d5d8f9acffa4bf01075ed55489d1d39a01d37c94e7651547428960e076b1c0cb

Sharing

Copy URL Twitter E-mail

General

Target

d5d8f9acffa4bf01075ed55489d1d39a01d37c94e7651547428960e076b1c0cb
Size

13.8MB
MD5

d9aa553281db8be58b027ec64e0473ec
SHA1

24d6d476735a6faafc014fdd347c20752cc03c3c
SHA256

d5d8f9acffa4bf01075ed55489d1d39a01d37c94e7651547428960e076b1c0cb
SHA512

6710f626c0848ea87ba1e45fa4d1ba0cbf30c3967fd2e0e72aeed17cfac474466197b196ab304ef3b98cf23bb344ba0f8e7c94eddaa3d6bd9ad169d6fb3e428b
SSDEEP

393216:2MD3E6ETJIfcI52fLGhz1nVtks6X4HknTgvaZskSj:2ME/dIdOk1/56oCiKsJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5d8f9acffa4bf01075ed55489d1d39a01d37c94e7651547428960e076b1c0cb

Files

d5d8f9acffa4bf01075ed55489d1d39a01d37c94e7651547428960e076b1c0cb
.exe windows:5 windows x86 arch:x86

2d35ffbed288ae6f5477eddf6fe6bd79

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessAffinityMask
GlobalMemoryStatus
GetAtomNameA
MulDiv
lstrcmpW
CompareStringA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
FreeResource
lstrlenA
GlobalFree
InterlockedDecrement
lstrcmpA
InterlockedExchange
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
GetThreadLocale
FlushFileBuffers
LockFile
UnlockFile
DuplicateHandle
GetVolumeInformationA
GetFullPathNameA
GetFileSizeEx
GetFileTime
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
InterlockedIncrement
GetCPInfo
GetOEMCP
FileTimeToSystemTime
SetErrorMode
RtlUnwind
RaiseException
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
ExitThread
CreateThread
GetCommandLineA
GetStartupInfoA
VirtualProtect
VirtualQuery
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
SetHandleCount
GetFileType
InitializeCriticalSectionAndSpinCount
HeapCreate
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTimeZoneInformation
GetDriveTypeA
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CompareStringW
SetEnvironmentVariableA
SetEndOfFile
GetHandleInformation
GetFileAttributesW
FindFirstFileW
GetCurrentDirectoryA
GetCurrentDirectoryW
DeleteFileW
CreateDirectoryW
MoveFileA
MoveFileW
RemoveDirectoryW
SetFileAttributesA
SetFileAttributesW
CreateFileW
SetFileTime
FormatMessageA
FormatMessageW
LocalFree
GetModuleFileNameW
FreeLibrary
lstrcatA
GetVersionExA
CompareFileTime
SetConsoleCtrlHandler
AreFileApisANSI
InitializeCriticalSection
ReleaseSemaphore
CreateSemaphoreA
ResetEvent
SetEvent
CreateEventA
IsProcessorFeaturePresent
GetVersion
VirtualFree
VirtualAlloc
GetStdHandle
GetFileInformationByHandle
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
FindFirstFileA
FindNextFileA
FindClose
RemoveDirectoryA
GetLocalTime
GetTickCount
GetCurrentProcess
GetFileAttributesA
MultiByteToWideChar
ExitProcess
GlobalAlloc
GlobalLock
GlobalUnlock
GetTempFileNameA
DeleteFileA
GetModuleHandleW
GetCurrentProcessId
GetCurrentThreadId
GetSystemInfo
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
SetFilePointer
ReadFile
GetDiskFreeSpaceExA
Sleep
CreateDirectoryA
GetSystemDirectoryA
GetTempPathA
CreateFileA
WriteFile
GetShortPathNameA
GetModuleFileNameA
FileTimeToLocalFileTime
FileTimeToDosDateTime
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
CloseHandle
WinExec
GetLogicalDriveStringsA
GetWindowsDirectoryA
GetLastError
SetLastError
GetProcAddress
GetModuleHandleA
LoadLibraryA
FindResourceA
LoadResource
LockResource
SizeofResource
lstrcpyA
WritePrivateProfileStringA
WideCharToMultiByte

