d527666d79541e80f252872414e88aaf

Sharing

Copy URL Twitter E-mail

General

Target

d527666d79541e80f252872414e88aaf
Size

843KB
MD5

d527666d79541e80f252872414e88aaf
SHA1

c1d34071daf876a41fce5489d0e8d73a5388c0d0
SHA256

75a9dbb9d1ef9b7aaad26baf109f43486cd63342606a81d985e708d9325c7a6e
SHA512

364fa6c16e5b85fbafc040e5a6988610ef55e029a8aff450ee3df9f0d1905f0638b23d6203bef33a5085268de8809dadec69b6f0c80f1f9f3c8345537ed178d6
SSDEEP

24576:U3mNaKI80YIMTYUdC+iUDPmPLcJt61l3LYxxP1CK:haKrYUbiYtKl7YxxcK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d527666d79541e80f252872414e88aaf

Files

d527666d79541e80f252872414e88aaf
.exe windows:5 windows x86 arch:x86

e1cb20fa0322bb22ebbd7c2e76ab113f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetPrivateProfileIntA
RtlUnwind
CloseHandle
SetEndOfFile
GetStringTypeA
HeapSize
ReleaseMutex
lstrlenA
SetEnvironmentVariableA
OutputDebugStringA
DeleteFileA
WriteFile
GetVersionExA
CopyFileA
lstrcpyA
VirtualAlloc
ExitProcess
GlobalLock
GetModuleHandleA
GetCurrentThreadId
GetTickCount
GetThreadLocale
GlobalUnlock
FindFirstFileA
GetCommandLineA
GetEnvironmentVariableA
TerminateProcess
FreeLibrary
LCMapStringA
UnlockFile
VirtualFree
HeapDestroy
GlobalFree
CreateDirectoryA
GetFileType
TlsFree
GetCPInfo
GetConsoleCP
ExitThread
VirtualProtect
GetSystemDirectoryA
SizeofResource
LoadResource
GetStringTypeW
lstrcpynA
IsBadWritePtr
WideCharToMultiByte
GetFileAttributesA
GetStartupInfoA
TlsSetValue
GetSystemInfo
GetProcessVersion
LockFile
GetPrivateProfileSectionA
GlobalFindAtomA
MultiByteToWideChar
FindResourceA
GetModuleFileNameA
GetFileTime
MulDiv
GlobalDeleteAtom
CreateFileA
GlobalAddAtomA
GetVersion
GlobalReAlloc
lstrcatA
FreeEnvironmentStringsW
GetCurrentThread
IsBadReadPtr
CreateMutexA
DuplicateHandle
FileTimeToSystemTime
GetFullPathNameA
UnhandledExceptionFilter
IsBadCodePtr
lstrcmpiA
HeapReAlloc
GetCurrentDirectoryA
TlsAlloc
SetFilePointer
GetStdHandle
Sleep
LockResource
GetProcAddress
GlobalFlags
GetACP
SetHandleCount
CompareStringA
GetProfileStringA
GetLastError
GetOEMCP
GetDriveTypeA
FreeEnvironmentStringsA
LCMapStringW
InterlockedDecrement
LoadLibraryA
HeapFree
GlobalAlloc
lstrcmpA
FileTimeToLocalFileTime
GetCurrentProcess
lstrlenW
WritePrivateProfileStringA
TlsGetValue
GetEnvironmentStringsW
LocalAlloc
LeaveCriticalSection
GlobalHandle
GetShortPathNameA
GetFileSize
GetTimeZoneInformation
SetFileAttributesA
HeapCreate
FindClose
SetErrorMode
InitializeCriticalSection
ReadFile
FlushFileBuffers
InterlockedIncrement
GetTempPathA
LocalReAlloc
GetPrivateProfileStringA
GlobalGetAtomNameA
GetLocalTime
CompareStringW
SetStdHandle
GetVolumeInformationA
SetUnhandledExceptionFilter
LocalFree
GetEnvironmentStrings
EnterCriticalSection
DeleteCriticalSection
FormatMessageA
RaiseException
SetLastError

