711e33060c94118098e872c3fb7ad31c3ba6531a7827eb853e0a74518d7cb2f7

Sharing

Copy URL Twitter E-mail

General

Target

711e33060c94118098e872c3fb7ad31c3ba6531a7827eb853e0a74518d7cb2f7
Size

1.5MB
MD5

2c4113a5e4c2c6ce1f8bc34fa117f06f
SHA1

019821f2f8fc6aa4b1934c629470f4fd14da9195
SHA256

711e33060c94118098e872c3fb7ad31c3ba6531a7827eb853e0a74518d7cb2f7
SHA512

1165b8ab34d02cf5a11d66335547f586e4b1d34bc4c5cf0f8d14aa0c41c00d52e08a13a84ea9039b81b10cc0107e20e6d7c9dfbb45d3f36eebb0bca515f1d8ae
SSDEEP

24576:eKsxHxR3MzS1lzFQE6C9L3kSQ5x2WT3RBOKt2qhxZYyT0nc:eKsxHw2RxYp5hwyTmc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
711e33060c94118098e872c3fb7ad31c3ba6531a7827eb853e0a74518d7cb2f7

Files

711e33060c94118098e872c3fb7ad31c3ba6531a7827eb853e0a74518d7cb2f7
.exe windows:4 windows x86 arch:x86

f67d535b9db3598a3a4cdfbdba43c561

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetCurrentDirectoryA
UnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
SetEnvironmentVariableA
GetDriveTypeA
GetLocaleInfoW
GetFileType
SetStdHandle
FindResourceA
GlobalAddAtomA
GetProfileStringA
InterlockedExchange
GetLocalTime
GetSystemTime
GetTimeZoneInformation
HeapSize
ExitThread
CreateThread
HeapReAlloc
GetDriveTypeW
RaiseException
HeapFree
HeapAlloc
RtlUnwind
GetStartupInfoW
SetErrorMode
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
FindResourceExW
GetCurrentDirectoryW
GlobalFlags
FindNextFileW
lstrcmpiW
GetThreadLocale
GetStringTypeExW
GetVolumeInformationW
FindFirstFileW
FindClose
UnlockFile
LockFile
SetFilePointer
DuplicateHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GetProcessVersion
GetProfileIntW
GetDiskFreeSpaceW
GetFileTime
SetFileTime
GetFullPathNameW
GetTempFileNameW
GetFileAttributesW
CreateEventW
SuspendThread
SetEvent
lstrcmpW
lstrcmpA
lstrcmpiA
GetCurrentThread
GlobalGetAtomNameW
GlobalFree
LoadLibraryA
GetVersion
lstrcatW
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
InterlockedDecrement
InterlockedIncrement
MulDiv
GetModuleHandleA
SetLastError
lstrlenA
ExitProcess
SizeofResource
LoadResource
LockResource
GlobalAlloc
GlobalLock
GlobalUnlock
SetCurrentDirectoryW
FindResourceW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetPrivateProfileStringW
FlushFileBuffers
WriteFile
ReadFile
SetFilePointerEx
SetEndOfFile
GetFileSizeEx
CloseHandle
CreateFileW
MultiByteToWideChar
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetWindowsDirectoryW
GetModuleFileNameW
LoadLibraryW
FreeLibrary
GetCurrentProcess
GetTempPathW
CreateDirectoryW
GetFileAttributesExW
GetLongPathNameW
GetShortPathNameW
GetLastError
LocalFree
MoveFileW
DeleteFileW
SetThreadPriority
Sleep
CreateProcessW
TerminateProcess
GetExitCodeProcess
GetModuleHandleW
GetProcAddress
GetVersionExW
GetCurrentThreadId
lstrcpynW
lstrcpyW
WaitForSingleObject
ResumeThread
GetTickCount
lstrlenW

