91e7e4bd79df802e691f5048d69b3dde

Sharing

Copy URL Twitter E-mail

General

Target

91e7e4bd79df802e691f5048d69b3dde
Size

2.7MB
MD5

91e7e4bd79df802e691f5048d69b3dde
SHA1

b0a521cb4444eea6aeeb36f09591d480b878fb88
SHA256

3bd2cf80f1ac20d688c50703f530eaddf939eeaa0535b1ee4bc870b56515f902
SHA512

0915afe715228c644f77dfe114abf5d3a40bd6d1fa56dd3708a27d499e4871a207f7c7e1f16db92c0a5227b44635691959ffffac8c9798a8bd3b7ca9199ea4ab
SSDEEP

49152:3xNN1ksRJ4P5ZmAa0VWZI16l4B79FxRBTJmLTVxpGLKz:hbX05wAa0VcI1K4RHx7JFLKz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
91e7e4bd79df802e691f5048d69b3dde

Files

91e7e4bd79df802e691f5048d69b3dde
.exe windows:4 windows x86 arch:x86

477d8527e4eab48aced0ce744c150f43

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

mixerGetLineInfoA
timeGetTime
mciSendCommandA
timeKillEvent
mixerSetControlDetails
timeBeginPeriod
timeSetEvent
sndPlaySoundA
mciGetErrorStringA
waveOutGetDevCapsA
mixerOpen
mixerGetNumDevs
mixerClose
timeEndPeriod
timeGetDevCaps
waveOutGetNumDevs
waveOutOpen
waveOutClose
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutWrite
waveOutReset
waveOutGetPosition
waveInAddBuffer
waveInPrepareHeader
waveInUnprepareHeader
waveInGetDevCapsA
waveInGetNumDevs
waveInStart
waveInOpen
waveInClose
waveInReset
mixerGetControlDetailsA
mixerGetLineControlsA

wsock32

send
__WSAFDIsSet
WSACancelAsyncRequest
socket
WSAAsyncGetHostByName
inet_addr
closesocket
recv
inet_ntoa
select
WSAStartup
WSACleanup
WSAGetLastError
connect
htons
ioctlsocket

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

msacm32

acmStreamPrepareHeader
acmStreamConvert
acmStreamUnprepareHeader
acmStreamClose
acmFormatSuggest
acmStreamOpen
acmStreamSize

kernel32

WriteFile
GetLogicalDriveStringsA
SetErrorMode
DeviceIoControl
GetSystemDefaultLangID
WideCharToMultiByte
lstrlenW
TlsSetValue
TlsGetValue
IsBadWritePtr
IsBadReadPtr
TlsAlloc
TlsFree
FreeResource
LockResource
LoadResource
FindResourceA
GlobalSize
GetFileType
FlushFileBuffers
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
GetCurrentThreadId
QueryPerformanceFrequency
QueryPerformanceCounter
ResetEvent
InterlockedDecrement
OpenFile
VirtualLock
VirtualProtect
GlobalHandle
lstrcatA
lstrcmpA
IsDBCSLeadByte
LocalUnlock
LocalLock
LocalAlloc
lstrcmpiA
FileTimeToDosDateTime
IsBadStringPtrA
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetVolumeLabelA
GetLocalTime
MoveFileA
VirtualUnlock
VirtualFree
VirtualAlloc
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetVersion
SetLastError
DuplicateHandle
LockFile
UnlockFile
GetStringTypeExA
GetThreadLocale
GetFileTime
LocalReAlloc
GlobalFlags
GetCPInfo
GetOEMCP
SizeofResource
RtlUnwind
RaiseException
GetTimeZoneInformation
ExitProcess
GetStartupInfoA
GetCommandLineA
GetSystemTimeAsFileTime
GetACP
HeapSize
SetStdHandle
GetEnvironmentVariableA
HeapDestroy
HeapCreate
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
IsBadCodePtr
SetEnvironmentVariableA
GetLocaleInfoW
SetEndOfFile
GlobalMemoryStatus
GetProfileStringA
GetDriveTypeA
GetSystemDirectoryA
GetComputerNameA
FreeLibrary
GetProcAddress
LoadLibraryA
FileTimeToSystemTime
FileTimeToLocalFileTime
FindClose
FindFirstFileA
lstrcpyA
GetFileAttributesA
GetVolumeInformationA
lstrcpynA
GetFullPathNameA
CloseHandle
InterlockedExchange
ReadFile
SetFilePointer
CreateFileA
FindNextFileA
InterlockedIncrement
GetCurrentDirectoryA
SetCurrentDirectoryA
GlobalFree
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
SystemTimeToFileTime
GetSystemTime
SetFileTime
DeleteFileA
SetFileAttributesA
RemoveDirectoryA
CreateDirectoryA
GetDiskFreeSpaceA
GetModuleHandleA
GetExitCodeProcess
GetLastError
CreateProcessA
lstrlenA
GetTempFileNameA
MulDiv
WritePrivateProfileStringA
GetPrivateProfileSectionNamesA
GetPrivateProfileStringA
GetPrivateProfileSectionA
CopyFileA
GetVersionExA
MoveFileExA
GetShortPathNameA
GetWindowsDirectoryA
MultiByteToWideChar
LocalFree
FormatMessageA
GetTempPathA
GetModuleFileNameA
TerminateProcess
OpenProcess
LoadLibraryExA
GetTickCount
GetCurrentProcess
GetCurrentThread
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
Sleep
SetThreadPriority
GetExitCodeThread
SetEvent
CreateEventA
WaitForSingleObject
TerminateThread
CreateThread
GetLocaleInfoA
GetCurrentProcessId
FreeEnvironmentStringsA
GetEnvironmentStrings
GetProcessVersion
ExpandEnvironmentStringsA
GetFileSize

