ba8aa296ae8bef668360cc8452ff91a3

Sharing

Copy URL Twitter E-mail

General

Target

ba8aa296ae8bef668360cc8452ff91a3
Size

620KB
MD5

ba8aa296ae8bef668360cc8452ff91a3
SHA1

c2a6e70d30351adc0d46d40f8df5958095337dc6
SHA256

34e7534640e410f0d01c5bb9788139d53a7f9838e17725ebfe79f4bbc780a524
SHA512

167bce61cc85000e87745550e6eb41e6cbcfafc798202b17cd12aeeb660a6e2577248bd39b7b64e85309c5912c65bf37e179f1d35f2212ab2801074d1087c9c2
SSDEEP

12288:+67BXvwbjgx1bYpDuPMe0YWj+yyhIY+24Zwa:+6FX4bUxpm9h6JanZw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba8aa296ae8bef668360cc8452ff91a3

Files

ba8aa296ae8bef668360cc8452ff91a3
.exe windows:4 windows x86 arch:x86

9e98fa2da6184d0c0e0100d99a5ab263

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

RpcStringFreeW
UuidCreate
UuidToStringW

wininet

InternetConnectW
HttpSendRequestW
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetOpenW
HttpOpenRequestW
InternetCloseHandle
HttpQueryInfoW
HttpAddRequestHeadersW
InternetQueryDataAvailable
InternetGetLastResponseInfoW
InternetGetConnectedState

kernel32

LeaveCriticalSection
LocalAlloc
GlobalFlags
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
InterlockedIncrement
SetErrorMode
GetFileTime
FindNextFileW
GetTickCount
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
HeapReAlloc
ExitProcess
ExitThread
CreateThread
HeapSize
EnterCriticalSection
GetFileType
VirtualProtect
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetSystemTimeAsFileTime
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
DeleteCriticalSection
InitializeCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
GetVolumeInformationW
FindFirstFileW
FindClose
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
GetThreadLocale
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
GetModuleHandleA
InterlockedDecrement
FormatMessageW
MulDiv
GlobalUnlock
GlobalFree
FreeResource
SetLastError
GlobalAddAtomW
CreateEventW
SuspendThread
SetThreadPriority
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
CompareStringA
InterlockedExchange
GlobalLock
lstrcmpW
GlobalAlloc
GetModuleHandleW
WritePrivateProfileStringW
GetLocaleInfoW
CreateFileW
ReadFile
GetPrivateProfileStringW
GetFullPathNameW
lstrlenW
ResumeThread
GetEnvironmentVariableW
CreateMutexW
LoadLibraryW
GetProcAddress
VirtualAlloc
VirtualFree
GetCurrentProcessId
OpenProcess
GetCurrentProcess
DuplicateHandle
ReleaseMutex
CloseHandle
CreateProcessW
GetCommandLineW
SetCurrentDirectoryW
GetModuleFileNameW
CreateDirectoryW
RemoveDirectoryW
MoveFileW
GetTempPathW
GetFileAttributesW
SetFileAttributesW
DeleteFileW
CopyFileW
FormatMessageA
FreeLibrary
lstrlenA
LocalFree
WideCharToMultiByte
WaitForSingleObject
SetEvent
MultiByteToWideChar
GetLastError
FindResourceW
LoadResource
LockResource
SizeofResource
InterlockedCompareExchange
SetStdHandle

