d6f3eee7116ce2c7ef652e69efd6e7bd

Sharing

Copy URL

Twitter E-mail

General

Target

d6f3eee7116ce2c7ef652e69efd6e7bd
Size

1.4MB
MD5

d6f3eee7116ce2c7ef652e69efd6e7bd
SHA1

efc2517f4ca07482d94eaa167d98f650916274d5
SHA256

c18da59b800d8f48d34a9341b12c1e0833be8a3b6916e1ae932d334564936549
SHA512

9c3041cc831d5e21a212673a8c5819bef5e0be549ff2356ec003e5cdd326fb7d84109610c34f1c32f2e66bbef574f4c299bb07994feebfe2058e05e874bc93ca
SSDEEP

24576:GdWspjFXQVYP3yQAf4e/rD1ecS/eKhlYC1u3bYm4OexEOg+xAxA:G9BOWq1ecSKC1u3bVxj+xA2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6f3eee7116ce2c7ef652e69efd6e7bd

Files

d6f3eee7116ce2c7ef652e69efd6e7bd
.dll windows:4 windows x86 arch:x86

6a9aac6db6ad5cafd8f1b0429bc70552

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetOEMCP
GlobalSize
GetCPInfo
SizeofResource
RtlUnwind
GetTimeZoneInformation
CreateThread
ExitThread
RaiseException
GetCommandLineA
GetDriveTypeA
GetPrivateProfileStringA
ExitProcess
TerminateProcess
SetStdHandle
HeapReAlloc
HeapSize
FatalAppExitA
SetHandleCount
GetStdHandle
GlobalFlags
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetProcessVersion
SetErrorMode
GetACP
GetFileType
GetStartupInfoA
VirtualFree
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetCurrentDirectoryA
GetStringTypeA
GetStringTypeW
IsBadCodePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
SetConsoleCtrlHandler
MulDiv
TlsAlloc
TlsSetValue
InterlockedExchange
FreeResource
CompareFileTime
LoadLibraryExA
MoveFileExA
TlsGetValue
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
GetEnvironmentStrings
GetEnvironmentStringsW
LocalAlloc
FindNextFileA
FindClose
SetLastError
DeleteFileA
GetLastError
GetFileAttributesA
FormatMessageA
LocalFree
GetStringTypeExA
OutputDebugStringA
GetThreadLocale
CompareStringA
GetWindowsDirectoryA
ExpandEnvironmentStringsA
GlobalAlloc
GlobalFree
GlobalMemoryStatus
Sleep
lstrlenW
MultiByteToWideChar
InterlockedIncrement
GetCurrentThreadId
GetCurrentProcessId
lstrlenA
GetTickCount
WaitForSingleObject
TerminateThread
SetEvent
ResetEvent
ResumeThread
GlobalLock
GlobalUnlock
WideCharToMultiByte
GetModuleFileNameA
GetVersionExA
lstrcmpiA
lstrcatA
lstrcpynA
lstrcmpA
lstrcpyA
QueryPerformanceCounter
InterlockedDecrement
UnlockFile
GetFullPathNameA
SetEndOfFile
SetFilePointer
LockFile
FlushFileBuffers
GetFileTime
DuplicateHandle
SystemTimeToFileTime
GlobalAddAtomA
GetVersion
GlobalGetAtomNameA
FindResourceA
GlobalFindAtomA
LockResource
WaitForMultipleObjects
LoadResource
GlobalDeleteAtom
SuspendThread
ReleaseMutex
CreateSemaphoreA
SearchPathA
SetThreadPriority
FileTimeToSystemTime
GetLocalTime
IsBadReadPtr
GetModuleHandleA
FileTimeToDosDateTime
GetSystemDirectoryA
FileTimeToLocalFileTime
GetVolumeInformationA
DosDateTimeToFileTime
LocalFileTimeToFileTime
GetPrivateProfileIntA
GetCurrentDirectoryA
GetUserDefaultLCID
CreateFileMappingA
WritePrivateProfileStringA
OpenSemaphoreA
ReleaseSemaphore
MapViewOfFile
UnmapViewOfFile
EnterCriticalSection
GetSystemTime
LeaveCriticalSection
OpenMutexA
DeleteCriticalSection
InitializeCriticalSection
OpenEventA
CreateMutexA
CreateEventA
GetCurrentProcess
GetExitCodeProcess
CreateProcessA
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
GetCurrentThread
FreeLibrary
ReadFile
GetProcAddress
WriteFile
GetTempFileNameA
GetShortPathNameA
GetTempPathA
CopyFileA
SetFileTime
SetFileAttributesA
GetFileSize
MoveFileA
CreateFileA
GetLocaleInfoW
RemoveDirectoryA
QueryPerformanceFrequency
CloseHandle
CreateDirectoryA
CompareStringW
FindFirstFileA
SetEnvironmentVariableA
GetEnvironmentVariableA
HeapDestroy
HeapCreate

