchBltMode
GetTextAlign
GetTextColor
GetTextExtentPoint32A
GetTextExtentPoint32W
DPtoLP
GetTextMetricsW
GetViewportExtEx
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
IntersectClipRect
LineTo
LPtoDP
MoveToEx
OffsetRgn
OffsetViewportOrgEx
PatBlt
PolyBezierTo
Polygon
Polyline
PtInRegion
PtVisible
RealizePalette
Rectangle
RectVisible
RestoreDC
SaveDC
ScaleViewportExtEx
ScaleWindowExtEx
SelectClipRgn
SelectObject
SelectPalette
SetAbortProc
SetBkColor
SetBkMode
SetGraphicsMode
SetMapMode
SetPixel
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextAlign
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
SetWorldTransform
StartDocW
StartPage
StretchBlt
StretchDIBits
StrokeAndFillPath
StrokePath
DeleteObject
DeleteDC
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgnIndirect
CreatePolygonRgn
CreatePatternBrush
CreateFontIndirectW
CreateEllipticRgn
CreateDIBSection
CreateDIBitmap
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CombineRgn
CloseFigure
BitBlt
GetTextFaceW
BeginPath

winspool.drv

GetJobW
DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

ImpersonateSelf
IsTextUnicode
MapGenericMask
OpenThreadToken
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumKeyW
SetFileSecurityW
RevertToSelf
RegSetValueW
RegSetValueExW
RegQueryValueW
RegQueryValueExW
RegOpenKeyExW
RegEnumValueW
GetFileSecurityW

shell32

DragAcceptFiles
DragQueryFileW
DragQueryPoint
ExtractIconW
Shell_NotifyIconW
ShellExecuteExW
ShellExecuteW
DragFinish

ole32

PropVariantClear
OleUninitialize
OleTranslateAccelerator
OleRun
OleIsCurrentClipboard
OleInitialize
OleFlushClipboard
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
RegisterDragDrop
CoTaskMemFree
CoTaskMemAlloc
CoRevokeClassObject
CoRegisterMessageFilter
CoLockObjectExternal
CoInitialize
CoGetClassObject
CoFreeUnusedLibraries
CoDisconnectObject
CoCreateInstance
CoCreateGuid
CLSIDFromString
CLSIDFromProgID
RevokeDragDrop
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoUninitialize
StringFromCLSID

shlwapi

StrCmpIW
PathStripToRootW
PathRemoveFileSpecW
PathRemoveExtensionW
PathIsUNCW
PathIsDirectoryW
PathFindFileNameW
PathFindExtensionW
PathCombineW
PathFileExistsW

Sections

.text
Size: 768KB - Virtual size: 767KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.roll6
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6bc7cd536d8e1f6cd6ec0b03c718fd4a

Headers

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

shlwapi

Sections

.text Size: 768KB - Virtual size: 767KB

.rdata Size: 20KB - Virtual size: 16KB

.data Size: 12KB - Virtual size: 20KB

.rsrc Size: 264KB - Virtual size: 264KB

.roll6 Size: 1.9MB - Virtual size: 1.9MB

.text
Size: 768KB - Virtual size: 767KB

.rdata
Size: 20KB - Virtual size: 16KB

.data
Size: 12KB - Virtual size: 20KB

.rsrc
Size: 264KB - Virtual size: 264KB

.roll6
Size: 1.9MB - Virtual size: 1.9MB