user32

GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
UpdateWindow
GetMenu
CreateWindowExW
GetClassInfoExW
UnregisterClassA
RegisterClassW
AdjustWindowRectEx
DefWindowProcW
CallWindowProcW
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowTextLengthW
GetWindowTextW
MoveWindow
SetWindowLongW
GetDlgCtrlID
SetWindowTextW
IsDialogMessageW
SendDlgItemMessageW
EndPaint
BeginPaint
GetWindowDC
ScreenToClient
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
UnhookWindowsHookEx
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamW
IsWindow
GetDlgItem
GetClassLongW
EndDialog
GetLastActivePopup
IsWindowEnabled
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetFocus
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
GetCursorPos
GetNextDlgGroupItem
ClientToScreen
SetCursor
GetCapture
ReleaseCapture
GetWindowLongW
WindowFromPoint
GetParent
InvalidateRect
ReleaseDC
GetDC
SetWindowRgn
DrawFocusRect
DrawFrameControl
FillRect
LoadBitmapW
LoadCursorW
EqualRect
OffsetRect
InflateRect
GetForegroundWindow
RemovePropW
PostThreadMessageW
RegisterClipboardFormatW
SetRectEmpty
SetRect
DestroyMenu
UnregisterClassW
MessageBeep
SetCapture
InvalidateRgn
CopyAcceleratorTableW
CharNextW
GetSysColorBrush
CharUpperW
RegisterWindowMessageW
SendDlgItemMessageA
WinHelpW
IsChild
IsRectEmpty
CopyRect
CloseWindow
PostMessageW
ShowWindow
BringWindowToTop
SetForegroundWindow
EnumWindows
GetWindowThreadProcessId
KillTimer
SetTimer
GetWindowRect
MessageBoxW
LoadImageW
EnableWindow
GetSysColor
GetSystemMetrics
SetFocus
LoadIconW
RedrawWindow
GetClientRect
IsIconic
SendMessageW
DrawIcon
PtInRect
PostQuitMessage
GetClassNameW
SetPropW
GetNextDlgTabItem
GetPropW
DestroyWindow
GetClassInfoW

gdi32

GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
LineTo
ExtSelectClipRgn
DeleteDC
GetStockObject
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
OffsetClipRgn
GetClipBox
SetMapMode
CreateCompatibleBitmap
CreateFontIndirectW
CreateSolidBrush
CreatePen
AddFontResourceExW
BitBlt
CreateCompatibleDC
GetObjectW
SetTextColor
SetStretchBltMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
GetDeviceCaps
CreateBitmap
SelectClipRgn
GetTextExtentPoint32W
DeleteObject
GetPixel
StretchBlt
Arc
FillRgn
SelectObject
OffsetRgn
EqualRgn
CombineRgn
CreateRoundRectRgn
CreateRectRgnIndirect
CreateRectRgn
MoveToEx

msimg32

AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

RegEnumKeyW
RegQueryValueW
RegOpenKeyW
RegCloseKey
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW

shell32

ShellExecuteW
SHGetFolderPathW
ShellExecuteExW

comctl32

_TrackMouseEvent

shlwapi

PathAddBackslashW
PathStripToRootW
PathRemoveArgsW
PathRemoveBackslashW
PathStripPathW
UrlIsW
PathAddExtensionW
PathIsRootW
PathRemoveFileSpecW
PathAppendW
PathCanonicalizeW
PathFileExistsW
PathFindExtensionW
PathFindFileNameW
PathIsUNCW
PathRemoveExtensionW

oledlg

OleUIBusyW

ole32

OleIsCurrentClipboard
CoCreateInstance
CoInitialize
CoUninitialize
CLSIDFromProgID
CLSIDFromString
CoTaskMemFree
CoTaskMemAlloc
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRegisterMessageFilter
OleFlushClipboard
CoRevokeClassObject

oleaut32

VariantClear
VariantCopy
SafeArrayDestroy
SystemTimeToVariantTime
VariantTimeToSystemTime
OleCreateFontIndirect
SysStringLen
VariantChangeType
VariantInit
SysAllocStringLen
SysAllocString
SysFreeString

ws2_32

WSAStartup
gethostbyname
inet_ntoa
WSACleanup
gethostname

winmm

mciSendStringW
PlaySoundW
mciGetErrorStringW

Sections

.text
Size: 460KB - Virtual size: 540KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 116KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e98fa2da6184d0c0e0100d99a5ab263

Headers

File Characteristics

Imports

rpcrt4

wininet

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

winmm

Sections

.text Size: 460KB - Virtual size: 540KB

.rdata Size: 116KB - Virtual size: 1.1MB

.data Size: 12KB - Virtual size: 32KB

.rsrc Size: 28KB - Virtual size: 24KB

.text
Size: 460KB - Virtual size: 540KB

.rdata
Size: 116KB - Virtual size: 1.1MB

.data
Size: 12KB - Virtual size: 32KB

.rsrc
Size: 28KB - Virtual size: 24KB