user32

GetClassInfoA
GetMenu
GetMenuItemCount
GetSubMenu
WinHelpA
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetDlgCtrlID
GetClassLongA
UnhookWindowsHookEx
CallWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
GetWindow
IntersectRect
GetWindowPlacement
SetActiveWindow
CreateDialogIndirectParamA
GetLastActivePopup
IsWindowEnabled
SetCursor
ShowOwnedPopups
PostQuitMessage
MsgWaitForMultipleObjects
GetActiveWindow
GetKeyState
IsWindowVisible
SetWindowsHookExA
GetTopWindow
GetCapture
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
GetDesktopWindow
GetClassInfoExA
RegisterClassExA
SetRectEmpty
MessageBoxA
IsDlgButtonChecked
EndDialog
GetDC
DrawTextA
SetWindowTextA
GetDlgItem
GetClientRect
GetParent
IsChild
SetScrollPos
SendMessageTimeoutA
EnumWindows
FindWindowA
PostMessageA
GetWindowDC
ShowScrollBar
SetScrollInfo
BeginDeferWindowPos
DeferWindowPos
EqualRect
GetScrollInfo
GetMenuCheckMarkDimensions
LoadBitmapA
GetScrollPos
CreateWindowExA
UnregisterClassA
RegisterClassA
ScrollWindow
CopyRect
AppendMenuA
TrackPopupMenuEx
GetMenuStringA
DestroyMenu
OpenClipboard
EmptyClipboard
CloseClipboard
SetClipboardData
GetSystemMetrics
SetRect
OffsetRect
MapDialogRect
SystemParametersInfoA
SetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
WaitForInputIdle
GetWindowTextLengthA
LoadStringA
OemToCharA
CharToOemA
CharLowerA
CharUpperA
CharNextA
GetCursorPos
GetWindowRect
FlashWindow
KillTimer
IsIconic
ShowWindow
IsWindow
GetWindowTextA
SetTimer
GetPropA
EnableWindow
PeekMessageA
SetScrollRange
GetScrollRange
SetWindowPos
ScreenToClient
DestroyWindow
GetMessageA
TranslateMessage
DispatchMessageA
PostThreadMessageA
WindowFromPoint
SendMessageW
EnumChildWindows
RemovePropA
SetPropA
GetFocus
SendMessageA
SetFocus
GetClassNameA
GetWindowLongA
wsprintfA
ReleaseDC
RegisterWindowMessageA
AdjustWindowRectEx
GetSysColor
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
LoadIconA
CheckDlgButton
DestroyIcon
RegisterClipboardFormatA
CopyAcceleratorTableA
RemoveMenu
GetDialogBaseUnits
DeleteMenu
InsertMenuA
PtInRect
GetSysColorBrush
LoadCursorA
InflateRect
GrayStringA
TabbedTextOutA
EndPaint
BeginPaint
CreatePopupMenu
ClientToScreen
wvsprintfA
MoveWindow
IsDialogMessageA
ScrollWindowEx
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
DefWindowProcA
SetWindowLongA
ValidateRect
CallNextHookEx
EndDeferWindowPos
InvalidateRect
CreateDialogParamA
DialogBoxParamA
WindowFromDC
FillRect

gdi32

GetDeviceCaps
SelectObject
CreateBitmap
GetTextExtentPoint32A
SetTextColor
SetBkColor
GetClipBox
GetTextColor
GetBkColor
GetObjectA
DeleteDC
StartDocA
GetStockObject
RestoreDC
SelectPalette
SaveDC
SetROP2
SetStretchBltMode
SetPolyFillMode
SetViewportOrgEx
OffsetViewportOrgEx
SetMapMode
ScaleViewportExtEx
SetWindowOrgEx
SetViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
OffsetWindowOrgEx
ExcludeClipRect
IntersectClipRect
SelectClipRgn
MoveToEx
LineTo
OffsetClipRgn
SetTextJustification
SetTextCharacterExtra
SetTextAlign
GetCurrentPositionEx
ArcTo
SetMapperFlags
PolyDraw
PolylineTo
SetArcDirection
CreatePen
Rectangle
SetColorAdjustment
GetClipRgn
CreateRectRgn
PolyBezierTo
ExtSelectClipRgn
PlayMetaFileRecord
SelectClipPath
EnumMetaFile
PlayMetaFile
GetObjectType
GetWindowExtEx
ExtCreatePen
GetViewportExtEx
CreatePatternBrush
CreateDIBPatternBrushPt
CreateHatchBrush
RectVisible
TextOutA
PtVisible
Escape
GetMapMode
ExtTextOutA
SetRectRgn
CombineRgn
PatBlt
CreateFontIndirectA
DPtoLP
CreateRectRgnIndirect
CopyMetaFileA
CreateDCA
GetTextMetricsA
Polyline
LPtoDP
StretchBlt
CreateCompatibleBitmap
GetDIBits
BitBlt
CreateDIBitmap
CreateCompatibleDC
DeleteObject
CreateSolidBrush
SetBkMode
CreatePalette
GetDCOrgEx
RealizePalette

