0b0f29fc7ff8d84a81852a38557279e2

Sharing

Copy URL Twitter E-mail

General

Target

0b0f29fc7ff8d84a81852a38557279e2
Size

740KB
MD5

0b0f29fc7ff8d84a81852a38557279e2
SHA1

64a29b3cfcd82311cf9f0020a3b2266b670ec319
SHA256

163fd147ec8789456cd47137ad945813f15705b0d704022b0e1e0b38fe0938e0
SHA512

06a5f7e686ecb9f40ee3297b9346ebe5936cc0d3aa774828cd4af7b2c0ff76829e37f393e28f05aadcfc6839438587ce66e288aef7940633381bcbb1e8890072
SSDEEP

12288:dcKAr12fv46troxk4bGiQxS6P/wRw0Vo05wOSBJ3RN7fcN6q6u++t2mtkqJl36ik:dLro6irPIOSBJ3RNzcN76P+t2rqD6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b0f29fc7ff8d84a81852a38557279e2

Files

0b0f29fc7ff8d84a81852a38557279e2
.exe windows:4 windows x86 arch:x86

f419bb34296768fe76552cb3459de496

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
GlobalLock
GlobalAlloc
GetSystemDirectoryA
GetTickCount
DeleteFileA
GetWindowsDirectoryA
WideCharToMultiByte
GlobalFree
LoadLibraryA
FreeLibrary
GetVersionExA
LockResource
LoadResource
FindResourceA
SetErrorMode
lstrcpyA
lstrlenA
TerminateProcess
CloseHandle
LoadLibraryExA
SetThreadExecutionState
GlobalMemoryStatus
GetSystemInfo
GetFileAttributesA
GetShortPathNameA
GetDiskFreeSpaceA
lstrcatA
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
GetProcAddress
lstrcpynA
FindFirstFileA
FindNextFileA
FindClose
lstrcmpA
MultiByteToWideChar
GetDriveTypeA
GetVolumeInformationA
GetLocaleInfoA
TlsAlloc
GetStringTypeW
LCMapStringW
LCMapStringA
GetStringTypeA
VirtualAlloc
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
GetProfileStringA
InterlockedExchange
SetEnvironmentVariableA
CompareStringW
CompareStringA
IsBadCodePtr
IsBadReadPtr
Sleep
WriteFile
ReadFile
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetACP
HeapSize
HeapReAlloc
GetFileType
SetStdHandle
HeapAlloc
HeapFree
RaiseException
RtlUnwind
ExitProcess
GetCommandLineA
GetStartupInfoA
CreateDirectoryA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
FindResourceExA
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
ReleaseMutex
GetLastError
CreateMutexA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
GetCurrentThreadId
GetVersion
InterlockedDecrement
SetLastError
MulDiv
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
InterlockedIncrement
LocalFree
GetStdHandle
GetEnvironmentVariableA
SetHandleCount
GetCurrentThread
DuplicateHandle
GetCurrentProcess
CreateFileA
TlsSetValue
SetFileAttributesA
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFullPathNameA
GetFileSize
GetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
InitializeCriticalSection
FileTimeToSystemTime
FileTimeToLocalFileTime
GlobalFlags
SizeofResource
LocalAlloc
GetModuleFileNameA
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
GlobalReAlloc
EnterCriticalSection

