d47e9ec3e351802538bbd472f9bcc903

Sharing

Copy URL

Twitter E-mail

General

Target

d47e9ec3e351802538bbd472f9bcc903
Size

336KB
MD5

d47e9ec3e351802538bbd472f9bcc903
SHA1

02229aec656c98cdfe829138a40dd7acbb5d2a79
SHA256

e6b2e529e2771005d7ec2f7874936f8213372b8fd2fd10079d0e7b8cfb6ac3f0
SHA512

bd2ca1cb5b7d4b7b68e3b65b104ecf8dbf48e0825bd3b5c6233f9336c6b104211a5460fb8ff8692296f99937728fbd064dacf2078938abd1fb5039b587aadeca
SSDEEP

6144:wHlZGEjZB8WiSJq2tgODlTyWKV7v0Ao66abl:wnGYuegODlyXv0y6ab

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d47e9ec3e351802538bbd472f9bcc903

Files

d47e9ec3e351802538bbd472f9bcc903
.exe windows:4 windows x86 arch:x86

bc75a4a3103b88cd9d4d494a563cb877

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

ExcludeClipRect
FillRgn
GetClipBox
GetClipRgn
GetDIBColorTable
GetDIBits
GetDeviceCaps
GetLayout
GetMapMode
GetObjectW
GetPaletteEntries
GetStockObject
GetSystemPaletteEntries
GetTextAlign
GetTextExtentPoint32W
GetTextMetricsW
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LPtoDP
EnumFontFamiliesExW
MoveToEx
Polygon
RealizePalette
Rectangle
RestoreDC
SaveDC
SelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetDIBColorTable
SetDIBits
SetLayout
SetMapMode
SetTextAlign
SetTextColor
SetViewportOrgEx
SetWindowOrgEx
StretchBlt
Ellipse
DeleteObject
DeleteDC
DPtoLP
CreateSolidBrush
CreateRectRgnIndirect
CreateRectRgn
CreatePolygonRgn
CreatePen
CreatePalette
CreateHalftonePalette
CreateFontIndirectW
CreateDIBSection
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
LineTo
BitBlt

netapi32

NetApiBufferFree
NetGetJoinInformation

comctl32

ImageList_EndDrag
ImageList_DrawEx
ImageList_Draw
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_Destroy
ImageList_Create
ImageList_BeginDrag
ImageList_AddMasked
ImageList_Add
CreateToolbarEx
CreateStatusWindowW
ord8
ImageList_Remove
ord17
PropertySheetW
ImageList_GetIcon

wininet

InternetOpenA
HttpOpenRequestW
InternetOpenUrlW
InternetCrackUrlW
InternetReadFile
InternetSetOptionA
InternetSetOptionW
InternetSetStatusCallbackW
InternetConnectW
InternetCloseHandle
GetUrlCacheEntryInfoW
InternetCanonicalizeUrlW
HttpSendRequestW
HttpQueryInfoW
InternetOpenW
ResumeSuspendedDownload

version

GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueA
VerQueryValueW
GetFileVersionInfoA

ole32

CLSIDFromProgID
CoRegisterClassObject
OleUninitialize
OleSaveToStream
OleRun
OleRegGetUserType
OleRegGetMiscStatus
OleRegEnumVerbs
OleLockRunning
OleLoadFromStream
OleInitialize
OleFlushClipboard
OleCreateStaticFromData
RevokeDragDrop
GetHGlobalFromILockBytes
DoDragDrop
CreateStreamOnHGlobal
CreateOleAdviseHolder
CoInitialize
CoGetClassObject
CoCreateInstance
CoCreateGuid
CLSIDFromString
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
StringFromCLSID
StringFromGUID2
CoRevokeClassObject
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
IIDFromString
WriteClassStm
RegisterDragDrop
CreateILockBytesOnHGlobal

