b7fc08bce0c6e6a041198c9d81d2d758

Sharing

Copy URL Twitter E-mail

General

Target

b7fc08bce0c6e6a041198c9d81d2d758
Size

854KB
MD5

b7fc08bce0c6e6a041198c9d81d2d758
SHA1

4a8489d0e8fcb039a3f514e1cfacedab52741ce1
SHA256

f0974c9a78213b4618602149a44cf93b84bb458e31d36b83b8371541f437dab5
SHA512

61282b26672b4a5864722dc406dfb15281795b7030db55e20db4edcf95375457ff97d08c33732be9cb17f03bd18d836a60d8aa343acdcf6064152f674e132951
SSDEEP

24576:plM28iZW43BDTNLk+OGKsmay1iLBOsruE:5xZW439NLkVGU1iLUsruE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7fc08bce0c6e6a041198c9d81d2d758

Files

b7fc08bce0c6e6a041198c9d81d2d758
.exe windows:5 windows x86 arch:x86

2afd18e9d5ce554cf465ba523b33a2a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventW
GlobalAlloc
FreeResource
InterlockedExchange
GetFileTime
lstrcpynW
GetVersionExA
GetModuleHandleA
GetConsoleOutputCP
GetWindowsDirectoryW
ReadFile
FindNextFileW
GetSystemInfo
GetCommandLineA
GetVersionExW
SetUnhandledExceptionFilter
TlsAlloc
GetVolumeInformationW
GlobalFree
FreeEnvironmentStringsW
GetSystemDefaultLangID
FindResourceExW
CreateThread
SetFilePointer
WaitForSingleObject
WriteConsoleA
FlushFileBuffers
HeapDestroy
EnumUILanguagesW
RaiseException
DeleteCriticalSection
LockFile
ExitProcess
DeviceIoControl
VirtualAlloc
GetThreadLocale
GetStdHandle
FreeEnvironmentStringsA
TlsGetValue
WritePrivateProfileStringW
SizeofResource
GetPrivateProfileIntW
IsDebuggerPresent
GetCPInfo
GetStringTypeA
GlobalHandle
MulDiv
LCMapStringA
HeapReAlloc
LocalFree
CompareStringA
GetPrivateProfileStringW
OutputDebugStringW
LocalReAlloc
GetModuleFileNameW
SetHandleCount
GlobalAddAtomW
HeapSize
EnterCriticalSection
GetCommandLineW
InitializeCriticalSection
GetFileAttributesW
CreateFileW
WideCharToMultiByte
FindFirstFileW
MultiByteToWideChar
GlobalUnlock
lstrlenW
CreateProcessW
LeaveCriticalSection
GetSystemDirectoryA
lstrcatA
VirtualProtectEx
GetStartupInfoW
FormatMessageW
SetThreadPriority
GetStartupInfoA
WriteConsoleW
GlobalLock
GetTickCount
FileTimeToSystemTime
DuplicateHandle
LockResource
CreateFileA
GlobalFindAtomW
FindResourceW
LocalAlloc
EnumResourceLanguagesW
UnlockFile
GetLocaleInfoW
GetCurrentProcess
VirtualFree
GetTimeZoneInformation
GetOEMCP
LCMapStringW
GetProcessHeap
VirtualQuery
GetDateFormatW
HeapAlloc
HeapFree
GetFileType
ConvertDefaultLocale
LoadResource
TlsFree
UnhandledExceptionFilter
LoadLibraryA
TlsSetValue
Sleep
GetLastError
GetTimeFormatW
lstrcmpW
InterlockedDecrement
GetDriveTypeA
CloseHandle
GetCurrentThreadId
GetProcAddress
InterlockedIncrement
GlobalReAlloc
GetModuleHandleW
FindClose
LoadLibraryW
FileTimeToLocalFileTime
GetEnvironmentStrings
SetEnvironmentVariableA
GetConsoleCP
GetLocalTime
lstrlenA
RtlUnwind
GetEnvironmentStringsW
lstrcmpA
GetCurrentThread
GetModuleFileNameA
GetUserDefaultUILanguage
GlobalFlags
GetFullPathNameW
WriteFile
FreeLibrary
GlobalDeleteAtom
WaitForMultipleObjects
SetEndOfFile
ExitThread
TerminateProcess
HeapCreate
SetErrorMode
VirtualProtect
SetStdHandle
GetLocaleInfoA
GetCurrentDirectoryA
GetStringTypeW
QueryPerformanceCounter
SuspendThread
GetACP
CompareStringW
GetSystemTimeAsFileTime
GetFileSize
SetLastError
ResetEvent
ResumeThread
GetVersion
GetCurrentProcessId

