1ba91ea803fd77cbb3b6c8ec12eb67a7a8389eb45b0aae6735cc2746f95c3b34

Sharing

Copy URL Twitter E-mail

General

Target

1ba91ea803fd77cbb3b6c8ec12eb67a7a8389eb45b0aae6735cc2746f95c3b34
Size

2.4MB
MD5

3bf292c74724f9d0248c36adc866778c
SHA1

5c3324c8c89414d07c8afd3cfa366b6b05983847
SHA256

1ba91ea803fd77cbb3b6c8ec12eb67a7a8389eb45b0aae6735cc2746f95c3b34
SHA512

1edd43664c5d1b87492e20de8af423affe12d6446e5b964806e2ad411023bda4722f2e72ce0e33a41e9d852e4e461e757bae8191ff698f43a24a74e1550a97c6
SSDEEP

49152:H/7513xYW2hzwc2GJTEu2s0i45n/p8pcQZZAawW:H/75Tn2hzwnlji45nrkA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ba91ea803fd77cbb3b6c8ec12eb67a7a8389eb45b0aae6735cc2746f95c3b34

Files

1ba91ea803fd77cbb3b6c8ec12eb67a7a8389eb45b0aae6735cc2746f95c3b34
.exe windows:5 windows x86 arch:x86

3960494c599011f1ffda61145204bff5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDiskFreeSpaceA
GetPrivateProfileSectionNamesA
GetPrivateProfileSectionA
FindNextFileW
FindClose
FindFirstFileW
InitializeCriticalSection
FreeLibrary
LoadLibraryA
GetProcAddress
FormatMessageW
LocalFree
GlobalLock
GlobalUnlock
Beep
DeleteFileW
GetTickCount
SetUnhandledExceptionFilter
CopyFileW
CreateProcessW
SetCurrentDirectoryW
IsDebuggerPresent
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetVersionExA
VirtualQuery
GetModuleFileNameA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetWindowsDirectoryW
DeviceIoControl
GetDriveTypeW
GetLocalTime
GetModuleFileNameW
SetFilePointer
GetFileAttributesW
GlobalAlloc
GetVersionExW
OpenFileMappingW
GetSystemInfo
CreateFileMappingW
MapViewOfFile
FlushFileBuffers
UnmapViewOfFile
GlobalFree
InterlockedExchange
InterlockedCompareExchange
GetModuleHandleW
GetPrivateProfileSectionW
MulDiv
ReleaseMutex
CreateMutexW
ResetEvent
GetPrivateProfileIntW
CreateTimerQueueTimer
Sleep
GetVolumeInformationA
DeleteTimerQueueTimer
TryEnterCriticalSection
SetLastError
SetCommTimeouts
SetCommMask
GetCommState
BuildCommDCBW
SetCommState
SetupComm
ClearCommError
GetCommMask
ReadFile
PurgeComm
WriteFile
GetLastError
GetOverlappedResult
SetEvent
CreateEventW
lstrcpynW
GetLocaleInfoW
CreateFileW
CreateThread
GetPrivateProfileStringW
WritePrivateProfileStringW
ReadDirectoryChangesW
WaitForSingleObject
CloseHandle
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
WideCharToMultiByte
SetFileAttributesA
GetVolumeNameForVolumeMountPointW
GetVolumePathNamesForVolumeNameW
DeleteFileA
GetSystemDirectoryA
GetDriveTypeA
GetCurrentDirectoryA
CreateFileA
SetEnvironmentVariableW
SetEnvironmentVariableA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GetProcessHeap
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetFileSizeEx
FindResourceA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
QueryPerformanceCounter
VirtualFree
HeapCreate
GetStartupInfoA
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FindResourceW
LoadResource
LockResource
SizeofResource
FreeEnvironmentStringsW
GetStdHandle
HeapSize
VirtualAlloc
ExitThread
GetFileType
GetConsoleMode
GetConsoleCP
GetDateFormatA
GetTimeFormatA
ExitProcess
GetSystemTimeAsFileTime
lstrlenW
FreeResource
lstrcmpW
CompareStringW
LoadLibraryW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
SetThreadPriority
ResumeThread
SuspendThread
VirtualProtect
FileTimeToSystemTime
FileTimeToLocalFileTime
GetModuleHandleA
lstrcmpA
lstrlenA
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
CompareStringA
EnumResourceLanguagesW
ConvertDefaultLocale
GetCurrentThread
FindResourceExW
GlobalGetAtomNameW
SetFileTime
GetFileTime
GetTempFileNameW
GetFullPathNameW
GetDiskFreeSpaceW
MoveFileW
GetStringTypeExW
GetThreadLocale
lstrcmpiW
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetVolumeInformationW
GetShortPathNameW
SystemTimeToFileTime
GlobalFlags
GetCurrentDirectoryW
GetFileAttributesExW
LocalFileTimeToFileTime
SetErrorMode
GetStartupInfoW
RtlUnwind
HeapAlloc
HeapFree
HeapReAlloc
TerminateProcess
UnhandledExceptionFilter
RaiseException
SetFilePointerEx

