e1001fe2daae25f4e4cc5541ae34cf80

Sharing

Copy URL Twitter E-mail

General

Target

e1001fe2daae25f4e4cc5541ae34cf80
Size

2.0MB
MD5

e1001fe2daae25f4e4cc5541ae34cf80
SHA1

b99f1f20e4658c4c1f0765f93ce9dfbca5858263
SHA256

03ec677041419b80c2fdd41139edba142927becf287e1fbe964aa283524b7fe1
SHA512

f3e7e7d37086ea3518c59b8e7f9061feb5d57c373e5d3c674cfd8864816662e345ebbd44b37dadde8ed44f90be198d5b6922d34b7b6dada37d3c85760154a374
SSDEEP

49152:3KXK9u2diUCfpmQ+5e5fKVUq9b0dJCxW5uMuu3LuCGhCjVbS3bzuuyruuuunqj0o:aandywQjdJFjsj06vO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1001fe2daae25f4e4cc5541ae34cf80

Files

e1001fe2daae25f4e4cc5541ae34cf80
.exe windows:4 windows x86 arch:x86

c013abf821c842b53d40fe2230825381

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

kernel32

VirtualAlloc
VirtualFree
GetDriveTypeA
Sleep
LCMapStringA
HeapCreate
IsBadWritePtr
LCMapStringW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStringTypeA
UnhandledExceptionFilter
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
InterlockedExchange
GetProfileStringA
SetUnhandledExceptionFilter
HeapDestroy
_llseek
OpenFile
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
GetProcAddress
GlobalLock
FindResourceA
LoadResource
LockResource
SizeofResource
GlobalFree
GlobalUnlock
GetVersionExA
CreateDirectoryA
GetTempPathA
SetCurrentDirectoryA
GetTickCount
FindFirstFileA
FindClose
SetEvent
WaitForSingleObject
GetModuleFileNameA
lstrcpynA
lstrcmpiA
GetACP
HeapSize
GetFileType
SetStdHandle
ExitThread
CreateThread
HeapReAlloc
GetCommandLineA
GetStartupInfoA
HeapAlloc
TerminateProcess
ExitProcess
GetLocalTime
GetSystemTime
GetTimeZoneInformation
HeapFree
IsBadReadPtr
RaiseException
RtlUnwind
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentDirectoryA
SetErrorMode
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GlobalFlags
GlobalReAlloc
GlobalSize
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetTempFileNameA
GetFileAttributesA
WaitForMultipleObjects
ReleaseMutex
CreateMutexA
CreateEventA
SuspendThread
ResumeThread
GlobalAlloc
GetCurrentThread
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
GetVolumeInformationA
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
CloseHandle
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetLastError
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpA
MulDiv
SetLastError
FormatMessageA
LocalFree
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
FreeLibrary
GetVersion
_lclose
_lread
GetStringTypeW
IsBadCodePtr

user32

InsertMenuA
DestroyIcon
CharNextA
CopyAcceleratorTableA
GetNextDlgGroupItem
LockWindowUpdate
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
LoadIconA
SendDlgItemMessageA
MapWindowPoints
DispatchMessageA
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
GetScrollPos
SetScrollPos
GetTopWindow
MessageBoxA
WinHelpA
RegisterClassA
TrackPopupMenu
SetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
InvertRect
GetDCEx
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
ClientToScreen
GetAsyncKeyState
GetParent
IsChild
AdjustWindowRectEx
SetMenuItemInfoA
GetMenuItemInfoA
MessageBeep
OffsetRect
DrawFocusRect
GetFocus
GetMessagePos
ScrollDC
LoadMenuA
GetClassNameA
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMenuStringA
AppendMenuA
IsClipboardFormatAvailable
GetClipboardData
ReleaseCapture
GetDoubleClickTime
UnionRect
GetUpdateRgn
CopyRect
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetKeyState
IsWindowVisible
ValidateRect
InflateRect
SetTimer
GetMessageTime
GetCapture
WindowFromPoint
SetCapture
SetCursor
IntersectRect
InvalidateRect
GetUpdateRect
PeekMessageA
PostMessageA
KillTimer
RegisterClipboardFormatA
RegisterWindowMessageA
FindWindowA
SystemParametersInfoA
PostThreadMessageA
GrayStringA
LoadStringA
GetSysColorBrush
GetWindowPlacement
SetWindowLongA
FillRect
DrawTextA
TabbedTextOutA
LoadCursorA
UpdateWindow
SetWindowPos
IsIconic
GetClassInfoA
GetMenu
GetSubMenu
GetSysColor
GetWindow
GetCursorPos
ScreenToClient
PtInRect
GetSystemMetrics
LoadBitmapA
MapDialogRect
GetClientRect
GetWindowRect
EnableWindow
SendMessageA
SetWindowContextHelpId
MsgWaitForMultipleObjects
ShowOwnedPopups
PostQuitMessage
CharUpperA
SetRect
GetSystemMenu
DeleteMenu
IsRectEmpty
SetParent
IsZoomed
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
DestroyMenu
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
GetMessageA
TranslateMessage
GetDesktopWindow
EndPaint
BeginPaint
GetWindowDC
CreatePopupMenu
GetDC
ReleaseDC
GetMenuCheckMarkDimensions
IsWindowEnabled
SetFocus
wsprintfA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode

gdi32

GetObjectA
StretchBlt
CreateCompatibleDC
CreateCompatibleBitmap
GetTextExtentPoint32A
GetTextMetricsA
GetDeviceCaps
BitBlt
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetStockObject
Rectangle
GetRegionData
CreateRectRgn
GetPixel
CreateBitmap
Polyline
Ellipse
GetClipBox
SetTextColor
SetBkColor
CreateRectRgnIndirect
DeleteDC
SaveDC
RestoreDC
SelectObject
DeleteObject
SetBkMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetViewportExtEx
GetWindowExtEx
CreatePen
CreateSolidBrush
CreateHatchBrush
CreatePatternBrush
StretchDIBits
GetCharWidthA
CreateFontA
CreateFontIndirectA
GetMapMode
SetRectRgn
CombineRgn
DPtoLP
GetTextColor
GetBkColor
LPtoDP
CreateDIBitmap
GetTextExtentPointA
CreateDIBSection
PatBlt

comdlg32

GetOpenFileNameA
GetFileTitleA
GetSaveFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

GetFileSecurityA
RegCreateKeyA
RegDeleteValueA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegSetValueA
RegDeleteKeyA
RegOpenKeyA
RegQueryValueA
RegEnumKeyA
SetFileSecurityA

shell32

ExtractIconA
SHGetFileInfoA
DragQueryFileA
DragFinish
DragAcceptFiles

comctl32

CreatePropertySheetPageA
DestroyPropertySheetPage
ord17
ImageList_Destroy
PropertySheetA

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoGetClassObject
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CLSIDFromString
CLSIDFromProgID
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
CreateILockBytesOnHGlobal
CoTaskMemAlloc
CoTaskMemFree

olepro32

ord253

oleaut32

SysAllocString
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString
SysAllocStringByteLen
SysStringLen

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 284KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 116KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 444KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jgd
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c013abf821c842b53d40fe2230825381

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 284KB - Virtual size: 280KB

.data Size: 116KB - Virtual size: 191KB

.rsrc Size: 444KB - Virtual size: 440KB

.jgd Size: 4KB - Virtual size: 4KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 284KB - Virtual size: 280KB

.data
Size: 116KB - Virtual size: 191KB

.rsrc
Size: 444KB - Virtual size: 440KB

.jgd
Size: 4KB - Virtual size: 4KB