2ea2ed161f93422d22a00126be9b553901aa3a1a13b79689b86dbd9ec5430ecf

Sharing

Copy URL Twitter E-mail

General

Target

2ea2ed161f93422d22a00126be9b553901aa3a1a13b79689b86dbd9ec5430ecf
Size

1.7MB
MD5

715570bf08bb840b7967ec0051dd84e9
SHA1

e99cd0c57bdfda4d9db2adecb4d7118cf07bb04b
SHA256

2ea2ed161f93422d22a00126be9b553901aa3a1a13b79689b86dbd9ec5430ecf
SHA512

12561386e0d733003afaeab2cc8e8dc26e5b8ab29c6b98a49afdbae0e84d82dc332cfa9df57a95535d364355ff5e773dd5be84da40c0f9b46b9d36769c40928f
SSDEEP

24576:3fn2Nl2jdEWcyYlU/U4bu2if1lzFKE63n28TPFwlOh9kGmfBnT7DDkD9Tl:/A8jdbYlU/4jc28r9P4F3kD9T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ea2ed161f93422d22a00126be9b553901aa3a1a13b79689b86dbd9ec5430ecf

Files

2ea2ed161f93422d22a00126be9b553901aa3a1a13b79689b86dbd9ec5430ecf
.exe windows:4 windows x86 arch:x86

9aae5f62a9f477ca13d8fd0a68599e4b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
CompareStringA
CompareStringW
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetCurrentDirectoryA
UnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeA
GetStringTypeW
CreateFileA
GetACP
GetOEMCP
SetEnvironmentVariableA
GetDriveTypeA
GetLocaleInfoW
HeapSize
GetFileType
FindResourceA
GlobalAddAtomA
GetProfileStringA
InterlockedExchange
SetStdHandle
GetLocalTime
GetSystemTime
GetTimeZoneInformation
ExitThread
CreateThread
HeapReAlloc
GetDriveTypeW
RaiseException
HeapFree
HeapAlloc
RtlUnwind
GetStartupInfoW
SetErrorMode
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
FindResourceExW
GetCurrentDirectoryW
GlobalFlags
FindNextFileW
lstrcmpiW
GetThreadLocale
GetStringTypeExW
GetVolumeInformationW
FindFirstFileW
FindClose
UnlockFile
LockFile
SetFilePointer
DuplicateHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
GetProfileIntW
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GetProcessVersion
GlobalGetAtomNameW
MulDiv
SetLastError
GetDiskFreeSpaceW
GetFileTime
SetFileTime
GetFullPathNameW
GetTempFileNameW
GetFileAttributesW
InterlockedDecrement
InterlockedIncrement
GlobalFree
GetModuleHandleA
LoadLibraryA
GetVersion
lstrcatW
GlobalAddAtomW
GlobalFindAtomW
CreateEventW
SuspendThread
SetEvent
lstrcmpW
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
lstrlenA
ExitProcess
GlobalAlloc
GlobalLock
GlobalUnlock
SizeofResource
LoadResource
LockResource
WritePrivateProfileStringW
GetPrivateProfileIntW
GetPrivateProfileStringW
SetCurrentDirectoryW
CancelIo
FlushFileBuffers
WriteFile
ReadFile
SetFilePointerEx
SetEndOfFile
GetFileSizeEx
CloseHandle
CreateFileW
MultiByteToWideChar
LeaveCriticalSection
lstrlenW
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetWindowsDirectoryW
GetModuleFileNameW
LoadLibraryW
FreeLibrary
GetCurrentProcess
GetTempPathW
CreateDirectoryW
GetFileAttributesExW
GetLongPathNameW
GetShortPathNameW
GetLastError
FormatMessageW
LocalFree
CopyFileW
MoveFileW
DeleteFileW
SetThreadPriority
Sleep
CreateProcessW
TerminateProcess
GetExitCodeProcess
GetCurrentThreadId
GetModuleHandleW
GetProcAddress
GetVersionExW
lstrcpynW
lstrcpyW
ResumeThread
WaitForSingleObject
FindResourceW
GetTickCount
WideCharToMultiByte