user32

SetMenu
GetKeyState
TrackPopupMenu
ScrollWindow
MapWindowPoints
PeekMessageW
GetMessagePos
GetMessageTime
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
GetLastActivePopup
GetForegroundWindow
RemovePropW
GetPropW
SetPropW
GetClassLongW
CallNextHookEx
SetWindowsHookExW
GetCapture
IsChild
WinHelpW
SendDlgItemMessageA
SendDlgItemMessageW
RegisterWindowMessageW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
IsDialogMessageW
ValidateRect
GetAsyncKeyState
MapDialogRect
WindowFromPoint
FillRect
TabbedTextOutW
DrawTextExW
GrayStringW
GetWindowDC
BeginPaint
EndPaint
GetWindowThreadProcessId
GetMenuItemInfoW
DestroyMenu
SystemParametersInfoW
IsRectEmpty
DrawIcon
SetWindowRgn
SetCapture
LoadCursorW
SetCursor
ReleaseCapture
PostQuitMessage
TranslateAcceleratorW
BringWindowToTop
SetRectEmpty
CreatePopupMenu
InsertMenuItemW
LoadAcceleratorsW
ReuseDDElParam
UnpackDDElParam
ShowOwnedPopups
SetWindowContextHelpId
RegisterClipboardFormatW
SetRect
UnionRect
CharUpperW
GetSysColorBrush
UnregisterClassW
DestroyIcon
CharNextW
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
PostThreadMessageW
CharUpperA
SendMessageW
SetScrollRange
GetScrollRange
IsWindowVisible
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
DefWindowProcW
GetMenu
SetWindowPos
OffsetRect
LoadIconW
EnableWindow
InvalidateRect
GetParent
GetClassNameW
GetDlgCtrlID
IsWindow
EnumChildWindows
CopyRect
CallWindowProcW
PtInRect
GetClientRect
GetWindowLongW
CallWindowProcA
SetWindowLongW
DrawTextW
DrawFrameControl
GetSysColor
PostMessageW
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetSystemMetrics
GetScrollPos
SetScrollPos
GetWindow
SetWindowTextW
GetWindowTextLengthW
GetWindowTextW
MessageBoxW
MoveWindow
GetWindowTextA
GetClassNameA
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
ShowScrollBar
DrawFocusRect
EqualRect
GetCursorPos
ScreenToClient
GetMessageW
TranslateMessage
DispatchMessageW
ReleaseDC
IsZoomed
IsIconic
ModifyMenuW
GetMenuState
CheckMenuItem
DeleteMenu
LoadBitmapW
ShowWindow
SetForegroundWindow
UpdateWindow
GetWindowRect
CreateWindowExA
SendMessageA
GetFocus
KillTimer
SetTimer
UnregisterDeviceNotification
RegisterDeviceNotificationW
InflateRect
EnableMenuItem
SetFocus
UnhookWindowsHookEx
GetDesktopWindow
GetActiveWindow
GetSubMenu
LoadMenuW
ClientToScreen
GetDC
GetMenuItemCount
InsertMenuW
GetMenuItemID
GetMenuStringW
EndDialog
GetNextDlgTabItem
IsWindowEnabled
GetDlgItem
DestroyWindow
CreateDialogIndirectParamW
SetActiveWindow

