2652af0408b5a088c9992b23774063d6185003031c00942c1e0b40a4ff1d4a07

Sharing

Copy URL

Twitter E-mail

General

Target

2652af0408b5a088c9992b23774063d6185003031c00942c1e0b40a4ff1d4a07
Size

688KB
MD5

066ff45d0b248d7beba5458dfa2dbfc7
SHA1

8af45fd44fa59a0f70edcafe54435458aa3c5545
SHA256

2652af0408b5a088c9992b23774063d6185003031c00942c1e0b40a4ff1d4a07
SHA512

f9437e4b9e4b659d5c06ef70027e9b10d4a092a9a7ad9f0ed26f54c4f0caacfc83688c7d172b8c04278455e5563389013dd02c6281e3f50901ba6d81647443fc
SSDEEP

12288:7MPDpqEhsPAxJTDjfsggWxAc90bdMDt0AQk:7MPtqEhT6WdebdG06

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2652af0408b5a088c9992b23774063d6185003031c00942c1e0b40a4ff1d4a07

Files

2652af0408b5a088c9992b23774063d6185003031c00942c1e0b40a4ff1d4a07
.exe windows:4 windows x86 arch:x86

54bd81ce8ca21cbfc950eb8a0fee8976

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapReAlloc
HeapSize
GetTimeZoneInformation
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
TerminateProcess
RaiseException
HeapFree
HeapAlloc
GetACP
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetCurrentDirectoryA
GetOEMCP
GetCPInfo
GlobalFlags
GetProcessVersion
lstrcpyW
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
CopyFileA
GlobalSize
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
FormatMessageA
LocalFree
GetLastError
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFullPathNameA
GetTempFileNameA
GetFileAttributesA
GetTickCount
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
CloseHandle
GetModuleFileNameA
GetCurrentThread
SetLastError
LoadLibraryA
FreeLibrary
FindResourceA
LoadResource
LockResource
GetCurrentThreadId
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcpynA
GlobalGetAtomNameA
GlobalAddAtomA
GetVersion
InterlockedDecrement
GlobalAlloc
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
lstrlenA
lstrcmpiA
MulDiv
GlobalLock
GlobalUnlock
GlobalFree
InterlockedIncrement
lstrcmpA
lstrcpyA
Sleep
GetModuleHandleA
LCMapStringA
GetProcAddress

user32

InflateRect
RemoveMenu
CharUpperA
LoadCursorA
LoadStringA
GetSysColorBrush
GetClassNameA
GetDCEx
LockWindowUpdate
InvertRect
FillRect
DestroyIcon
PostThreadMessageA
TranslateMessage
ValidateRect
ShowOwnedPopups
PostQuitMessage
EndDialog
CreateDialogIndirectParamA
GetSystemMenu
DeleteMenu
AppendMenuA
SetParent
IsZoomed
SetWindowTextA
IsDialogMessageA
GetCursorPos
WindowFromPoint
KillTimer
SetTimer
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
SendDlgItemMessageA
MapWindowPoints
GetSysColor
DispatchMessageA
AdjustWindowRectEx
ScreenToClient
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
SetScrollRange
GetTopWindow
IsChild
RegisterClassA
GetWindowTextLengthA
GetWindowTextA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SystemParametersInfoA
GetWindowPlacement
GetLastActivePopup
BringWindowToTop
IsWindowVisible
IsIconic
EqualRect
GetDlgItem
SetWindowLongA
SetWindowPos
GetDlgCtrlID
GetMenuItemCount
GetSubMenu
GetMenuItemID
UnpackDDElParam
ReuseDDElParam
WinHelpA
SetMenu
GetMenu
LoadIconA
GetClassInfoA
LoadMenuA
EnableWindow
UpdateWindow
SendMessageA
GetFocus
RegisterWindowMessageA
InvalidateRect
SetRect
ReleaseCapture
SetCapture
GetClientRect
GetKeyState
IsClipboardFormatAvailable
CountClipboardFormats
OffsetRect
DestroyMenu
SetFocus
ShowWindow
GetWindowLongA
GetDesktopWindow
GetWindow
IsWindowEnabled
SetCursor
PeekMessageA
GetCapture
TranslateAcceleratorA
LoadAcceleratorsA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
GetMenuStringA
InsertMenuA
RegisterClipboardFormatA
MessageBoxA
GetMessageA
ModifyMenuA
SetMenuItemBitmaps
GetSystemMetrics
PtInRect
GetWindowRect
ClientToScreen
SetActiveWindow
MessageBeep
wsprintfA
IsRectEmpty
SetRectEmpty
GetParent
CopyAcceleratorTableA
GetActiveWindow
IntersectRect
IsWindow
PostMessageA
CopyRect
InSendMessage
GetNextDlgTabItem
EnableMenuItem
CheckMenuItem
MoveWindow

