cbc7688422e632eab647eb09e03902198343ba61879a4e81e8e54c6186e061a6

Sharing

Copy URL Twitter E-mail

General

Target

cbc7688422e632eab647eb09e03902198343ba61879a4e81e8e54c6186e061a6
Size

3.2MB
MD5

9b636f933d6962334a0a6582ac91c9ef
SHA1

5f3e1203d65b2287dfddfab6c7e0bc2bf95153fb
SHA256

cbc7688422e632eab647eb09e03902198343ba61879a4e81e8e54c6186e061a6
SHA512

7b9a0eca0b4e7d2ddbe815ad5baeec1914d0c95bd4b5b18e2e65b4230c08a36c72622398377d6ad8d3f22af57f8e0a2953502f47717c92261d875b73679ab764
SSDEEP

98304:X/SYNmKedXvvq0XfJjgtr/mYo9XEJrW96uxnyMnl+fzzzz7:Jxed3jXiuYZJeyMnla

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cbc7688422e632eab647eb09e03902198343ba61879a4e81e8e54c6186e061a6

Files

cbc7688422e632eab647eb09e03902198343ba61879a4e81e8e54c6186e061a6
.exe windows:6 windows x86 arch:x86

c2343eec31c447be2a143a7388cf95eb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

AlphaBlend
TransparentBlt

kernel32

SetPriorityClass
LocalFree
LocalAlloc
DeviceIoControl
FreeLibrary
VirtualProtect
GetTempPathW
GetSystemDirectoryW
GetVersionExW
GetNativeSystemInfo
WaitForSingleObject
CreateProcessW
GetModuleFileNameW
GetModuleHandleExW
GetCurrentProcessId
WaitForMultipleObjects
TerminateProcess
K32GetModuleFileNameExW
OpenProcess
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetSystemTimeAsFileTime
TryEnterCriticalSection
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFileTime
MoveFileExW
MoveFileW
CopyFileW
DeleteFileW
FindNextFileW
SetFileAttributesW
GetFileAttributesW
GetDriveTypeW
FindFirstFileW
FindClose
WideCharToMultiByte
MultiByteToWideChar
SystemTimeToFileTime
GetCurrentProcess
DuplicateHandle
SetFilePointer
GetFileType
CreateDirectoryW
GetCurrentDirectoryW
FindResourceW
SizeofResource
LockResource
LoadResource
FreeResource
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
RaiseException
DecodePointer
GetLocalTime
GetFileSize
CreateFileW
CreateNamedPipeA
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
LoadLibraryW
GetProcAddress
GetModuleHandleW
GetTickCount
GetExitCodeProcess
CreateEventW
CreateMutexW
DisconnectNamedPipe
ConnectNamedPipe
SetLastError
GetLastError
CloseHandle
WriteFile
ReadFile
FlushFileBuffers
CreateFileA
VirtualFree
lstrlenW
OutputDebugStringA
Sleep
WriteConsoleW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetTimeZoneInformation
GetConsoleCP
ReadConsoleW
GetConsoleMode
EnumSystemLocalesW
IsValidLocale
GetTimeFormatW
GetDateFormatW
SetFilePointerEx
GetFileInformationByHandle
SetStdHandle
GetCommandLineW
GetCommandLineA
HeapQueryInformation
FreeLibraryAndExitThread
ExitThread
CreateThread
RtlUnwind
SleepEx
GetEnvironmentVariableA
VirtualAlloc
LoadLibraryA
IsBadReadPtr
PeekNamedPipe
GetStdHandle
QueryPerformanceFrequency
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
MapViewOfFile
CreateFileMappingW
FormatMessageA
GetSystemTime
LockFileEx
CreateFileMappingA
HeapCompact
DeleteFileA
GetVersionExA
FlushViewOfFile
GetFileAttributesA
GetDiskFreeSpaceA
GetTempPathA
HeapValidate
UnmapViewOfFile
UnlockFileEx
GetFullPathNameA
InterlockedCompareExchange
HeapCreate
GlobalFlags
AreFileApisANSI
GetCPInfo
GetStringTypeW
LCMapStringW
SwitchToThread
OutputDebugStringW
InitializeSListHead
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
WaitForSingleObjectEx
ResetEvent
GetUserDefaultLCID
GetTempFileNameW
GetDiskFreeSpaceW
SearchPathW
GetProfileIntW
VerifyVersionInfoW
VerSetConditionMask
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
GetWindowsDirectoryW
FindResourceExW
ExitProcess
SetEvent
lstrcpyW
lstrcmpiW
UnlockFile
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetUserDefaultUILanguage
GetLocaleInfoW
ResumeThread
GetSystemInfo
VirtualQuery
LoadLibraryExA
GlobalSize
MulDiv
FormatMessageW
EncodePointer
GetCurrentThreadId
GetModuleHandleA
LoadLibraryExW
GlobalDeleteAtom
lstrcmpW
GlobalAddAtomW
GlobalFindAtomW
CompareStringW
InitializeCriticalSectionAndSpinCount
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalReAlloc
lstrcmpA
GlobalGetAtomNameW
SetThreadPriority

