c3b94a1c1f48672b5e2fb2fb14a9c6f6

Sharing

Copy URL Twitter E-mail

General

Target

c3b94a1c1f48672b5e2fb2fb14a9c6f6
Size

844KB
MD5

c3b94a1c1f48672b5e2fb2fb14a9c6f6
SHA1

6f87eb6cb7974df31ddb8736d3822b89e45dfe70
SHA256

baf85a30b4f4749d66d78ebbd748bb3f451c1b0bf84ce42cd4bebacb17cb0ba7
SHA512

05359a4f5d32d3cc9806c2b6e05d44e745e47977e40426b9f76901a84675fca17cea0b5bf7e7b9fb632b5bb9e9be3f80dfa79549451d919fd85c6ff9b50b7d09
SSDEEP

24576:ttut7Y8JyoVqXQTYG0IXRGi2MiDuEbvWAE:tQV0rQXX2MiqmWAE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c3b94a1c1f48672b5e2fb2fb14a9c6f6

Files

c3b94a1c1f48672b5e2fb2fb14a9c6f6
.exe windows:5 windows x86 arch:x86

f318f13498db2a8b76160131c3c439fc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualQuery
GetModuleFileNameW
HeapReAlloc
GetOEMCP
InitializeCriticalSectionAndSpinCount
GetProcessHeap
SizeofResource
VirtualProtect
InitializeCriticalSection
lstrcpyW
GetConsoleMode
CreateNamedPipeW
GetCommandLineW
HeapSize
GetFileAttributesExW
WriteFile
GlobalDeleteAtom
GetConsoleOutputCP
VirtualProtectEx
GetCurrentDirectoryA
CreateFileW
LeaveCriticalSection
CreateEventW
TlsFree
ResumeThread
InterlockedCompareExchange
SetEvent
GetTimeZoneInformation
DeleteCriticalSection
CreateThread
GetProcAddress
GetStdHandle
SetCurrentDirectoryW
GlobalSize
GlobalAlloc
GetTempPathW
CompareStringW
GetVolumeInformationW
GetNumberFormatW
SetFilePointer
WriteConsoleW
GetStringTypeW
LCMapStringW
GetConsoleCP
GlobalFindAtomW
SetStdHandle
TerminateProcess
GetCurrentDirectoryW
HeapQueryInformation
GetCPInfo
UnlockFile
OpenEventW
MultiByteToWideChar
TerminateThread
LocalReAlloc
LockFile
GlobalAddAtomW
TlsAlloc
HeapAlloc
lstrlenA
SetEnvironmentVariableA
TlsGetValue
GetLocaleInfoW
SearchPathW
GetModuleHandleW
FindResourceW
GetEnvironmentStringsW
LoadResource
GlobalLock
MulDiv
InterlockedDecrement
GetCurrentThread
RaiseException
VirtualAlloc
SetThreadPriority
lstrcmpA
GetTempFileNameW
CopyFileW
FileTimeToLocalFileTime
GlobalReAlloc
RtlUnwind
WideCharToMultiByte
FreeLibrary
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
GetSystemInfo
FreeResource
FileTimeToSystemTime
GetOverlappedResult
HeapFree
GetCurrentProcessId
GetACP
FindFirstFileW
CloseHandle
SetHandleCount
DuplicateHandle
CreateMutexW
lstrcmpiW
GlobalFlags
LoadLibraryExW
SetEndOfFile
LoadLibraryW
FreeEnvironmentStringsW
GetFileAttributesW
TlsSetValue
LocalAlloc
IsValidCodePage
GetUserDefaultUILanguage
GetFileTime
GlobalGetAtomNameW
GlobalFree
ExitThread
GetFullPathNameW
FindClose
EnterCriticalSection
GetFileType
lstrlenW
GetFileSizeEx
InterlockedIncrement
WaitForMultipleObjects
HeapCreate
GlobalUnlock
WaitForSingleObject
GetLastError
FormatMessageW
SetUnhandledExceptionFilter
IsDebuggerPresent
LocalFree
Sleep
DisconnectNamedPipe
ReadFile
UnhandledExceptionFilter
GetVersionExW
lstrcmpW
GetCurrentProcess
SetLastError
LockResource
GetStartupInfoW
HeapSetInformation
GlobalHandle
GetCurrentThreadId
ExitProcess
GetSystemDirectoryW
InterlockedExchange
GetFileSize
ConnectNamedPipe
FindResourceExW
GetProfileIntW
FlushFileBuffers

