0aaf3a11f3f4853d79ee81b9840465191bad6996fc960c22d35179a4da67b380

Sharing

Copy URL Twitter E-mail

General

Target

0aaf3a11f3f4853d79ee81b9840465191bad6996fc960c22d35179a4da67b380
Size

288KB
MD5

c4773e54fefb13587f1f4b5faa30aa9a
SHA1

740b4c8b89bc32f400941dae0ebcd2850149eb41
SHA256

0aaf3a11f3f4853d79ee81b9840465191bad6996fc960c22d35179a4da67b380
SHA512

c3685ad64e44d166473fce0ff1e63a8a7a6d4265d45d671c2c09679821d96e57890efcbf9b20a6bda72a51f82451cb5acac2fc8174ea03e189b34e6a4c347c65
SSDEEP

3072:yhMOg6KvxWpmXMcQqrAp7UCvMoaghPRNKXvaGgFzKJyT38y31+BzRVG9tEkKz5oI:eMT6SIpm8cTx4RVGgZTh15H7RX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0aaf3a11f3f4853d79ee81b9840465191bad6996fc960c22d35179a4da67b380

Files

0aaf3a11f3f4853d79ee81b9840465191bad6996fc960c22d35179a4da67b380
.exe windows:4 windows x86 arch:x86

13cd4b89bfd568bdf8401588507cf839

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
HeapCreate
SetUnhandledExceptionFilter
LCMapStringA
GetStringTypeA
VirtualFree
IsBadWritePtr
LCMapStringW
IsBadReadPtr
IsBadCodePtr
GetStringTypeW
HeapDestroy
GetFileType
InitializeCriticalSection
CloseHandle
GetModuleFileNameA
GlobalAlloc
GlobalDeleteAtom
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
lstrcmpA
GlobalLock
GlobalUnlock
GlobalFree
GetProfileStringA
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetACP
HeapSize
HeapReAlloc
RaiseException
HeapAlloc
HeapFree
TerminateProcess
ExitProcess
GetCommandLineA
GetStartupInfoA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RtlUnwind
FileTimeToLocalFileTime
FileTimeToSystemTime
SetErrorMode
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetOEMCP
GetCPInfo
GetProcessVersion
GetCurrentDirectoryA
TlsGetValue
EnterCriticalSection
SetStdHandle
LocalReAlloc
FindResourceA
LockResource
TlsSetValue
TlsFree
GlobalReAlloc
LeaveCriticalSection
TlsAlloc
GlobalHandle
DeleteCriticalSection
CompareStringA
LocalFree
LoadResource
LocalAlloc
SizeofResource
GlobalFlags
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
SetLastError
MulDiv
MultiByteToWideChar
GetLastError
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFullPathNameA
GetTempFileNameA
lstrcpynA
GetFileAttributesA
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GetProcAddress
lstrlenA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GlobalAddAtomA
CompareStringW
SetEnvironmentVariableA

user32

SetMenu
UnpackDDElParam
BringWindowToTop
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
IsZoomed
SetParent
IsRectEmpty
AppendMenuA
DeleteMenu
GetSystemMenu
GetClassNameA
InsertMenuA
GetMenuStringA
GetSysColorBrush
LoadStringA
DestroyIcon
CharUpperA
FindWindowA
GetTabbedTextExtentA
KillTimer
WindowFromPoint
InflateRect
SetCapture
InvertRect
GetDCEx
LockWindowUpdate
LoadAcceleratorsA
SetRectEmpty
InvalidateRect
PtInRect
FillRect
SetRect
LoadCursorA
DestroyCursor
LoadIconA
MapWindowPoints
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
LoadMenuA
ReuseDDElParam
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
TranslateAcceleratorA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetWindow
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
wsprintfA
SetFocus
ShowWindow
SetWindowPos
SetWindowLongA
GetDlgCtrlID
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetLastActivePopup
MessageBoxA
SetCursor
ShowOwnedPopups
PostMessageA
PostQuitMessage
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
ReleaseCapture
DestroyMenu
GetDesktopWindow
GetSubMenu
GetMenuItemID
GetPropA
GetParent
GetWindowLongA
GetDlgItem
IsWindowEnabled
SendMessageA
GetDC
GetSysColor
ReleaseDC
SetTimer
InvalidateRgn
GetClientRect
EnableWindow
UpdateWindow
SetForegroundWindow
GetForegroundWindow
DefWindowProcA
IsWindowUnicode
CharNextA
ShowCaret
UnregisterClassA
HideCaret
DefDlgProcA
ExcludeUpdateRgn
DrawFocusRect

gdi32

CreateBitmap
GetClipBox
SetTextColor
SetBkColor
GetObjectA
GetDeviceCaps
PatBlt
GetStockObject
Rectangle
DPtoLP
CreatePen
GetViewportOrgEx
AbortDoc
EndDoc
EndPage
StartPage
StartDocA
SetAbortProc
CreateDCA
DeleteDC
SaveDC
RestoreDC
SelectObject
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
ScaleWindowExtEx
SelectClipRgn
SetWindowExtEx
IntersectClipRect
ExcludeClipRect
LineTo
SetTextAlign
MoveToEx
GetCurrentPositionEx
DeleteObject
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextExtentPoint32A
GetTextMetricsA
StretchDIBits
CreateCompatibleDC
CreateCompatibleBitmap
GetCharWidthA
CreateFontA
CreateFontIndirectA
LPtoDP
GetBkColor
GetNearestColor
GetTextColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
GetWindowOrgEx
BitBlt
SetRectRgn
CombineRgn
CreateRectRgnIndirect
CreateDIBitmap
GetTextExtentPointA

comdlg32

GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA
CommDlgExtendedError
PrintDlgA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegSetValueA
RegDeleteKeyA
RegCreateKeyExA
RegCreateKeyA
RegQueryValueA
RegCloseKey
RegEnumKeyA
RegOpenKeyA
SetFileSecurityA
GetFileSecurityA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA

shell32

ShellExecuteA
DragFinish
DragQueryFileA
SHGetFileInfoA
ExtractIconA

comctl32

ord17

Sections

.text
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

13cd4b89bfd568bdf8401588507cf839

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

Sections

.text Size: 196KB - Virtual size: 195KB

.rdata Size: 48KB - Virtual size: 44KB

.data Size: 12KB - Virtual size: 25KB

.rsrc Size: 28KB - Virtual size: 27KB

.text
Size: 196KB - Virtual size: 195KB

.rdata
Size: 48KB - Virtual size: 44KB

.data
Size: 12KB - Virtual size: 25KB

.rsrc
Size: 28KB - Virtual size: 27KB