5614501ce3ae8107570332c2c416a685d98436af6b7badf3cc0945765217fe4f

Sharing

Copy URL Twitter E-mail

General

Target

5614501ce3ae8107570332c2c416a685d98436af6b7badf3cc0945765217fe4f
Size

3.8MB
MD5

b90cb3c11168600b15cfc822a11232e1
SHA1

2f579d2959ab9250ea162b5161a13394ba786278
SHA256

5614501ce3ae8107570332c2c416a685d98436af6b7badf3cc0945765217fe4f
SHA512

c72e65bf57a8734fa9ff8de2f989e4efbc48649489fb344ddb692d85252783ada3b348697a197a6f191dfb14c4a48650849f6f858b3ce2bd8d35dc542c6cdef4
SSDEEP

49152:WgUSoP3eGN702WtPT9M0sugVqJnLAYzh0AGr8yGQagV74ZpgqGlv:xXhKn4Zp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5614501ce3ae8107570332c2c416a685d98436af6b7badf3cc0945765217fe4f

Files

5614501ce3ae8107570332c2c416a685d98436af6b7badf3cc0945765217fe4f
.exe windows:5 windows x86 arch:x86

c5e61a362816858554de1740185a0738

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
Sleep
LoadResource
SizeofResource
OutputDebugStringW
LeaveCriticalSection
MultiByteToWideChar
GetNativeSystemInfo
DecodePointer
HeapAlloc
HeapReAlloc
HeapFree
EnterCriticalSection
GetLastError
FindResourceW
HeapSize
GetProcessHeap
RaiseException
OutputDebugStringA
EncodePointer
SetLastError
GetCurrentThreadId
GetSystemDirectoryW
FreeLibrary
FreeResource
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
LoadLibraryExW
GlobalDeleteAtom
lstrcmpW
LoadLibraryA
LoadLibraryW
GlobalAddAtomW
GlobalFindAtomW
GlobalGetAtomNameW
GlobalAlloc
GlobalSize
GlobalLock
GlobalUnlock
GlobalFree
LocalFree
MulDiv
FormatMessageW
CopyFileW
WideCharToMultiByte
SetEnvironmentVariableA
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleCP
GetStringTypeW
HeapQueryInformation
LCMapStringW
GetTimeFormatW
GetDateFormatW
GetTimeZoneInformation
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
WaitForSingleObjectEx
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStartupInfoW
SetStdHandle
WriteConsoleW
GetFileType
GetStdHandle
GetModuleFileNameA
ExitProcess
ExitThread
CreateThread
HeapValidate
IsProcessorFeaturePresent
IsDebuggerPresent
VirtualQuery
VirtualAlloc
GetSystemInfo
GetSystemTimeAsFileTime
RtlUnwind
GetModuleHandleExW
GetCommandLineW
SearchPathW
GetTempPathW
GetTempFileNameW
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
FileTimeToLocalFileTime
GetWindowsDirectoryW
GetTickCount
FindResourceExW
LockResource
VerifyVersionInfoW
lstrcpyW
VerSetConditionMask
lstrcmpiW
GetCurrentProcess
GetHandleInformation
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
FindClose
CreateFileW
DeleteFileW
GetCurrentDirectoryW
FileTimeToSystemTime
VirtualProtect
GetProfileIntW
SetErrorMode
GlobalFlags
GetThreadLocale
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GetAtomNameW
GetCurrentProcessId
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcmpA
GetVersionExW
GetCurrentThread
WaitForSingleObject
CloseHandle
ResumeThread
SetThreadPriority

user32

ToUnicodeEx
GetIconInfo
DrawIconEx
RegisterClipboardFormatW
MonitorFromPoint
UnionRect
UpdateLayeredWindow
TrackMouseEvent
EnumDisplayMonitors
SetLayeredWindowAttributes
MapVirtualKeyW
GetKeyNameTextW
MessageBeep
WaitMessage
ReuseDDElParam
LoadImageW
TranslateAcceleratorW
CharUpperW
DestroyIcon
LoadAcceleratorsW
IsRectEmpty
CopyAcceleratorTableW
GetAsyncKeyState
ReleaseCapture
SetRectEmpty
UnpackDDElParam
GetClipboardFormatNameW
GetClipboardFormatNameA
RealChildWindowFromPoint
CopyImage
SystemParametersInfoW
DestroyMenu
SendDlgItemMessageA
IntersectRect
InflateRect
InvertRect
FrameRect
FillRect
DrawFocusRect
GetSysColorBrush
DrawStateW
GrayStringW
DrawTextExW
SetMenuDefaultItem
GetMenuDefaultItem
SetMenuItemInfoW
GetMenuItemInfoW
InsertMenuItemW
DeleteMenu
ModifyMenuW
EnableMenuItem
CheckMenuItem
CreatePopupMenu
CreateMenu
LoadMenuW
DrawFrameControl
DrawEdge
GetWindowThreadProcessId
SetCursor
PostQuitMessage
GetCursorPos
TranslateMessage
GetMessageW
EndDialog
CreateDialogIndirectParamW
NotifyWinEvent
LoadCursorW
GetLastActivePopup
SetParent
GetDesktopWindow
WindowFromPoint
ClientToScreen
HideCaret
SetWindowContextHelpId
EnableScrollBar
ShowScrollBar
LockWindowUpdate
RedrawWindow
GetKeyboardLayout
InvalidateRgn
ValidateRect
InvalidateRect
GetWindowRgn
SetWindowRgn
GetUpdateRect
EndPaint
BeginPaint
GetWindowDC
SetForegroundWindow
GetForegroundWindow
UpdateWindow
GetSystemMenu
DrawMenuBar
KillTimer
SetTimer
SetCapture
GetActiveWindow
OpenClipboard
GetNextDlgTabItem
GetNextDlgGroupItem
IsZoomed
BringWindowToTop
IsIconic
IsWindowVisible
ShowOwnedPopups
PostThreadMessageW
IsDialogMessageW
SetWindowTextW
IsWindowEnabled
EnableWindow
CheckDlgButton
MoveWindow
ShowWindow
OffsetRect
CharNextW
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
MapDialogRect
TabbedTextOutW
PostMessageW
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
IsMenu
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
LoadIconW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindow
GetTopWindow
GetClassNameW
GetParent
GetClassLongW
SetWindowLongW
GetWindowLongW
PtInRect
EqualRect
CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
MessageBoxW
AdjustWindowRectEx
GetWindowRect
GetClientRect
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
SetCursorPos
SetClassLongW
CloseClipboard
SetClipboardData
EmptyClipboard
CharUpperBuffW
CopyIcon
GetComboBoxInfo
IsCharLowerW
MapVirtualKeyExW
GetDoubleClickTime
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsClipboardFormatAvailable
SubtractRect
DestroyCursor
GetPropW
SetPropW
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
GetFocus
SetFocus
GetDlgCtrlID
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
SendMessageW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
UnregisterClassW
SetRect
ReleaseDC
GetDC
DrawTextW
GetSystemMetrics
DrawIcon

