1e0b82bb48dd5e17042db803debc30c2ba544327ed4a49b690b086c80a32bbd7

Sharing

Copy URL Twitter E-mail

General

Target

1e0b82bb48dd5e17042db803debc30c2ba544327ed4a49b690b086c80a32bbd7
Size

5.9MB
MD5

dce2d56ded433f17c9555c38f875a1a3
SHA1

4eda67daa1131d4134fe6b7e1838f91a4301a808
SHA256

1e0b82bb48dd5e17042db803debc30c2ba544327ed4a49b690b086c80a32bbd7
SHA512

aad3253386e8542cf81e65d94fced47e5a0295d6c414872b4109bfd8edba713286a0ed232b815c4d6d05ab1da70304d9613aedabb7341b5f32ab45905955fd9f
SSDEEP

49152:jnZ+qzCri/pLpY1yyalBrhbX6aTHUD4nruTssztxsnss9UVha:jnZ+qzCuQ1yLlVhUD4ruTsszLsnsQa4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e0b82bb48dd5e17042db803debc30c2ba544327ed4a49b690b086c80a32bbd7

Files

1e0b82bb48dd5e17042db803debc30c2ba544327ed4a49b690b086c80a32bbd7
.exe windows:4 windows x86 arch:x86

b826152e349f42afdbd4a3f1de9efc12

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHAutoComplete

winmm

waveInUnprepareHeader
waveInReset
waveOutClose
waveOutUnprepareHeader
waveOutReset
waveInStop
waveOutWrite
waveInStart
waveInAddBuffer
waveInPrepareHeader
waveInOpen
waveInGetNumDevs
waveOutPrepareHeader
waveOutOpen
waveOutGetNumDevs
PlaySoundA
waveInClose

kernel32

CompareStringA
CompareStringW
SetEnvironmentVariableA
GetStringTypeA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
IsBadWritePtr
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetFileType
SetStdHandle
HeapSize
GetACP
GetSystemTime
GetTimeZoneInformation
RaiseException
ExitThread
GetDriveTypeA
HeapReAlloc
RtlUnwind
SetErrorMode
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
TlsSetValue
GlobalReAlloc
TlsFree
GetProfileIntA
GetProfileStringA
GetPrivateProfileSectionNamesA
EnumResourceLanguagesA
EnumResourceTypesA
GetCurrentProcessId
GetExitCodeThread
ResetEvent
IsBadCodePtr
TerminateProcess
CreateEventA
GlobalHandle
CloseHandle
TerminateThread
WaitForSingleObject
TlsAlloc
GlobalFlags
SystemTimeToFileTime
SetEvent
LocalFileTimeToFileTime
MulDiv
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetTempFileNameA
GetCurrentThread
ResumeThread
CreateThread
Sleep
VirtualFree
VirtualAlloc
GetVolumeInformationA
GetComputerNameA
SetFilePointer
ReadFile
GetFileSize
CreateFileA
CopyFileA
DeleteFileA
lstrcatA
GetModuleFileNameA
WriteFile
GetCurrentDirectoryA
LockResource
GlobalAlloc
LoadResource
SizeofResource
FindResourceA
FindClose
FindNextFileA
RemoveDirectoryA
SetFileAttributesA
GetFileAttributesA
FindFirstFileA
GlobalUnlock
GlobalLock
GetTickCount
CreateProcessA
lstrcpyA
GetLastError
GetTempPathA
GetLocalTime
GetStringTypeW
SetThreadPriority
SetLastError
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrlenW
FormatMessageA
InterlockedIncrement
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpA
LocalSize
LocalReAlloc
GetModuleHandleA
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
BeginUpdateResourceA
UpdateResourceA
EndUpdateResourceA
EnumResourceNamesA
HeapFree
IsBadReadPtr
VirtualProtect
GetProcessHeap
HeapAlloc
WideCharToMultiByte
OutputDebugStringA
CancelIo
InterlockedExchange
GetQueuedCompletionStatus
InterlockedDecrement
CreateIoCompletionPort
GetSystemInfo
PostQueuedCompletionStatus
WritePrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileStringA
LoadLibraryExA
FreeLibrary
GlobalSize
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateDirectoryA
MoveFileA
lstrcpynA
MultiByteToWideChar
LocalAlloc
lstrlenA
GlobalFree
LocalFree
GetSystemDirectoryA
SetUnhandledExceptionFilter
LoadLibraryA
GetProcAddress
GetCommandLineA
GetStartupInfoA
ExitProcess

