afd0d991620e0b4807d2ab3aab91381c1845786da4d5aaa99e7d255ff23feb23

Sharing

Copy URL

Twitter E-mail

General

Target

afd0d991620e0b4807d2ab3aab91381c1845786da4d5aaa99e7d255ff23feb23
Size

1.7MB
MD5

466921cd1e36683e76a615d12b9e0735
SHA1

970af4a3609384ed7b19be9ad621f1f98be405b1
SHA256

afd0d991620e0b4807d2ab3aab91381c1845786da4d5aaa99e7d255ff23feb23
SHA512

628b0af104def06549c4a3e0588f284e085ed0f89118a0e7f651641422ccab7b3ac5c2c500f213d2b537ba1cfc31284dfd5e31be189839664d4761df873ce1f9
SSDEEP

49152:mmwPBbjvJ+s7HwUfvohDODlj4r3WCIuu4uXa9SNmrFuJS9luWrHMQRo00FzrNYnG:hwPBbjws7H3fvohDODlj4r3WCIuu4uXJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
afd0d991620e0b4807d2ab3aab91381c1845786da4d5aaa99e7d255ff23feb23

Files

afd0d991620e0b4807d2ab3aab91381c1845786da4d5aaa99e7d255ff23feb23
.exe windows:5 windows x86 arch:x86

23eed8d984013217a8381178c4cb28ae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

waveInGetDevCapsA
waveInGetNumDevs
waveInStart
waveInAddBuffer
waveInPrepareHeader
waveInOpen
waveInClose
waveInUnprepareHeader
waveInReset
sndPlaySoundA

avifil32

AVIFileOpenA
AVIFileExit
AVIFileInit
AVIStreamWrite
AVIStreamSetFormat
AVIFileRelease
AVIStreamRelease
AVIFileCreateStreamA

wininet

InternetQueryDataAvailable
HttpAddRequestHeadersA
HttpQueryInfoA
InternetGetLastResponseInfoA
InternetSetStatusCallback
InternetSetFilePointer
InternetWriteFile
InternetReadFile
HttpOpenRequestA
InternetOpenA
InternetConnectA
InternetCloseHandle
FtpSetCurrentDirectoryA
FtpPutFileA
HttpSendRequestA

mmapi

?MM_Start@@YAH_N@Z
?MM_End@@YAH_N@Z
?MM_ObjDelete@@YAHPAX@Z
?MM_MarkSetIcon@@YAHPAXH@Z
?MM_ObjRename@@YAHPAXPBD@Z
?MM_ObjGetName@@YAHPAXPADH@Z
?MM_MarkMove@@YAHPAXNN@Z
?MM_MarkCreate@@YAHPBDNNHPAPAX@Z
?MM_AddIcon@@YAHPBDH@Z

freeimage

_FreeImage_AdjustBrightness@12
_FreeImage_GetInfo@4
_FreeImage_GetBits@4
_FreeImage_GetInfoHeader@4
_FreeImage_GetWidth@4
_FreeImage_GetHeight@4
_FreeImage_Unload@4
_FreeImage_Load@12

kernel32

GlobalFlags
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GetCPInfo
GetOEMCP
GetModuleHandleW
SetErrorMode
GetCurrentDirectoryA
LocalAlloc
RtlUnwind
GetTimeFormatA
GetDateFormatA
RaiseException
ExitThread
CreateThread
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
GetDriveTypeA
GetCommandLineA
GetStartupInfoA
ExitProcess
HeapReAlloc
VirtualProtect
VirtualAlloc
VirtualQuery
SetStdHandle
GetFileType
HeapSize
GetACP
IsValidCodePage
GetStdHandle
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapCreate
VirtualFree
SetHandleCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
GetTickCount
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
SuspendThread
SetThreadPriority
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
InterlockedExchange
lstrcmpA
GetShortPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
SetFilePointer
lstrcmpiA
GetThreadLocale
GetStringTypeExA
MoveFileA
GetFileSizeEx
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
InterlockedDecrement
GetModuleFileNameW
GetCurrentProcessId
GetModuleFileNameA
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
GlobalAlloc
FormatMessageA
LocalFree
MulDiv
lstrlenA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
lstrcmpW
GetModuleHandleA
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
OutputDebugStringA
ResumeThread
CreateMutexA
SetLastError
ReleaseMutex
lstrcpynA
FindNextFileA
FindClose
CreateDirectoryA
MultiByteToWideChar
WinExec
GetSystemDirectoryA
CopyFileA
GetComputerNameA
GetSystemInfo
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
FlushFileBuffers
GetEnvironmentVariableA
FindFirstFileA
LoadLibraryA
GetProcAddress
FreeLibrary
BuildCommDCBA
CreateFileA
SetCommState
SetCommTimeouts
WriteFile
ReadFile
GetVersionExA
DeleteFileA
GetWindowsDirectoryA
GetCurrentThreadId
SetEvent
WaitForMultipleObjects
TerminateThread
GetLastError
Sleep
DeleteCriticalSection
InitializeCriticalSection
CreateEventA
ResetEvent
WaitForSingleObject
CloseHandle
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
LoadResource
LockResource
SizeofResource
FindResourceA
WideCharToMultiByte