gdi32

BitBlt
CombineRgn
CreateCompatibleBitmap
CreateCompatibleDC
CreateEllipticRgn
CreateFontIndirectW
CreateFontW
CreateHatchBrush
CreatePalette
CreatePen
CreatePatternBrush
CreateRectRgn
CreateRectRgnIndirect
CreateRoundRectRgn
CreateSolidBrush
Ellipse
Escape
ExtFloodFill
FillRgn
FrameRgn
GetBkColor
GetBoundsRect
GetMapMode
GetNearestPaletteIndex
GetObjectType
GetPaletteEntries
GetPixel
GetRgnBox
GetStockObject
GetTextColor
GetTextExtentPoint32W
GetViewportExtEx
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
OffsetRgn
PatBlt
PtInRegion
PtVisible
RectVisible
Rectangle
RealizePalette
RoundRect
SetPaletteEntries
SetPixel
SetPixelV
StretchBlt
CreateBitmap
GetTextMetricsW
TextOutW
CreatePolygonRgn
DPtoLP
LPtoDP
Polygon
Polyline
GetTextFaceW
ExcludeClipRect
GetClipBox
IntersectClipRect
LineTo
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
CreateDIBSection
EnumFontFamiliesExW
GetSystemPaletteEntries
SetDIBColorTable
ExtTextOutW
GetDeviceCaps
CreateDCW
CopyMetaFileW
DeleteObject
SelectObject
SetTextColor
GetObjectW
DeleteDC
SetBkColor
SetRectRgn

msimg32

TransparentBlt
AlphaBlend

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

RegQueryValueW
RegEnumKeyExW
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegEnumValueW
RegCloseKey

shell32

SHGetFileInfoW
DragQueryFileW
DragFinish
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHAppBarMessage
ShellExecuteW
SHGetDesktopFolder

shlwapi

PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
PathFileExistsW
StrFormatKBSizeW

uxtheme

OpenThemeData
DrawThemeText
IsAppThemed
GetWindowTheme
CloseThemeData
DrawThemeBackground
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
DrawThemeParentBackground
GetThemeColor
GetCurrentThemeName
GetThemeSysColor

ole32

OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoInitializeEx
StringFromGUID2
CoDisconnectObject
CLSIDFromProgID
CLSIDFromString
CoInitialize
CoCreateGuid
CoUninitialize
ReleaseStgMedium
CoRevokeClassObject
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CoRegisterMessageFilter
CreateStreamOnHGlobal
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
OleDuplicateData
CoCreateInstance

oleaut32

SysAllocString
LoadTypeLi
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
OleCreateFontIndirect
SysFreeString
VariantChangeType
VariantClear
VariantCopy
VarBstrFromDate
VariantInit
SysAllocStringLen

oledlg

OleUIBusyW

gdiplus

GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDrawImageRectI
GdipSetInterpolationMode
GdipDeleteGraphics
GdipCreateBitmapFromStreamICM
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipSaveImageToFile
GdipDisposeImage
GdipCloneImage
GdiplusShutdown
GdiplusStartup
GdipFree
GdipAlloc
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCreateFromHDC
GdipDrawImageI

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 465KB - Virtual size: 464KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c5e61a362816858554de1740185a0738

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

oleacc

imm32

winmm

Sections

.text Size: 3.1MB - Virtual size: 3.1MB

.rdata Size: 465KB - Virtual size: 464KB

.data Size: 25KB - Virtual size: 65KB

.rsrc Size: 16KB - Virtual size: 15KB

.reloc Size: 181KB - Virtual size: 180KB

.text
Size: 3.1MB - Virtual size: 3.1MB

.rdata
Size: 465KB - Virtual size: 464KB

.data
Size: 25KB - Virtual size: 65KB

.rsrc
Size: 16KB - Virtual size: 15KB

.reloc
Size: 181KB - Virtual size: 180KB