87ac0df2f3159c5d35896e44ac6bb546e4e69d268ab299d6517bf4e2913a43d2

Sharing

Copy URL

Twitter E-mail

General

Target

87ac0df2f3159c5d35896e44ac6bb546e4e69d268ab299d6517bf4e2913a43d2
Size

2.2MB
MD5

27ebd7efbd10218c4f2ce63e25f0b62c
SHA1

8815ca57c0a71485762f8b1114c6a571089b8535
SHA256

87ac0df2f3159c5d35896e44ac6bb546e4e69d268ab299d6517bf4e2913a43d2
SHA512

f7679eb493b01c49e296575474ce6b2795cd8a290e3137b61047b5eb9ec115826006f815023a68a6318deea67a59d5a3f9c5c70ec78d169058f1da78b79d45ba
SSDEEP

49152:53dmGFRTL1aV6PJNU01qPQPIlZG89hHjuQ5nOwoGvSi4Zvl8OhR:534cl1aV6PJNLULlZG8bHjuwnOwoGvSR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87ac0df2f3159c5d35896e44ac6bb546e4e69d268ab299d6517bf4e2913a43d2

Files

87ac0df2f3159c5d35896e44ac6bb546e4e69d268ab299d6517bf4e2913a43d2
.exe windows:6 windows x86 arch:x86

caacaff4f20dd3f6279bc4e54db776de

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeZoneInformation
GetStringTypeW
LCMapStringW
CompareStringW
GetStdHandle
GetFileType
SetStdHandle
HeapQueryInformation
GetConsoleMode
ExitThread
CreateThread
GetCommandLineW
GetCommandLineA
VirtualQuery
GetSystemInfo
QueryPerformanceFrequency
GetModuleHandleExW
ExitProcess
RtlUnwind
OutputDebugStringW
GetConsoleOutputCP
SetFilePointerEx
FindNextFileW
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
CreateFileW
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
ResetEvent
FindFirstFileExW
GetWindowsDirectoryA
SetErrorMode
SearchPathA
GetTempPathA
FindResourceExW
LocalFileTimeToFileTime
GetFileSizeEx
GetFileAttributesExA
GetACP
GetStringTypeExA
MoveFileA
lstrcmpiA
GetShortPathNameA
LoadLibraryExA
DuplicateHandle
GetVolumeInformationA
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
FlushFileBuffers
DeleteFileA
SystemTimeToTzSpecificLocalTime
FileTimeToLocalFileTime
GetThreadLocale
FileTimeToSystemTime
Sleep
GetCurrentDirectoryA
VerifyVersionInfoA
lstrcpyA
VerSetConditionMask
GetFileSize
CreateFileA
GetCPInfo
GetOEMCP
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
SystemTimeToFileTime
ReplaceFileA
GetTempFileNameA
SetFileTime
GetFullPathNameA
GetFileTime
GetFileAttributesA
GetDiskFreeSpaceA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
ResumeThread
SetThreadPriority
WaitForSingleObject
SetEvent
CloseHandle
GetVersionExA
GetCurrentThread
lstrcmpA
CopyFileA
FormatMessageA
MulDiv
LocalFree
GlobalFree
GlobalSize
GlobalAlloc
GetProfileIntA
GetTickCount
GlobalLock
GlobalUnlock
GetCurrentProcessId
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
lstrcmpW
GlobalDeleteAtom
LoadLibraryW
LoadLibraryA
LoadLibraryExW
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
GetSystemDirectoryW
EncodePointer
MultiByteToWideChar
GetCurrentThreadId
CheckRemoteDebuggerPresent
IsDebuggerPresent
GetProcAddress
Process32Next
CreateToolhelp32Snapshot
GetModuleHandleA
FindResourceA
OutputDebugStringA
SetLastError
Process32First
GetModuleFileNameA
lstrcatA
FindClose
lstrlenA
EnumUILanguagesW
VirtualAlloc
GetCurrentProcess
VirtualProtect
FindFirstFileA
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SizeofResource
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapFree
HeapSize
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
FreeLibraryAndExitThread
WriteConsoleW

