c80c890df01f65ba25cd3445ca5cce37

Sharing

Copy URL Twitter E-mail

General

Target

c80c890df01f65ba25cd3445ca5cce37
Size

1.1MB
MD5

c80c890df01f65ba25cd3445ca5cce37
SHA1

ea840d2514e79809db31086af6c12b9ec8cd2d9d
SHA256

418401fcc76350b24fd964b08648e72cf5a21adb5d9f61d76f22e81bcfec9475
SHA512

c542764285902d989c667c9fc23f32a7bca2d942cab7ff6b4eb3a82645d5398fe8c33cc9557764d84a5ef06cf944e5e43e34a767be06e7c0d1fd997c57dd5011
SSDEEP

24576:8Bkrj7SIocME66wODzxiht8D7YAN6shfdiAGhEECJT:StIxxEAN6sh1iAGuEI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c80c890df01f65ba25cd3445ca5cce37

Files

c80c890df01f65ba25cd3445ca5cce37
.exe windows:5 windows x86 arch:x86

0724a93f29dbec0b334508e49c84ec1a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

htonl
WSARecv
getpeername
getsockname
socket
ioctlsocket
WSASocketW
ntohs
closesocket
getsockopt
WSAGetLastError
htons
setsockopt
WSARecvFrom
WSASendTo
WSASetLastError
WSAStartup
select
WSAIoctl
WSASend
shutdown
listen
FreeAddrInfoW
GetAddrInfoW
bind

advapi32

RegOpenKeyExA
GetSecurityInfo
SetSecurityDescriptorDacl
SetEntriesInAclA
InitializeSecurityDescriptor
SetFileSecurityA
RegQueryValueExA
AllocateAndInitializeSid
FreeSid
CheckTokenMembership
GetUserNameW
RevertToSelf
CreateProcessAsUserA
SetTokenInformation
ImpersonateLoggedOnUser
OpenProcessToken
DuplicateTokenEx
CreateServiceA
StartServiceCtrlDispatcherA
CloseServiceHandle
SetServiceStatus
RegisterServiceCtrlHandlerA
OpenSCManagerA
DeleteService
ControlService
SystemFunction036
SetSecurityInfo
RegSetValueExA
RegCloseKey
OpenServiceA
StartServiceA

shell32

SHGetKnownFolderPath
DragQueryFileW
SHGetStockIconInfo
DragQueryFileA
ShellExecuteA
DragFinish
DragAcceptFiles
Shell_NotifyIconA
SHGetPathFromIDListA
SHBrowseForFolderA

userenv

CreateEnvironmentBlock
DestroyEnvironmentBlock

iphlpapi

GetAdaptersInfo

wtsapi32

WTSFreeMemory
WTSQuerySessionInformationA
WTSQueryUserToken

comctl32

PropertySheetA
CreatePropertySheetPageA
ord17

dwmapi

DwmIsCompositionEnabled
ord102

kernel32

RtlUnwind
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExW
UnhandledExceptionFilter
CreateEventW
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetStringTypeW
FreeLibraryAndExitThread
ExitThread
CreateThread
GetModuleHandleExW
SetUnhandledExceptionFilter
GetModuleHandleW
SetStdHandle
GetConsoleCP
HeapFree
CloseHandle
WTSGetActiveConsoleSessionId
GetProcAddress
VerSetConditionMask
VerifyVersionInfoW
TlsSetValue
EnterCriticalSection
OutputDebugStringA
LeaveCriticalSection
GetLastError
LoadLibraryA
FreeLibrary
TlsGetValue
FormatMessageA
GetTickCount
FindResourceA
lstrlenA
GetCurrentThreadId
GetModuleHandleA
lstrcpynA
GetVersion
MultiByteToWideChar
MoveFileExA
Sleep
InitializeCriticalSection
WaitForSingleObject
TlsAlloc
GlobalFree
DeleteCriticalSection
TlsFree
VirtualQuery
SetEvent
CreateEventA
SetLastError
OpenProcess
ProcessIdToSessionId
FormatMessageW
GlobalLock
GetCurrentProcessId
GlobalUnlock
FindFirstFileW
FindNextFileW
FindClose
GetFileAttributesExW
GlobalAlloc
GetTempPathW
WideCharToMultiByte
GetComputerNameA
GetModuleFileNameA
GetFileSizeEx
LocalAlloc
GetCurrentDirectoryA
SetCurrentDirectoryA
GetFileAttributesA
CreateFileA
DeleteFileA
LocalFree
RemoveDirectoryA
CreateProcessA
CreateDirectoryA
GetSystemInfo
GetConsoleMode
HeapAlloc
SetErrorMode
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateIoCompletionPort
ReadFile
SetNamedPipeHandleState
GetCurrentProcess
WriteFile
RegisterWaitForSingleObject
UnregisterWait
CreateNamedPipeW
PeekNamedPipe
CreateFileW
DuplicateHandle
QueueUserWorkItem
CancelSynchronousIo
GetNamedPipeHandleStateA
GetCurrentThread
CancelIoEx
SwitchToThread
WaitNamedPipeW
ConnectNamedPipe
FlushFileBuffers
SetHandleInformation
SetFileCompletionNotificationModes
CancelIo
GetModuleFileNameW
SetEnvironmentVariableW
FreeEnvironmentStringsW
QueryPerformanceFrequency
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetEnvironmentStringsW
SleepConditionVariableCS
TryEnterCriticalSection
ReleaseSemaphore
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
ResumeThread
CreateSemaphoreA
SetConsoleCtrlHandler
GetLongPathNameW
ReadDirectoryChangesW
TerminateProcess
UnregisterWaitEx
LCMapStringW
GetExitCodeProcess
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
GetConsoleCursorInfo
SetConsoleCursorInfo
FillConsoleOutputCharacterW
ReadConsoleInputW
ReadConsoleW
ResetEvent
WriteConsoleInputW
FillConsoleOutputAttribute
WriteConsoleW
SetEndOfFile
SetConsoleCursorPosition
SetFilePointerEx
DebugBreak
GetStartupInfoW
GetStdHandle
VirtualProtect
VirtualFree
VirtualAlloc
VirtualUnlock
VirtualLock
LCMapStringEx
DecodePointer
EncodePointer
GetExitCodeThread
WaitForSingleObjectEx
RaiseException
InitializeCriticalSectionEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
GetDateFormatW
GetTimeFormatW
CompareStringW
GetLocaleInfoW
ExitProcess
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
GetTimeZoneInformation
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetProcessHeap
HeapSize
GetFileType
GetNumberOfConsoleInputEvents