user32

SendDlgItemMessageW
SendDlgItemMessageA
MapWindowPoints
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetTopWindow
WinHelpW
wsprintfW
GetClassInfoW
RegisterClassW
TrackPopupMenu
SetWindowPlacement
GetDlgItem
GetWindowTextLengthW
GetWindowTextW
GetDlgCtrlID
DestroyWindow
CreateWindowExW
DefWindowProcW
GetMessageTime
GetForegroundWindow
SystemParametersInfoW
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuW
SetMenuItemBitmaps
EnableMenuItem
GetNextDlgTabItem
GetActiveWindow
ValidateRect
PeekMessageW
GetLastActivePopup
MessageBoxW
ShowOwnedPopups
PostQuitMessage
SetWindowPos
LockWindowUpdate
CheckMenuItem
IsChild
SetMenu
GetMenu
IsIconic
FindWindowW
ExitWindowsEx
DestroyIcon
GetMessageW
TranslateMessage
DispatchMessageW
InsertMenuW
WindowFromPoint
GetMenuStringW
GetMenuItemCount
CallNextHookEx
keybd_event
SetWindowsHookExW
TrackPopupMenuEx
UnhookWindowsHookEx
DestroyMenu
SetRect
IntersectRect
SetRectEmpty
IsRectEmpty
ReleaseDC
GetDC
DrawFocusRect
GetSysColor
SetCursor
IsWindowEnabled
SetFocus
RegisterWindowMessageW
GetWindow
CreatePopupMenu
GetMessagePos
RedrawWindow
GetSystemMenu
PostMessageW
UpdateWindow
UnregisterClassW
GetWindowPlacement
GetWindowTextLengthA
HideCaret
ShowCaret
ExcludeUpdateRgn
OffsetRect
BeginDeferWindowPos
EndDeferWindowPos
GetMenuDefaultItem
RemovePropW
GetPropW
CallWindowProcW
SetPropW
SetWindowLongW
GetMenuItemID
LoadIconW
SetParent
KillTimer
SetTimer
AppendMenuW
ClientToScreen
SetMenuDefaultItem
InflateRect
GetParent
GetClassNameW
CharUpperW
GetDCEx
GetSysColorBrush
wvsprintfW
LoadStringW
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
GetWindowRect
CheckMenuRadioItem
DeleteMenu
GetCursorPos
GetKeyState
ScreenToClient
LoadMenuW
GetSubMenu
GrayStringW
DrawTextW
TabbedTextOutW
GetFocus
SetCapture
InvalidateRect
PtInRect
ReleaseCapture
SetForegroundWindow
SetActiveWindow
IsWindowVisible
SendMessageW
EnableWindow
GetClientRect
GetWindowLongW
CopyRect
GetSystemMetrics
GetWindowTextA
DrawTextA
GetClassInfoA
DefDlgProcA
DefWindowProcA
GetDesktopWindow
TranslateAcceleratorW
LoadAcceleratorsW
EndPaint
BeginPaint
GetWindowDC
EndDialog
CreateDialogIndirectParamW
MapDialogRect
GetAsyncKeyState
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
GetCapture
SetDlgItemTextW
CharNextA
CallWindowProcA
RemovePropA
SetWindowsHookExA
GetWindowLongA
SendMessageA
IsWindowUnicode
GetClassNameA
SetWindowLongA
SetPropA
GetPropA
DestroyCursor
LoadBitmapW
IsWindow
LoadCursorW

gdi32

SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
IntersectClipRect
GetDeviceCaps
CreatePen
CreateSolidBrush
CreatePatternBrush
SetRectRgn
GetTextMetricsW
EnumFontFamiliesExW
CreateRectRgn
CombineRgn
SetTextColor
SetBkMode
CreateBitmap
SetBkColor
SaveDC
GetClipBox
CreateRectRgnIndirect
ExtSelectClipRgn
SetStretchBltMode
StretchDIBits
SetDIBitsToDevice
RestoreDC
CreateDIBSection
DeleteDC
PatBlt
DeleteObject
SelectObject
GetBkMode
GetBkColor
GetTextExtentPoint32W
GetTextColor
Escape
ExtTextOutW
TextOutW
BitBlt
RectVisible
PtVisible
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontIndirectW
GetStockObject
CreateDIBitmap
ExtTextOutA
GetTextExtentPointA
GetObjectW

comdlg32

GetFileTitleW
GetOpenFileNameW
GetSaveFileNameW

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

RegCloseKey
RegQueryValueW
RegSetValueExW
RegCreateKeyW
RegSetValueW
RegDeleteKeyW
RegEnumKeyW
RegOpenKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegDeleteValueW
SetFileSecurityW
GetFileSecurityW
RegEnumKeyExW

shell32

SHGetMalloc
SHGetDesktopFolder
SHGetFileInfoW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
DragQueryFileW
SHFileOperationW
ShellExecuteExW
SHGetSpecialFolderPathW
DragAcceptFiles
DragFinish
ShellExecuteW
ExtractIconW

comctl32

ImageList_GetImageInfo
ImageList_ReplaceIcon
ImageList_BeginDrag
_TrackMouseEvent
ImageList_AddMasked
ImageList_EndDrag
ImageList_DragMove
ImageList_DragEnter
ImageList_DragLeave
ord17
PropertySheetW
DestroyPropertySheetPage
CreatePropertySheetPageW
ImageList_Destroy
ImageList_Create
ImageList_DrawIndirect
ImageList_Draw

ole32

CoUninitialize
CoCreateInstance
CoInitialize
CoCreateGuid

oleaut32

SysFreeString
SysAllocString

shlwapi

PathFileExistsW
PathFindExtensionW
PathMakePrettyW
PathFindFileNameW
PathRemoveFileSpecW
PathRenameExtensionW
PathRemoveBackslashW
PathStripToRootW
PathRelativePathToW
PathCombineW
PathIsRootW
PathGetCharTypeW
PathIsDirectoryW
PathIsURLW

winhttp

WinHttpQueryHeaders
WinHttpCrackUrl
WinHttpReadData
WinHttpCloseHandle
WinHttpOpen
WinHttpConnect
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpSendRequest
WinHttpQueryOption
WinHttpSetOption
WinHttpReceiveResponse

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 408KB - Virtual size: 407KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9aae5f62a9f477ca13d8fd0a68599e4b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

ole32

oleaut32

shlwapi

winhttp

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 132KB - Virtual size: 131KB

.data Size: 128KB - Virtual size: 144KB

.rsrc Size: 408KB - Virtual size: 407KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 132KB - Virtual size: 131KB

.data
Size: 128KB - Virtual size: 144KB

.rsrc
Size: 408KB - Virtual size: 407KB