user32

BeginPaint
GetWindowDC
IsZoomed
SetRectEmpty
DestroyMenu
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
PostQuitMessage
ValidateRect
CharUpperA
LoadStringA
wvsprintfA
GetMenuCheckMarkDimensions
ModifyMenuA
SetMenuItemBitmaps
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
MapWindowPoints
PeekMessageA
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndPaint
TabbedTextOutA
GrayStringA
DispatchMessageA
TranslateMessage
GetMessageA
LoadIconA
InvalidateRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
FillRect
IsRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
GetClassNameA
GetDialogBaseUnits
CopyAcceleratorTableA
GetNextDlgGroupItem
TrackPopupMenu
SetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
SendMessageA
SendMessageTimeoutA
EnableWindow
RegisterWindowMessageA
SetRect
wsprintfA
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
RedrawWindow
IsWindowVisible
PostMessageA
MessageBoxA
UpdateWindow
DestroyIcon
LoadImageA
LockWindowUpdate
GetMenuItemCount
GetCursorPos
GetSubMenu
LoadMenuA
GetDesktopWindow
ReleaseDC
GetDC
GetSysColor
GetWindow
GetClientRect
SetCapture
LoadCursorA
SetCursor
ScreenToClient
UnregisterClassA
GetDCEx
RegisterClipboardFormatA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindowPlacement
GetNextDlgTabItem
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
CreateMenu
GetMenuStringA
InsertMenuA
PtInRect
DeleteMenu
LoadBitmapA
SetWindowRgn
GetSysColorBrush
IntersectRect
GetIconInfo
SendDlgItemMessageA
GetActiveWindow
SetParent
GetFocus
WaitForInputIdle
GetWindowThreadProcessId
EnumWindows
FindWindowA
ShowWindow
IsIconic
DrawMenuBar
TranslateMDISysAccel
InvertRect
PostThreadMessageA
GetMenuItemID
DefFrameProcA
ExcludeUpdateRgn
DefDlgProcA
GetTabbedTextExtentA
GetClipboardFormatNameA
GetAsyncKeyState
GetDoubleClickTime
IsWindowUnicode
GetWindowLongW
SetWindowLongW
SetCursorPos
UnionRect
GetMenuDefaultItem
GetMenuStringW
LookupIconIdFromDirectoryEx
GetCursor
GetKeyboardLayoutList
GetKeyboardState
ToAsciiEx
GetKeyboardLayout
MapVirtualKeyExA
GetKeyNameTextA
IsCharLowerA
IsClipboardFormatAvailable
GetWindowRgn
HideCaret
ShowCaret
IsMenu
GetMenuItemInfoA
CopyIcon
CreateIconIndirect
DrawFocusRect
DrawIcon
MessageBeep
InflateRect
OffsetRect
LookupIconIdFromDirectory
CreateIconFromResourceEx
CreateIconFromResource
SystemParametersInfoA
GetClipboardData
DrawTextA
SetTimer
GetScrollBarInfo
ShowScrollBar
DrawIconEx
GetKeyState
GetWindowLongA
GetSystemMetrics
DrawFrameControl
CreatePopupMenu
DrawAnimatedRects
EnumChildWindows
SetMenuDefaultItem
DrawEdge
WaitMessage
MapVirtualKeyA
DrawStateA
WindowFromPoint
ClientToScreen
ReleaseCapture
GetParent
SetWindowPos
GetDlgCtrlID
CheckMenuItem
EnableMenuItem
CharNextA
DestroyCursor
ClipCursor
SetClassLongA
KillTimer
CheckMenuRadioItem
AppendMenuA
GetSystemMenu
GetMenuState
SetWindowLongA
GetWindowRect

gdi32

SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
LineTo
SetTextAlign
CreateFontIndirectA
PolyBezierTo
GetClipRgn
ExtSelectClipRgn
SetPolyFillMode
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreatePen
CreatePatternBrush
PtVisible
RectVisible
Escape
LPtoDP
DPtoLP
GetMapMode
SetRectRgn
CopyMetaFileA
GetTextColor
GetBkColor
CombineRgn
CreateRectRgn
GetPixel
GetClipBox
CreateBitmap
PatBlt
CreateRectRgnIndirect
RestoreDC
SaveDC
CreateSolidBrush
DeleteObject
DeleteDC
BitBlt
StretchBlt
SetStretchBltMode
SelectObject
CreateCompatibleDC
CreateDIBSection
GetStockObject
StretchDIBits
ExtTextOutA
SetTextColor
SetBkColor
TextOutA
SetBkMode
GetObjectA
GetTextExtentPoint32A
GetTextMetricsA
CreateCompatibleBitmap
GetCharWidthA
CreateFontA
GetCurrentPositionEx
MoveToEx
Polygon
GetTextAlign
SetPixel
GetCurrentObject
GetDIBits
PtInRegion
GetWindowOrgEx
GetBitmapBits
ExtCreateRegion
EnumFontFamiliesExA
Polyline
GetViewportOrgEx
ExtFloodFill
Ellipse
SetBrushOrgEx
GetRgnBox
CreatePolygonRgn
RoundRect
StrokePath
FillPath
StrokeAndFillPath
EndPath
CloseFigure
BeginPath
GetTextExtentPoint32W
ExtTextOutW
GetTextExtentPointA
CreateDIBitmap

