c446008104ac6bfeacaa38055dedd35747bbb619039b7cc385a809f4c07bf600

Sharing

Copy URL Twitter E-mail

General

Target

c446008104ac6bfeacaa38055dedd35747bbb619039b7cc385a809f4c07bf600
Size

2.8MB
MD5

0b743b939df130e361913321b586a6da
SHA1

721f5027baa2754024970431ce3e7c5e099b0ed4
SHA256

c446008104ac6bfeacaa38055dedd35747bbb619039b7cc385a809f4c07bf600
SHA512

b8cd220c4a3d20b9cb2fa14e386e726d02462d4085047f92c8064b648934320d6b5246b899110d7bcec697cac255f3a6288a32c60ebb97f86f6ab9d2747008d6
SSDEEP

49152:umWwT/bkRgChFPXYAusctgdLu+wknLs1dzgolWh7WjJr0ZYui1vLDb6FI:xWQoi0cTgmWhK10ZW1vLDb6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c446008104ac6bfeacaa38055dedd35747bbb619039b7cc385a809f4c07bf600

Files

c446008104ac6bfeacaa38055dedd35747bbb619039b7cc385a809f4c07bf600
.exe windows:6 windows x86 arch:x86

6160a5818d8ad6c213f0f42aa97075bd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
WriteConsoleW
GetCurrentDirectoryW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsValidCodePage
FindFirstFileExA
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleCP
GetDriveTypeW
MoveFileExW
GetTimeZoneInformation
GetStringTypeW
LCMapStringW
GetStdHandle
ExitProcess
HeapQueryInformation
GetFileType
SetStdHandle
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
GetCommandLineW
GetCommandLineA
VirtualQuery
VirtualAlloc
GetSystemInfo
RtlUnwind
OutputDebugStringW
InitializeSListHead
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
GetStartupInfoW
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
SearchPathA
FindResourceExW
SetErrorMode
GetCPInfo
GetOEMCP
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GlobalFlags
LocalReAlloc
LocalAlloc
GlobalHandle
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
ReplaceFileA
GetDiskFreeSpaceA
GetCurrentThread
VirtualProtect
FindNextFileA
ResumeThread
SetThreadPriority
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcpyA
SystemTimeToTzSpecificLocalTime
SetFileTime
LocalFileTimeToFileTime
GetFileTime
GetFileSizeEx
GetFileAttributesExA
FileTimeToLocalFileTime
GetStringTypeExA
GetVolumeInformationA
MoveFileA
lstrcmpiA
GetShortPathNameA
LoadLibraryExA
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
FindFirstFileA
FindClose
GetProfileIntA
SystemTimeToFileTime
FileTimeToSystemTime
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetSystemDirectoryW
EncodePointer
GlobalSize
LoadLibraryW
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
SetLastError
OutputDebugStringA
GetACP
HeapDestroy
DecodePointer
HeapReAlloc
HeapSize
InitializeCriticalSectionEx
HeapFree
GetProcessHeap
HeapAlloc
SetEvent
SetUnhandledExceptionFilter
GetTempPathA
GetTempFileNameA
SetCurrentDirectoryA
TerminateProcess
GlobalReAlloc
CreateProcessA
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
CreateFileMappingA
ReleaseMutex
ResetEvent
OpenEventA
OpenMutexA
CreateEventA
CreateMutexA
lstrcmpA
GetCurrentDirectoryA
RemoveDirectoryA
SetFileAttributesA
SetThreadLocale
GetThreadLocale
GetSystemDefaultLangID
FreeResource
FindResourceA
GetVersionExA
MulDiv
DeleteFileA
CopyFileA
CreateDirectoryA
LocalFree
FormatMessageA
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
IsDBCSLeadByte
GetLocalTime
IsDebuggerPresent
CloseHandle
WriteFile
GetLastError
GetCurrentThreadId
GetCurrentProcess
GetCurrentProcessId
CreateFileA
GetFileAttributesA
GetModuleFileNameA
GetTickCount
IsBadReadPtr
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
IsBadWritePtr
IsBadStringPtrA
lstrlenA
Sleep
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcpynA
FreeLibrary
GetProcAddress
LoadLibraryA
VerifyVersionInfoA
VerSetConditionMask
MultiByteToWideChar
RaiseException
FindResourceW
LoadResource
LockResource
DebugBreak
SizeofResource
WideCharToMultiByte

