cc43f43958e6abe275ff1d2f36cf7bb5

Sharing

Copy URL Twitter E-mail

General

Target

cc43f43958e6abe275ff1d2f36cf7bb5
Size

2.1MB
MD5

cc43f43958e6abe275ff1d2f36cf7bb5
SHA1

c06f7e47cb69ae809cc0bc93e3dcf4d3f3d77d6a
SHA256

546dc1638d85107b768d996ccd8449e03937e3ea29f7590e5e7e88797cc8f95a
SHA512

a3d5e3d612d340ff4dff39cc2631025ee4bb6993d20e8d7b1adec56d7bc6e975e383b3bd31c180e6f4c0c81c16e9bc12780acee6825fa31fd119833547f1b70d
SSDEEP

24576:K+VNM6BVppIXqq1PCwFmR3wamU7aMFG2wC7asHwop3652ad:DVvpAvabOilmOpK/d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc43f43958e6abe275ff1d2f36cf7bb5

Files

cc43f43958e6abe275ff1d2f36cf7bb5
.exe windows:4 windows x86 arch:x86

ca358b0f2c7dd32b51ad244fedc7a242

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempFileNameA
Beep
GetStringTypeW
GetStringTypeA
SetStdHandle
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
RaiseException
GetEnvironmentVariableA
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapCreate
HeapDestroy
HeapFree
ExitProcess
GetCommandLineA
GetStartupInfoA
HeapAlloc
HeapReAlloc
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
GetCurrentProcessId
GetCurrentThreadId
GetSystemInfo
VirtualAlloc
VirtualQuery
VirtualFree
GetVolumeInformationA
FindNextFileA
GetFileType
DeleteFileA
UnlockFileEx
UnlockFile
LockFileEx
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
SetEndOfFile
ReadFile
GetFileAttributesA
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateFileA
GetStdHandle
GetLocalTime
GlobalFlags
GlobalFindAtomA
SetConsoleTitleA
AllocConsole
WritePrivateProfileStringA
WriteProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetProfileIntA
FormatMessageA
LocalFree
GlobalDeleteAtom
GlobalGetAtomNameA
GlobalAddAtomA
_lcreat
_hwrite
MulDiv
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
FindFirstFileA
FindClose
_lopen
_llseek
_lread
_hread
_lclose
GetTickCount
GetLogicalDrives
GetProfileStringA
lstrcpyA
lstrcatA
FreeLibrary
SizeofResource
GetModuleHandleA
GetCurrentDirectoryA
SetCurrentDirectoryA
QueryPerformanceFrequency
QueryPerformanceCounter
GetDriveTypeA
GlobalMemoryStatus
GlobalReAlloc
GlobalUnfix
GlobalSize
GlobalLock
GlobalUnlock
GlobalCompact
GlobalFree
GlobalAlloc
lstrcmpA
Sleep
CreateMutexA
GetLastError
ReleaseMutex
CreateProcessA
WaitForSingleObject
GetModuleFileNameA
GetVersionExA
GetSystemDirectoryA
GetWindowsDirectoryA
WinExec
GetVersion
LoadModule
lstrlenA
FindResourceA
LoadResource
LockResource
FreeResource
GetDiskFreeSpaceExA
MultiByteToWideChar
GetTempPathA
GetCurrentProcess
OpenProcess
GetExitCodeProcess
TerminateProcess
CreateToolhelp32Snapshot
Process32First
Process32Next
CloseHandle
LoadLibraryA
RtlUnwind
GetProcessHeap
GetProcAddress