user32

SendMessageW
SetCapture
SetCursor
SetCursorPos
SetDlgItemInt
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetMenu
SetMenuDefaultItem
SetMenuItemInfoW
SetParent
SetPropA
SetRect
SetRectEmpty
SetTimer
SetWindowLongA
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowTextW
SetWindowsHookExW
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TrackPopupMenuEx
TranslateMessage
UnhookWindowsHookEx
UnionRect
UnregisterClassW
UpdateWindow
ValidateRect
WindowFromDC
wsprintfW
LoadStringW
LoadStringA
LoadMenuW
LoadMenuA
LoadImageW
LoadImageA
LoadIconW
LoadIconA
LoadCursorW
LoadCursorA
LoadBitmapW
LoadBitmapA
KillTimer
IsZoomed
IsWindowVisible
IsWindowEnabled
IsWindow
IsMenu
IsIconic
IsDlgButtonChecked
IsDialogMessageW
IsClipboardFormatAvailable
IsChild
InvalidateRgn
InvalidateRect
IntersectRect
InsertMenuItemW
InflateRect
GetWindowTextW
GetWindowTextLengthW
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowLongA
GetWindowDC
GetWindow
GetUserObjectInformationW
GetUpdateRect
GetSystemMetrics
GetSysColorBrush
SendDlgItemMessageW
GetSubMenu
GetScrollInfo
GetPropA
GetParent
GetNextDlgTabItem
GetMessageW
GetMessageTime
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastInputInfo
GetLastActivePopup
GetKeyState
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDlgItemTextW
GetDlgItemInt
GetDlgItem
GetDlgCtrlID
GetDialogBaseUnits
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameW
GetClassInfoExW
GetClassInfoExA
GetAsyncKeyState
FlashWindow
FindWindowW
FindWindowExW
FillRect
EqualRect
EnumChildWindows
EndPaint
EndDialog
EndDeferWindowPos
EnableWindow
EnableMenuItem
DrawTextW
DrawMenuBar
DrawFocusRect
DrawEdge
DrawAnimatedRects
DispatchMessageW
DialogBoxParamW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyAcceleratorTable
DeleteMenu
DeferWindowPos
DefWindowProcW
CreateWindowExW
CreateWindowExA
CreatePopupMenu
CreateDialogParamW
CreateAcceleratorTableW
CloseWindow
CloseDesktop
ClientToScreen
CheckRadioButton
CheckMenuRadioItem
CheckMenuItem
CheckDlgButton
CharUpperA
CharPrevW
CharNextW
CallWindowProcW
CallNextHookEx
BeginPaint
BeginDeferWindowPos
AdjustWindowRectEx
AdjustWindowRect
ScreenToClient
RemovePropA
MapWindowPoints
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClassW
RegisterClassExW
RegisterClassExA
RedrawWindow
PtInRect
PostThreadMessageW
PostQuitMessage
PostMessageW
PeekMessageW
OpenInputDesktop
OffsetRect
MsgWaitForMultipleObjects
MoveWindow
ModifyMenuW
MessageBoxW
MessageBoxIndirectW
GetSysColor
MessageBeep
RemoveMenu

kernel32

CompareFileTime
CompareStringA
CompareStringW
CopyFileA
CreateDirectoryW
CreateEventA
CreateEventW
CreateFileA
CreateFileMappingA
CreateFileMappingW
CreateFileW
CreateMutexA
CreateProcessW
CreateThread
DeleteCriticalSection
DeleteFileA
DeleteFileW
DuplicateHandle
EnterCriticalSection
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
FileTimeToSystemTime
FindClose
FindFirstFileW
FindResourceA
FindResourceExW
FindResourceW
FlushInstructionCache
FormatMessageA
FormatMessageW
FreeLibrary
GetACP
GetCommandLineW
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
lstrlenW
lstrlenA
lstrcpynW
lstrcpynA
lstrcpyW
lstrcmpiW
lstrcmpiA
lstrcmpW
lstrcmpA
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjects
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
UnmapViewOfFile
UnhandledExceptionFilter
TerminateThread
TerminateProcess
SystemTimeToFileTime
Sleep
SizeofResource
SetUnhandledExceptionFilter
SetThreadLocale
SetLastError
SetFilePointer
SetEvent
SetErrorMode
SetCurrentDirectoryW
SearchPathA
ResumeThread
ResetEvent
ReleaseMutex
ReadFile
RaiseException
QueryPerformanceCounter
OpenFileMappingW
OpenEventW
MultiByteToWideChar
MulDiv
MoveFileW
MoveFileExW
MapViewOfFile
LockResource
LocalFree
LocalAlloc
LoadResource
LoadLibraryW
LoadLibraryA
LeaveCriticalSection
IsValidLocale
IsDBCSLeadByteEx
IsBadWritePtr
IsBadStringPtrW
IsBadStringPtrA
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InitializeCriticalSection
HeapSize
HeapReAlloc
HeapFree
HeapDestroy
HeapAlloc
GlobalUnlock
GlobalMemoryStatus
GlobalLock
GlobalFree
GlobalAlloc
GetWindowsDirectoryW
GetWindowsDirectoryA
GetVersionExW
GetVersionExA
GetVersion
GetUserDefaultLCID
GetTimeFormatW
GetTickCount
GetThreadLocale
GetTempPathW
GetTempPathA
GetTempFileNameW
GetTempFileNameA
GetSystemTimeAsFileTime
GetSystemTime
GetSystemInfo
GetSystemDefaultUILanguage
GetSystemDefaultLCID
GetStartupInfoA
GetProcessHeap
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetLocaleInfoW
GetLocaleInfoA
GetLocalTime
GetLastError
GetFileSize
GetFileAttributesW
GetFileAttributesA
GetDateFormatW
CloseHandle

