53d4115e1c4cef15dc5edb2a722dc6fa32ccc4fca58b37989c3d17708967d12f

Sharing

Copy URL

Twitter E-mail

General

Target

53d4115e1c4cef15dc5edb2a722dc6fa32ccc4fca58b37989c3d17708967d12f
Size

355KB
MD5

41f585d26c90f6a51117a1d8e44c2d5b
SHA1

603217675d42a49b480499f49aecc34e32067a8d
SHA256

53d4115e1c4cef15dc5edb2a722dc6fa32ccc4fca58b37989c3d17708967d12f
SHA512

44fcbec2a5aa26a767c92e9f31fe5d98bd8c0476045c78870f1d3bea6554e7d5b06c3638eda66ceb300a900c1b398cbb1c8832b869ef2f4dd3c42720a7aead5c
SSDEEP

6144:BstDOe+eeUmFKlYK9lTS2rFQ+NSI1vD8IkXQMyl4rjc7VTY0:Stie+eeUmFK9rFJNzoI4QMyl4/cd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53d4115e1c4cef15dc5edb2a722dc6fa32ccc4fca58b37989c3d17708967d12f

Files

53d4115e1c4cef15dc5edb2a722dc6fa32ccc4fca58b37989c3d17708967d12f
.exe windows:5 windows x86 arch:x86

24d21c2e5a3131e3f4e25e2b690a3b3c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCommandLineA
GetStartupInfoA
RtlUnwind
HeapReAlloc
VirtualAlloc
HeapSize
GetACP
IsValidCodePage
GetStdHandle
InitializeCriticalSectionAndSpinCount
VirtualFree
SetHandleCount
GetFileType
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
lstrlenA
MapViewOfFile
UnmapViewOfFile
FreeLibrary
HeapAlloc
QueryPerformanceCounter
HeapFree
WaitForSingleObject
GetProcessHeap
WideCharToMultiByte
Sleep
CreateEventA
GetConsoleWindow
HeapCreate
lstrcatA
GetLastError
GetProcAddress
GetComputerNameExW
LoadLibraryA
CreateFileMappingA
WaitForMultipleObjects
GetModuleFileNameA
GetModuleHandleA
lstrcatW
QueryPerformanceFrequency
OutputDebugStringA
CloseHandle
DeleteFileW
GetCurrentProcessId
CreateThread
lstrcpyA
MultiByteToWideChar
SetLastError
MulDiv
GlobalUnlock
GlobalLock
FreeResource
LockResource
LoadResource
FindResourceA
GlobalFree
GetModuleFileNameW
InterlockedDecrement
SizeofResource
GetVersionExA
lstrcmpW
CompareStringA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
GlobalAlloc
lstrcmpA
InterlockedExchange
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
LocalFree
RaiseException
GlobalFlags
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
SetErrorMode
GetModuleHandleW
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpiA
GetStringTypeExA
GetCurrentDirectoryA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetOEMCP
GetCPInfo
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GetThreadLocale
EnterCriticalSection

user32

CharUpperA
DeleteMenu
UnregisterClassA
GetSysColorBrush
GetMenuStringA
InsertMenuA
ValidateRect
SetCursor
IsDialogMessageA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
RemovePropA
GetLastActivePopup
GetMessageTime
PeekMessageA
GetKeyState
SetMenu
IsWindowVisible
GetMenuItemID
GetMenuItemCount
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
GetDlgCtrlID
CallWindowProcA
GetMenu
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
UnhookWindowsHookEx
GetActiveWindow
EnableWindow
GetSystemMetrics
SendMessageA
GetClientRect
SetActiveWindow
CreateDialogIndirectParamA
IsWindow
GetNextDlgTabItem
GetSysColor
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
GetMenuState
CheckMenuItem
GetWindowTextLengthA
GetWindowTextA
GetParent
GetWindow
EndPaint
DestroyWindow
GetMessageA
UpdateLayeredWindow
SetWindowRgn
ScreenToClient
GetWindowRect
InsertMenuItemA
PostQuitMessage
DrawIcon
LoadIconA
IsIconic
GetWindowThreadProcessId
GetMessagePos
CopyRect
GetPropW
EndDeferWindowPos
LoadCursorA
DestroyMenu
UpdateWindow
MapWindowPoints
SendMessageW
LoadImageA
SetWindowTextA
BeginDeferWindowPos
MessageBoxW
DeferWindowPos
DispatchMessageA
CreateWindowExW
PostMessageA
CreatePopupMenu
ShowWindow
GetCursorPos
GetDesktopWindow
SendDlgItemMessageW
DefWindowProcA
EndDialog
GetWindowRgn
GetDlgItem
EnableMenuItem
TrackPopupMenu
GetWindowDC
GetTopWindow
SetCapture
GetSubMenu
SetForegroundWindow
LoadMenuA
WaitForInputIdle
IsWindowEnabled
wsprintfA
SetFocus
BeginPaint
EnumWindows
PtInRect
GetDC
TranslateMessage
GetForegroundWindow
OffsetRect
SetWindowLongA
MessageBoxA
GetWindowLongA
GetWindowTextW
CreateWindowExA
GetDCEx
ReleaseDC
GetPropA