user32

SetMenuItemBitmaps
GetMonitorInfoA
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetTopWindow
GetClassNameA
GetClassLongA
MapWindowPoints
AdjustWindowRectEx
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
TrackPopupMenu
SetMenu
GetMenu
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
IsMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
DefWindowProcA
GetMessageTime
RegisterWindowMessageA
MapVirtualKeyA
GetKeyNameTextA
IsDialogMessageA
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
IsWindowEnabled
SetFocus
CheckDlgButton
SetDlgItemTextA
MoveWindow
ShowWindow
RemoveMenu
GetMenuState
GetMenuStringA
SendDlgItemMessageA
LoadCursorW
DrawTextExA
UnregisterClassA
GetMessageA
CheckMenuRadioItem
SetMenuDefaultItem
ShowScrollBar
ReplyMessage
WindowFromPoint
ValidateRect
CheckMenuItem
SetRectEmpty
WaitForInputIdle
RegisterClassA
LoadIconW
EnableScrollBar
GetSysColorBrush
GetNextDlgTabItem
InsertMenuA
SetActiveWindow
GetDlgCtrlID
IsZoomed
IsIconic
ClientToScreen
IsClipboardFormatAvailable
GetCursorPos
AdjustWindowRect
DestroyWindow
CreateDialogIndirectParamA
SetTimer
KillTimer
GetMenuCheckMarkDimensions
SetMenuItemInfoA
LoadBitmapW
GetTabbedTextExtentW
SendMessageA
GetClientRect
GetSystemMetrics
LoadCursorA
FlashWindow
BringWindowToTop
SystemParametersInfoA
GetLastActivePopup
SetPropA
CallWindowProcA
RemovePropA
GetPropA
DestroyIcon
GetWindowThreadProcessId
IsWindowVisible
MessageBeep
SetRect
LoadMenuW
DispatchMessageA
PeekMessageA
EnableMenuItem
GetSubMenu
DeleteMenu
GrayStringA
TabbedTextOutA
GetWindowDC
DestroyMenu
GetMenuItemInfoA
EndDialog
NotifyWinEvent
CharUpperA
SetLayeredWindowAttributes
EnumDisplayMonitors
SetCursorPos
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
InsertMenuItemA
GetMenuItemID
IsRectEmpty
IntersectRect
SetWindowLongA
IsWindow
UnpackDDElParam
ReuseDDElParam
TranslateMessage
GetAsyncKeyState
MapDialogRect
PostQuitMessage
LoadAcceleratorsW
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
ShowOwnedPopups
InvalidateRect
UpdateWindow
EnableWindow
GetParent
GetWindow
GetFocus
PostMessageA
GetDC
ReleaseDC
OffsetRect
InflateRect
PtInRect
FillRect
GetWindowRect
GetDesktopWindow
GetSysColor
GetKeyState
GetMessagePos
ScreenToClient
AppendMenuA
CreatePopupMenu
GetMenuItemCount
OpenClipboard
EmptyClipboard
CloseClipboard
SetClipboardData
DrawTextA
EqualRect
CopyRect
DrawFocusRect
DestroyCursor
LoadImageA
RedrawWindow
GetActiveWindow
GetCapture
SetCapture
ReleaseCapture
FrameRect
DrawStateA
GetWindowLongA
SetCursor
GetDlgItem
SetWindowPos
LoadStringW
MessageBoxA
MonitorFromWindow
PostThreadMessageA
CreateMenu
MonitorFromPoint
LoadImageW
GetDoubleClickTime
GetIconInfo
CopyIcon
GetMenuDefaultItem
ModifyMenuA
IsCharLowerA
MapVirtualKeyExA
RegisterClipboardFormatA
CharUpperBuffA
UpdateLayeredWindow
GetUpdateRect
SubtractRect
WaitMessage
GetNextDlgGroupItem
GetComboBoxInfo
GetWindowRgn
UnionRect
SetClassLongA
LockWindowUpdate
TrackMouseEvent
CopyAcceleratorTableA
DestroyAcceleratorTable
CreateAcceleratorTableA
ToAsciiEx
GetKeyboardState
GetKeyboardLayout
DrawIconEx
DrawFrameControl
DrawEdge
CopyImage
RealChildWindowFromPoint
GetDCEx
SetWindowRgn
DrawIcon
SetParent
GetSystemMenu