user32

EndDialog
CreateDialogIndirectParamA
ShowOwnedPopups
TranslateMessage
GetMessageA
PostQuitMessage
WindowFromDC
ClientToScreen
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
InSendMessage
RemoveMenu
InsertMenuA
GetMenuState
GetMenuStringA
SetRect
LockWindowUpdate
SetTimer
DrawFocusRect
GetSysColorBrush
DrawEdge
DrawIconEx
SetWindowRgn
FillRect
DrawStateA
IsZoomed
DrawFrameControl
LoadBitmapW
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
SystemParametersInfoA
SetParent
IsRectEmpty
DeleteMenu
AppendMenuA
GetSystemMenu
ClipCursor
GetCursorPos
InflateRect
ReuseDDElParam
UnpackDDElParam
LoadImageA
DestroyIcon
GetWindowThreadProcessId
GetDesktopWindow
OffsetRect
SetCursor
InsertMenuItemA
CreatePopupMenu
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
ReleaseCapture
GetActiveWindow
BringWindowToTop
InvalidateRect
ReleaseDC
GetDC
GetSystemMetrics
IsDialogMessageA
SetWindowTextA
IsWindowEnabled
SendDlgItemMessageA
CheckDlgButton
SetDlgItemTextA
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconW
LoadIconA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameA
GetClassLongA
SetWindowLongA
GetWindowLongA
PtInRect
EqualRect
GetSysColor
MapWindowPoints
ScreenToClient
MessageBoxA
AdjustWindowRectEx
GetWindowRect
GetClientRect
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetWindowContextHelpId
MapDialogRect
RegisterClipboardFormatA
EnumDisplayMonitors
UnregisterClassA
RedrawWindow
wsprintfA
EnableWindow
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
GetMenuItemCount
GetMenuItemID
GetSubMenu
SetMenu
LoadAcceleratorsW
LoadMenuW
LoadCursorA
LoadCursorW
DestroyCursor
WaitMessage
SetCapture
WindowFromPoint
GetMenuItemInfoA
CopyImage
RealChildWindowFromPoint
GetAsyncKeyState
KillTimer
GetKeyNameTextA
GetMenu
GetCapture
MapVirtualKeyA
UnionRect
IsClipboardFormatAvailable
GetDCEx
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
GetNextDlgTabItem
PeekMessageA
PostThreadMessageA
CopyAcceleratorTableA
CreateMenu
DestroyMenu
SetRectEmpty
CopyRect
IntersectRect
GetParent
RegisterWindowMessageA
DispatchMessageA
GetMessagePos
GetMessageTime
SendMessageA
PostMessageA
DefWindowProcA
CallWindowProcA
RegisterClassA
GetClassInfoA
GetClassInfoExA
CreateWindowExA
IsWindow
IsMenu
IsChild
DestroyWindow
SetWindowPos
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
SetLayeredWindowAttributes
DeferWindowPos
EndDeferWindowPos
IsWindowVisible
IsIconic
GetDlgItem
GetDlgCtrlID
SetFocus
GetFocus
GetKeyState
CharUpperA
EnableScrollBar
NotifyWinEvent
GetDoubleClickTime
SetClassLongA
TrackMouseEvent
MessageBeep
GetMenuDefaultItem
SetMenuDefaultItem
DestroyAcceleratorTable
UpdateLayeredWindow
FrameRect
GetIconInfo
SetCursorPos
CopyIcon
ModifyMenuA
GetUpdateRect
SubtractRect
GetTabbedTextExtentW
CharNextA
InvalidateRgn
GetNextDlgGroupItem
DrawIcon
GetKeyboardLayout
GetKeyboardState
ToAsciiEx
CreateAcceleratorTableA
CharUpperBuffA
GetComboBoxInfo
IsCharLowerA
MapVirtualKeyExA
HideCaret
InvertRect
GetWindowRgn
MonitorFromPoint
LoadImageW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
TranslateMDISysAccel

