d5da9a4e90572a2eff6226f3ffbcc2b26aaabf47be4a78292b5aff1b66235108

Sharing

Copy URL Twitter E-mail

General

Target

d5da9a4e90572a2eff6226f3ffbcc2b26aaabf47be4a78292b5aff1b66235108
Size

1.7MB
MD5

656981f19f729dfdc3cca5f6219aa12b
SHA1

7f66b8cf8dcae0f616afdd6797aa77d2f443614e
SHA256

d5da9a4e90572a2eff6226f3ffbcc2b26aaabf47be4a78292b5aff1b66235108
SHA512

4e5b3718bd5fc70d734acd4e3f8f7904c41b53f2d0b841f3fddddaaf1c5bfcc842ad4246c02f53d34b67252828c5f881744b91c1dcb3c3f795a5504ecce82232
SSDEEP

49152:W5G0VAoG1OkQR+ysU3y27k24tDZcQ4FLhRc:WlK7QR+ysS37F4kQ4X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5da9a4e90572a2eff6226f3ffbcc2b26aaabf47be4a78292b5aff1b66235108

Files

d5da9a4e90572a2eff6226f3ffbcc2b26aaabf47be4a78292b5aff1b66235108
.exe windows:5 windows x86 arch:x86

fdfd5268f4b67d3783285e913f322bb1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\My Projects\Macro Expert 3.x\Output\CrashReport.pdb

Imports

kernel32

GetConsoleOutputCP
WriteConsoleA
SetEnvironmentVariableA
WriteConsoleW
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
LCMapStringA
InitializeCriticalSectionAndSpinCount
LCMapStringW
IsValidCodePage
GetOEMCP
GetCPInfo
QueryPerformanceCounter
VirtualFree
HeapCreate
GetStartupInfoA
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
GetFileType
SetStdHandle
GetSystemTimeAsFileTime
CreateThread
ExitThread
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapReAlloc
ExitProcess
RaiseException
RtlUnwind
HeapSize
GetTimeZoneInformation
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapAlloc
HeapFree
GetStartupInfoW
FindResourceExW
VirtualProtect
GetProfileIntW
SearchPathW
SetErrorMode
GetFileSizeEx
GetFullPathNameW
GetVolumeInformationW
DuplicateHandle
UnlockFile
LockFile
GetThreadLocale
GlobalGetAtomNameW
lstrcpyW
GlobalFlags
WritePrivateProfileStringW
GetPrivateProfileIntW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetModuleHandleA
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
InterlockedDecrement
GlobalAddAtomW
ResumeThread
SetThreadPriority
FreeResource
GlobalDeleteAtom
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
CompareStringA
InterlockedExchange
lstrcmpW
CopyFileW
GlobalSize
MulDiv
FindClose
FindFirstFileW
GetCurrentDirectoryW
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetModuleFileNameW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetVersionExW
GetCurrentThreadId
GetCurrentProcessId
GetTempFileNameW
GetTempPathW
GetFileTime
GetFileAttributesW
GetLocaleInfoW
GetCurrentProcess
FlushFileBuffers
FreeLibrary
GetProcAddress
LoadLibraryW
CreateFileA
CreateEventW
WaitForSingleObject
ResetEvent
SetEvent
FormatMessageW
GetModuleHandleW
SetEndOfFile
SetFilePointer
WriteFile
ReadFile
GetFileSize
CreateFileW
SetLastError
LocalFree
LocalAlloc
CloseHandle
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
lstrlenW
FindResourceW
LoadResource
LockResource
SizeofResource
GetACP
Sleep
GetLastError
GetTickCount