comdlg32

GetOpenFileNameA
GetFileTitleA
GetSaveFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RevertToSelf
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegEnumValueA
RegQueryInfoKeyA
RegEnumKeyExA
FreeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
InitializeAcl
GetLengthSid
AllocateAndInitializeSid
GetAce
GetAclInformation
AddAccessAllowedAce
OpenProcessToken
AreAllAccessesGranted
AccessCheck
OpenThreadToken
ImpersonateSelf
RegGetKeySecurity
AddAce
RegSetKeySecurity
CopySid
GetTokenInformation
RegOpenKeyA
GetSidSubAuthority
GetSidSubAuthorityCount
GetSidIdentifierAuthority
RegNotifyChangeKeyValue
RegSetValueA
RegQueryValueA
RegCreateKeyA

shell32

ExtractIconA
SHGetFileInfoA
DragAcceptFiles
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc
ShellExecuteA

comctl32

ord17

oledlg

ord8

ole32

StgOpenStorageOnILockBytes
CoTreatAsClass
StgCreateDocfileOnILockBytes
CreateBindCtx
CoGetClassObject
WriteClassStg
SetConvertStg
OleRegGetUserType
ReadFmtUserTypeStg
CreateILockBytesOnHGlobal
OleInitialize
WriteFmtUserTypeStg
CoTaskMemAlloc
OleRun
CLSIDFromString
OleDuplicateData
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRegisterClassObject
CoRevokeClassObject
CoDisconnectObject
CLSIDFromProgID
CoCreateGuid
ReleaseStgMedium
RevokeDragDrop
RegisterDragDrop
CoTaskMemFree
CoCreateInstance
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
CreateStreamOnHGlobal
CoUninitialize
CoInitialize
StringFromCLSID
ReadClassStg

olepro32

ord253
ord251

oleaut32

SafeArrayPutElement
VariantCopy
SafeArrayCreate
SafeArrayAccessData
SafeArrayUnaccessData
VariantChangeType
SysStringByteLen
SysAllocStringByteLen
VariantInit
SysAllocString
SysStringLen
SysAllocStringLen
SysFreeString
VariantClear
SafeArrayAllocDescriptor
SysReAllocStringLen
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayRedim
VarCyFromStr
VarBstrFromCy
VarDateFromStr
VarBstrFromDate
SafeArrayCopy
SafeArrayAllocData
CreateErrorInfo
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
LoadTypeLi
VariantTimeToSystemTime
GetErrorInfo
SetErrorInfo

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

rpcrt4

UuidFromStringA

wsock32

htons
WSAGetLastError
recv
select
send
closesocket
socket
inet_ntoa
bind
ioctlsocket
connect
getsockopt
__WSAFDIsSet
WSAStartup
WSACleanup
gethostname
WSACancelAsyncRequest
inet_addr
WSAAsyncGetHostByName

wininet

InternetCrackUrlA

Exports

Exports

OnBeforeNavigate2
OnClick
OnCommandStateChange
OnDocumentComplete
OnDownloadBegin
OnDownloadComplete
OnGotFocus
OnLostFocus
OnNewWindow2
OnProgressChange
OnQuit
OnRealmLoginWindow
OnTimerMsg
RegisterDragDropChildren
ReleaseSite
RevokeDragDropChildren
SetSite

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 164KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6a9aac6db6ad5cafd8f1b0429bc70552

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

version

rpcrt4

wsock32

wininet

Exports

Exports

Sections

.text Size: 1.0MB - Virtual size: 1.0MB

.rdata Size: 164KB - Virtual size: 160KB

.data Size: 96KB - Virtual size: 121KB

.rsrc Size: 32KB - Virtual size: 30KB

.reloc Size: 72KB - Virtual size: 68KB

.text
Size: 1.0MB - Virtual size: 1.0MB

.rdata
Size: 164KB - Virtual size: 160KB

.data
Size: 96KB - Virtual size: 121KB

.rsrc
Size: 32KB - Virtual size: 30KB

.reloc
Size: 72KB - Virtual size: 68KB