2001815532328be626bf8f6d59fa76d27ac04345f2bd2366fd401e22f7210451

Sharing

Copy URL Twitter E-mail

General

Target

2001815532328be626bf8f6d59fa76d27ac04345f2bd2366fd401e22f7210451
Size

2.4MB
MD5

33e1d4bdd73e28b408ef8a78270d5898
SHA1

d1a0b1246174c872d5343a8472ada13334ce2764
SHA256

2001815532328be626bf8f6d59fa76d27ac04345f2bd2366fd401e22f7210451
SHA512

3788f57cc4d28cdedc3df9920e40f68883f10e537f88b04660a571030a57a44e658e378a4c573a3922d5eb03bae4494c8d5cdfae3263a618c90ec82bca3177a4
SSDEEP

49152:WXv9P0CWr2iaC+0kTBu4s0i45n/p8pcQZZAawWx:WXv62iaC+Vji45nrkAW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2001815532328be626bf8f6d59fa76d27ac04345f2bd2366fd401e22f7210451

Files

2001815532328be626bf8f6d59fa76d27ac04345f2bd2366fd401e22f7210451
.exe windows:5 windows x86 arch:x86

53a087a5e3dcff515b38ca4cdf83f65d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDiskFreeSpaceA
GetPrivateProfileSectionNamesA
GetPrivateProfileSectionA
FindNextFileW
FindClose
FindFirstFileW
InitializeCriticalSection
FreeLibrary
LoadLibraryA
GetProcAddress
FormatMessageW
LocalFree
GlobalLock
GlobalUnlock
Beep
DeleteFileW
GetFileTime
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetTickCount
SetUnhandledExceptionFilter
CopyFileW
CreateProcessW
SetCurrentDirectoryW
IsDebuggerPresent
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetVersionExA
VirtualQuery
GetModuleFileNameA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetWindowsDirectoryW
DeviceIoControl
GetDriveTypeW
GetLocalTime
GetModuleFileNameW
SetFilePointer
GetFileAttributesW
GlobalAlloc
GetVersionExW
OpenFileMappingW
GetSystemInfo
CreateFileMappingW
MapViewOfFile
FlushFileBuffers
UnmapViewOfFile
GlobalFree
InterlockedExchange
InterlockedCompareExchange
GetModuleHandleW
GetPrivateProfileSectionW
MulDiv
ReleaseMutex
CreateMutexW
ResetEvent
GetPrivateProfileIntW
GetVolumeInformationA
Sleep
GetFileSizeEx
DeleteTimerQueueTimer
TryEnterCriticalSection
SetLastError
SetCommTimeouts
SetCommMask
GetCommState
BuildCommDCBW
SetCommState
SetupComm
ClearCommError
GetCommMask
ReadFile
PurgeComm
WriteFile
GetLastError
GetOverlappedResult
SetEvent
CreateEventW
lstrcpynW
GetLocaleInfoW
CreateFileW
CreateThread
GetPrivateProfileStringW
WritePrivateProfileStringW
ReadDirectoryChangesW
WaitForSingleObject
CloseHandle
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
WideCharToMultiByte
SetFileAttributesA
GetVolumeNameForVolumeMountPointW
GetVolumePathNamesForVolumeNameW
DeleteFileA
GetSystemDirectoryA
GetDriveTypeA
GetCurrentDirectoryA
CreateFileA
SetEnvironmentVariableW
SetEnvironmentVariableA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GetProcessHeap
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LCMapStringA
LCMapStringW
GetTimeZoneInformation
CreateTimerQueueTimer
FindResourceA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
QueryPerformanceCounter
VirtualFree
HeapCreate
GetStartupInfoA
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FindResourceW
LoadResource
LockResource
SizeofResource
FreeEnvironmentStringsW
GetStdHandle
HeapSize
VirtualAlloc
ExitThread
GetFileType
GetConsoleMode
GetConsoleCP
GetDateFormatA
GetTimeFormatA
ExitProcess
GetSystemTimeAsFileTime
lstrlenW
FreeResource
lstrcmpW
CompareStringW
LoadLibraryW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
SetThreadPriority
ResumeThread
SuspendThread
VirtualProtect
FileTimeToLocalFileTime
GetModuleHandleA
lstrcmpA
lstrlenA
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
CompareStringA
EnumResourceLanguagesW
ConvertDefaultLocale
GetCurrentThread
FindResourceExW
GlobalGetAtomNameW
SetFileTime
GetTempFileNameW
GetFullPathNameW
GetDiskFreeSpaceW
MoveFileW
GetStringTypeExW
GetThreadLocale
lstrcmpiW
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetVolumeInformationW
GetShortPathNameW
SystemTimeToFileTime
GlobalFlags
GetCurrentDirectoryW
GetFileAttributesExW
LocalFileTimeToFileTime
SetErrorMode
GetStartupInfoW
RtlUnwind
HeapAlloc
HeapFree
HeapReAlloc
TerminateProcess
UnhandledExceptionFilter
RaiseException
SetFilePointerEx

