f4aeb5990d61214e8f9c2e375e2d44c9fd3d7402c789fe45a30acb8f701b474c

Sharing

Copy URL

Twitter E-mail

General

Target

f4aeb5990d61214e8f9c2e375e2d44c9fd3d7402c789fe45a30acb8f701b474c
Size

530KB
MD5

c2cb778482c47259e904a4f70ba37b0f
SHA1

d980342b20f84b8df80ee3d302ce0f84cc73ebc1
SHA256

f4aeb5990d61214e8f9c2e375e2d44c9fd3d7402c789fe45a30acb8f701b474c
SHA512

65d3a7f780a4b9ee31b0e6a3b5b9b6214b5e33901cfbf183de73466b6ceac803bf2d099da811edd9a3aface1650dde7cf1c0707c764f0d082e7e224bc5b32f86
SSDEEP

6144:dF3yEgeUF5EiwqKSBTDOaViQ5Z54ZlUqv2MVZW0LX65AF7+HZ5c5uQqI56B76rOg:dF3p5UMSB3NkNuMVQ0L65Wo5vQrI9eS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4aeb5990d61214e8f9c2e375e2d44c9fd3d7402c789fe45a30acb8f701b474c

Files

f4aeb5990d61214e8f9c2e375e2d44c9fd3d7402c789fe45a30acb8f701b474c
.exe windows:5 windows x86 arch:x86

8a7b1ce51cd29e1ba6ee1f0eaa79116f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\SVN\local\linzx\Release\AutoMacro\ScheduledTasks.pdb

Imports

kernel32

GetFileAttributesW
GetFileSizeEx
GetStartupInfoW
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
RtlUnwind
HeapReAlloc
RaiseException
ExitProcess
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
UnhandledExceptionFilter
IsDebuggerPresent
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
SetStdHandle
LCMapStringW
InitializeCriticalSectionAndSpinCount
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
CreateFileA
SetEnvironmentVariableA
SetErrorMode
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GetThreadLocale
GlobalFlags
lstrlenA
InterlockedDecrement
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
GetModuleHandleA
GetCurrentProcessId
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
FormatMessageW
LocalFree
MulDiv
FreeResource
GetVersion
WideCharToMultiByte
FreeLibrary
GetWindowsDirectoryW
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
WritePrivateProfileStringW
DeleteFileW
TerminateThread
CreateThread
GetExitCodeProcess
WaitForSingleObject
GetTickCount
GetProcAddress
GetModuleHandleW
LoadLibraryW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetPrivateProfileStringW
GetVersionExW
GetLastError
CreateMutexW
SetLastError
GetModuleFileNameW
CloseHandle
GetFileTime
GetFileSize
CreateFileW
Sleep
lstrlenW
CreateDirectoryW
MultiByteToWideChar
GetModuleFileNameA
FindResourceW
LoadResource
LockResource
TerminateProcess
SizeofResource

user32

CopyAcceleratorTableW
IsRectEmpty
SetRect
InvalidateRgn
GetNextDlgGroupItem
CharUpperW
RegisterClipboardFormatW
PostThreadMessageW
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetWindowThreadProcessId
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
EnableMenuItem
CheckMenuItem
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetLastActivePopup
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
CharNextW
GetKeyState
SetMenu
UpdateWindow
CreateWindowExW
GetClassInfoExW
RegisterClassW
AdjustWindowRectEx
EqualRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowPos
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
GetMenuStringW
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetWindowLongW
GetDlgItem
GetNextDlgTabItem
EndDialog
SetActiveWindow
DrawAnimatedRects
SetParent
SystemParametersInfoW
EnumChildWindows
GetClassNameW
TrackPopupMenu
GetCursorPos
RegisterWindowMessageW
DrawStateW
FillRect
CopyRect
ModifyMenuW
InsertMenuW
GetMenuState
CreateMenu
CreatePopupMenu
LoadMenuW
CopyIcon
LoadCursorW
InflateRect
ReleaseDC
GetDC
SetWindowLongW
SetCursor
SetCapture
UnregisterClassW
GetSysColorBrush
WindowFromPoint
DestroyMenu
ValidateRect
PtInRect
MessageBeep
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
EndPaint
BeginPaint
GetWindowDC
RedrawWindow
ReleaseCapture
GetSysColor
OffsetRect
IsWindowEnabled
GetForegroundWindow
MessageBoxW
GetMenuItemID
GetSubMenu
GetMenuItemCount
IsWindowVisible
GetLastInputInfo
DrawIcon
IsIconic
GetSystemMetrics
PostMessageW
DeleteMenu
LoadBitmapW
AppendMenuW
GetSystemMenu
LoadIconW
GetMessageW
SetForegroundWindow
FindWindowW
DispatchMessageW
TranslateMessage
PeekMessageW
ScreenToClient
GetParent
GetWindowRect
LoadImageW
IsWindow
KillTimer
SetTimer
GetClientRect
InvalidateRect
SendMessageW
EnableWindow
GetClassInfoW

gdi32

Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
TextOutW
PtVisible
CreatePen
CreateSolidBrush
GetBkColor
GetTextColor
GetRgnBox
DeleteDC
RectVisible
ExcludeClipRect
GetWindowExtEx
GetViewportExtEx
CreateCompatibleDC
SetMapMode
SetBkMode
RestoreDC
SaveDC
DeleteObject
GetMapMode
CreateRectRgnIndirect
ExtTextOutW
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
Rectangle
GetTextExtentPoint32W
CreateFontIndirectW
GetObjectW
GetStockObject
GetTextMetricsW
CreateFontW
BitBlt
SelectObject
CreateCompatibleBitmap

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW

shell32

SHGetSpecialFolderPathW
ShellExecuteExW
Shell_NotifyIconW
SHAppBarMessage
ShellExecuteW

comctl32

InitCommonControlsEx

shlwapi

PathFindExtensionW
PathRemoveFileSpecW
PathFindFileNameW
PathStripToRootW
PathFileExistsW
PathIsUNCW

oledlg

OleUIBusyW

ole32

OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoInitializeEx
CoUninitialize
OleFlushClipboard
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoInitialize
CoRegisterMessageFilter
CoRevokeClassObject
OleIsCurrentClipboard

oleaut32

SysAllocString
OleCreateFontIndirect
SafeArrayDestroy
VariantCopy
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysFreeString
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

Sections

.text
Size: 309KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

�o��u.
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8a7b1ce51cd29e1ba6ee1f0eaa79116f

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

version

Sections

.text Size: 309KB - Virtual size: 308KB

.rdata Size: 80KB - Virtual size: 80KB

.data Size: 36KB - Virtual size: 52KB

.rsrc Size: 46KB - Virtual size: 45KB

.reloc Size: 41KB - Virtual size: 41KB

�o���u. Size: 16KB - Virtual size: 20KB

.text
Size: 309KB - Virtual size: 308KB

.rdata
Size: 80KB - Virtual size: 80KB

.data
Size: 36KB - Virtual size: 52KB

.rsrc
Size: 46KB - Virtual size: 45KB

.reloc
Size: 41KB - Virtual size: 41KB

�o��u.
Size: 16KB - Virtual size: 20KB