8c432e84946ab677d87d3fa9f263597f30d31adf8611df25744eeeb85dd4faaf[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

8c432e84946ab677d87d3fa9f263597f30d31adf8611df25744eeeb85dd4faaf.exe
Size

4.0MB
MD5

63799db91ff4c343eb071cfe3b67321d
SHA1

d368ced88e0cab4fd211c45e66e8dfa6985714b3
SHA256

8c432e84946ab677d87d3fa9f263597f30d31adf8611df25744eeeb85dd4faaf
SHA512

4cb9945abf9ea89b70849a3d5022349619038c1d4d436de60e9ee745fd221deea66930c22744e633dceea98a5522fc580b319abbc6103a404b58a4ec8ffe0113
SSDEEP

98304:D8ocMa2hVtltuaKs5lE1PQm7dBOW/Y3K+4T+3n:D8oNa2hVtltuaKs5lqPhB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c432e84946ab677d87d3fa9f263597f30d31adf8611df25744eeeb85dd4faaf.exe

Files

8c432e84946ab677d87d3fa9f263597f30d31adf8611df25744eeeb85dd4faaf.exe
.dll windows:6 windows x64 arch:x64

dbaf2c41b21ad46a2aeb3b8dfe5b9469

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

shlwapi

PathStripToRootW
PathFindExtensionW
PathRemoveFileSpecW
PathIsUNCW
StrCpyW
PathFindFileNameW
StrFormatKBSizeW

setupapi

SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList

kernel32

TlsFree
CreateSemaphoreA
TlsSetValue
SetThreadPriority
GetCurrentThread
DuplicateHandle
GetThreadPriority
TlsGetValue
SetLastError
TlsAlloc
GetCurrentProcessId
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcess
GetProcessAffinityMask
CreateEventA
SetEvent
GetACP
GetCurrentThreadId
LoadLibraryA
GetSystemDirectoryA
CopyFileW
GetSystemDirectoryW
InitializeCriticalSection
CreateThread
ReadFile
GetFileAttributesW
DeleteFileW
GetModuleHandleW
LocalFree
LocalAlloc
CreateSemaphoreW
ReleaseSemaphore
LoadLibraryW
GetProcAddress
FreeLibrary
CreateEventW
ResetEvent
DeviceIoControl
GetDriveTypeW
FindNextFileW
FindFirstFileW
FindClose
GetVersionExW
GetSystemInfo
GetNativeSystemInfo
CloseHandle
SetThreadContext
GetThreadContext
ResumeThread
SuspendThread
SetFileTime
CreateFileW
WideCharToMultiByte
TerminateThread
WaitForSingleObject
MultiByteToWideChar
FindResourceW
RtlUnwind
SizeofResource
GlobalAlloc
GlobalSize
GlobalLock
GlobalUnlock
GlobalFree
MulDiv
FormatMessageW
OutputDebugStringA
EncodePointer
FreeResource
GetModuleFileNameW
GetModuleHandleExW
LoadLibraryExW
GlobalDeleteAtom
lstrcmpW
GlobalAddAtomW
GlobalFindAtomW
CreateActCtxW
ActivateActCtx
DeactivateActCtx
FindActCtxSectionStringW
QueryActCtxW
CompareStringW
VirtualProtect
lstrcmpA
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
GlobalReAlloc
GlobalHandle
LocalReAlloc
GlobalGetAtomNameW
FileTimeToSystemTime
GlobalFlags
lstrcpyW
GetLocaleInfoW
WaitForMultipleObjects
GetUserDefaultUILanguage
FindResourceExW
SetErrorMode
GetCurrentDirectoryW
FlushFileBuffers
GetFileSize
GetFullPathNameW
GetVolumeInformationW
LockFile
SetEndOfFile
SetFilePointer
UnlockFile
WriteFile
lstrcmpiW
GetWindowsDirectoryW
VerSetConditionMask
VerifyVersionInfoW
FileTimeToLocalFileTime
GetFileAttributesExW
GetFileSizeEx
GetFileTime
SystemTimeToTzSpecificLocalTime
GetTempPathW
GetProfileIntW
SearchPathW
GetTempFileNameW
GetUserDefaultLCID
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
SwitchToThread
LCMapStringW
GetStringTypeW
GetCPInfo
RtlUnwindEx
RtlPcToFileHeader
InterlockedFlushSList
GetFileInformationByHandle
GetFileType
PeekNamedPipe
CreateDirectoryW
GetTimeZoneInformation
ExitThread
FreeLibraryAndExitThread
ExitProcess
GetCommandLineA
GetCommandLineW
HeapQueryInformation
VirtualAlloc
VirtualQuery
QueryPerformanceFrequency
SetStdHandle
GetStdHandle
GetDateFormatW
GetTimeFormatW
IsValidLocale
EnumSystemLocalesW
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleCP
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
WriteConsoleW
LockResource
LoadResource
GetTickCount
Sleep
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
GetLastError
RaiseException
DecodePointer
GetSystemDefaultUILanguage

