08158ff92d4bb7588e88914f580bab176bf180cabb82e6e50b9f0cc92c703875

Sharing

Copy URL Twitter E-mail

General

Target

08158ff92d4bb7588e88914f580bab176bf180cabb82e6e50b9f0cc92c703875
Size

3.6MB
MD5

a93bb5dc65c2f4956c265af1ef32ba80
SHA1

0796495c6b8f8d9f2ea7ab976b1ae30652b35614
SHA256

08158ff92d4bb7588e88914f580bab176bf180cabb82e6e50b9f0cc92c703875
SHA512

817ae045a8cae70a55acfa752c24157e50343fb4ea0115781d95ec9465a0410e4b2e88fcac2aac928812751c9500ffad179d3fd6a8d595a1979f01ae65087380
SSDEEP

98304:pJqzL67y5psFMC+tQBupkng40rDI+25i/Q25nu3Rm32LX7ar1OuIFZ98hgo:pJqa7hmC+Npkn10hQ25numCX7arHIFZw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08158ff92d4bb7588e88914f580bab176bf180cabb82e6e50b9f0cc92c703875

Files

08158ff92d4bb7588e88914f580bab176bf180cabb82e6e50b9f0cc92c703875
.exe windows:6 windows x86 arch:x86

5f1b4b41ed3e6ede96505b5bb8799ffe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsValidCodePage
FindNextFileW
FindFirstFileExW
GetDriveTypeW
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
EnumSystemLocalesW
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
SetFilePointerEx
GetSystemTimeAsFileTime
GetStdHandle
ExitProcess
GetFileType
GetCurrentDirectoryW
QueryPerformanceFrequency
HeapQueryInformation
GetFullPathNameW
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
GetCommandLineW
GetCommandLineA
VirtualQuery
VirtualAlloc
GetSystemInfo
RtlUnwind
lstrlenA
GetVersion
lstrcpynA
GetStringTypeW
LCMapStringEx
RaiseException
OutputDebugStringW
CreateFileW
WriteConsoleW
SetStdHandle
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
CreateEventW
WaitForSingleObjectEx
ResetEvent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetUserDefaultLCID
GetTempFileNameA
Sleep
GetProfileIntA
SearchPathA
InitializeSListHead
GetTickCount64
GetFileTime
GetFileSizeEx
GetFileAttributesExA
SetErrorMode
FindResourceExW
GetFileAttributesA
GetWindowsDirectoryA
VerifyVersionInfoA
VerSetConditionMask
lstrcmpiA
GetCurrentProcess
DuplicateHandle
GetVolumeInformationA
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
GetCurrentDirectoryA
GetCPInfo
GetOEMCP
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
lstrcpyA
GlobalFlags
GetACP
GetThreadLocale
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FileTimeToLocalFileTime
ResumeThread
SetThreadPriority
SetEvent
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpA
GetVersionExA
GetCurrentThread
GetCurrentProcessId
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
LoadLibraryW
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
OutputDebugStringA
SetLastError
FormatMessageA
MulDiv
LocalFree
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalAlloc
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
HeapReAlloc
Process32Next
GetLastError
CreateToolhelp32Snapshot
HeapSize
OpenProcess
GetSystemDefaultLangID
InitializeCriticalSectionEx
LeaveCriticalSection
TerminateProcess
EnterCriticalSection
HeapFree
Process32First
GetModuleFileNameA
MultiByteToWideChar
FreeLibrary
ReadFile
GetTickCount
CreateProcessA
GetStartupInfoA
CreatePipe
CreateThread
CopyFileA
CreateDirectoryA
GetTempPathA
RemoveDirectoryA
DeleteFileA
FindClose
FindNextFileA
FindFirstFileA
ReleaseMutex
WaitForSingleObject
CloseHandle
WriteFile
FindResourceA
CreateFileA
GetSystemDirectoryA
CreateMutexA
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
GetProcAddress
LoadLibraryA
GetTimeZoneInformation