gdi32

CreateRectRgn
GetViewportExtEx
CreateSolidBrush
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
StretchDIBits
CreateCompatibleDC
GetCharWidthA
CreateFontA
GetTextExtentPoint32A
GetMapMode
PatBlt
SetRectRgn
CombineRgn
CreateRectRgnIndirect
CreateFontIndirectA
CopyMetaFileA
BitBlt
DeleteObject
SetTextAlign
CreateCompatibleBitmap
GetTextMetricsA
ExcludeClipRect
SelectClipRgn
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetWindowExtEx
ScaleWindowExtEx
GetDeviceCaps
DPtoLP
CreateDCA
EnumFontFamiliesA
IntersectClipRect

comdlg32

GetSaveFileNameA
GetFileTitleA
FindTextA
ReplaceTextA
ChooseFontA
GetOpenFileNameA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegCreateKeyExA
RegCreateKeyA
RegSetValueA
GetFileSecurityA
SetFileSecurityA
RegDeleteValueA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
RegOpenKeyA
RegEnumKeyA
RegQueryValueA
RegOpenKeyExA
RegQueryValueExA

shell32

DragAcceptFiles
ExtractIconA
DragQueryFileA
DragFinish
SHGetFileInfoA

comctl32

ord17

oledlg

ord3
ord5
ord4
ord11
ord8
ord1

ole32

OleRun
OleIsRunning
OleSetMenuDescriptor
CreateFileMoniker
StgCreateDocfile
StgOpenStorage
StgIsStorageFile
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoDisconnectObject
OleRegEnumVerbs
OleRegGetMiscStatus
GetRunningObjectTable
WriteClassStg
CoLockObjectExternal
CreateBindCtx
CoTaskMemAlloc
ReadFmtUserTypeStg
ReadClassStg
OleDuplicateData
SetConvertStg
WriteFmtUserTypeStg
CreateGenericComposite
OleGetClipboard
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
CoRevokeClassObject
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleSetContainedObject
StringFromCLSID
OleLockRunning
OleRegGetUserType
CoTaskMemFree
ReleaseStgMedium
CreateItemMoniker
CreateStreamOnHGlobal
OleSaveToStream
WriteClassStm
OleGetIconOfClass
GetHGlobalFromILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
OleSave
StgCreateDocfileOnILockBytes
OleLoad
OleCreate
OleCreateLinkToFile
CoTreatAsClass
OleCreateFromFile

Sections

.text
Size: 228KB - Virtual size: 227KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 364KB - Virtual size: 378KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

54bd81ce8ca21cbfc950eb8a0fee8976

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

Sections

.text Size: 228KB - Virtual size: 227KB

.rdata Size: 65KB - Virtual size: 65KB

.data Size: 364KB - Virtual size: 378KB

.rsrc Size: 29KB - Virtual size: 29KB

.text
Size: 228KB - Virtual size: 227KB

.rdata
Size: 65KB - Virtual size: 65KB

.data
Size: 364KB - Virtual size: 378KB

.rsrc
Size: 29KB - Virtual size: 29KB