user32

BeginDeferWindowPos
DeferWindowPos
AdjustWindowRectEx
SendDlgItemMessageA
CheckRadioButton
IsDialogMessageA
IsWindowEnabled
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuCheckMarkDimensions
BeginPaint
EndPaint
CreateDialogIndirectParamA
LoadStringA
ValidateRect
GetMessageA
WindowFromPoint
DestroyMenu
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
GetNextDlgGroupItem
SetWindowContextHelpId
MapDialogRect
CopyAcceleratorTableA
RegisterClipboardFormatA
ShowOwnedPopups
GetSysColorBrush
PostThreadMessageA
GetClassNameA
TrackPopupMenu
LoadMenuA
SetMenuDefaultItem
ReleaseCapture
MapWindowPoints
ExitWindowsEx
IsWindowVisible
UnionRect
RemoveMenu
DrawMenuBar
GetMenu
DefWindowProcA
GetClassInfoA
RegisterClassA
CreateWindowExA
DestroyWindow
GetWindowDC
GetFocus
GetAsyncKeyState
MessageBeep
GetNextDlgTabItem
InsertMenuA
EnableMenuItem
ClientToScreen
CallNextHookEx
DrawFocusRect
KillTimer
SetTimer
GetMenuItemCount
GetMenuItemID
GetMenuState
EndDeferWindowPos
GetSubMenu
AppendMenuA
CreatePopupMenu
SetMenu
CreateMenu
GetWindowRgn
SetWindowRgn
GetCursorPos
SetFocus
PtInRect
ShowWindow
MoveWindow
SetCursor
UpdateWindow
DrawTextExA
InvalidateRect
GetClientRect
GetMessagePos
ScreenToClient
LoadImageA
GetSystemMetrics
LoadCursorA
RedrawWindow
EqualRect
GetWindowRect
PostMessageA
SetWindowPos
GetForegroundWindow
SetForegroundWindow
GetWindow
GetWindowLongA
GetWindowTextA
GetWindowThreadProcessId
EnumWindows
CopyRect
MessageBoxA
GetDesktopWindow
GetDC
ReleaseDC
SystemParametersInfoA
MsgWaitForMultipleObjects
wsprintfA
TranslateMessage
DispatchMessageA
GetSysColor
LoadBitmapA
DrawIconEx
DestroyIcon
SetRect
SetWindowLongA
GetParent
CallWindowProcA
PeekMessageA
PostQuitMessage
IsWindow
CharUpperA
GrayStringA
DrawTextA
TabbedTextOutA
IntersectRect
OffsetRect
IsRectEmpty
InflateRect
EnableWindow
GetKeyState
GetTopWindow
WinHelpA
GetDlgItem
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
RemovePropA
GetMessageTime
GetLastActivePopup
RegisterWindowMessageA
IsIconic
GetWindowPlacement
CharToOemA
OemToCharBuffA
CharLowerA
WaitForInputIdle
GetWindowTextLengthA
GetDlgCtrlID
GetMenuStringA
SetWindowsHookExA
SetDlgItemTextA
EnumChildWindows
EndDialog
DialogBoxParamA
GetActiveWindow
OemToCharA
CharNextA
CharPrevA
CharUpperBuffA
CharLowerBuffA
UnregisterClassA
FillRect
IsChild
InvalidateRgn
SetCapture
GetCapture
GetSystemMenu
DeleteMenu
DrawStateA
SetActiveWindow
DrawAnimatedRects
SetParent
DrawFrameControl
FindWindowA
SendMessageA
SetWindowTextA
IsWindowUnicode
DefDlgProcA
ExcludeUpdateRgn
ShowCaret
HideCaret
LoadIconA