gdi32

CombineRgn
CreateRectRgn
CreateRoundRectRgn
GetBkColor
PatBlt
CreateDIBSection
CreatePolygonRgn
CreateEllipticRgn
CreateHatchBrush
Ellipse
ExtTextOutA
Polygon
Polyline
GetTextMetricsA
RoundRect
CreatePatternBrush
Rectangle
CopyMetaFileA
CreateDCA
GetDeviceCaps
Escape
ExcludeClipRect
GetClipBox
GetCurrentPositionEx
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextAlign
StartDocA
BitBlt
MoveToEx
TextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CloseMetaFile
CreateMetaFileA
DeleteMetaFile
GetViewportOrgEx
DPtoLP
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
GetMapMode
SetRectRgn
UnrealizeObject
RealizePalette
SetPixel
StretchBlt
SetDIBColorTable
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
CreatePalette
GetPaletteEntries
GetRgnBox
OffsetRgn
GetWindowOrgEx
GetTextAlign
LPtoDP
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextExtentPointA
GetTextExtentPoint32W
GetTextFaceA
EnumFontFamiliesExA
GetNearestPaletteIndex
GetSystemPaletteEntries
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
SetPixelV
GetTextExtentPoint32A
GetTextColor
CreateSolidBrush
CreateRectRgnIndirect
CreatePen
CreateFontIndirectA
CreateBitmap
SetBrushOrgEx
StretchDIBits
SelectObject
GetCharWidthA
DeleteObject
CreateFontA
CreateCompatibleBitmap
GetObjectA
SetTextColor
SetBkColor
CreateCompatibleDC
DeleteDC

msimg32

TransparentBlt
AlphaBlend

winspool.drv

DocumentPropertiesA
GetJobA
OpenPrinterA
ClosePrinter

advapi32

RegDeleteValueA
RegCloseKey
RegEnumValueA
RegOpenKeyExW
RegEnumKeyExA
GetFileSecurityA
SetFileSecurityA
RegQueryValueA
RegEnumKeyA
RegSetValueExA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueA

shell32

DragQueryFileA
DragFinish
SHAppBarMessage
ExtractIconA
SHGetFileInfoA
SHBrowseForFolderA
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteA
SHAddToRecentDocs

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameA
PathIsUNCA
StrFormatKBSizeA
PathStripToRootA
PathRemoveFileSpecW
PathFindExtensionA

uxtheme

DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
DrawThemeParentBackground
GetThemePartSize
DrawThemeText
OpenThemeData
CloseThemeData
GetThemeColor
GetCurrentThemeName
GetThemeSysColor
GetWindowTheme
IsAppThemed

ole32

OleSaveToStream
CreateOleAdviseHolder
OleRegGetMiscStatus
OleRegEnumVerbs
CoDisconnectObject
CoRegisterClassObject
CoRevokeClassObject
CoUninitialize
CoCreateGuid
CreateItemMoniker
CoInitialize
CLSIDFromString
CoGetClassObject
CLSIDFromProgID
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
GetRunningObjectTable
OleRun
OleIsRunning
CoCreateInstance
OleGetClipboard
CreateDataAdviseHolder
WriteClassStm
StgCreateDocfileOnILockBytes
CreateStreamOnHGlobal
CreateFileMoniker
CreateILockBytesOnHGlobal
StgIsStorageFile
StgOpenStorageOnILockBytes
StgOpenStorage
StgCreateDocfile
OleRegGetUserType
ReleaseStgMedium
CreateBindCtx
WriteClassStg
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
OleFlushClipboard
OleIsCurrentClipboard
DoDragDrop
CoInitializeEx
CoRegisterMessageFilter
CreateGenericComposite
OleDuplicateData

oleaut32

LoadTypeLi
VarBstrFromDate
VariantCopy
OleCreateFontIndirect
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocString
SysStringLen
SysAllocStringByteLen
SysStringByteLen
SysFreeString
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen

oledlg

ord8

gdiplus

GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipCreateBitmapFromScan0
GdipSetInterpolationMode
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipCreateBitmapFromStream
GdipDrawImageRectI
GdiplusShutdown
GdipAlloc
GdipFree
GdipBitmapLockBits

wininet

InternetCrackUrlA
FtpGetFileSize
InternetOpenA
InternetCloseHandle
InternetConnectA
InternetReadFile
FtpOpenFileA

oleacc

LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundA

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 346KB - Virtual size: 346KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 151KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

caacaff4f20dd3f6279bc4e54db776de

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

wininet

oleacc

imm32

winmm

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 346KB - Virtual size: 346KB

.data Size: 25KB - Virtual size: 42KB

.rsrc Size: 11KB - Virtual size: 10KB

.reloc Size: 151KB - Virtual size: 151KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 346KB - Virtual size: 346KB

.data
Size: 25KB - Virtual size: 42KB

.rsrc
Size: 11KB - Virtual size: 10KB

.reloc
Size: 151KB - Virtual size: 151KB