user32

SetMenu
GetKeyState
TrackPopupMenu
ScrollWindow
MapWindowPoints
PeekMessageW
GetMessagePos
GetMessageTime
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
GetLastActivePopup
GetForegroundWindow
RemovePropW
GetPropW
SetPropW
GetClassLongW
CallNextHookEx
SetWindowsHookExW
GetCapture
IsChild
WinHelpW
SendDlgItemMessageA
SendDlgItemMessageW
RegisterWindowMessageW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
IsDialogMessageW
ValidateRect
GetAsyncKeyState
MapDialogRect
WindowFromPoint
FillRect
TabbedTextOutW
DrawTextExW
GrayStringW
GetWindowDC
BeginPaint
EndPaint
GetWindowThreadProcessId
GetMenuItemInfoW
DestroyMenu
SystemParametersInfoW
IsRectEmpty
DrawIcon
SetWindowRgn
SetCapture
LoadCursorW
SetCursor
ReleaseCapture
PostQuitMessage
TranslateAcceleratorW
BringWindowToTop
SetRectEmpty
CreatePopupMenu
InsertMenuItemW
LoadAcceleratorsW
ReuseDDElParam
UnpackDDElParam
ShowOwnedPopups
SetWindowContextHelpId
RegisterClipboardFormatW
SetRect
UnionRect
CharUpperW
GetSysColorBrush
UnregisterClassW
DestroyIcon
CharNextW
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
PostThreadMessageW
CharUpperA
SendMessageW
SetScrollRange
GetScrollRange
IsWindowVisible
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
DefWindowProcW
GetMenu
SetWindowPos
OffsetRect
LoadIconW
EnableWindow
InvalidateRect
GetParent
GetClassNameW
GetDlgCtrlID
IsWindow
EnumChildWindows
CopyRect
CallWindowProcW
PtInRect
GetClientRect
GetWindowLongW
CallWindowProcA
SetWindowLongW
DrawTextW
DrawFrameControl
GetSysColor
PostMessageW
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetSystemMetrics
GetScrollPos
SetScrollPos
GetWindow
SetWindowTextW
GetWindowTextLengthW
GetWindowTextW
MessageBoxW
MoveWindow
GetWindowTextA
GetClassNameA
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
ShowScrollBar
RemoveMenu
DrawFocusRect
EqualRect
GetCursorPos
ScreenToClient
GetMessageW
TranslateMessage
DispatchMessageW
ReleaseDC
IsZoomed
IsIconic
ModifyMenuW
GetMenuState
CheckMenuItem
DeleteMenu
LoadBitmapW
ShowWindow
SetForegroundWindow
UpdateWindow
GetWindowRect
CreateWindowExA
SendMessageA
GetFocus
KillTimer
SetTimer
UnregisterDeviceNotification
RegisterDeviceNotificationW
InflateRect
EnableMenuItem
SetFocus
UnhookWindowsHookEx
GetDesktopWindow
GetActiveWindow
GetSubMenu
LoadMenuW
ClientToScreen
GetDC
GetMenuItemCount
InsertMenuW
GetMenuItemID
GetMenuStringW
EndDialog
GetNextDlgTabItem
IsWindowEnabled
GetDlgItem
DestroyWindow
CreateDialogIndirectParamW
SetActiveWindow