user32

GetLastActivePopup
GetAsyncKeyState
MapDialogRect
KillTimer
LoadIconA
UnregisterClassA
GetClientRect
SendMessageA
SetTimer
SetWindowLongA
wsprintfA
EnableWindow
ReleaseDC
GetDC
GetWindowRect
IsWindowEnabled
GetDlgItem
DestroyWindow
CreateDialogIndirectParamA
SetActiveWindow
GetActiveWindow
EndDialog
GetNextDlgTabItem
GetWindowPlacement
IsIconic
IntersectRect
RegisterWindowMessageA
GetWindow
SetForegroundWindow
GetForegroundWindow
GetClassNameA
RemovePropA
CallWindowProcA
GetPropA
UnhookWindowsHookEx
SetPropA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
CreateWindowExA
DefWindowProcA
GetWindowTextA
GetWindowTextLengthA
TrackPopupMenu
GetMenuItemID
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
IsChild
MessageBoxA
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
DeferWindowPos
EqualRect
AdjustWindowRectEx
SetFocus
MapWindowPoints
SendDlgItemMessageA
CheckRadioButton
SetDlgItemTextA
IsDlgButtonChecked
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
GetMenuCheckMarkDimensions
WindowFromPoint
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
wvsprintfA
SetRect
ValidateRect
GetMessageA
LoadAcceleratorsA
TranslateAcceleratorA
DestroyMenu
SetMenu
ReuseDDElParam
UnpackDDElParam
PostQuitMessage
ShowOwnedPopups
ScreenToClient
GetFocus
CharUpperA
IsZoomed
SetParent
IsRectEmpty
AppendMenuA
DeleteMenu
GetSystemMenu
GetWindowLongA
GetSysColorBrush
InflateRect
GetDCEx
LockWindowUpdate
InvertRect
IsWindowUnicode
CharNextA
DefDlgProcA
DrawFocusRect
ExcludeUpdateRgn
ShowCaret
HideCaret
SetCursorPos
SetRectEmpty
DispatchMessageA
LoadMenuA
GetSubMenu
GetSysColor
PeekMessageA
SetWindowPos
GetDlgCtrlID
GetKeyState
SetMenuItemInfoA
GetMenuItemCount
TranslateMessage
FillRect
LoadBitmapA
LoadCursorFromFileA
PtInRect
ClientToScreen
GetSystemMetrics
SetCapture
SetCursor
LoadImageA
CopyIcon
InvalidateRect
UpdateWindow
OffsetRect
IsWindow
CopyRect
GetMessagePos
GetMessageTime
SetWindowRgn
InvalidateRgn
GetParent
ReleaseCapture
PostMessageA
DrawIcon
SetClipboardData
GetCursorPos
SystemParametersInfoA
LoadStringA
LoadCursorA
OpenClipboard
EmptyClipboard
CloseClipboard
FindWindowA
MessageBeep
BringWindowToTop
FindWindowExA
GetDesktopWindow
IsWindowVisible

gdi32

SetTextColor
SetBkColor
CreateBitmap
DeleteDC
SaveDC
RestoreDC
SelectObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
CreateFontIndirectA
GetStockObject
CreateRoundRectRgn
CreateEllipticRgn
CreatePolygonRgn
CreateDIBitmap
GetTextExtentPointA
EnumFontFamiliesExA
CombineRgn
SetRectRgn
GetTextExtentPoint32A
GetCharWidthA
StretchDIBits
CreateRectRgnIndirect
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreatePatternBrush
CreatePen
CreateRectRgn
SelectClipRgn
GetClipBox
SetTextAlign
LineTo
MoveToEx
IntersectClipRect
ExcludeClipRect
CreateFontA
ScaleWindowExtEx
SetWindowExtEx
GetTextMetricsA
CreateCompatibleDC
PatBlt
BitBlt
CreateCompatibleBitmap
GdiFlush
CreateSolidBrush
SetPixel
DeleteObject
CreateDIBSection
GetDeviceCaps
GetTextAlign
GetObjectA

comctl32

ImageList_ReplaceIcon
ImageList_Draw
ImageList_GetImageInfo
CreatePropertySheetPageA
ord17
ImageList_Destroy
ImageList_Create
ImageList_DrawIndirect
PropertySheetA
DestroyPropertySheetPage

winmm

waveOutGetDevCapsA
waveOutGetNumDevs
sndPlaySoundA
PlaySoundA
mciSendCommandA

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

quartz

AMGetErrorTextA

comdlg32

GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegDeleteValueA
RegDeleteKeyA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA

shell32

DragFinish
ShellExecuteA
ExtractIconA
SHBrowseForFolderA
DragAcceptFiles
DragQueryFileA
SHGetPathFromIDListA
SHGetMalloc

ole32

CoUninitialize
CoInitialize
CoTaskMemFree
CLSIDFromString
CoCreateInstance

olepro32

ord250

oleaut32

SysAllocStringLen
SysAllocString
SysFreeString

Sections

.text
Size: 416KB - Virtual size: 414KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 228KB - Virtual size: 226KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f419bb34296768fe76552cb3459de496

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comctl32

winmm

version

quartz

comdlg32

winspool.drv

advapi32

shell32

ole32

olepro32

oleaut32

Sections

.text Size: 416KB - Virtual size: 414KB

.rdata Size: 60KB - Virtual size: 58KB

.data Size: 32KB - Virtual size: 49KB

.rsrc Size: 228KB - Virtual size: 226KB

.text
Size: 416KB - Virtual size: 414KB

.rdata
Size: 60KB - Virtual size: 58KB

.data
Size: 32KB - Virtual size: 49KB

.rsrc
Size: 228KB - Virtual size: 226KB