user32

SetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
SetDlgItemTextW
SendDlgItemMessageW
SendDlgItemMessageA
MapWindowPoints
EqualRect
DeferWindowPos
GetTopWindow
MessageBoxW
WinHelpW
GetClassInfoW
RegisterClassW
TrackPopupMenu
SetWindowPlacement
GetDlgItem
GetWindowTextLengthW
GetWindowTextW
DestroyWindow
CreateWindowExW
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SystemParametersInfoW
GetWindowPlacement
GetDlgCtrlID
AdjustWindowRectEx
wsprintfW
EndPaint
BeginPaint
GetWindowDC
SetWindowPos
LockWindowUpdate
CheckMenuItem
IsChild
GetMenu
SetMenu
IsIconic
FindWindowW
ExitWindowsEx
DestroyIcon
MsgWaitForMultipleObjects
PeekMessageW
TranslateMessage
InsertMenuW
DrawFocusRect
IsWindowEnabled
RegisterWindowMessageW
GetWindow
SetRect
GetMessageW
DispatchMessageW
GetDC
ReleaseDC
MoveWindow
IntersectRect
IsRectEmpty
SetRectEmpty
GetMenuStringW
CallNextHookEx
SetFocus
keybd_event
SetWindowsHookExW
EnableMenuItem
UnhookWindowsHookEx
GetCapture
GetMenuItemCount
WindowFromPoint
DestroyMenu
GetSysColor
CreatePopupMenu
GetMessagePos
RedrawWindow
BeginDeferWindowPos
LoadCursorW
DestroyCursor
UnregisterClassW
DefWindowProcW
GetWindowTextLengthA
HideCaret
ShowCaret
ExcludeUpdateRgn
OffsetRect
EndDeferWindowPos
GetSystemMenu
RemovePropW
GetPropW
CallWindowProcW
SetPropW
SetWindowLongW
GetMenuItemID
GetMenuDefaultItem
LoadIconW
KillTimer
SetTimer
SetParent
InflateRect
ClientToScreen
GetParent
SetMenuDefaultItem
LoadMenuW
GetClassNameW
CharUpperW
GetSysColorBrush
GetDCEx
ValidateRect
ShowOwnedPopups
wvsprintfW
MapDialogRect
GetAsyncKeyState
PostQuitMessage
GrayStringW
DrawTextW
TabbedTextOutW
ScreenToClient
LoadBitmapW
UpdateWindow
GetFocus
SetCapture
ReleaseCapture
SetActiveWindow
SetForegroundWindow
SendMessageW
GetSubMenu
AppendMenuW
InvalidateRect
IsWindowVisible
GetWindowRect
GetCursorPos
PtInRect
GetKeyState
DeleteMenu
PostMessageW
CheckMenuRadioItem
EnableWindow
GetClientRect
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
GetDesktopWindow
TranslateAcceleratorW
LoadAcceleratorsW
LoadStringW
EndDialog
GetActiveWindow
CreateDialogIndirectParamW
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuW
SetCursor
SetMenuItemBitmaps
GetWindowTextA
DrawTextA
GetClassInfoA
DefDlgProcA
DefWindowProcA
CharNextA
CallWindowProcA
RemovePropA
SetWindowsHookExA
GetWindowLongA
SendMessageA
IsWindowUnicode
GetClassNameA
SetWindowLongA
SetPropA
GetPropA
IsWindow
GetWindowLongW
GetNextDlgTabItem
TrackPopupMenuEx
ShowWindow
CopyRect
GetSystemMetrics

gdi32

SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
IntersectClipRect
SetMapMode
GetDeviceCaps
CreatePen
CreateSolidBrush
CreatePatternBrush
SetRectRgn
GetTextMetricsW
EnumFontFamiliesExW
CreateRectRgn
CombineRgn
SetTextColor
SetBkMode
CreateBitmap
SetBkColor
SaveDC
GetClipBox
CreateRectRgnIndirect
ExtSelectClipRgn
SetStretchBltMode
StretchDIBits
SetDIBitsToDevice
RestoreDC
CreateDIBSection
DeleteDC
PatBlt
DeleteObject
SelectObject
GetBkMode
GetBkColor
GetTextExtentPoint32W
GetTextColor
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontIndirectW
GetStockObject
CreateDIBitmap
ExtTextOutA
GetTextExtentPointA
GetObjectW

comdlg32

GetSaveFileNameW
GetOpenFileNameW
GetFileTitleW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegCloseKey
RegQueryValueW
RegSetValueExW
RegCreateKeyW
RegSetValueW
RegDeleteKeyW
RegEnumKeyW
RegOpenKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegDeleteValueW
SetFileSecurityW
GetFileSecurityW
RegEnumKeyExW

shell32

DragQueryFileW
ShellExecuteW
SHGetDesktopFolder
SHGetMalloc
SHGetFileInfoW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ExtractIconW
SHFileOperationW
SHGetSpecialFolderPathW
DragAcceptFiles
DragFinish

comctl32

ImageList_GetImageInfo
ImageList_ReplaceIcon
ImageList_BeginDrag
ImageList_AddMasked
_TrackMouseEvent
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_EndDrag
ord17
ImageList_Destroy
ImageList_Create
PropertySheetW
DestroyPropertySheetPage
CreatePropertySheetPageW
ImageList_DrawIndirect
ImageList_Draw

shlwapi

PathFindExtensionW
PathFileExistsW
PathMakePrettyW
PathFindFileNameW
PathRemoveFileSpecW
PathRenameExtensionW
PathIsRootW
PathIsDirectoryW
PathIsURLW

winhttp

WinHttpAddRequestHeaders
WinHttpReceiveResponse
WinHttpSetOption
WinHttpQueryOption
WinHttpSendRequest
WinHttpQueryHeaders
WinHttpCrackUrl
WinHttpReadData
WinHttpCloseHandle
WinHttpOpen
WinHttpConnect
WinHttpOpenRequest

ole32

CoUninitialize
CoCreateInstance
CoInitialize
CoCreateGuid

oleaut32

SysFreeString
SysAllocString

Sections

.text
Size: 816KB - Virtual size: 814KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 504KB - Virtual size: 500KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f67d535b9db3598a3a4cdfbdba43c561

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

winhttp

ole32

oleaut32

Sections

.text Size: 816KB - Virtual size: 814KB

.rdata Size: 124KB - Virtual size: 123KB

.data Size: 104KB - Virtual size: 121KB

.rsrc Size: 504KB - Virtual size: 500KB

.text
Size: 816KB - Virtual size: 814KB

.rdata
Size: 124KB - Virtual size: 123KB

.data
Size: 104KB - Virtual size: 121KB

.rsrc
Size: 504KB - Virtual size: 500KB