user32

EndDialog
CallNextHookEx
GetCursorPos
DestroyMenu
DestroyIcon
GetSubMenu
TrackPopupMenu
IsWindowVisible
MessageBoxIndirectA
FindWindowA
EnableMenuItem
PostQuitMessage
KillTimer
GetClientRect
LoadIconA
MoveWindow
MessageBoxIndirectW
GetWindowLongA
RedrawWindow
SetTimer
SetMenuItemBitmaps
DeleteMenu
GetMenu
UnregisterClassA
TranslateMessage
FindWindowExA
TranslateAcceleratorA
GetAsyncKeyState
DispatchMessageA
GetMessageA
DrawIconEx
IsClipboardFormatAvailable
GetClipboardData
CloseClipboard
OpenClipboard
GetUserObjectInformationA
SetClipboardData
GetClipboardSequenceNumber
EmptyClipboard
DispatchMessageW
GetMessageW
RegisterClipboardFormatA
GetClipboardFormatNameA
RegisterClipboardFormatW
PeekMessageW
DialogBoxIndirectParamA
MapVirtualKeyW
GetDlgItemTextA
EnableWindow
GetKeyState
GetShellWindow
VkKeyScanW
MapVirtualKeyA
GetForegroundWindow
SetForegroundWindow
SendInput
FillRect
DrawTextA
GetIconInfo
DrawIcon
SetThreadDesktop
GetCursorInfo
OpenInputDesktop
LoadMenuA
LoadImageA
IsDialogMessageA
GetDlgCtrlID
SetWindowsHookExA
GetWindowTextA
SetWindowTextA
MessageBoxA
UnhookWindowsHookEx
CreateDialogParamA
GetWindowRect
LoadCursorA
DestroyWindow
GetDC
SetWindowPos
GetSystemMetrics
ShowWindow
IsWindow
RegisterWindowMessageA
SetWindowLongA
CallWindowProcA
WindowFromDC
RegisterClassA
DefWindowProcA
CreateWindowExA
IntersectRect
SetFocus
GetUpdateRect
GetClassInfoA
SendMessageA
SystemParametersInfoA
GetDlgItem
GetDesktopWindow
GetParent
ReleaseDC
BeginPaint
EndPaint
PostMessageA
CreateDialogIndirectParamA
DialogBoxParamA
PeekMessageA
GetWindowTextLengthA

gdi32

RestoreDC
GetObjectA
CreateCompatibleBitmap
CreateFontIndirectA
CreateSolidBrush
GetCurrentObject
BitBlt
SetBkMode
IntersectClipRect
SelectObject
CreateDIBSection
CreateCompatibleDC
SaveDC
GetStockObject
DeleteDC
DeleteObject

ole32

OleSetClipboard
OleInitialize
OleUninitialize
CoCreateInstance
CoTaskMemFree
CoUninitialize
CoInitialize

comdlg32

GetOpenFileNameA
CommDlgExtendedError
GetSaveFileNameA

Sections

.text
Size: 853KB - Virtual size: 853KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 219KB - Virtual size: 219KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0724a93f29dbec0b334508e49c84ec1a

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

advapi32

shell32

userenv

iphlpapi

wtsapi32

comctl32

dwmapi

kernel32

user32

gdi32

ole32

comdlg32

Sections

.text Size: 853KB - Virtual size: 853KB

.rdata Size: 219KB - Virtual size: 219KB

.data Size: 17KB - Virtual size: 2.6MB

.rsrc Size: 21KB - Virtual size: 20KB

.reloc Size: 35KB - Virtual size: 35KB

.text
Size: 853KB - Virtual size: 853KB

.rdata
Size: 219KB - Virtual size: 219KB

.data
Size: 17KB - Virtual size: 2.6MB

.rsrc
Size: 21KB - Virtual size: 20KB

.reloc
Size: 35KB - Virtual size: 35KB