user32

DefMDIChildProcA
CreateAcceleratorTableA
DestroyAcceleratorTable
LoadAcceleratorsA
LoadStringA
RegisterWindowMessageA
EnableMenuItem
CreatePopupMenu
CreateMenu
DestroyIcon
LoadIconA
GetClassLongA
SetClassLongA
GetDlgCtrlID
GetNextDlgTabItem
GetDlgItem
UpdateWindow
GetDialogBaseUnits
CreateDialogIndirectParamW
CreateDialogParamW
DialogBoxIndirectParamW
DialogBoxParamW
CreateDialogIndirectParamA
CreateDialogParamA
EndDialog
DialogBoxIndirectParamA
DialogBoxParamA
CallNextHookEx
SetWindowsHookExA
WinHelpA
SetActiveWindow
DestroyWindow
ReleaseCapture
GetCapture
SetCapture
CopyRect
SetRectEmpty
PtInRect
DrawStateA
CreateWindowExA
ShowCursor
SetCursorPos
DestroyCursor
LoadCursorA
CreateCursor
SetCursor
CharLowerA
CharUpperA
FrameRect
MapDialogRect
InvertRect
HideCaret
SetCaretPos
ShowCaret
DestroyCaret
CreateCaret
GetCaretPos
MapWindowPoints
GetCursorPos
OffsetRect
MessageBeep
ChildWindowFromPoint
GetWindowWord
SetWindowTextA
SetParent
DefWindowProcA
MapVirtualKeyA
keybd_event
DefFrameProcA
SetKeyboardState
GetAsyncKeyState
GetKeyState
LoadBitmapA
ClientToScreen
RegisterClassA
DestroyMenu
SetTimer
GetWindowDC
SetForegroundWindow
GetFocus
SetFocus
GetMenuItemCount
GetMenuItemInfoA
SetMenuItemInfoA
FillRect
GetPropA
InvalidateRect
BeginPaint
EndPaint
GetWindow
SetPropA
GetDCEx
CharToOemA
OemToCharA
IsDialogMessageA
PeekMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
PostQuitMessage
PostMessageA
IsWindowEnabled
EnableWindow
WindowFromPoint
IsWindowVisible
CallWindowProcA
SetWindowLongA
GetWindowTextA
GetWindowThreadProcessId
ClipCursor
GetClassInfoA
FindWindowA
SetWindowWord
CloseWindow
GetWindowRect
SendMessageA
ShowWindow
GetForegroundWindow
GetWindowLongA
EnumWindows
ExitWindowsEx
ChangeDisplaySettingsA
SetWindowPos
IsZoomed
IsIconic
IsChild
GetClassNameA
GetParent
ScreenToClient
BringWindowToTop
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
MoveWindow
GetSysColor
DrawTextExA
DrawTextA
MessageBoxA
GetClipboardData
IsClipboardFormatAvailable
GetScrollPos
GetScrollRange
SetScrollPos
SetScrollRange
GetKeyboardState
SetClassWord
GetWindowTextLengthA
wsprintfA
ReleaseDC
CreateIconIndirect
GetDC
GetIconInfo
DrawIcon
GetSystemMetrics
GetDesktopWindow
GetClientRect
SetWindowRgn
ScrollWindowEx
ScrollWindow
WaitMessage
GetMenu
IsMenu
RemoveMenu
InsertMenuA
ModifyMenuA
SetMenu
AppendMenuA
LoadMenuA
HiliteMenuItem
DrawMenuBar
GetMenuState
GetMenuStringA
DrawFocusRect
GetSubMenu
GetActiveWindow
IsWindow
GetMenuItemID
GetSystemMenu
KillTimer
CheckMenuItem
TrackPopupMenu