user32

MessageBoxW
SetWindowLongW
PostMessageW
IsIconic
IsZoomed
GetDlgItem
OpenClipboard
CloseClipboard
SetClipboardData
RegisterClipboardFormatW
EmptyClipboard
EnableWindow
SetWindowRgn
SetWindowTextW
ClientToScreen
SetRect
GetParent
LoadImageW
MonitorFromPoint
MonitorFromWindow
GetMonitorInfoW
GetAsyncKeyState
DestroyMenu
TrackPopupMenu
InvalidateRect
MessageBoxA
CharNextW
FillRect
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
RemoveMenu
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW
GetWindowDC
BeginPaint
EndPaint
GetSysColor
GetFocus
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadBitmapW
RegisterWindowMessageW
DispatchMessageW
PeekMessageW
GetMessagePos
GetMessageTime
DefWindowProcW
CallWindowProcW
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
IsMenu
IsChild
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsWindowVisible
GetDlgCtrlID
GetKeyState
GetCapture
GetMenu
SetMenu
UpdateWindow
SetActiveWindow
GetForegroundWindow
SetForegroundWindow
ValidateRect
LoadCursorW
ScrollWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
SetPropW
GetPropW
RemovePropW
GetWindowTextW
GetWindowTextLengthW
AdjustWindowRectEx
MapWindowPoints
CopyRect
EqualRect
GetClassLongW
GetClassNameW
GetTopWindow
GetLastActivePopup
GetWindow
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
LoadIconW
SetScrollInfo
GetScrollInfo
WinHelpW
ShowWindow
CheckDlgButton
IsWindowEnabled
IsDialogMessageW
CreateDialogIndirectParamW
EndDialog
GetNextDlgTabItem
GetActiveWindow
GetWindowThreadProcessId
GetSysColorBrush
InflateRect
RealChildWindowFromPoint
GetMenuItemInfoW
SystemParametersInfoW
CopyImage
SendDlgItemMessageA
SetRectEmpty
OffsetRect
GetMessageW
TranslateMessage
MapDialogRect
CharUpperW
DestroyIcon
TrackMouseEvent
ShowOwnedPopups
DeleteMenu
GetMenuDefaultItem
GetNextDlgGroupItem
SetCapture
ReleaseCapture
WindowFromPoint
DrawFocusRect
IsRectEmpty
DrawIconEx
GetIconInfo
MessageBeep
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
MapVirtualKeyW
GetKeyNameTextW
LoadMenuW
SetLayeredWindowAttributes
EnumDisplayMonitors
SetClassLongW
SetParent
DrawStateW
DrawEdge
DrawFrameControl
GetSystemMenu
BringWindowToTop
SetCursorPos
CopyIcon
FrameRect
DrawIcon
UnionRect
UpdateLayeredWindow
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
PostThreadMessageW
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuW
CharUpperBuffW
IsClipboardFormatAvailable
GetUpdateRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SubtractRect
CreateMenu
GetWindowRgn
DestroyCursor
EnumWindows
GetDesktopWindow
GetWindowLongW
PtInRect
IntersectRect
SetCursor
ReleaseDC
GetDC
AppendMenuW
CreatePopupMenu
GetSystemMetrics
SetWindowPos
KillTimer
SetTimer
ScreenToClient
GetCursorPos
GetWindowRect
GetClientRect
SetFocus
MoveWindow
IsWindow
PostQuitMessage
SendMessageW
wsprintfW
DestroyWindow
RedrawWindow

gdi32

ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
CreateFontIndirectW
CreateRectRgnIndirect
PatBlt
SetTextAlign
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkColor
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
CreateDIBSection
StretchDIBits
SetStretchBltMode
CreatePalette
SelectPalette
RealizePalette
GetStockObject
GetDIBits
CreateDCW
GetObjectW
GetObjectType
GetClipBox
ExcludeClipRect
Escape
CreateRectRgn
CreatePatternBrush
CreateHatchBrush
CreateBitmap
CopyMetaFileW
DPtoLP
GetTextFaceW
GetViewportOrgEx
GetWindowOrgEx
SetPixelV
SetPaletteEntries
ExtFloodFill
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
RoundRect
OffsetRgn
GetRgnBox
LPtoDP
Polyline
Polygon
CreatePolygonRgn
GetTextColor
Ellipse
CreateEllipticRgn
SetDIBColorTable
SetPixel
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
GetBkColor
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
EnumFontFamiliesExW
GetTextMetricsW
GetTextExtentPoint32W
SetRectRgn
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreatePen
CreateSolidBrush
DeleteDC
DeleteObject
GetPixel
LineTo
Rectangle
SelectObject
SetBkMode
StretchBlt
SetTextColor
MoveToEx
TextOutW
CreateRoundRectRgn
GetDeviceCaps