gdi32

GetTextColor
CreateDCA
ExtSelectClipRgn
LineTo
MoveToEx
SelectClipRgn
ScaleWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetStretchBltMode
RestoreDC
SaveDC
GetClipBox
SetTextColor
SetBkMode
SetWindowExtEx
SetViewportExtEx
GetEnhMetaFileA
GetMetaFileA
GetMetaFileBitsEx
DeleteMetaFile
SetWinMetaFileBits
GetEnhMetaFileHeader
PlayEnhMetaFile
DeleteEnhMetaFile
CreateDIBitmap
GetDIBits
GetSystemPaletteEntries
SetMapMode
SetBkColor
StretchDIBits
CreateRoundRectRgn
CreateRectRgnIndirect
IntersectClipRect
GetWindowOrgEx
SelectPalette
RealizePalette
CreateHalftonePalette
StartDocA
StartPage
EndPage
EndDoc
AbortDoc
GetStretchBltMode
GetBkMode
CreateCompatibleBitmap
CreateFontIndirectA
GetTextMetricsA
PtInRegion
CreatePatternBrush
PatBlt
CreateBitmap
CreateRectRgn
CreatePalette
EnumFontFamiliesExA
CreateScalableFontResourceA
GetTextExtentPoint32A
RemoveFontResourceA
AddFontResourceA
CreateFontA
CreateSolidBrush
CreatePen
Rectangle
GetStockObject
GetObjectA
ExtCreateRegion
CombineRgn
DeleteDC
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GdiFlush
GetDeviceCaps
GetPaletteEntries
BitBlt
DeleteObject
CreateCompatibleDC
GetMapMode
GetWindowExtEx
LPtoDP
CreateDIBSection
SelectObject
DPtoLP
GetViewportExtEx
GetBkColor
GetTextExtentPointA

comdlg32

PrintDlgA
GetOpenFileNameA
CommDlgExtendedError
GetFileTitleA
GetSaveFileNameA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegConnectRegistryA
RegEnumValueA
RegEnumKeyExA
RegQueryInfoKeyA
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
OpenThreadToken
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
GetUserNameA
LookupAccountSidA
RegEnumKeyA
AdjustTokenPrivileges
LookupPrivilegeValueA
RegQueryValueA
SetFileSecurityA
GetFileSecurityA
RegSetValueA
RegCreateKeyA

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA
DragQueryFileA
DragFinish
SHBrowseForFolderA
ExtractIconA
SHAppBarMessage
Shell_NotifyIconA
ShellExecuteA
SHGetFileInfoA
SHGetMalloc

comctl32

ImageList_GetIcon
ImageList_GetImageCount
ImageList_GetIconSize
ord17
ImageList_Destroy
ImageList_Create
ImageList_AddMasked

oledlg

ord8

ole32

CoUninitialize
CoInitialize
CoCreateInstance
CLSIDFromProgID
CoRegisterMessageFilter
CLSIDFromString
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

VariantTimeToSystemTime
SysAllocStringLen
VariantChangeType
SysAllocStringByteLen
VariantCopy
VariantClear
SysFreeString
LoadTypeLi
RegisterTypeLi
VariantInit
SysAllocString
SysStringLen

urlmon

URLDownloadToFileA

netapi32

Netbios

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 324KB - Virtual size: 320KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 188KB - Virtual size: 501KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

477d8527e4eab48aced0ce744c150f43

Headers

File Characteristics

Imports

winmm

wsock32

version

msacm32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

urlmon

netapi32

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.rdata Size: 324KB - Virtual size: 320KB

.data Size: 188KB - Virtual size: 501KB

.rsrc Size: 256KB - Virtual size: 255KB

.text
Size: 1.9MB - Virtual size: 1.9MB

.rdata
Size: 324KB - Virtual size: 320KB

.data
Size: 188KB - Virtual size: 501KB

.rsrc
Size: 256KB - Virtual size: 255KB