user32

InvalidateRgn
SetWindowPlacement
UnhookWindowsHookEx
AppendMenuW
SetCursorPos
MessageBoxW
EndDialog
PeekMessageW
GetFocus
GetClassLongW
IsChild
GetDlgItem
GetForegroundWindow
GetCursorPos
GetWindowInfo
GetClassInfoW
UpdateWindow
TrackPopupMenu
MapWindowPoints
GetActiveWindow
PostThreadMessageW
AllowSetForegroundWindow
SetFocus
CreateWindowExW
GetNextDlgGroupItem
CheckMenuItem
GetMessageTime
InflateRect
MapDialogRect
GetClassInfoExW
GetClassNameW
CharUpperW
GetNextDlgTabItem
SetWindowTextW
OffsetRect
GetMessagePos
GrayStringW
GetSubMenu
SendMessageW
IsDialogMessageW
SetActiveWindow
EndPaint
DefWindowProcW
GetMenu
RedrawWindow
GetSysColor
RegisterClipboardFormatW
GetMessageW
KillTimer
InvalidateRect
GetWindowThreadProcessId
BeginPaint
LoadMenuW
UnregisterClassW
WindowFromPoint
TrackMouseEvent
SetRectEmpty
GetWindowTextLengthW
LoadBitmapW
TranslateMessage
GetKeyState
GetCapture
SendDlgItemMessageW
SystemParametersInfoA
SetMenuItemBitmaps
ClientToScreen
RegisterClassW
DispatchMessageW
RemovePropW
PostMessageW
PtInRect
SetTimer
GetMenuItemID
FindWindowW
ScreenToClient
CallNextHookEx
SetRect
GetWindowRect
ReleaseCapture
CreateDialogIndirectParamW
GetMenuState
ExitWindowsEx
SetCapture
GetWindowLongW
SetWindowContextHelpId
GetDlgCtrlID
ValidateRect
GetSystemMetrics
SetWindowPos
GetTopWindow
CopyRect
DrawTextExW
GetLastActivePopup
EnableMenuItem
SetWindowLongW
MoveWindow
IsWindow
AdjustWindowRectEx
LoadCursorW
GetSystemMenu
DestroyWindow
GetWindow
SetCursor
LoadIconW
GetWindowTextW
MessageBeep
SendDlgItemMessageA
IntersectRect
RegisterWindowMessageW
GetMenuItemCount
ReleaseDC
GetSysColorBrush
SetPropW
GetDesktopWindow
GetWindowPlacement
CallWindowProcW
GetWindowDC
RemoveMenu
CharNextW
SetForegroundWindow
PostQuitMessage
MsgWaitForMultipleObjects
UnregisterClassA
LoadMenuIndirectW
GetMenuCheckMarkDimensions
SetWindowsHookExW
EnableWindow
WinHelpW
ModifyMenuW
SetMenuDefaultItem
GetClientRect
InsertMenuW
TabbedTextOutW
IsIconic
ShowWindow
IsWindowVisible
GetParent
DestroyMenu
IsRectEmpty
DrawTextW
EqualRect
CopyAcceleratorTableW
GetPropW
GetDC
IsWindowEnabled
DrawFocusRect

gdi32

GetTextExtentPoint32W
GetTextColor
ExcludeClipRect
CreateBitmap
CreateSolidBrush
GetMapMode
SetBkColor
CreateCompatibleDC
CreateRectRgnIndirect
StretchDIBits
CreateCompatibleBitmap
SetViewportOrgEx
CreateFontIndirectW
GetViewportExtEx
GetPixel
GetBkColor
ScaleViewportExtEx
PatBlt
PtVisible
ExtSelectClipRgn
OffsetViewportOrgEx
GetRgnBox
SetViewportExtEx
SelectPalette
CreatePen
CreateBitmapIndirect
GetDeviceCaps
DeleteDC
RectVisible
ExtTextOutW
SaveDC
LineTo
ScaleWindowExtEx
StretchBlt
GetClipBox
SetPixel
SetMapMode
BitBlt
SetWindowExtEx
MoveToEx
DeleteObject
TextOutW
SelectObject
Polyline
GetWindowExtEx
GetObjectW
Escape
SetTextColor
SetBkMode
DPtoLP
GetStockObject
SetStretchBltMode
RestoreDC