user32

CreateMenu
GetTabbedTextExtentA
DestroyCursor
SetRect
RegisterClipboardFormatA
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
ValidateRect
GetMessageA
WindowFromPoint
SetCapture
SetParent
GetSystemMenu
DeleteMenu
IsRectEmpty
IsZoomed
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
ReleaseCapture
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
BringWindowToTop
TranslateAcceleratorA
WaitMessage
GetWindowThreadProcessId
InflateRect
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
GetMenuStringA
AppendMenuA
InsertMenuA
RemoveMenu
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
SetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetActiveWindow
MessageBoxA
SendMessageTimeoutA
LoadBitmapA
GetCursorPos
GetWindowRect
SetRectEmpty
PtInRect
SetWindowRgn
DrawIcon
PostThreadMessageA
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
CharNextA
DestroyIcon
UnregisterClassA
LockWindowUpdate
GetDCEx
GetSysColorBrush
GetMenuItemInfoA
GetCapture
GetKeyState
RegisterWindowMessageA
PostMessageA
GetSysColor
SetSysColors
GetParent
LoadCursorA
SetCursor
PeekMessageA
TranslateMessage
DispatchMessageA
KillTimer
SetTimer
PostQuitMessage
UpdateWindow
InvalidateRect
SendMessageA
wsprintfA
GetClientRect
GetSystemMetrics
EnableWindow
GetScrollRange
CharUpperA

gdi32

CreateBitmap
SetBkColor
SetTextColor
GetClipBox
ExtTextOutA
SetPixel
Polygon
GetDeviceCaps
Ellipse
StartDocA
PtVisible
RectVisible
TextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
GetPixel
Polyline
CreatePen
CreateSolidBrush
CreateFontIndirectA
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
PatBlt
DPtoLP
GetViewportExtEx
GetTextMetricsA
GetCharWidthA
CreateFontA
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
GetViewportOrgEx
Rectangle
GetBkColor
GetTextColor
GetRgnBox
CreateEllipticRgn
LPtoDP
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceA
GetTextExtentPointA
GetWindowOrgEx
CreateDIBSection
Arc
CreateRectRgn
SelectClipRgn
GdiFlush
CreateDIBitmap
DeleteObject
SetStretchBltMode
StretchDIBits
GetObjectA
SetBitmapBits
StretchBlt
GetTextExtentPoint32A
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
GetStockObject
SelectObject
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreateDCA
GetWindowExtEx

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA
GetJobA

advapi32

RegDeleteValueA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
GetFileSecurityA
SetFileSecurityA
RegSetValueA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyA

shell32

ExtractIconA
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetMalloc
DragFinish
DragQueryFileA
SHGetFileInfoA
ShellExecuteA

shlwapi

PathIsUNCA
PathFindExtensionA
PathFindFileNameA
PathRemoveFileSpecW
PathStripToRootA

oledlg

ord8

ole32

CoRegisterClassObject
CoRevokeClassObject
CLSIDFromProgID
CLSIDFromString
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoDisconnectObject
CoInitializeEx
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
CoTaskMemAlloc
StringFromCLSID
CoTaskMemFree
CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
LoadTypeLi
SysAllocString
VariantCopy
SysStringByteLen
SysAllocStringByteLen
SysStringLen
VariantChangeType
VariantClear
SysAllocStringLen
VariantInit
SysFreeString
RevokeActiveObject
RegisterActiveObject

wsock32

inet_addr
WSASetLastError
WSAAsyncSelect
htonl
sendto
send
__WSAFDIsSet
select
recvfrom
recv
connect
socket
getpeername
shutdown
accept
gethostname
ioctlsocket
gethostbyname
getservbyname
ntohs
setsockopt
getsockopt
htons
WSAStartup
bind
listen
WSACleanup
closesocket
WSAGetLastError

ws2_32

WSARecv
WSASend
WSASocketA
WSACreateEvent
WSAEventSelect
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
WSAAccept
WSACloseEvent

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 209KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 154KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

23eed8d984013217a8381178c4cb28ae

Headers

DLL Characteristics

File Characteristics

Imports

winmm

avifil32

wininet

mmapi

freeimage

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

wsock32

ws2_32

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 209KB - Virtual size: 209KB

.data Size: 20KB - Virtual size: 39KB

.rsrc Size: 154KB - Virtual size: 154KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 209KB - Virtual size: 209KB

.data
Size: 20KB - Virtual size: 39KB

.rsrc
Size: 154KB - Virtual size: 154KB