b951390d9ed5a23f8f9a1b692b0cbebd

Sharing

Copy URL Twitter E-mail

General

Target

b951390d9ed5a23f8f9a1b692b0cbebd
Size

638KB
MD5

b951390d9ed5a23f8f9a1b692b0cbebd
SHA1

ad4af1f798745f7933c4e9d1b7ff52538f7836af
SHA256

0116efafe266b98c91342633bc2c74459d616bebc75e24661ec2489e1caf94e8
SHA512

49b1e3e4e056d20e90cc90e4f7a501447943e2a06f4d2d9af3779b24d582d8365cb11998e35eb92955c7caa20aa737415652880be745022b89d6c769eb361735
SSDEEP

3072:LeCr+bA4OwytkK9D8F4ZTIDK6h+dumXsxT1xDJxYFiGEtBFAwxch:LLrl4Or9D8eZkD3h+C7YshAwx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b951390d9ed5a23f8f9a1b692b0cbebd

Files

b951390d9ed5a23f8f9a1b692b0cbebd
.exe windows:4 windows x86 arch:x86

e2802260989d2a5745c96123775f5499

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToSystemTime
FileTimeToLocalFileTime
GetTickCount
RtlUnwind
RaiseException
HeapReAlloc
GetStartupInfoA
GetCommandLineA
ExitProcess
SetStdHandle
GetFileType
TerminateProcess
HeapSize
GetACP
GetTimeZoneInformation
SetUnhandledExceptionFilter
IsBadWritePtr
GetEnvironmentVariableA
HeapDestroy
HeapCreate
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProfileStringA
GetFileTime
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
SizeofResource
GlobalFlags
lstrcpynA
lstrcmpA
GetCurrentThread
MulDiv
SetLastError
GetModuleFileNameA
FormatMessageA
LocalFree
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalFindAtomA
GetModuleHandleA
GlobalAddAtomA
GlobalDeleteAtom
GlobalLock
GlobalUnlock
GetCurrentDirectoryA
GetFileSize
GlobalAlloc
ReadFile
GlobalFree
BeginUpdateResourceA
UpdateResourceA
EndUpdateResourceA
EnumResourceNamesA
FindResourceA
LoadResource
LockResource
CreateFileA
WriteFile
SetFilePointer
CloseHandle
GetFileAttributesA
CreateDirectoryA
GetLastError
HeapFree
VirtualFree
GetProcAddress
VirtualProtect
VirtualAlloc
GetProcessHeap
HeapAlloc
lstrcatA
lstrlenA
WinExec
lstrcpyA
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
DeleteFileA
Sleep
WritePrivateProfileStringA
GetVersionExA
GetPrivateProfileStringA

user32

SetWindowContextHelpId
MapDialogRect
LoadStringA
DestroyMenu
GetClassNameA
GetSysColorBrush
CharUpperA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
RegisterClipboardFormatA
PostThreadMessageA
CopyRect
GetTopWindow
MessageBoxA
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetDlgCtrlID
GetKeyState
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageA
GetMessagePos
EndPaint
GetForegroundWindow
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
IsWindowVisible
GetFocus
DrawTextA
KillTimer
RegisterHotKey
UnregisterHotKey
FindWindowA
EnumChildWindows
FindWindowExA
GetWindow
GetWindowTextA
keybd_event
SetForegroundWindow
SetActiveWindow
SetFocus
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
IsIconic
GetSystemMetrics
DrawIcon
GetSystemMenu
AppendMenuA
SetTimer
GetDesktopWindow
SetWindowPos
CharNextA
LoadIconA
LoadCursorA
EnableWindow
SendMessageA
GetSysColor
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
CopyIcon
GetWindowRect
GetParent
GetDC
ReleaseDC
InflateRect
InvalidateRect
IsWindow
SetWindowLongA
SetCursor
GetClientRect
PtInRect
ReleaseCapture
TranslateMessage
ValidateRect
PostQuitMessage
GetCursorPos
GetMessageTime
GrayStringA
RedrawWindow
SetCapture
IsWindowUnicode
MessageBeep
BeginPaint
GetWindowDC
ClientToScreen
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
PostMessageA
UpdateWindow
SendDlgItemMessageA
PeekMessageA
DispatchMessageA
AdjustWindowRectEx
ScreenToClient
WindowFromPoint
TabbedTextOutA
GetLastActivePopup
MapWindowPoints

gdi32

SaveDC
RestoreDC
SelectObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteDC
DeleteObject
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
PatBlt
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
CreateFontA
CreateRectRgn
CreateSolidBrush
FillRgn
FrameRgn
GetTextExtentPoint32A
GetObjectA
CreateFontIndirectA
CreateDIBitmap
GetTextExtentPointA
BitBlt
CreateCompatibleDC
GetStockObject

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegQueryValueA

shell32

ShellExecuteA

comctl32

ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
OleUninitialize

olepro32

ord253

oleaut32

VariantClear
SysFreeString
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysAllocString
SysAllocStringByteLen
SysStringLen
SysAllocStringLen

Sections

.text
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 404KB - Virtual size: 403KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e2802260989d2a5745c96123775f5499

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 169KB - Virtual size: 169KB

.rdata Size: 44KB - Virtual size: 43KB

.data Size: 20KB - Virtual size: 41KB

.rsrc Size: 404KB - Virtual size: 403KB

.text
Size: 169KB - Virtual size: 169KB

.rdata
Size: 44KB - Virtual size: 43KB

.data
Size: 20KB - Virtual size: 41KB

.rsrc
Size: 404KB - Virtual size: 403KB