gdi32

SetBkColor
SetTextColor
ExtTextOutA
GetTextAlign
SetTextJustification
GetTextColor
GetBkColor
BitBlt
SetMapMode
GetMapMode
CreateBitmapIndirect
CreatePatternBrush
CreateDIBitmap
CreateHatchBrush
GetStockObject
SetWinMetaFileBits
GetMetaFileBitsEx
SetMetaFileBitsEx
GetWinMetaFileBits
CreateSolidBrush
CreateBrushIndirect
CreateDCA
SetWindowExtEx
SetViewportExtEx
SetViewportOrgEx
SaveDC
RestoreDC
SetDIBitsToDevice
GetDeviceCaps
GetTextExtentPoint32A
FrameRgn
SetROP2
CreateRectRgn
LineTo
MoveToEx
CreatePen
SetStretchBltMode
PatBlt
SetBkMode
SelectPalette
CreatePalette
GetTextExtentPointA
UnrealizeObject
RoundRect
Arc
Chord
Ellipse
FloodFill
ExtFloodFill
PolyPolygon
SetPolyFillMode
Rectangle
Pie
SetBrushOrgEx
GetDIBits
SetWindowOrgEx
GetWindowOrgEx
GetViewportOrgEx
StretchDIBits
StartDocA
EndDoc
StartPage
EndPage
Escape
ResetDCA
EnumFontFamiliesA
AbortDoc
CreateMetaFileA
CloseMetaFile
DeleteMetaFile
GetMetaFileA
PlayMetaFile
CreateEnhMetaFileA
CloseEnhMetaFile
DeleteEnhMetaFile
GetEnhMetaFileA
PlayEnhMetaFile
SetTextAlign
TextOutA
EnumFontsA
GetObjectType
GetTextMetricsA
GetTextFaceA
RemoveFontResourceA
AddFontResourceA
CreateFontA
CreateRoundRectRgn
StretchBlt
CreateCompatibleBitmap
CreateCompatibleDC
GetObjectA
CreateBitmap
SelectObject
GetPixel
SetPixel
RealizePalette
DeleteDC
DeleteObject

winspool.drv

ClosePrinter
GetPrinterA
OpenPrinterA
DocumentPropertiesA

comctl32

InitCommonControlsEx
ord17
ImageList_AddMasked

comdlg32

ChooseFontA
GetOpenFileNameA
GetSaveFileNameA
ChooseColorA
PrintDlgA
FindTextA
CommDlgExtendedError
PageSetupDlgA

advapi32

RegEnumKeyA
RegDeleteKeyA
RegSetValueA
RegCreateKeyA
RegQueryValueA
RegOpenKeyA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegEnumValueA

shell32

DragQueryFileA
DragAcceptFiles
ExtractIconA
ShellAboutA
SHGetSpecialFolderPathA
SHGetFileInfoA
DragQueryPoint

ole32

CoUninitialize
CoCreateInstance
CoInitialize
CLSIDFromString
CoTaskMemFree
CLSIDFromProgID
OleInitialize
OleUninitialize
CoGetClassObject
StringFromCLSID

oleaut32

GetActiveObject
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElement
VarR8FromCy
VarR8FromDec
SafeArrayGetDim
VariantClear
SafeArrayCreate
SafeArrayPutElement
SysStringLen
VariantInit
SysAllocStringLen
SysFreeString
LoadTypeLi
VariantCopy

wsock32

accept
closesocket
recv
send
connect
setsockopt
inet_addr
getpeername
listen
ntohs
getsockname
gethostbyaddr
gethostname
htonl
bind
WSACleanup
WSAGetLastError
WSAAsyncSelect
WSAStartup
socket
htons
getservbyname
gethostbyname
select
ioctlsocket

msimg32

AlphaBlend

winmm

sndPlaySoundA

netapi32

Netbios

Sections

.text
Size: 724KB - Virtual size: 721KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 456KB - Virtual size: 452KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 316KB - Virtual size: 332KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 676KB - Virtual size: 675KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca358b0f2c7dd32b51ad244fedc7a242

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

comctl32

comdlg32

advapi32

shell32

ole32

oleaut32

wsock32

msimg32

winmm

netapi32

Sections

.text Size: 724KB - Virtual size: 721KB

.rdata Size: 456KB - Virtual size: 452KB

.data Size: 316KB - Virtual size: 332KB

.rsrc Size: 676KB - Virtual size: 675KB

.text
Size: 724KB - Virtual size: 721KB

.rdata
Size: 456KB - Virtual size: 452KB

.data
Size: 316KB - Virtual size: 332KB

.rsrc
Size: 676KB - Virtual size: 675KB