user32

BeginPaint
SetActiveWindow
ExcludeUpdateRgn
GetWindowRect
GetForegroundWindow
CharUpperA
GetWindowDC
IsDialogMessageA
PostThreadMessageA
DrawIcon
GetMenuCheckMarkDimensions
LoadImageA
GetIconInfo
GetTopWindow
SetWindowLongA
IsWindowVisible
CallNextHookEx
GetScrollInfo
LoadIconA
RemovePropA
SetWindowTextA
FillRect
MoveWindow
TranslateMessage
GetMessageTime
DrawEdge
PeekMessageA
UnhookWindowsHookEx
DestroyIcon
GetDC
DrawTextA
MapWindowPoints
GetParent
EndDialog
TrackPopupMenuEx
GetCursorPos
ShowCaret
DrawStateA
GetWindowTextLengthA
GetMenuState
CopyAcceleratorTableA
LoadStringA
DrawFocusRect
GetSubMenu
FrameRect
CreateDialogIndirectParamA
LoadBitmapA
SetScrollPos
ModifyMenuA
GetWindowPlacement
BringWindowToTop
GetCapture
LoadCursorA
IsIconic
GetSystemMetrics
InflateRect
GetNextDlgGroupItem
PtInRect
IsWindowEnabled
IntersectRect
ShowWindow
PostQuitMessage
MessageBeep
GetWindow
SetFocus
UpdateWindow
PostMessageA
GetMenuItemCount
SetCursor
GetMenuItemID
GetSysColor
GetClassLongA
GetKeyState
MapDialogRect
SetWindowPos
OffsetRect
GetWindowLongA
GetMessagePos
IsWindow
EnableMenuItem
GetLastActivePopup
IsChild
DestroyMenu
GrayStringA
GetDlgItem
DefWindowProcA
DrawIconEx
SetTimer
LoadMenuA
SetWindowContextHelpId
EndPaint
GetClientRect
GetMenu
SetRect
CharNextA
GetWindowTextA
CreateWindowExA
CreateIconIndirect
CallWindowProcA
WinHelpA
ScreenToClient
DestroyWindow
RegisterClassA
GetClassInfoA
SetMenuItemBitmaps
CopyRect
RedrawWindow
UnregisterClassA
RegisterClipboardFormatA
SetPropA
wsprintfA
GetActiveWindow
ValidateRect
HideCaret
CheckMenuItem
DispatchMessageA
SendMessageA
WindowFromPoint
SendDlgItemMessageA
GetDesktopWindow
TabbedTextOutA
ClientToScreen
KillTimer
GetMessageA
SetScrollInfo
SetForegroundWindow
InvalidateRect
DestroyCursor
DefDlgProcA
GetNextDlgTabItem
SetWindowsHookExA
IsWindowUnicode
ReleaseDC
GetDlgCtrlID
GetFocus
AdjustWindowRectEx
SetWindowRgn
GetSysColorBrush
wvsprintfA
GetPropA
GetClassNameA
MessageBoxA
SystemParametersInfoA
RegisterWindowMessageA
EnableWindow

gdi32

LineTo
CreateCompatibleBitmap
GetPixel
GetWindowExtEx
BitBlt
GetViewportExtEx
GetMapMode
CreateSolidBrush
CombineRgn
OffsetViewportOrgEx
SetViewportOrgEx
FillRgn
CreateRectRgn
GetClipBox
CreateRoundRectRgn
CreatePolygonRgn
SetTextColor
SetBkMode
SetMapMode
GetStockObject
LPtoDP
Escape
Rectangle
FrameRgn
CreateDIBitmap
IntersectClipRect
ScaleViewportExtEx
GetTextExtentPoint32A
CreateCompatibleDC
ScaleWindowExtEx
CreateBitmap
PtVisible
GetCurrentObject
SetPixel
DPtoLP
RestoreDC
CreatePen
DeleteDC
PatBlt
GetTextExtentPointA
SetWindowOrgEx
SetBkColor
SelectObject
DeleteObject
GetDeviceCaps
TextOutA
MoveToEx
CreateFontIndirectA
GetBkColor
GetObjectA
SetViewportExtEx
SetWindowExtEx
RectVisible
SaveDC
ExtTextOutA
GetTextColor
CreateFontA
SelectClipRgn

comdlg32

GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA

advapi32

RegSetValueExA
RegOpenKeyA
RegCloseKey
RegQueryValueA
RegEnumKeyA
RegSetValueA
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
AllocateLocallyUniqueId

shell32

SHBrowseForFolderA
ShellExecuteA
SHGetPathFromIDListA
ExtractIconA
ShellExecuteExA
SHGetFileInfoA

ole32

CLSIDFromString
StringFromCLSID
StgCreateDocfileOnILockBytes
CoDisconnectObject
CoTaskMemAlloc
CLSIDFromProgID
OleInitialize
CoTaskMemFree
StgOpenStorageOnILockBytes
CoCreateInstance
CoRevokeClassObject
OleIsCurrentClipboard
CoFreeUnusedLibraries
OleUninitialize
CoGetClassObject
OleRun
OleFlushClipboard
CoRegisterClassObject
CoInitialize
CreateILockBytesOnHGlobal
CoRegisterMessageFilter

oleaut32

GetErrorInfo
LoadTypeLi
SysAllocStringLen
VariantCopy
SysStringByteLen
SysAllocStringByteLen
VariantChangeType
SysStringLen
SysFreeString
SysAllocString
VariantTimeToSystemTime
VariantInit
OleCreateFontIndirect
VariantClear

comctl32

ImageList_SetBkColor
ImageList_AddMasked
ord17
ImageList_GetImageInfo
ImageList_Destroy
_TrackMouseEvent
ImageList_GetBkColor
ImageList_DrawIndirect
ImageList_Create
ImageList_LoadImageA

imm32

ImmAssociateContext

oledlg

ord8

dnsapi

DnsAcquireContextHandle_A

Exports

Exports

_mazafaka

Sections

.text
Size: 507KB - Virtual size: 507KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.s1
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.s2
Size: 213KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.s6
Size: - Virtual size: 147KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.s3
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e1cb20fa0322bb22ebbd7c2e76ab113f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

imm32

oledlg

dnsapi

Exports

Exports

Sections

.text Size: 507KB - Virtual size: 507KB

.s1 Size: 54KB - Virtual size: 53KB

.s2 Size: 213KB - Virtual size: 212KB

.s6 Size: - Virtual size: 147KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 824B

.s3 Size: 49KB - Virtual size: 49KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 507KB - Virtual size: 507KB

.s1
Size: 54KB - Virtual size: 53KB

.s2
Size: 213KB - Virtual size: 212KB

.s6
Size: - Virtual size: 147KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 824B

.s3
Size: 49KB - Virtual size: 49KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 4KB - Virtual size: 4KB