gdi32

GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutW
SelectClipRgn
DeleteObject
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
GetCurrentObject
CreateRectRgnIndirect
GetTextExtentPoint32W
BitBlt
GetDeviceCaps
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectW
CreateFontIndirectW
CreateSolidBrush
SetTextColor
ExtTextOutW
GetTextMetricsW
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
GetStockObject
GetMapMode
DPtoLP
CreateEllipticRgn
LPtoDP
Ellipse
EnumFontFamiliesExW
GetCharWidthW
CreateFontW
StretchDIBits
GetBkColor
IntersectClipRect
ExcludeClipRect
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
GetClipBox
SetBkColor
GetRgnBox
GetTextColor

shell32

SHGetFileInfoW
DragQueryFileW
DragFinish
ShellExecuteW
ord165
SHGetPathFromIDListW
SHBrowseForFolderW
ExtractIconW

advapi32

RegOpenKeyW
RegEnumValueW
RegCloseKey
OpenSCManagerA
RegSetValueW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
SetFileSecurityW
GetFileSecurityW
RegCreateKeyW
CloseServiceHandle
OpenServiceA
QueryServiceStatus
ControlService
DeleteService
StartServiceW
CreateServiceA

mpres

MPRes_LoadStringW

liblog

log_update_record
log_open_database
log_close_database
log_get_count_of
log_init_table
log_add_record

vpcore

VPCore_InitEnvironment
VPCore_StartTest

libiodev

iodev_power_off
iodev_close
iodev_open
iodev_get_version
iodev_test_ready
iodev_init_env
iodev_upgrade
iodev_get_id

msimg32

TransparentBlt

comctl32

InitCommonControlsEx
_TrackMouseEvent

shlwapi

PathIsRootW
PathRemoveFileSpecA
PathIsRootA
wnsprintfA
PathFileExistsW
PathGetDriveNumberW
PathRemoveFileSpecW
PathFindFileNameW
PathIsPrefixW
PathAppendW
PathFileExistsA
PathFindExtensionW
PathStripToRootW
PathIsUNCW

oledlg

OleUIBusyW

wsock32

WSACleanup

dbghelp

MiniDumpWriteDump

iphlpapi

GetAdaptersInfo

setupapi

CM_Get_DevNode_Status
CM_Get_Parent
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
CM_Get_DevNode_Registry_PropertyW
CM_Request_Device_EjectW
CM_Get_Device_IDW
CM_Query_And_Remove_SubTreeW

format

Format_StartProduction
Format_InitEnvironment
Format_ParseBinFile

uxtheme

DrawThemeBackground
GetThemePartSize
IsAppThemed
OpenThemeData
CloseThemeData

psapi

GetProcessMemoryInfo
GetPerformanceInfo

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

ole32

OleFlushClipboard
OleIsCurrentClipboard
CLSIDFromProgID
CoTaskMemFree
CoFreeUnusedLibraries
StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
CLSIDFromString
OleUninitialize
StgOpenStorageOnILockBytes
CoGetClassObject
CoTaskMemAlloc
CoInitializeEx
CoCreateInstance
CoUninitialize
OleInitialize
CoRevokeClassObject
CreateILockBytesOnHGlobal

oleaut32

SysStringLen
SysFreeString
SysAllocString
OleCreateFontIndirect
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayDestroy
VariantCopy

comdlg32

GetFileTitleW

Sections

.text
Size: 741KB - Virtual size: 740KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 157KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.info
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3960494c599011f1ffda61145204bff5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

mpres

liblog

vpcore

libiodev

msimg32

comctl32

shlwapi

oledlg

wsock32

dbghelp

iphlpapi

setupapi

format

uxtheme

psapi

winspool.drv

ole32

oleaut32

comdlg32

Sections

.text Size: 741KB - Virtual size: 740KB

.rdata Size: 157KB - Virtual size: 157KB

.data Size: 72KB - Virtual size: 133KB

.tls Size: 512B - Virtual size: 2B

.info Size: 512B - Virtual size: 512B

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.reloc Size: 71KB - Virtual size: 70KB

.text
Size: 741KB - Virtual size: 740KB

.rdata
Size: 157KB - Virtual size: 157KB

.data
Size: 72KB - Virtual size: 133KB

.tls
Size: 512B - Virtual size: 2B

.info
Size: 512B - Virtual size: 512B

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

.reloc
Size: 71KB - Virtual size: 70KB