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegCloseKey
CryptEncrypt
CryptAcquireContextW
CryptReleaseContext
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptDestroyKey
CryptImportKey
GetSecurityDescriptorSacl
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
OpenProcessToken
GetTokenInformation
LookupAccountSidW
LookupPrivilegeValueW
AdjustTokenPrivileges
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW

shell32

SHGetFileInfoW
DragFinish
DragAcceptFiles
ShellExecuteW
SHFileOperationW
ShellExecuteExW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHAppBarMessage
DragQueryFileW

ole32

OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CoInitializeEx
CoDisconnectObject
ReleaseStgMedium
OleDuplicateData
CoTaskMemAlloc
CoUninitialize
CoCreateInstance
CoInitialize
CreateStreamOnHGlobal
OleInitialize
OleUninitialize
CoTaskMemFree
CoInitializeSecurity
CoSetProxyBlanket

oleaut32

VarBstrFromDate
VariantCopy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
LoadTypeLi
VariantChangeType
SysAllocStringLen
SysAllocString
SysFreeString
VariantInit
VariantClear

shlwapi

PathFindFileNameW
PathFindExtensionW
StrRChrW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
PathFileExistsW
StrFormatKBSizeW

uxtheme

DrawThemeBackground
GetThemeColor
GetCurrentThemeName
GetWindowTheme
CloseThemeData
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
GetThemePartSize
OpenThemeData
DrawThemeParentBackground
DrawThemeText
IsAppThemed

gdiplus

GdipCreatePen1
GdipSetInterpolationMode
GdipDrawImageI
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageGraphicsContext
GdiplusStartup
GdiplusShutdown
GdipDrawImageRectI
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromScan0
GdipDeletePen
GdipSetPenMode
GdipCreateBitmapFromFileICM
GdipCreateFromHDC
GdipDeleteGraphics
GdipDrawRectangleI
GdipAlloc
GdipFree
GdipCloneImage
GdipDisposeImage
GdipSaveImageToFile
GdipCreateBitmapFromHBITMAP
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipLoadImageFromStream
GdipGetImageWidth
GdipGetImageHeight
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipImageSelectActiveFrame
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipReleaseDC
GdipDrawImageRectRect
GdipCreateBitmapFromFile

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

ws2_32

ioctlsocket
getpeername
WSACleanup
sendto
recvfrom
freeaddrinfo
getaddrinfo
recv
listen
htonl
getsockname
connect
bind
accept
select
__WSAFDIsSet
WSAIoctl
setsockopt
socket
getsockopt
send
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSAResetEvent
WSAWaitForMultipleEvents
closesocket
WSAGetLastError
WSAStartup
gethostname
WSASetLastError
ntohs
htons

wldap32

ord301
ord142
ord133
ord147
ord167
ord127
ord27
ord26
ord117
ord41
ord208
ord216
ord14
ord46
ord219
ord145
ord79

iphlpapi

GetAdaptersInfo

wininet

InternetCloseHandle
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetConnectA
InternetOpenA

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

winmm

PlaySoundW

bcrypt

BCryptGenRandom

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 471KB - Virtual size: 471KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 371KB - Virtual size: 370KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c2343eec31c447be2a143a7388cf95eb

Headers

DLL Characteristics

File Characteristics

Imports

msimg32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

uxtheme

gdiplus

imm32

ws2_32

wldap32

iphlpapi

wininet

oleacc

winmm

bcrypt

winspool.drv

Sections

.text Size: 2.5MB - Virtual size: 2.5MB

.rdata Size: 471KB - Virtual size: 471KB

.data Size: 29KB - Virtual size: 51KB

.rsrc Size: 371KB - Virtual size: 370KB

.reloc Size: 171KB - Virtual size: 170KB

.text
Size: 2.5MB - Virtual size: 2.5MB

.rdata
Size: 471KB - Virtual size: 471KB

.data
Size: 29KB - Virtual size: 51KB

.rsrc
Size: 371KB - Virtual size: 370KB

.reloc
Size: 171KB - Virtual size: 170KB