user32

GetWindowDC
GetWindow
LoadImageW
PostQuitMessage
InvalidateRect
ShowOwnedPopups
PeekMessageW
InvertRect
PostThreadMessageW
GetWindowRgn
IsZoomed
GetScrollRange
DefMDIChildProcW
KillTimer
DrawEdge
WaitMessage
EndPaint
CopyImage
EnableMenuItem
CharUpperBuffW
UpdateWindow
DefWindowProcW
GetWindowRect
GetMessageTime
DispatchMessageW
OpenClipboard
SetLayeredWindowAttributes
GetActiveWindow
GetMenuStringW
EnumDisplayMonitors
MapVirtualKeyW
GetMenuItemID
GetScrollInfo
EndDeferWindowPos
RegisterWindowMessageW
ReuseDDElParam
GetSystemMenu
DestroyAcceleratorTable
SendDlgItemMessageW
SetWindowsHookExW
EqualRect
LoadAcceleratorsW
SetMenu
UnhookWindowsHookEx
SetRect
MapVirtualKeyExW
GetMessageW
DrawTextExW
GetClassNameW
LockWindowUpdate
SubtractRect
GetCursorPos
InsertMenuItemW
GetDoubleClickTime
DrawStateW
GetParent
SetCursor
DestroyCursor
TranslateMDISysAccel
IsChild
FrameRect
RegisterClassW
GetNextDlgTabItem
LoadIconW
CallNextHookEx
SetFocus
ReleaseCapture
CheckDlgButton
IntersectRect
GetAsyncKeyState
GetTopWindow
GetMonitorInfoW
GetSubMenu
SetCursorPos
IsWindowVisible
ToUnicodeEx
AdjustWindowRectEx
GetMenuItemInfoW
SetClassLongW
GetMenu
SetWindowPos
WindowFromPoint
GetSystemMetrics
DrawIcon
ValidateRect
IsWindow
SendDlgItemMessageA
SetScrollInfo
DrawFocusRect
MapWindowPoints
EnumWindows
CallWindowProcW
SetForegroundWindow
TrackPopupMenu
WinHelpW
DrawMenuBar
GetMenuDefaultItem
GetDesktopWindow
IsIconic
DrawTextW
GetClassInfoExW
GetWindowPlacement
GetWindowLongW
GetKeyNameTextW
GetWindowTextW
GetDC
SetWindowTextW
GetUpdateRect
IsMenu
GetMenuCheckMarkDimensions
RegisterClipboardFormatW
GetLastActivePopup
CreateMenu
SetPropW
TranslateMessage
CreateWindowExW
GetFocus
EnableWindow
TranslateAcceleratorW
LoadMenuW
IsWindowEnabled
MessageBeep
PtInRect
GetDlgCtrlID
UnpackDDElParam
ScreenToClient
CopyRect
BeginPaint
SendMessageW
SetCapture
InsertMenuW
IsDialogMessageW
MoveWindow
GetSysColorBrush
DestroyMenu
EnableScrollBar
DestroyWindow
IsClipboardFormatAvailable
GetClientRect
SetWindowLongW
SetTimer
CreatePopupMenu
GetScrollPos
SetParent
LoadBitmapW
RedrawWindow
DrawFrameControl
FillRect
RealChildWindowFromPoint
CharUpperW
CloseClipboard
GetWindowTextLengthW
GrayStringW
ShowWindow
NotifyWinEvent
MonitorFromWindow
UpdateLayeredWindow
GetClassInfoW
GetKeyState
SetMenuItemBitmaps
SetMenuDefaultItem
MessageBoxW
GetPropW
ScrollWindow
CopyIcon
GetMessagePos
SetClipboardData
RemoveMenu
GetSysColor
DialogBoxParamW
GetDlgItem
TabbedTextOutW
DeleteMenu
ShowScrollBar
UnionRect
SetWindowRgn
GetWindowThreadProcessId
DefFrameProcW
SystemParametersInfoW
EmptyClipboard
GetIconInfo
GetKeyboardState
GetMenuState
CreateAcceleratorTableW
SetScrollRange
SetScrollPos
AppendMenuW
DeferWindowPos
SetActiveWindow
DrawIconEx
HideCaret
DestroyIcon
GetCapture
MapDialogRect
BringWindowToTop
IsCharLowerW
PostMessageW
IsRectEmpty
ModifyMenuW
CopyAcceleratorTableW
ClientToScreen
BeginDeferWindowPos
InflateRect
SetRectEmpty
GetMenuItemCount
LoadCursorW
EndDialog
MonitorFromPoint
SetWindowPlacement
ReleaseDC
OffsetRect
RemovePropW
CheckMenuItem
GetForegroundWindow
CreateDialogIndirectParamW
GetKeyboardLayout
GetClassLongW
GetNextDlgGroupItem