gdi32

GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutW
SelectClipRgn
DeleteObject
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
GetCurrentObject
CreateRectRgnIndirect
GetTextExtentPoint32W
BitBlt
GetDeviceCaps
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectW
CreateFontIndirectW
CreateSolidBrush
SetBkColor
ExtTextOutW
GetTextMetricsW
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
GetStockObject
GetMapMode
DPtoLP
CreateEllipticRgn
LPtoDP
Ellipse
EnumFontFamiliesExW
GetCharWidthW
CreateFontW
StretchDIBits
GetBkColor
GetTextColor
GetRgnBox
IntersectClipRect
ExcludeClipRect
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
GetClipBox
SetTextColor

shell32

SHGetFileInfoW
DragQueryFileW
DragFinish
ShellExecuteW
ord165
SHGetPathFromIDListW
SHBrowseForFolderW
ExtractIconW

advapi32

DeleteService
RegOpenKeyW
RegEnumValueW
RegCloseKey
RegSetValueW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
SetFileSecurityW
GetFileSecurityW
RegCreateKeyW
CloseServiceHandle
OpenSCManagerA
OpenServiceA
QueryServiceStatus
StartServiceW
CreateServiceA
ControlService

mpres

MPRes_LoadStringW

liblog

log_update_record
log_open_database
log_close_database
log_get_count_of
log_init_table
log_add_record

vpcore

VPCore_InitEnvironment
VPCore_StartTest

libiodev

iodev_power_off
iodev_close
iodev_open
iodev_get_version
iodev_test_ready
iodev_init_env
iodev_upgrade
iodev_get_id

msimg32

TransparentBlt

comctl32

InitCommonControlsEx
_TrackMouseEvent

shlwapi

PathIsRootW
PathRemoveFileSpecA
PathIsRootA
wnsprintfA
PathFileExistsW
PathGetDriveNumberW
PathRemoveFileSpecW
PathFindFileNameW
PathIsPrefixW
PathAppendW
PathFileExistsA
PathFindExtensionW
PathStripToRootW
PathIsUNCW

oledlg

OleUIBusyW

wsock32

WSACleanup

dbghelp

MiniDumpWriteDump

iphlpapi

GetAdaptersInfo

setupapi

CM_Get_DevNode_Status
CM_Get_Parent
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
CM_Get_DevNode_Registry_PropertyW
CM_Request_Device_EjectW
CM_Get_Device_IDW
CM_Query_And_Remove_SubTreeW

format

Format_StartProduction
Format_InitEnvironment
Format_ParseBinFile

uxtheme

DrawThemeBackground
GetThemePartSize
IsAppThemed
OpenThemeData
CloseThemeData

psapi

GetProcessMemoryInfo
GetPerformanceInfo

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

ole32

OleFlushClipboard
OleIsCurrentClipboard
CLSIDFromProgID
CoTaskMemFree
CoFreeUnusedLibraries
StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
CLSIDFromString
OleUninitialize
StgOpenStorageOnILockBytes
CoGetClassObject
CoTaskMemAlloc
CoInitializeEx
CoCreateInstance
CoUninitialize
OleInitialize
CoRevokeClassObject
CreateILockBytesOnHGlobal

oleaut32

SysStringLen
SysFreeString
SysAllocString
OleCreateFontIndirect
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayDestroy
VariantCopy

comdlg32

GetFileTitleW

Sections

.text
Size: 754KB - Virtual size: 754KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.info
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

53a087a5e3dcff515b38ca4cdf83f65d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

mpres

liblog

vpcore

libiodev

msimg32

comctl32

shlwapi

oledlg

wsock32

dbghelp

iphlpapi

setupapi

format

uxtheme

psapi

winspool.drv

ole32

oleaut32

comdlg32

Sections

.text Size: 754KB - Virtual size: 754KB

.rdata Size: 161KB - Virtual size: 161KB

.data Size: 72KB - Virtual size: 133KB

.tls Size: 512B - Virtual size: 2B

.info Size: 512B - Virtual size: 512B

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.reloc Size: 71KB - Virtual size: 70KB

.text
Size: 754KB - Virtual size: 754KB

.rdata
Size: 161KB - Virtual size: 161KB

.data
Size: 72KB - Virtual size: 133KB

.tls
Size: 512B - Virtual size: 2B

.info
Size: 512B - Virtual size: 512B

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

.reloc
Size: 71KB - Virtual size: 70KB