d566c2a5e8e73634ef1fdac8f8cbc687

Sharing

Copy URL Twitter E-mail

General

Target

d566c2a5e8e73634ef1fdac8f8cbc687
Size

214KB
MD5

d566c2a5e8e73634ef1fdac8f8cbc687
SHA1

1799bedaaa04b8b942602633bcb12c2d4c7ba233
SHA256

f58708ffe445e622cecddc810e3891e60b040c061f926c537d4dad1296f035e4
SHA512

92bfba54e243ae1b2260667d9faf9000d8c92d7ff6a4a88fad338778369b8ef88179ead3b8c902138dd3418bc614978725418ef9606d90bef03402c385468eeb
SSDEEP

3072:iI+pxYcXghfB0qMNc7XQ1DGK+PBe/bBz0jAR8gMZo32cCJl:0XgEjcXpe/bZrRfMZD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d566c2a5e8e73634ef1fdac8f8cbc687

Files

d566c2a5e8e73634ef1fdac8f8cbc687
.exe windows:4 windows x86 arch:x86

44563280b394cc9af15705922b546f20

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

gethostname
ioctlsocket
htonl
gethostbyname
WSACleanup
WSAStartup

rpcrt4

UuidCreate
RpcStringFreeA
UuidToStringA

comctl32

_TrackMouseEvent

wininet

InternetReadFile
HttpQueryInfoA
InternetOpenA
InternetOpenUrlA
InternetCloseHandle

shlwapi

SHDeleteKeyA

kernel32

GetLastError
MulDiv
HeapAlloc
FlushInstructionCache
GetCurrentProcess
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcmpA
WideCharToMultiByte
GetModuleFileNameA
GetModuleHandleA
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcpynA
IsDBCSLeadByte
GetCurrentThreadId
CreateThread
ResetEvent
Sleep
DeleteFileA
LoadLibraryA
SetEvent
GetCurrentProcessId
WaitForSingleObject
CreateEventA
WriteProcessMemory
GetProcAddress
CloseHandle
CreateProcessA
GetCommandLineA
CopyFileA
lstrcatA
GetTempPathA
MoveFileA
GetVolumeInformationA
GetSystemDirectoryA
RemoveDirectoryA
SetFileAttributesA
GetWindowsDirectoryA
CreateDirectoryA
FindClose
FindNextFileA
FindFirstFileA
GetTickCount
GetSystemTime
SystemTimeToFileTime
GetUserDefaultLCID
SetLastError
lstrlenA
CreateMutexA
LockResource
GlobalFree
GlobalHandle
ExpandEnvironmentStringsA
GetLocalTime
GetVersion
GetComputerNameA
ReadFile
SetFilePointer
CreateFileA
MoveFileExA
Process32Next
TerminateProcess
OpenProcess
Process32First
ResumeThread
GetPriorityClass
VirtualAlloc
VirtualFree
CreateRemoteThread
HeapDestroy
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
SetUnhandledExceptionFilter
GetStartupInfoA
ExitProcess
GetSystemTimeAsFileTime
HeapReAlloc
VirtualQuery
GetSystemInfo
VirtualProtect
RtlUnwind
GetStdHandle
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
IsBadReadPtr
IsBadCodePtr
GetOEMCP
SetHandleCount
GetCPInfo
GetStringTypeA
GetStringTypeW
lstrlenW
InterlockedDecrement
InterlockedIncrement
lstrcmpiA
GetShortPathNameA
lstrcpyA
CreateToolhelp32Snapshot
GetProcessHeap
HeapFree
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
HeapCreate
IsBadWritePtr
SetStdHandle
FlushFileBuffers
HeapSize
LCMapStringA
LCMapStringW
WriteFile
GetTimeZoneInformation
SetEndOfFile
CompareStringA
CompareStringW
ReleaseMutex
SetEnvironmentVariableA

user32

KillTimer
GetUpdateRgn
LoadImageA
ShowWindow
CharLowerA
CreateDialogParamA
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
RegisterWindowMessageA
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
RegisterClassExA
GetClassInfoExA
LoadCursorA
wsprintfA
CreateWindowExA
CreateAcceleratorTableA
CharNextA
PostQuitMessage
GetWindowRect
ExitWindowsEx
FindWindowExA
GetParent
GetClassNameA
SetWindowPos
DestroyWindow
GetDlgItem
IsWindow
SetTimer
DestroyAcceleratorTable
GetFocus
IsChild
GetWindow
SetFocus
BeginPaint
EndPaint
CallWindowProcA
FindWindowA
CreateDialogIndirectParamA
SetWindowContextHelpId
MapDialogRect
DrawTextA
SetActiveWindow
ScreenToClient
EnableWindow
GetPropA
SetPropA
EnumChildWindows
GetSystemMetrics
GetDesktopWindow
InvalidateRgn
InvalidateRect
ReleaseDC
GetDC
GetClientRect
FillRect
SetCapture
ReleaseCapture
GetSysColor
UnregisterClassA
MessageBoxA
PostThreadMessageA
DefWindowProcA
GetWindowLongA
SetWindowLongA
SetDlgItemTextA
SendMessageA
EnumWindows
PostMessageA
GetForegroundWindow
RedrawWindow

gdi32

GetDIBits
SetTextColor
CreateRectRgn
FillRgn
SetStretchBltMode
SetDIBits
CreateFontIndirectA
SetBkMode
StretchBlt
SetBkColor
CreateSolidBrush
GetStockObject
GetObjectA
GetDeviceCaps
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
DeleteObject
SelectObject

advapi32

RegEnumValueA
RegQueryValueExA
GetUserNameA
RegLoadKeyA
RegUnLoadKeyA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCreateKeyA
RegOpenKeyA
RegQueryValueA
RegSetValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA

shell32

Shell_NotifyIconA
ShellExecuteA
SHGetSpecialFolderPathA

ole32

CoTaskMemAlloc
CoCreateInstance
OleLockRunning
CreateStreamOnHGlobal
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
CoTaskMemFree
CoTaskMemRealloc
OleInitialize
OleUninitialize
CoInitialize
CoUninitialize
StringFromGUID2

oleaut32

VariantInit
SysAllocString
SysFreeString
VarUI4FromStr
LoadTypeLi
LoadRegTypeLi
SysAllocStringLen
VariantClear
OleCreateFontIndirect
SysStringByteLen
SysStringLen

Sections

.text
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 212KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

44563280b394cc9af15705922b546f20

Headers

File Characteristics

Imports

wsock32

rpcrt4

comctl32

wininet

shlwapi

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 168KB - Virtual size: 168KB

.rdata Size: 44KB - Virtual size: 44KB

.data Size: 212KB - Virtual size: 212KB

.rsrc Size: 112KB - Virtual size: 112KB

.reloc Size: 24KB - Virtual size: 24KB

.text
Size: 168KB - Virtual size: 168KB

.rdata
Size: 44KB - Virtual size: 44KB

.data
Size: 212KB - Virtual size: 212KB

.rsrc
Size: 112KB - Virtual size: 112KB

.reloc
Size: 24KB - Virtual size: 24KB