comdlg32

GetFileTitleW

advapi32

RegOpenKeyW
RegCreateKeyW
RegEnumKeyExW
RegEnumKeyW
LookupPrivilegeValueW
StartServiceW
OpenProcessToken
OpenSCManagerW
CloseServiceHandle
RegDeleteValueW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegDeleteKeyW
OpenServiceW
RegCloseKey
RegQueryValueW
RegNotifyChangeKeyValue
RegQueryValueExW
AdjustTokenPrivileges

shell32

SHGetFolderPathW
ShellExecuteW
Shell_NotifyIconW

ole32

OleUninitialize
CoTaskMemAlloc
CoGetClassObject
StgOpenStorageOnILockBytes
CoUninitialize
OleFlushClipboard
PropVariantClear
OleInitialize
OleIsCurrentClipboard
StgCreateDocfileOnILockBytes
CLSIDFromProgID
CreateILockBytesOnHGlobal
CoRevokeClassObject
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoCreateInstance
CreateStreamOnHGlobal
CoInitialize
CLSIDFromString
CoTaskMemFree

oleaut32

OleCreateFontIndirect
SafeArrayDestroy
SysFreeString
VariantCopy
SystemTimeToVariantTime
SysStringLen
SysAllocStringLen
VariantInit
VariantTimeToSystemTime
VariantChangeType
SysAllocString
VariantClear

comctl32

_TrackMouseEvent

shlwapi

PathIsUNCW
PathFindFileNameW
PathStripToRootW
PathFindExtensionW

winmm

waveInClose
waveInAddBuffer
PlaySoundW
waveInReset
waveInStop
waveInOpen
waveInPrepareHeader
waveInGetDevCapsW
waveInUnprepareHeader
waveInStart
waveInGetNumDevs

rpcrt4

UuidCreate

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

setupapi

SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW

gdiplus

GdipDeleteFont
GdipFlush
GdipSetTextRenderingHint
GdipCreateBitmapFromResource
GdipDrawImageRectI
GdipCreateSolidFill
GdipDrawImageRect
GdiplusStartup
GdipGetImageWidth
GdipFillRectangle
GdipGetImageBounds
GdipCreateBitmapFromScan0
GdipDrawString
GdipCreateFontFamilyFromName
GdipCreateBitmapFromStream
GdipCloneBrush
GdipCloneImage
GdipDeleteFontFamily
GdipCreateBitmapFromHBITMAP
GdipDrawImageRectRect
GdipGetGenericFontFamilySansSerif
GdipCreateBitmapFromGraphics
GdipGetImageHeight
GdipDrawImagePointRectI
GdipFillRectangleI
GdipMeasureString
GdipCreateFont
GdipFree
GdipGetFontSize
GdipDeleteGraphics
GdipCreateFromHDC
GdipDisposeImage
GdipDrawImageI
GdipCreateHBITMAPFromBitmap
GdipImageRotateFlip
GdipGetImageGraphicsContext
GdipAlloc
GdipDeleteBrush

msvcrt

fclose
fread
fopen
exit

esent

JetTerm

Sections

.text
Size: 533KB - Virtual size: 532KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.33
Size: - Virtual size: 5.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.11
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.22
Size: 244KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.44
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2afd18e9d5ce554cf465ba523b33a2a6

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

winmm

rpcrt4

version

setupapi

gdiplus

msvcrt

esent

Sections

.text Size: 533KB - Virtual size: 532KB

.33 Size: - Virtual size: 5.4MB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 512B - Virtual size: 828B

.11 Size: 6KB - Virtual size: 5KB

.22 Size: 244KB - Virtual size: 243KB

.44 Size: 10KB - Virtual size: 9KB

.tls Size: 512B - Virtual size: 57B

.rsrc Size: 33KB - Virtual size: 33KB

.reloc Size: 12KB - Virtual size: 12KB

.text
Size: 533KB - Virtual size: 532KB

.33
Size: - Virtual size: 5.4MB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 512B - Virtual size: 828B

.11
Size: 6KB - Virtual size: 5KB

.22
Size: 244KB - Virtual size: 243KB

.44
Size: 10KB - Virtual size: 9KB

.tls
Size: 512B - Virtual size: 57B

.rsrc
Size: 33KB - Virtual size: 33KB

.reloc
Size: 12KB - Virtual size: 12KB