user32

GetNextDlgGroupItem
IsRectEmpty
SetRect
InvalidateRgn
CopyAcceleratorTableA
CharNextA
DeleteMenu
LoadCursorW
WindowFromPoint
ReleaseCapture
SetCapture
WaitMessage
IntersectRect
GetAsyncKeyState
CopyImage
LoadImageW
DestroyIcon
TrackMouseEvent
RealChildWindowFromPoint
LoadCursorA
GetSysColorBrush
DrawStateA
IsZoomed
SystemParametersInfoA
InflateRect
GetMenuItemInfoA
DestroyMenu
SetCursor
ShowOwnedPopups
GetCursorPos
GetMessageA
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
FillRect
ClientToScreen
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
GetWindowThreadProcessId
IsDialogMessageA
SetWindowTextA
CheckDlgButton
SetDlgItemTextA
MoveWindow
ShowWindow
LoadBitmapW
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameA
GetClassLongA
SetWindowLongA
PtInRect
EqualRect
CopyRect
MapWindowPoints
ScreenToClient
MessageBoxA
AdjustWindowRectEx
CharUpperA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
BringWindowToTop
LoadAcceleratorsA
TranslateAcceleratorA
GetNextDlgTabItem
GetActiveWindow
IsWindowEnabled
SetActiveWindow
GetDesktopWindow
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
LoadMenuA
CreatePopupMenu
InsertMenuItemA
LoadImageA
UnpackDDElParam
ReuseDDElParam
SetLayeredWindowAttributes
EnumDisplayMonitors
LoadMenuW
SetWindowRgn
NotifyWinEvent
GetMenuDefaultItem
SetMenuDefaultItem
GetKeyState
SetFocus
IsCharLowerA
UpdateLayeredWindow
EnableScrollBar
UnionRect
MonitorFromPoint
DrawFocusRect
DrawIconEx
MessageBeep
SendDlgItemMessageA
SetRectEmpty
OffsetRect
RegisterWindowMessageA
GetMessagePos
GetMessageTime
DefWindowProcA
CallWindowProcA
RegisterClassA
GetClassInfoA
GetClassInfoExA
CreateWindowExA
IsMenu
IsChild
SetWindowPos
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsWindowVisible
GetDlgCtrlID
GetIconInfo
HideCaret
InvertRect
MapVirtualKeyA
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetKeyNameTextA
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
SetClassLongA
DrawEdge
DrawFrameControl
SetCursorPos
CopyIcon
FrameRect
RegisterClipboardFormatA
GetKeyboardLayout
GetKeyboardState
ToAsciiEx
LoadAcceleratorsW
CreateAcceleratorTableA
DestroyAcceleratorTable
LockWindowUpdate
CharUpperBuffA
ModifyMenuA
PostThreadMessageA
GetComboBoxInfo
GetDlgItem
GetWindowRgn
DestroyCursor
EnableWindow
GetSysColor
RedrawWindow
LoadIconW
GetSystemMenu
AppendMenuA
SendMessageA
SetParent
GetWindowRect
SetTimer
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
PostMessageA
InvalidateRect
KillTimer
GetFocus
UnregisterClassA
PeekMessageA
TranslateMessage
GetWindowLongA
DispatchMessageA
GetParent
GetMenuStringA
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuA
RemoveMenu
CreateMenu
SubtractRect
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
DrawMenuBar
GetUpdateRect
IsClipboardFormatAvailable
GetDoubleClickTime
MapVirtualKeyExA
GetWindowTextLengthA
EndDialog

