652794b4ee50385485b07a9d945097528e5b59b76503c8353ca5de2e2cc93ff7

Sharing

Copy URL Twitter E-mail

General

Target

652794b4ee50385485b07a9d945097528e5b59b76503c8353ca5de2e2cc93ff7
Size

1020KB
MD5

b4dc93d905f9356ac59f28762266e0b4
SHA1

6e0b12c542de9a38fd78bf97847d45cc960e0447
SHA256

652794b4ee50385485b07a9d945097528e5b59b76503c8353ca5de2e2cc93ff7
SHA512

a187b156a268e730dbc0139b2dee4b3345f8f31cf0336dccef29af42330780eae5cae63d3b11ce65125fde5a16ce38ae19f547495d1fa1395c83fcf8115b0120
SSDEEP

24576:g0U8sr3zkTuh/z99jQ1gwdbRsLAK6SWTdCQXvA4dr:3U8SCnRskK6SWTdCQXv5r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
652794b4ee50385485b07a9d945097528e5b59b76503c8353ca5de2e2cc93ff7

Files

652794b4ee50385485b07a9d945097528e5b59b76503c8353ca5de2e2cc93ff7
.exe windows:5 windows x86 arch:x86

16d689c642412331a18a3a7a7f18b12b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
lstrcpyW
DeleteFileW
FindNextFileW
lstrcmpiW
RemoveDirectoryW
FindClose
FindFirstFileW
CreateToolhelp32Snapshot
Process32NextW
Module32FirstW
Process32FirstW
GetProcAddress
lstrlenW
MultiByteToWideChar
CreateFileW
WideCharToMultiByte
WriteFile
GetModuleHandleW
GetCurrentProcess
FindResourceExW
ReleaseMutex
GetLastError
CreateMutexW
GetCommandLineW
LockResource
InterlockedIncrement
InterlockedDecrement
SizeofResource
GetStringTypeW
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ReadFile
HeapFree
HeapAlloc
ExitThread
GetCurrentThreadId
CreateThread
ExitProcess
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetCPInfo
RaiseException
RtlUnwind
LCMapStringW
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
SetFilePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
HeapSize
GetLocaleInfoW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetConsoleCP
GetConsoleMode
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteConsoleW
SetEndOfFile
GetProcessHeap
GetCurrentDirectoryW
GetFileSize
DosDateTimeToFileTime
SystemTimeToFileTime
DuplicateHandle
MulDiv
GetLocalTime
LoadResource
FindResourceW
FreeResource
CloseHandle
GetTempPathW
GetModuleFileNameW
TerminateProcess
OpenProcess
WaitForSingleObject
InterlockedExchange
CreateProcessW

user32

IsZoomed
MessageBoxW
SetWindowRgn
GetKeyState
DestroyWindow
ReleaseDC
GetDC
GetUpdateRect
BeginPaint
EndPaint
IsRectEmpty
UpdateLayeredWindow
InvalidateRect
MapWindowPoints
GetCursorPos
GetFocus
SetTimer
KillTimer
SetCapture
ReleaseCapture
PtInRect
IntersectRect
CharNextW
MoveWindow
CreateCaret
ShowCaret
HideCaret
SetCaretPos
IsIconic
RegisterClassExW
DrawTextW
OffsetRect
SetRect
CharPrevW
SetWindowTextW
GetWindowTextLengthW
GetWindowTextW
InvalidateRgn
CreateAcceleratorTableW
DrawIconEx
GetWindowRect
DispatchMessageW
TranslateMessage
SetFocus
GetMessageW
EnableWindow
GetWindow
IsWindow
SetWindowLongW
CreateWindowExW
DefWindowProcW
GetClassInfoExW
RegisterClassW
LoadCursorW
SendMessageW
GetSystemMetrics
GetClientRect
SetCursor
ClientToScreen
InflateRect
PostMessageW
LoadImageW
SetWindowPos
MonitorFromWindow
GetMonitorInfoW
GetPropW
SetPropW
CallWindowProcW
FillRect
GetWindowLongW
ShowWindow
ScreenToClient
PostQuitMessage
GetSysColor
GetParent

advapi32

RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegSetValueW

shell32

CommandLineToArgvW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ShellExecuteExW
ShellExecuteW
SHChangeNotify

ole32

CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitialize
CLSIDFromString
CLSIDFromProgID
OleLockRunning

shlwapi

SHDeleteKeyW
PathIsDirectoryEmptyW
PathFileExistsW

wininet

HttpOpenRequestW
HttpSendRequestW
InternetConnectW
InternetOpenW

msimg32

AlphaBlend

gdi32

RestoreDC
Rectangle
SetWindowOrgEx
GetTextMetricsW
GetObjectA
GetDeviceCaps
SelectClipRgn
GetClipBox
CreateRectRgnIndirect
ExtSelectClipRgn
CombineRgn
BitBlt
StretchBlt
SetTextColor
SetBkColor
SetBkMode
SetStretchBltMode
ExtTextOutW
CreateSolidBrush
CreatePenIndirect
MoveToEx
LineTo
RoundRect
DeleteObject
SaveDC
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
CreatePen
CreateFontIndirectW
GetStockObject
GetObjectW
CreateDIBSection
TextOutW
GetTextExtentPoint32W
GetCharABCWidthsW
CreateRoundRectRgn

oleaut32

VariantClear
SysAllocString
VariantInit
SysFreeString

comctl32

_TrackMouseEvent
ord17

gdiplus

GdipCloneBrush
GdipAlloc
GdipDrawString
GdiplusStartup
GdiplusShutdown
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipDeleteFont
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetTextRenderingHint
GdipCreateStringFormat
GdipDeleteStringFormat
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipCreateLineBrushI
GdipDeleteBrush
GdipFree

Sections

.text
Size: 525KB - Virtual size: 524KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 23KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 372KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

16d689c642412331a18a3a7a7f18b12b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

shlwapi

wininet

msimg32

gdi32

oleaut32

comctl32

gdiplus

Sections

.text Size: 525KB - Virtual size: 524KB

.rdata Size: 92KB - Virtual size: 92KB

.data Size: 23KB - Virtual size: 34KB

.rsrc Size: 372KB - Virtual size: 372KB

.text
Size: 525KB - Virtual size: 524KB

.rdata
Size: 92KB - Virtual size: 92KB

.data
Size: 23KB - Virtual size: 34KB

.rsrc
Size: 372KB - Virtual size: 372KB