gdi32

LineTo
GetPaletteEntries
ExtTextOutW
StretchBlt
GetViewportExtEx
GetObjectW
SetPixel
DeleteDC
SelectClipRgn
GetBkColor
SetPixelV
SaveDC
CreatePalette
OffsetViewportOrgEx
SetViewportExtEx
PtInRegion
GetTextExtentPoint32W
GetNearestPaletteIndex
TextOutW
GetClipBox
SetTextAlign
ExcludeClipRect
CreateHatchBrush
CreateCompatibleBitmap
GetPixel
EnumFontFamiliesW
GetBitmapBits
GetTextColor
SetBkColor
CreateDIBSection
ExtSelectClipRgn
IntersectClipRect
PtVisible
Escape
SetWindowOrgEx
Ellipse
ExtFloodFill
DPtoLP
CreateBitmap
Rectangle
SetWindowExtEx
GetBoundsRect
GetViewportOrgEx
CreateFontIndirectW
Polygon
CreateDIBitmap
FillRgn
RestoreDC
CreatePolygonRgn
OffsetWindowOrgEx
CombineRgn
GetObjectType
SetBkMode
CreateRectRgnIndirect
GetStockObject
CreatePen
LPtoDP
GetTextFaceW
Polyline
GetTextMetricsW
SelectPalette
RectVisible
SetDIBColorTable
CreateRectRgn
CreateRoundRectRgn
PatBlt
GetWindowOrgEx
SelectObject
SetPolyFillMode
CreateDCW
GetWindowExtEx
MoveToEx
SetLayout
FrameRgn
GetTextCharsetInfo
GetLayout
CopyMetaFileW
CreateSolidBrush
BitBlt
SetROP2
GetSystemPaletteEntries
CreatePatternBrush
EnumFontFamiliesExW
CreateCompatibleDC
SetMapMode
ScaleWindowExtEx
GetDeviceCaps
ScaleViewportExtEx
SetPaletteEntries
SetRectRgn
CreateEllipticRgn
OffsetRgn
RealizePalette
SetTextColor
SetViewportOrgEx
GetRgnBox
DeleteObject

comdlg32

GetOpenFileNameW
GetFileTitleW

advapi32

GetSecurityDescriptorSacl
OpenProcessToken
RegEnumKeyExW
IsValidSid
RegDeleteKeyW
RegQueryValueExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegCreateKeyExW
SetSecurityDescriptorSacl
RegCloseKey
GetTokenInformation
RegSetValueExW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
OpenThreadToken
RegDeleteValueW
ConvertSidToStringSidW
RegOpenKeyExW

shell32

ShellExecuteW
SHGetSpecialFolderLocation
SHAppBarMessage
DragFinish
ShellExecuteExW
SHGetFolderLocation
SHGetDesktopFolder
DragQueryFileW
SHGetFileInfoW
SHGetPathFromIDListW
SHBrowseForFolderW

ole32

DoDragDrop
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoTaskMemFree
OleLockRunning
CoInitializeEx
CoLockObjectExternal
IsAccelerator
OleDuplicateData
OleTranslateAccelerator
OleGetClipboard
RegisterDragDrop
CoUninitialize
RevokeDragDrop
CoInitialize
CoTaskMemAlloc
CoCreateInstance
ReleaseStgMedium
CreateStreamOnHGlobal
CLSIDFromString

oleaut32

VariantClear
VariantInit
SysAllocStringByteLen
SysStringLen
SysFreeString
SysAllocStringLen
SysAllocString
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
VariantChangeType
SysStringByteLen

comctl32

ImageList_GetIconSize

shlwapi

SHCopyKeyA
PathFindExtensionW
PathIsUNCW
PathFindFileNameW
PathStripToRootW
PathRemoveFileSpecW
ord215
SHDeleteKeyA

winmm

PlaySoundW

msimg32

AlphaBlend
TransparentBlt

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

gdiplus

GdiplusShutdown
GdipBitmapUnlockBits
GdipDrawImageI
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipSetInterpolationMode
GdipGetImagePaletteSize
GdipBitmapLockBits
GdipFree
GdipCreateFromHDC
GdipGetImagePixelFormat
GdipCreateBitmapFromHBITMAP
GdipGetImageWidth
GdipCreateBitmapFromScan0
GdiplusStartup
GdipDrawImageRectI
GdipCreateBitmapFromStream
GdipDisposeImage
GdipGetImagePalette
GdipAlloc
GdipCloneImage
GdipGetImageHeight

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

Exports

Exports

MyCopyMemory

Sections

.text
Size: 207KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ssw
Size: - Virtual size: 5.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qqw
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ttw
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ddw
Size: 286KB - Virtual size: 285KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f318f13498db2a8b76160131c3c439fc

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

winmm

msimg32

imm32

gdiplus

oleacc

Exports

Exports

Sections

.text Size: 207KB - Virtual size: 207KB

.ssw Size: - Virtual size: 5.4MB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 512B - Virtual size: 24B

.qqw Size: 143KB - Virtual size: 142KB

.ttw Size: 143KB - Virtual size: 142KB

.ddw Size: 286KB - Virtual size: 285KB

.tls Size: 512B - Virtual size: 57B

.rsrc Size: 33KB - Virtual size: 32KB

.reloc Size: 14KB - Virtual size: 14KB

.text
Size: 207KB - Virtual size: 207KB

.ssw
Size: - Virtual size: 5.4MB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 512B - Virtual size: 24B

.qqw
Size: 143KB - Virtual size: 142KB

.ttw
Size: 143KB - Virtual size: 142KB

.ddw
Size: 286KB - Virtual size: 285KB

.tls
Size: 512B - Virtual size: 57B

.rsrc
Size: 33KB - Virtual size: 32KB

.reloc
Size: 14KB - Virtual size: 14KB