c1d72b3ee49c56efde7edc8727463295

Sharing

Copy URL Twitter E-mail

General

Target

c1d72b3ee49c56efde7edc8727463295
Size

283KB
MD5

c1d72b3ee49c56efde7edc8727463295
SHA1

a0aa6d279feb2a663f27032af8eafbc350058405
SHA256

78d1b71dc2b37150a3213474f8557259cbd0fb88255e9b970c820fdc068898ab
SHA512

996fa512b19834c5a431fe3c57c63726aa59244b7912942f853f297c615e65fbfdfe400ae555ed936fde07e078a6d6ba69286c46357ea9876dd82af3c64538b7
SSDEEP

6144:OC+szV1BeTxHL0IqlXrYpPPmCbQjy3KFGo:OCf+9Y5cpPIjyaMo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1d72b3ee49c56efde7edc8727463295

Files

c1d72b3ee49c56efde7edc8727463295
.exe windows:4 windows x86 arch:x86

eca87c9104f4e2dc50812df1ebc4f4c8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oledlg

ord8

olepro32

ord253

ole32

CreateILockBytesOnHGlobal
CoTaskMemFree
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CoGetClassObject
CoFreeUnusedLibraries
CLSIDFromString
CLSIDFromProgID
OleInitialize
OleIsCurrentClipboard
OleUninitialize
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
StringFromCLSID
CoTaskMemAlloc

comdlg32

ChooseColorA
ChooseFontA
ChooseFontW
GetOpenFileNameA
GetFileTitleA
FindTextW
FindTextA

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

comctl32

ord17

user32

TabbedTextOutA
ShowWindow
SetWindowsHookExA
SetWindowTextA
SetWindowLongA
SetWindowContextHelpId
SetRect
SetPropA
SetMenuItemBitmaps
SetForegroundWindow
SetFocus
SetCursor
SetActiveWindow
SendMessageA
SendDlgItemMessageA
RemovePropA
RegisterWindowMessageA
RegisterClipboardFormatA
RegisterClassA
RedrawWindow
PtInRect
PostThreadMessageA
PostQuitMessage
PostMessageA
OffsetRect
MoveWindow
ModifyMenuA
MessageBoxA
MessageBeep
MapWindowPoints
MapDialogRect
LoadStringA
LoadIconA
IsWindowVisible
IsWindow
IsIconic
IsDialogMessageA
IsChild
GrayStringA
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongA
GetWindowDC
TranslateMessage
GetTopWindow
GetSysColorBrush
GetSysColor
GetSubMenu
GetPropA
GetParent
GetNextDlgTabItem
GetNextDlgGroupItem
GetMessageTime
GetMessagePos
GetMessageA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenuCheckMarkDimensions
GetMenu
GetLastActivePopup
GetKeyState
GetForegroundWindow
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetCursorPos
GetCursor
GetClassNameA
GetClassLongA
GetCapture
EndDialog
EnableWindow
DestroyWindow
DestroyMenu
DefWindowProcA
CreateWindowExA
CreateDialogIndirectParamA
CopyRect
CopyAcceleratorTableA
ClientToScreen
CheckMenuItem
CharUpperA
CharNextA
CallWindowProcA
CallNextHookEx
AdjustWindowRectEx
UnhookWindowsHookEx
UnregisterClassA
UpdateWindow
ValidateRect
WinHelpA
wsprintfA
GetWindow

oleaut32

VariantCopy
VariantClear
VariantChangeType
VarBstrFromDate
SysStringLen
SysFreeString
SysAllocStringLen
SysAllocStringByteLen
SysAllocString
VariantTimeToSystemTime

kernel32

lstrcpynA
lstrcpyA
lstrcmpiA
lstrcmpA
lstrlenW
lstrlenA
lstrcatA
WritePrivateProfileStringA
WriteFile
WinExec
WideCharToMultiByte
VirtualFree
VirtualAlloc
UnlockFile
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
SetStdHandle
SetLastError
SetFilePointer
SetErrorMode
SetEnvironmentVariableA
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
MultiByteToWideChar
MulDiv
LockResource
LockFile
LocalReAlloc
LocalFree
LocalAlloc
LoadResource
LoadLibraryA
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
HeapSize
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GlobalUnlock
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalGetAtomNameA
GlobalFree
GlobalFlags
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomA
GetVolumeInformationA
GetVersion
GetTimeZoneInformation
GetTickCount
GetTempPathA
GetTempFileNameA
GetStringTypeW
GetStringTypeA
GetStdHandle
GetStartupInfoA
GetShortPathNameA
GetProcessVersion
GetProcAddress
GetOEMCP
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameA
GetLastError
GetFullPathNameA
GetFileType
GetFileTime
GetFileSize
GetFileAttributesA
GetEnvironmentStringsW
GetEnvironmentStringsA
GetCurrentThreadId
GetCurrentThread
GetCurrentProcess
GetCommandLineA
GetCPInfo
GetACP
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FormatMessageA
FlushFileBuffers
FindResourceA
FindFirstFileA
FindClose
FileTimeToSystemTime
ExitProcess
EnterCriticalSection
DuplicateHandle
DeleteFileA
DeleteCriticalSection
CreateFileA
CompareStringW
CompareStringA
CloseHandle
FileTimeToLocalFileTime

gdi32

SetBkColor
SelectObject
ScaleWindowExtEx
ScaleViewportExtEx
SaveDC
RestoreDC
Rectangle
RectVisible
PtVisible
OffsetViewportOrgEx
LPtoDP
SetMapMode
GetTextColor
GetStockObject
GetObjectA
GetMapMode
GetDeviceCaps
GetClipBox
GetBkColor
ExtTextOutA
ExtCreatePen
DeleteDC
DPtoLP
CreateBitmap
SetStretchBltMode
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
TextOutA
GetWindowExtEx

Sections

.text
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eca87c9104f4e2dc50812df1ebc4f4c8

Headers

File Characteristics

Imports

oledlg

olepro32

ole32

comdlg32

advapi32

winspool.drv

comctl32

user32

oleaut32

kernel32

gdi32

Sections

.text Size: 53KB - Virtual size: 56KB

.rdata Size: 147KB - Virtual size: 148KB

.data Size: 33KB - Virtual size: 152KB

.idata Size: 7KB - Virtual size: 7KB

.rsrc Size: 43KB - Virtual size: 43KB

.text
Size: 53KB - Virtual size: 56KB

.rdata
Size: 147KB - Virtual size: 148KB

.data
Size: 33KB - Virtual size: 152KB

.idata
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 43KB - Virtual size: 43KB