gdi32

StretchBlt
CreateFontA
SetTextColor
SetViewportOrgEx
MoveToEx
CreateBitmap
SaveDC
RestoreDC
SetBkColor
SetMapMode
GetClipBox
GetObjectA
PtVisible
RectVisible
ExtTextOutA
Escape
OffsetViewportOrgEx
ExcludeClipRect
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetDeviceCaps
GdiFlush
GetTextCharsetInfo
CreatePalette
SetBkMode
DeleteObject
SelectObject
GetEnhMetaFilePaletteEntries
TextOutA
CreateSolidBrush
GetStockObject
TextOutW
GetPixel
SetViewportExtEx
CreatePen
SetTextJustification
CreateRectRgn
SetDCPenColor
Ellipse
ScaleViewportExtEx
CombineRgn

comdlg32

GetOpenFileNameA
GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegOpenKeyA
RegCloseKey
RegQueryValueExA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegOpenKeyExA
RegEnumKeyA
RegDeleteKeyA

shell32

Shell_NotifyIconA
SHGetSpecialFolderLocation
SHGetFolderPathW
DragQueryFileA

comctl32

ImageList_Create

shlwapi

PathIsUNCA
PathStripToRootA
PathFindFileNameA
PathFindExtensionA
PathCompactPathA
StrStrA

ole32

BindMoniker
CreateFileMoniker
CoRegisterClassObject
CoRevokeClassObject
CoInitializeEx
CoInitialize
OleUninitialize
CreateILockBytesOnHGlobal
OleInitialize
CLSIDFromProgID
CoUninitialize
CoLockObjectExternal
CoCreateInstance
RevokeDragDrop

oleaut32

SysAllocString
SafeArrayGetLBound
LoadTypeLibEx
SafeArrayAccessData
SafeArrayUnlock
SafeArrayCreate
GetActiveObject
SafeArrayRedim
SafeArrayLock
SafeArrayUnaccessData
SysFreeString
SafeArrayGetUBound
VariantClear
VariantChangeType
VariantInit

wininet

InternetCloseHandle
InternetOpenA
InternetSetStatusCallback
FtpSetCurrentDirectoryA
InternetFindNextFileA
GopherGetLocatorTypeA
GopherGetAttributeW
InternetConnectA
FtpFindFirstFileA
GopherFindFirstFileW

crypt32

CertEnumSystemStore

imm32

ImmGetContext

oleacc

GetRoleTextW
LresultFromObject
CreateStdAccessibleObject

rasapi32

RasHangUpA

tapi32

phoneGetLamp

Sections

.text
Size: 205KB - Virtual size: 205KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

24d21c2e5a3131e3f4e25e2b690a3b3c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

wininet

crypt32

imm32

oleacc

rasapi32

tapi32

Sections

.text Size: 205KB - Virtual size: 205KB

.rdata Size: 54KB - Virtual size: 54KB

.data Size: 19KB - Virtual size: 33KB

.rsrc Size: 75KB - Virtual size: 75KB

.text
Size: 205KB - Virtual size: 205KB

.rdata
Size: 54KB - Virtual size: 54KB

.data
Size: 19KB - Virtual size: 33KB

.rsrc
Size: 75KB - Virtual size: 75KB