e60d5c9d58b8e0f64eb6295d47954f394ccdec936e74063fbb30488191fc84aa

Sharing

Copy URL

Twitter E-mail

General

Target

e60d5c9d58b8e0f64eb6295d47954f394ccdec936e74063fbb30488191fc84aa
Size

350KB
MD5

a264d4179e5899de18513d60b2489b18
SHA1

e5b7bf0b857779aa304d6cb79b68f69f161e65cf
SHA256

e60d5c9d58b8e0f64eb6295d47954f394ccdec936e74063fbb30488191fc84aa
SHA512

9b45dad4ad90fc897f431215efe1658ffdc95b8f69310f6182dc9191d3a87c82612cc5523497606994726f1b2b44cd04f61765bb014056f81f064722dddc63b3
SSDEEP

6144:thzC38U6sPSnrtD8E0ZhDYZ3otEkChoKdpAhw2du:txC38Ufkrh8TDYZ3ot0hoyw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e60d5c9d58b8e0f64eb6295d47954f394ccdec936e74063fbb30488191fc84aa

Files

e60d5c9d58b8e0f64eb6295d47954f394ccdec936e74063fbb30488191fc84aa
.exe windows:4 windows x86 arch:x86

416b1317177b7a68ae389f325d88b87e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
Sleep
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
FreeEnvironmentStringsA
SetEnvironmentVariableA
UnhandledExceptionFilter
GetLocalTime
GetSystemTime
GetTimeZoneInformation
GetACP
HeapSize
HeapReAlloc
RaiseException
TerminateProcess
HeapFree
HeapAlloc
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
ReleaseMutex
CreateMutexA
CreateFileW
FindResourceExA
GetModuleHandleW
GetSystemInfo
LoadLibraryW
OpenProcess
GetSystemDirectoryA
GetProfileStringA
GetModuleFileNameW
GetComputerNameW
GetFileTime
GetFileSize
GetTickCount
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrlenW
GetFullPathNameA
GetVolumeInformationA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
SetErrorMode
GetOEMCP
GetCPInfo
GetThreadLocale
SizeofResource
GetProcessVersion
WritePrivateProfileStringA
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
lstrcpynA
MulDiv
SetLastError
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GetProcAddress
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
WaitForSingleObject
GetModuleFileNameA
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
FormatMessageA
LocalFree
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
FindFirstFileA
FindClose
CreateDirectoryA
GetFileAttributesA
GetLastError
QueryDosDeviceA
DeviceIoControl
CreateFileA
CompareStringW
CloseHandle

user32

ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
SetFocus
AdjustWindowRectEx
ScreenToClient
CopyRect
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
wvsprintfA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
LoadIconA
EndPaint
AppendMenuA
GetSystemMenu
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
MapDialogRect
LoadStringA
DestroyMenu
ClientToScreen
GetDC
ReleaseDC
GetWindowDC
GetClassInfoA
BeginPaint
SetWindowPos
GetWindow
EnableWindow
PostMessageA
PostQuitMessage
GetWindowThreadProcessId
SetCursor
MessageBoxA
GetWindowLongA
IsWindowEnabled
GetLastActivePopup
GetParent
SetWindowsHookExA
GetCursorPos
PeekMessageA
IsWindowVisible
ValidateRect
CallNextHookEx
GetKeyState
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
OpenDesktopA
EnumDesktopWindows
CloseDesktop
GetActiveWindow
DispatchMessageA
TranslateMessage
GetMessageA
DrawTextA
TabbedTextOutA
GrayStringA
LoadCursorA
GetDesktopWindow
GetClassNameA
PtInRect
GetSysColorBrush
CharNextA
PostThreadMessageA
RegisterClipboardFormatA
InflateRect
CharUpperA
InvalidateRect
MessageBeep
GetNextDlgGroupItem
SetRect
SendMessageA
CopyAcceleratorTableA
GetNextDlgTabItem
GetFocus
EnableMenuItem
CheckMenuItem
SetWindowContextHelpId
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps

gdi32

DeleteObject
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
ExtTextOutA
Escape
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
PatBlt
IntersectClipRect
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
TextOutA
GetTextExtentPointA
BitBlt
CreateCompatibleDC
CreateDIBitmap
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

GetLengthSid
InitializeAcl
AddAccessAllowedAce
GetAce
SetSecurityDescriptorDacl
OpenProcessToken
GetTokenInformation
LookupAccountSidA
GetUserNameA
RegQueryInfoKeyA
RegEnumKeyA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
InitializeSecurityDescriptor

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

comctl32

ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
OleInitialize
StgOpenStorageOnILockBytes

olepro32

ord253

oleaut32

SysStringLen
SysAllocStringByteLen
SysAllocString
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString

ws2_32

inet_ntoa
ntohl
inet_addr
WSAStartup
htonl

Sections

.text
Size: 240KB - Virtual size: 237KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

416b1317177b7a68ae389f325d88b87e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

ws2_32

Sections

.text Size: 240KB - Virtual size: 237KB

.rdata Size: 48KB - Virtual size: 47KB

.data Size: 28KB - Virtual size: 44KB

.rsrc Size: 16KB - Virtual size: 14KB

.text
Size: 240KB - Virtual size: 237KB

.rdata
Size: 48KB - Virtual size: 47KB

.data
Size: 28KB - Virtual size: 44KB

.rsrc
Size: 16KB - Virtual size: 14KB