comdlg32

ChooseColorA
GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegSetValueExA
RegQueryValueA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
RegSetValueA

shell32

Shell_NotifyIconA
SHGetSpecialFolderLocation
SHGetFileInfoA
SHGetMalloc
DragAcceptFiles
SHAppBarMessage
ExtractIconA
SHBrowseForFolderA
DragQueryFileA
DragFinish
SHGetSpecialFolderPathA
ShellExecuteA
SHGetPathFromIDListA

comctl32

ImageList_Remove
ImageList_GetImageInfo
ImageList_LoadImageA
ImageList_Create
ImageList_Destroy
ord17
ImageList_AddMasked
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Add
ImageList_DrawEx
ImageList_GetIcon
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_Draw
_TrackMouseEvent

oledlg

ord1
ord8

ole32

CoTaskMemFree
CoTaskMemAlloc
OleDuplicateData
CoDisconnectObject
CLSIDFromString
CLSIDFromProgID
CoUninitialize
CoInitialize
CoCreateInstance
CoGetClassObject
ReleaseStgMedium
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleRun
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
OleInitialize
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleGetClipboard

olepro32

ord253

oleaut32

SafeArrayGetDim
SafeArrayCreate
VariantClear
VariantCopy
SysAllocString
SysAllocStringByteLen
VariantChangeType
SysStringByteLen
VarDateFromStr
VarBstrFromDate
SafeArrayGetElemsize
SysFreeString
SysAllocStringLen
VariantTimeToSystemTime
SysStringLen
LoadTypeLi
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
OleLoadPicturePath
VariantChangeTypeEx
SafeArrayUnaccessData

urlmon

URLDownloadToFileA

skinh

SkinH_Detach
SkinH_AttachEx

ws2_32

WSASocketA
WSACreateEvent
WSAEventSelect
bind
listen
WSAStartup
socket
WSACleanup
ioctlsocket
htons
connect
select
gethostname
gethostbyname
closesocket
getpeername
inet_ntoa
WSAWaitForMultipleEvents
__WSAFDIsSet
shutdown
getsockname
ntohs
inet_addr
send
recv
WSAIoctl
WSACloseEvent
accept
WSAEnumNetworkEvents
WSARecv
setsockopt
WSASend
WSAGetLastError

avifil32

AVIFileInit
AVIFileExit
AVIFileCreateStreamA
AVIFileOpenA
AVIStreamWrite
AVIStreamSetFormat
AVIFileRelease
AVIStreamRelease
AVISaveOptionsFree
AVIMakeCompressedStream
AVISaveOptions

msvfw32

DrawDibOpen
DrawDibClose
ord2
DrawDibDraw

wininet

InternetGetLastResponseInfoA
DeleteUrlCacheEntry
FindNextUrlCacheEntryA
FindFirstUrlCacheEntryA
InternetGetConnectedState
InternetCloseHandle
InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetQueryOptionA
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetOpenA
InternetOpenUrlA
InternetReadFile

imm32

ImmAssociateContext

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rotext
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 420KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 152KB - Virtual size: 608KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b826152e349f42afdbd4a3f1de9efc12

Headers

File Characteristics

Imports

shlwapi

winmm

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

urlmon

skinh

ws2_32

avifil32

msvfw32

wininet

imm32

Sections

.text Size: 2.2MB - Virtual size: 2.2MB

.rodata Size: 12KB - Virtual size: 11KB

.rotext Size: 108KB - Virtual size: 107KB

.rdata Size: 420KB - Virtual size: 416KB

.data Size: 152KB - Virtual size: 608KB

.rsrc Size: 3.0MB - Virtual size: 3.0MB

.text
Size: 2.2MB - Virtual size: 2.2MB

.rodata
Size: 12KB - Virtual size: 11KB

.rotext
Size: 108KB - Virtual size: 107KB

.rdata
Size: 420KB - Virtual size: 416KB

.data
Size: 152KB - Virtual size: 608KB

.rsrc
Size: 3.0MB - Virtual size: 3.0MB