user32

GetSysColorBrush
UnregisterClassA
CharNextA
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatA
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuState
GetMenuStringA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
SetMenu
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
GetScrollInfo
GetDlgCtrlID
IntersectRect
SystemParametersInfoA
GetWindowPlacement
LoadCursorA
DefWindowProcA
TrackPopupMenuEx
SetForegroundWindow
GetWindow
GetSubMenu
GetMenuItemID
SetWindowsHookExA
GetMenu
CallNextHookEx
GetMenuItemCount
GetMenuItemInfoA
UnhookWindowsHookEx
SetWindowPos
CallWindowProcA
IsWindowVisible
SetWindowLongA
MapWindowPoints
GetCursorPos
ScreenToClient
AdjustWindowRect
SetWindowRgn
IsZoomed
PostMessageA
PtInRect
wsprintfA
MsgWaitForMultipleObjects
PeekMessageA
TranslateMessage
DispatchMessageA
CharUpperW
CharUpperA
GetWindowDC
SetRect
KillTimer
SetTimer
ReleaseDC
IsIconic
GetSystemMenu
AppendMenuA
DrawIcon
GetInputState
PostThreadMessageA
GetMessageA
GetDC
PostQuitMessage
UpdateWindow
IsWindow
IsRectEmpty
DestroyMenu
SetWindowContextHelpId
MapDialogRect
ValidateRect
GetDesktopWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
EndPaint
BeginPaint
GetScrollBarInfo
BringWindowToTop
DrawIconEx
GetSystemMetrics
GetKeyState
GetFocus
LoadBitmapA
GetSysColor
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
SetCursor
ReleaseCapture
LoadImageA
GetIconInfo
GetWindowLongA
WindowFromPoint
SetCapture
GetCapture
GetActiveWindow
RedrawWindow
InvalidateRect
ClientToScreen
GetClientRect
GetWindowRect
DrawFocusRect
FrameRect
FillRect
OffsetRect
InflateRect
CopyRect
DrawStateA
SendMessageA
EnableWindow
LoadIconA
DestroyIcon
GetParent

gdi32

SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
OffsetViewportOrgEx
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
SetViewportOrgEx
SetMapMode
SetStretchBltMode
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
SetTextAlign
MoveToEx
LineTo
CreateCompatibleBitmap
SetBkMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
CreateRectRgnIndirect
CombineRgn
CreateRectRgn
GetDeviceCaps
SetGraphicsMode
SetWorldTransform
PatBlt
Rectangle
CreateFontA
CreateFontIndirectA
GetStockObject
StretchBlt
GetObjectA
CreateBitmap
DeleteObject
CreateSolidBrush
CreatePen
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
BitBlt
SelectObject
CreateCompatibleDC

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
GetUserNameA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegEnumValueA

shell32

SHGetFileInfoA
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetFolderLocation
ShellExecuteA
SHChangeNotify
SHGetSpecialFolderPathA
ShellExecuteExA

shlwapi

PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA

oledlg

ord8

ole32

CoFreeUnusedLibraries
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRevokeClassObject
CoCreateInstance
OleInitialize
OleUninitialize
CoTaskMemFree
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoTaskMemAlloc

oleaut32

OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
SysAllocStringByteLen
VariantInit
VariantChangeType
VariantCopy
VariantClear
SysAllocStringLen
SysAllocString
SysStringLen
SysFreeString

dbghelp

MiniDumpWriteDump

Exports

Exports

GetGlobalDataPointer
SfxStreamInterface

Sections

.text
Size: 471KB - Virtual size: 470KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Dwinuar
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 630KB - Virtual size: 632KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2d35ffbed288ae6f5477eddf6fe6bd79

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

dbghelp

Exports

Exports

Sections

.text Size: 471KB - Virtual size: 470KB

.rdata Size: 120KB - Virtual size: 120KB

.data Size: 17KB - Virtual size: 59KB

.Dwinuar Size: 16KB - Virtual size: 16KB

.rsrc Size: 630KB - Virtual size: 632KB

.text
Size: 471KB - Virtual size: 470KB

.rdata
Size: 120KB - Virtual size: 120KB

.data
Size: 17KB - Virtual size: 59KB

.Dwinuar
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 630KB - Virtual size: 632KB