user32

SetCapture
LoadCursorW
GetSysColorBrush
LoadMenuW
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
RegisterWindowMessageW
SendDlgItemMessageA
IsChild
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
UpdateWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
DefWindowProcW
CallWindowProcW
PtInRect
GetMenu
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowTextLengthW
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
SendDlgItemMessageW
CheckDlgButton
GetSysColor
DestroyMenu
GetMenuItemInfoW
InflateRect
UnhookWindowsHookEx
GetLastActivePopup
ShowOwnedPopups
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
GetKeyState
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetActiveWindow
DestroyAcceleratorTable
CreateDialogIndirectParamW
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
SetWindowContextHelpId
MapDialogRect
SetWindowPos
WindowFromPoint
KillTimer
WaitMessage
RegisterClipboardFormatW
WinHelpW
MessageBeep
RedrawWindow
IsZoomed
PostQuitMessage
GetMenuState
GetMenuStringW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
InvalidateRect
DestroyWindow
PostMessageW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
MoveWindow
OffsetRect
SystemParametersInfoW
GetWindowTextW
GetClassNameW
GetCursorPos
CopyRect
LoadIconW
GetSystemMenu
AppendMenuW
SendMessageW
GetWindow
SetForegroundWindow
BringWindowToTop
ShowWindow
IsWindowVisible
GetWindowThreadProcessId
GetForegroundWindow
IsWindow
GetFocus
ReleaseDC
GetDC
LoadImageW
SetWindowLongW
ScreenToClient
ClientToScreen
SetFocus
GetWindowLongW
LoadStringW
GetDlgCtrlID
GetParent
MessageBoxW
DestroyCursor
GetWindowRgn
CreateMenu
GetDoubleClickTime
GetIconInfo
SubtractRect
CopyIcon
CharUpperBuffW
GetUpdateRect
FrameRect
TranslateMDISysAccel
LoadAcceleratorsW
DrawMenuBar
GetDesktopWindow
DispatchMessageW
TranslateMessage
PeekMessageW
EnableWindow
DrawIconEx
GetWindowRect
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
ReleaseCapture
DeleteMenu
SetRectEmpty
PostThreadMessageW
CopyAcceleratorTableW
ToUnicodeEx
MapVirtualKeyW
GetKeyboardLayout
GetKeyboardState
CharUpperW
SetTimer
GetAsyncKeyState
DefMDIChildProcW
DefFrameProcW
IsClipboardFormatAvailable
MapVirtualKeyExW
GetKeyNameTextW
IsCharLowerW
GetMenuDefaultItem
SetMenuDefaultItem
UpdateLayeredWindow
EnableScrollBar
UnionRect
SetCursorPos
DrawFocusRect
DrawFrameControl
DrawEdge
UnpackDDElParam
ReuseDDElParam
InsertMenuItemW
TranslateAcceleratorW
UnregisterClassW
GetNextDlgGroupItem
InvalidateRgn
SetRect
CharNextW
DestroyIcon
CopyImage
DrawStateW
EnumChildWindows
LockWindowUpdate
IsRectEmpty
IsMenu
SetClassLongW
SetParent
CreatePopupMenu
NotifyWinEvent
SetWindowRgn
CreateAcceleratorTableW
SetActiveWindow

gdi32

SelectClipRgn
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
GetStockObject
SelectPalette
GetObjectType
CreatePen
CreateSolidBrush
CreateHatchBrush
CreateRectRgnIndirect
OffsetRgn
GetRgnBox
CreateDIBitmap
CreateCompatibleBitmap
GetTextMetricsW
EnumFontFamiliesW
GetTextCharsetInfo
CreateRoundRectRgn
GetTextColor
SetDIBColorTable
RealizePalette
SetPixel
CreateDIBSection
GetBkColor
SetRectRgn
GetMapMode
DPtoLP
CreateEllipticRgn
CreatePolygonRgn
Polyline
Ellipse
Polygon
Rectangle
RoundRect
CreatePalette
GetPaletteEntries
GetWindowOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetViewportOrgEx
LPtoDP
ExtFloodFill
SetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
EnumFontFamiliesExW
GetTextFaceW
SetPixelV
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
GetClipBox
GetDCOrgEx
GetTextExtentPoint32W
ExtTextOutW
CreateFontIndirectW
CopyMetaFileW
GetDeviceCaps
CombineRgn
GetDIBits
CreateRectRgn
GetObjectW
GetPixel
SetTextColor
SetBkColor
SelectObject
DeleteDC
CreateCompatibleDC
StretchBlt
BitBlt
PatBlt
CreateBitmap
DeleteObject

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegQueryValueW
RegCloseKey
RegEnumKeyExW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
IsTextUnicode
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW

shell32

SHGetFileInfoW
SHAppBarMessage
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetSpecialFolderPathW
DragFinish
DragQueryFileW
ShellExecuteW

comctl32

InitCommonControlsEx
ImageList_GetIconSize

shlwapi

PathStripToRootW
PathRemoveFileSpecW
UrlUnescapeW
PathFindFileNameW
PathFindExtensionW
StrStrIW
PathFileExistsW
PathIsUNCW

oledlg

OleUIBusyW

ole32

OleGetClipboard
CoCreateInstance
CoTaskMemFree
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CLSIDFromProgID
CLSIDFromString
CoUninitialize
CoInitializeEx
CreateStreamOnHGlobal
CoGetClassObject
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleLockRunning
DoDragDrop
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor

oleaut32

SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SysAllocString
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysFreeString
SysStringLen

gdiplus

GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdiplusStartup
GdiplusShutdown
GdipGetImageGraphicsContext
GdipDrawImageI
GdipCloneImage
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipFree
GdipAlloc

ws2_32

WSAStartup
WSACleanup
WSASetLastError

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

wininet

InternetSetOptionW
InternetSetStatusCallbackW
InternetCanonicalizeUrlW
InternetCrackUrlW
InternetErrorDlg
HttpSendRequestA
InternetReadFile
InternetReadFileExA
HttpQueryInfoA
InternetSetOptionA
InternetQueryOptionA
HttpOpenRequestA
InternetConnectW
InternetOpenW
HttpQueryInfoW
HttpAddRequestHeadersA
InternetCloseHandle

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 280KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fdfd5268f4b67d3783285e913f322bb1

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

gdiplus

ws2_32

version

wininet

imm32

winmm

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 280KB - Virtual size: 279KB

.data Size: 24KB - Virtual size: 53KB

.rsrc Size: 83KB - Virtual size: 82KB

.reloc Size: 142KB - Virtual size: 142KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 280KB - Virtual size: 279KB

.data
Size: 24KB - Virtual size: 53KB

.rsrc
Size: 83KB - Virtual size: 82KB

.reloc
Size: 142KB - Virtual size: 142KB