de30c90ec7eb8c30f3da2204d8afeee915dc3d8158599d6dce59bbc77b0deff2

Sharing

Copy URL Twitter E-mail

General

Target

de30c90ec7eb8c30f3da2204d8afeee915dc3d8158599d6dce59bbc77b0deff2
Size

226KB
MD5

c5a9f8a833d8eafa50d81f04fed7d42a
SHA1

5a7303e4616b7a62e538b7c8110e40a2d779be2d
SHA256

de30c90ec7eb8c30f3da2204d8afeee915dc3d8158599d6dce59bbc77b0deff2
SHA512

4297a8ed0f7c76191e785ef543a659be76cb804f757570ba08073874d3ca926bbb4918b5b025cb164899bffa67f0ca6ae64ee4dd4d9611b39138a4ea77f8f1ba
SSDEEP

6144:wZC4mnuv+VZt3U2D8xnppQEatKun8loCf3R:wZC4mnuv+VDUs8ymoCf3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de30c90ec7eb8c30f3da2204d8afeee915dc3d8158599d6dce59bbc77b0deff2

Files

de30c90ec7eb8c30f3da2204d8afeee915dc3d8158599d6dce59bbc77b0deff2
.exe windows:5 windows x86 arch:x86

b9d3b19db4fdb2b1cc54579fd0da0de5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetCloseHandle
InternetReadFile
HttpQueryInfoW
InternetOpenUrlW
InternetOpenW
InternetAttemptConnect
InternetQueryDataAvailable
HttpSendRequestW
HttpOpenRequestW
InternetConnectW

kernel32

InitializeCriticalSectionAndSpinCount
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetLocaleInfoW
CreateFileW
CreateFileA
SetEndOfFile
GetProcessHeap
LoadLibraryA
lstrlenW
SizeofResource
LockResource
LoadResource
FindResourceW
LocalFree
FormatMessageW
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
LocalAlloc
GlobalReAlloc
GlobalHandle
LocalReAlloc
lstrcmpA
lstrlenA
lstrcmpW
GlobalFlags
GlobalAddAtomW
LoadLibraryW
GetVersionExA
GlobalDeleteAtom
GlobalFindAtomW
FreeLibrary
GetModuleFileNameA
GetModuleHandleA
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
CloseHandle
FlushFileBuffers
SetFilePointer
ReadFile
GetFileType
GetStdHandle
SetHandleCount
GetConsoleMode
GetConsoleCP
WriteFile
IsValidCodePage
GetOEMCP
GetACP
GetCurrentThreadId
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetCPInfo
LCMapStringW
WideCharToMultiByte
LCMapStringA
MultiByteToWideChar
GetStartupInfoA
GetCommandLineA
HeapAlloc
ExitProcess
GetProcAddress
HeapFree
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RaiseException
RtlUnwind
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
GetVersionExW
GetWindowsDirectoryW
GetComputerNameW
GetModuleHandleW
DeleteFileW
Sleep
GetModuleFileNameW
SetLastError
CreateEventW
GetLastError
lstrcatW

user32

WinHelpW
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
GetClientRect
PostMessageW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
CopyRect
DefWindowProcW
CallWindowProcW
GetMenu
SystemParametersInfoA
IsIconic
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
SetWindowPos
SetWindowLongW
IsWindow
GetFocus
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameW
PtInRect
SetWindowTextW
SetWindowsHookExW
CallNextHookEx
GetKeyState
PeekMessageW
ValidateRect
GetWindowTextW
LoadCursorW
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
UnhookWindowsHookEx
GetWindowThreadProcessId
SendMessageW
GetParent
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
DestroyMenu
EnableWindow
MessageBoxW
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GrayStringW
LoadStringW
SetTimer
GetMessageW
DispatchMessageW
KillTimer
DrawTextExW
DrawTextW
TabbedTextOutW
PostQuitMessage
RegisterWindowMessageW
LoadIconW
GetWindowPlacement
GetDlgItem

advapi32

GetUserNameW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl

shell32

ShellExecuteW
SHGetSpecialFolderPathW

ole32

CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

SysFreeString
SysAllocString
VariantInit
VariantChangeType
VariantClear

oleacc

LresultFromObject
CreateStdAccessibleObject

gdi32

DeleteDC
GetStockObject
ScaleWindowExtEx
SetWindowExtEx
RestoreDC
SetMapMode
SaveDC
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
DeleteObject
GetDeviceCaps
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

Sections

.text
Size: 177KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b9d3b19db4fdb2b1cc54579fd0da0de5

Headers

DLL Characteristics

File Characteristics

Imports

wininet

kernel32

user32

advapi32

shell32

ole32

oleaut32

oleacc

gdi32

winspool.drv

Sections

.text Size: 177KB - Virtual size: 176KB

.rdata Size: 37KB - Virtual size: 37KB

.data Size: 9KB - Virtual size: 25KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 177KB - Virtual size: 176KB

.rdata
Size: 37KB - Virtual size: 37KB

.data
Size: 9KB - Virtual size: 25KB

.rsrc
Size: 1KB - Virtual size: 1KB