winmm

waveInGetNumDevs
PlaySoundW
waveOutGetNumDevs

oleaut32

LoadRegTypeLi
LoadTypeLi
OleCreateFontIndirect
OleCreatePropertyFrame
SafeArrayAccessData
SafeArrayCreateVector
SafeArrayDestroy
SafeArrayGetDim
SafeArrayGetElement
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayUnaccessData
SysAllocString
SysAllocStringByteLen
SysAllocStringLen
SysFreeString
SysStringByteLen
SysStringLen
VarCmp
VariantChangeType
VariantClear
VariantCopy
VariantInit
CreateStdDispatch

shlwapi

SHGetInverseCMAP
StrCatBuffA
StrCatBuffW
StrChrA
StrChrW
StrCmpIW
StrCmpNA
StrCmpNIW
StrCmpNW
StrCpyNW
StrPBrkW
StrRChrA
StrRChrW
StrStrA
StrStrIA
StrStrIW
StrStrW
StrToIntExW
StrTrimA
StrTrimW
wnsprintfA
wnsprintfW
SHGetValueW

wsock32

WSAStartup
socket
setsockopt
sendto
send
select
recvfrom
recv
ntohs
ntohl
listen
inet_addr
ioctlsocket
htons
htonl
getsockname
gethostname
gethostbyname
connect
closesocket
bind
accept
WSAGetLastError
WSACleanup
WSACancelAsyncRequest
WSAAsyncSelect
WSAAsyncGetHostByName

comdlg32

GetOpenFileNameW
GetSaveFileNameW
ChooseFontW

shell32

DragFinish
DragQueryFileW
SHAppBarMessage
SHBrowseForFolderW
SHGetFolderPathW
SHGetMalloc
SHGetPathFromIDListW
ShellExecuteExW
ShellExecuteW
Shell_NotifyIconA
Shell_NotifyIconW
DragAcceptFiles

Exports

Exports

SqmAddToAverage
SqmAddToStream
SqmAddToStreamDWord
SqmAddToStreamString
SqmAddToStreamV
SqmCleanup
SqmClearFlags
SqmCreateNewId
SqmEndSession
SqmFlushSession
SqmGetEnabled
SqmGetFlags
SqmGetMachineId
SqmGetSession
SqmGetSessionStartTime
SqmGetUserId
SqmIncrement
SqmIsWindowsOptedIn
SqmReadSharedMachineId
SqmReadSharedUserId
SqmSet
SqmSetAppId
SqmSetAppVersion
SqmSetBits
SqmSetBool
SqmSetCurrentTimeAsUploadTime
SqmSetEnabled
SqmSetFlags
SqmSetIfMax
SqmSetIfMin
SqmSetMachineId
SqmSetString
SqmSetUserId
SqmStartSession
SqmStartUpload
SqmSysprepGeneralize
SqmSysprepSpecialize
SqmTimerAccumulate
SqmTimerAddToAverage
SqmTimerRecord
SqmTimerStart
SqmUnattendedSetup
SqmWaitForUploadComplete
SqmWriteSharedMachineId
SqmWriteSharedUserId

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bc75a4a3103b88cd9d4d494a563cb877

Headers

File Characteristics

Imports

gdi32

netapi32

comctl32

wininet

version

ole32

user32

kernel32

winmm

oleaut32

shlwapi

wsock32

comdlg32

shell32

Exports

Exports

Sections

.text Size: 100KB - Virtual size: 100KB

.rdata Size: 116KB - Virtual size: 116KB

.data Size: 80KB - Virtual size: 1.7MB

.idata Size: 16KB - Virtual size: 16KB

.rsrc Size: 20KB - Virtual size: 20KB

.text
Size: 100KB - Virtual size: 100KB

.rdata
Size: 116KB - Virtual size: 116KB

.data
Size: 80KB - Virtual size: 1.7MB

.idata
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 20KB - Virtual size: 20KB