gdi32

CreateSolidBrush
DeleteDC
Escape
ExcludeClipRect
GetClipBox
GetCurrentPositionEx
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextAlign
StartDocA
MoveToEx
TextOutA
ExtTextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
CreateRectRgn
ScaleWindowExtEx
CombineRgn
SetRectRgn
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
GetViewportOrgEx
Rectangle
CreateFontA
GetCharWidthA
StretchDIBits
CreateEllipticRgn
CreateDIBSection
LPtoDP
UnrealizeObject
CreatePolygonRgn
Polyline
CreateRoundRectRgn
EnumFontFamiliesExA
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetTextExtentPointA
GetTextExtentPoint32W
GetTextFaceA
RealizePalette
SetPixel
StretchBlt
SetDIBColorTable
GetRgnBox
OffsetRgn
RoundRect
CreatePalette
GetPaletteEntries
ExtFloodFill
SetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
SetPixelV
CreatePatternBrush
CreatePen
CreateHatchBrush
BitBlt
CreateBitmap
SetTextColor
SetBkColor
CreateDCA
CopyMetaFileA
GetWindowOrgEx
Ellipse
Polygon
GetBkColor
GetTextColor
DPtoLP
GetDeviceCaps
GetTextMetricsA
SelectObject
PatBlt
CreateRectRgnIndirect
GetStockObject
DeleteObject
CreateFontIndirectA
CreateCompatibleBitmap
GetObjectA
GetCurrentObject
ScaleViewportExtEx
CreateCompatibleDC
GetTextExtentPoint32A

msimg32

AlphaBlend
TransparentBlt

winspool.drv

GetJobA
DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegEnumKeyA
GetFileSecurityA
RegEnumKeyExA
SetFileSecurityA
RegOpenKeyExW
RegSetValueA
RegDeleteKeyA
RegQueryValueA
RegEnumValueA
RegSetValueExA
RegDeleteValueA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA

shell32

ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
SHFileOperationA
ExtractIconA
DragAcceptFiles
DragQueryFileA
SHAppBarMessage
SHAddToRecentDocs
SHGetFileInfoA
DragFinish

comctl32

ImageList_GetImageInfo
ImageList_SetBkColor
ImageList_Draw
_TrackMouseEvent

shlwapi

PathFindExtensionA
PathFindFileNameA
PathRemoveExtensionA
PathRenameExtensionA
PathIsUNCA
PathRemoveFileSpecW
PathStripToRootA

uxtheme

DrawThemeText
GetWindowTheme
GetThemeSysColor
SetWindowTheme
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemePartSize
IsAppThemed
DrawThemeParentBackground
IsThemeBackgroundPartiallyTransparent
GetCurrentThemeName
GetThemeColor

ole32

OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
OleGetClipboard
CreateStreamOnHGlobal
CoDisconnectObject
CoCreateGuid
OleRun
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoInitializeEx
RevokeDragDrop
RegisterDragDrop
DoDragDrop
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CoUninitialize
CoInitialize
OleCreateMenuDescriptor
CoLockObjectExternal

oleaut32

LoadTypeLi
SysStringLen
SysAllocStringLen
SysAllocStringByteLen
VariantCopy
SysAllocString
SysFreeString
VariantChangeType
VariantInit
VariantClear

dbghelp

MiniDumpWriteDump

winmm

PlaySoundA

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

gdiplus

GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageRectI
GdipSetInterpolationMode
GdipDeleteGraphics
GdipGetImagePaletteSize
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdipCreateFromHDC
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDrawImageI
GdipCreateBitmapFromStream
GdiplusShutdown
GdipGetImageGraphicsContext

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 403KB - Virtual size: 403KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 58KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.giats
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6160a5818d8ad6c213f0f42aa97075bd

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

dbghelp

winmm

oleacc

gdiplus

imm32

Sections

.text Size: 2.1MB - Virtual size: 2.1MB

.rdata Size: 403KB - Virtual size: 403KB

.data Size: 58KB - Virtual size: 98KB

.gfids Size: 105KB - Virtual size: 104KB

.giats Size: 512B - Virtual size: 12B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 85KB - Virtual size: 85KB

.text
Size: 2.1MB - Virtual size: 2.1MB

.rdata
Size: 403KB - Virtual size: 403KB

.data
Size: 58KB - Virtual size: 98KB

.gfids
Size: 105KB - Virtual size: 104KB

.giats
Size: 512B - Virtual size: 12B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 85KB - Virtual size: 85KB