c7e99e91f7e9b9d596db1f58f9ff1d8b

Sharing

Copy URL

Twitter E-mail

General

Target

c7e99e91f7e9b9d596db1f58f9ff1d8b
Size

368KB
MD5

c7e99e91f7e9b9d596db1f58f9ff1d8b
SHA1

9aefefc004dda8ce33d940e002348d8701af76d0
SHA256

cb6d7d1693a9684cbb735738c1309edae88139f9822c8c8befb04881083d1d29
SHA512

9e2306921e15ebf6148c8ad104336652976cc7921c071d6de95ea6054b259b0e61cd909fffac3b006192acae8f79b5be9d8df229c1d63e7fe4038adc37d77306
SSDEEP

6144:F+BRUNJhLYuM6CCWMGE24xlHDTuisJeI9xtslUGeVyW:F+BAv8uM6JNGEpxlHOie9XAUG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7e99e91f7e9b9d596db1f58f9ff1d8b

Files

c7e99e91f7e9b9d596db1f58f9ff1d8b
.exe windows:4 windows x86 arch:x86

5a3ced8d2ae01f4106f336791dd51d27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileA
GetFullPathNameA
SetErrorMode
FileTimeToLocalFileTime
GetFileAttributesA
GetFileTime
ExitProcess
RtlUnwind
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
GetCommandLineA
HeapReAlloc
TerminateProcess
HeapSize
FlushFileBuffers
LCMapStringW
QueryPerformanceCounter
GetCurrentProcessId
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetStringTypeA
GetStringTypeW
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
SetStdHandle
GetLocaleInfoW
SetEnvironmentVariableA
SetFilePointer
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
InterlockedIncrement
GetCurrentThread
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
GetUserDefaultLCID
FileTimeToSystemTime
WaitForSingleObject
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
FreeLibrary
lstrcatA
lstrcmpW
GetModuleHandleA
GetProcAddress
SetLastError
GlobalFree
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
lstrcpynA
LocalFree
CompareStringW
CompareStringA
lstrlenA
lstrlenW
lstrcmpiA
GetVersion
GetLastError
OpenEventA
CreateEventA
GetVolumeInformationA
GetModuleFileNameA
WriteFile
ReadFile
CreateFileA
GetFileSize
GetTempPathA
Sleep
InterlockedDecrement
MultiByteToWideChar
GetTickCount
InitializeCriticalSection
RaiseException
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
TerminateThread
CloseHandle
LCMapStringA
CreateThread

user32

GetNextDlgGroupItem
GetNextDlgTabItem
MessageBeep
EndDialog
CreateDialogIndirectParamA
DestroyMenu
LoadCursorA
GetSysColorBrush
SetWindowContextHelpId
MapDialogRect
RegisterClipboardFormatA
GetMessageA
TranslateMessage
GetActiveWindow
GetCursorPos
ValidateRect
SetCursor
PostQuitMessage
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
IsWindowEnabled
MoveWindow
SetWindowTextA
IsDialogMessageA
EndPaint
BeginPaint
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
SetWindowsHookExA
ReleaseCapture
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
GetFocus
IsWindow
SetFocus
IsChild
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
LoadIconA
PeekMessageA
MapWindowPoints
MessageBoxA
GetKeyState
PostMessageA
SendMessageA
GetClientRect
SetTimer
EnableWindow
ShowWindow
KillTimer
UnregisterClassA
IsWindowVisible
UpdateWindow
GetMenu
GetSysColor
AdjustWindowRectEx
GetParent
EqualRect
SetCapture
InvalidateRgn
InvalidateRect
CopyAcceleratorTableA
GetClassInfoA
SetRect
IsRectEmpty
CharNextA
PostThreadMessageA
CallNextHookEx
wsprintfA
GetWindowRect
GetDesktopWindow
GetClassNameA
EnumChildWindows
SetForegroundWindow
FindWindowA
CharUpperA
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
GetWindow
PtInRect
CopyRect
GetSystemMetrics
GetWindowPlacement
IsIconic
SystemParametersInfoA
IntersectRect
OffsetRect
SetWindowPos
SetWindowLongA
GetWindowLongA
CallWindowProcA
DefWindowProcA
GetDlgCtrlID
RegisterClassA
GetWindowDC

gdi32

CreateBitmap
CreateRectRgnIndirect
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
GetStockObject
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
DeleteObject
SetMapMode
RestoreDC
SaveDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
OffsetViewportOrgEx

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegOpenKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegCloseKey
RegOpenKeyA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA

shell32

ShellExecuteA

comctl32

ord17

shlwapi

StrToIntA
PathFindFileNameA
PathStripToRootA
UrlUnescapeA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

CoTaskMemAlloc
CoTaskMemFree
OleRun
CoUninitialize
CoInitialize
CoCreateInstance
CLSIDFromString
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CLSIDFromProgID
CoDisconnectObject
CoGetClassObject
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal

oleaut32

SysFreeString
VariantInit
VariantCopy
VariantChangeType
VariantClear
SysAllocStringLen
SysAllocStringByteLen
SysStringByteLen
SysStringLen
SafeArrayDestroy
SystemTimeToVariantTime
LoadTypeLi
OleCreateFontIndirect
GetErrorInfo
SysAllocString

wininet

InternetReadFile
InternetCrackUrlA
InternetOpenUrlA
HttpQueryInfoA
InternetOpenA
InternetConnectA
InternetCloseHandle
HttpOpenRequestA
HttpSendRequestA

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 264KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5a3ced8d2ae01f4106f336791dd51d27

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

wininet

iphlpapi

Sections

.text Size: 264KB - Virtual size: 260KB

.rdata Size: 68KB - Virtual size: 65KB

.data Size: 16KB - Virtual size: 28KB

.rsrc Size: 16KB - Virtual size: 13KB

.text
Size: 264KB - Virtual size: 260KB

.rdata
Size: 68KB - Virtual size: 65KB

.data
Size: 16KB - Virtual size: 28KB

.rsrc
Size: 16KB - Virtual size: 13KB