gdi32

GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutA
ExtTextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectA
GetTextExtentPoint32A
GetTextMetricsA
CombineRgn
CreateRectRgnIndirect
GetMapMode
PatBlt
SetRectRgn
DPtoLP
GetPixel
GetTextColor
GetRgnBox
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
CreateRoundRectRgn
CreateDIBSection
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
SetPixel
StretchBlt
SetDIBColorTable
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
LPtoDP
EnumFontFamiliesExA
CreateFontA
GetCharWidthA
StretchDIBits
GetCurrentObject
OffsetRgn
Rectangle
RoundRect
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetWindowOrgEx
GetViewportOrgEx
SetPixelV
GetBkMode
GetTextExtentPoint32W
GetTextFaceA
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteObject
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
BitBlt
CreateBitmap
GetObjectA
SetTextColor
GetStockObject
CreateSolidBrush
BeginPath
SetBkColor
GetDeviceCaps
CreateDCA
CopyMetaFileA
DeleteDC
GetBkColor
FillPath
EndPath

msimg32

GradientFill
TransparentBlt
AlphaBlend

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegEnumValueA
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueA
RegEnumKeyA
RegSetValueExA

shell32

SHGetFileInfoA
DragQueryFileA
ShellExecuteExA
SHBrowseForFolderA
SHAppBarMessage
ShellExecuteA
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListA
DragFinish

comctl32

ImageList_GetIcon
ImageList_AddMasked
ImageList_Draw
ImageList_ReplaceIcon
_TrackMouseEvent
InitCommonControlsEx
ImageList_GetImageCount

shlwapi

PathRemoveFileSpecW
StrFormatKBSizeA
PathIsUNCA
PathStripToRootA
PathFindFileNameA
PathFindExtensionA

uxtheme

IsThemeBackgroundPartiallyTransparent
GetCurrentThemeName
GetWindowTheme
IsAppThemed
DrawThemeText
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemePartSize
GetThemeColor
DrawThemeParentBackground
GetThemeSysColor

ole32

CoInitialize
CoCreateInstance
CoUninitialize
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
CoRegisterMessageFilter
CoRevokeClassObject
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoInitializeEx

oleaut32

VariantClear
SysAllocStringByteLen
SysAllocStringLen
SysFreeString
VariantInit
SysStringLen
SafeArrayDestroy
SystemTimeToVariantTime
VariantChangeType
VariantCopy
VarBstrFromDate
OleCreateFontIndirect
SysAllocString
VariantTimeToSystemTime
LoadTypeLi

oledlg

ord8

gdiplus

GdipCreatePath
GdipDeletePath
GdipFillPath
GdipClosePathFigure
GdipAddPathLine
GdipAddPathArc
GdipCreateLineBrushFromRectI
GdipCreatePen1
GdiplusStartup
GdiplusShutdown
GdipAlloc
GdipFree
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipSetStringFormatLineAlign
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipDeletePen
GdipSetPenDashStyle
GdipSetSmoothingMode
GdipResetWorldTransform
GdipTranslateWorldTransform
GdipRotateWorldTransform
GdipSetPageUnit
GdipSetPageScale
GdipDrawRectangleI
GdipSetStringFormatAlign
GdipDeleteStringFormat
GdipDrawEllipseI
GdipDrawPath
GdipGraphicsClear
GdipFillRectangleI
GdipFillEllipseI
GdipCreateStringFormat
GdipMeasureString
GdipDrawString
GdipDeleteFont
GdipCloneFont
GdipCreateFont
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipDrawImageRectRect
GdipReleaseDC
GdipSetImageAttributesColorMatrix
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipCloneBitmapArea
GdipLoadImageFromStream
GdipDeleteBrush
GdipCreateSolidFill
GdipCloneBrush

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundA

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 362KB - Virtual size: 361KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f1b4b41ed3e6ede96505b5bb8799ffe

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

oleacc

imm32

winmm

Sections

.text Size: 1.7MB - Virtual size: 1.7MB

.rdata Size: 362KB - Virtual size: 361KB

.data Size: 25KB - Virtual size: 42KB

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.reloc Size: 149KB - Virtual size: 148KB

.text
Size: 1.7MB - Virtual size: 1.7MB

.rdata
Size: 362KB - Virtual size: 361KB

.data
Size: 25KB - Virtual size: 42KB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

.reloc
Size: 149KB - Virtual size: 148KB