user32

IsDialogMessageW
CreateDialogIndirectParamW
GetNextDlgTabItem
GetActiveWindow
GetDesktopWindow
LoadMenuW
GetMessageW
GetAsyncKeyState
MapDialogRect
PostQuitMessage
ShowOwnedPopups
GetWindowThreadProcessId
GetKeyNameTextW
MapVirtualKeyW
GetDC
ReleaseDC
GetSystemMetrics
GetSysColorBrush
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW
GetWindowDC
ClientToScreen
FillRect
RealChildWindowFromPoint
TrackMouseEvent
InvalidateRect
InflateRect
DestroyIcon
LoadImageW
DestroyMenu
GetMenuItemInfoW
SystemParametersInfoW
CopyImage
DeleteMenu
CharUpperW
IntersectRect
GetNextDlgGroupItem
WindowFromPoint
DrawFocusRect
IsRectEmpty
DrawIconEx
GetIconInfo
MessageBeep
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
SetLayeredWindowAttributes
EnumDisplayMonitors
SetClassLongPtrW
SetWindowRgn
SetParent
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
DrawEdge
DrawFrameControl
IsZoomed
GetSystemMenu
BringWindowToTop
SetCursorPos
CopyIcon
FrameRect
DrawIcon
UnionRect
UpdateLayeredWindow
MonitorFromPoint
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
PostThreadMessageW
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
SetRect
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
IsClipboardFormatAvailable
GetUpdateRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SubtractRect
CreateMenu
GetWindowRgn
DestroyCursor
IsWindowEnabled
IsDlgButtonChecked
CheckDlgButton
SetDlgItemTextW
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
SetWindowsHookExW
GetLastActivePopup
GetClassLongPtrW
SetWindowLongPtrW
GetWindowLongPtrW
EqualRect
CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
ScrollWindow
RedrawWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
GetDlgCtrlID
IsIconic
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsMenu
IsWindow
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
GetMessageTime
GetMessagePos
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
GetParent
OffsetRect
SetRectEmpty
GetClientRect
SendDlgItemMessageA
GetWindowTextLengthW
GetWindowTextW
GetScrollPos
SetScrollPos
SetFocus
UnhookWindowsHookEx
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
RegisterWindowMessageW
SendMessageW
PostMessageW
UnregisterClassW
EnableWindow
GetWindowRect
LoadIconW
SetCapture
ReleaseCapture
GetClassNameW
GetTopWindow
GetWindow
TranslateMessage
DispatchMessageW
PeekMessageW
DefWindowProcW
CreateWindowExW
DialogBoxIndirectParamW
EndDialog
GetDlgItem
SetTimer
KillTimer
SetWindowTextW
SetCursor
GetCursorPos
PtInRect
GetWindowLongW
SetWindowLongW
EnumThreadWindows
LoadBitmapW
LoadCursorW
MessageBoxW

gdi32

GetTextExtentPoint32W
CreateFontIndirectW
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
SetPixel
StretchBlt
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
Rectangle
GetRgnBox
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextCharsetInfo
GetTextMetricsW
GetTextFaceW
SetViewportExtEx
ExtTextOutW
TextOutW
MoveToEx
GetObjectW
EnumFontFamiliesW
CreateDIBitmap
CreateCompatibleBitmap
GetBkColor
RealizePalette
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
DPtoLP
CreateRectRgnIndirect
PatBlt
BitBlt
CreateCompatibleDC
CreateHatchBrush
CreatePen
CreatePatternBrush
CreateRectRgn
CreateSolidBrush
DeleteObject
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
GetStockObject
SetBkMode
SetTextColor
PtVisible
RectVisible
RestoreDC
SaveDC
SetRectRgn
CombineRgn
SetBkColor
CreateBitmap
DeleteDC
GetDeviceCaps
CreateDCW
CopyMetaFileW
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
EnumFontFamiliesExW

shell32

SHAppBarMessage
SHBrowseForFolderW
ShellExecuteW
DragFinish
DragQueryFileW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetFileInfoW
SHChangeNotify

oleaut32

VarBstrFromDate
VariantCopy
SysAllocStringLen
VariantInit
VariantClear
VariantChangeType
SysAllocString
LoadTypeLi
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SysFreeString

comdlg32

GetSaveFileNameW

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegEnumKeyW
RegQueryValueW
RegEnumValueW
RegEnumKeyExW

msimg32

TransparentBlt
AlphaBlend

uxtheme

GetCurrentThemeName
DrawThemeText
DrawThemeParentBackground
GetThemePartSize
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
IsAppThemed
OpenThemeData
GetWindowTheme
GetThemeColor
DrawThemeBackground
CloseThemeData

winmm

waveOutOpen
waveOutPrepareHeader
waveOutUnprepareHeader
PlaySoundW
waveOutGetPosition
waveOutReset
waveOutWrite
waveOutClose

ws2_32

WSAStartup
WSACleanup
WSASetLastError
htons
htonl
connect
inet_addr
inet_ntoa
ntohs
recv
send
shutdown
socket
gethostbyaddr
gethostbyname
getservbyport
WSAGetLastError
getservbyname

gdiplus

GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipDrawImageRectI
GdipSetInterpolationMode

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

ole32

CoInitializeEx
CreateStreamOnHGlobal
CoDisconnectObject
CoInitialize
CoCreateInstance
CoCreateGuid
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop

Exports

Exports

Abort
AddBurnDevice
AddDir
AddFile
AddFileEx
AnalyseDeviceCapability
AudioFileStop
Burn
BurnDialog
BurnISO
CheckLicenseKey
CheckSignature
ClearAll
CloseCDTextHandle
CloseDevice
CloseDirectory
CloseDiskSession
CloseNetworkTagsHandle
CloseSession
ConvertSpeedFromKBPerSec
CopyDisk
CreateDir
CreateImage
CreateProject
DABurn
DABurnISOImage
DACheckSignature
DACloseDevice
DACloseSession
DAConvertSpeedFromKBPerSec
DACopyDisk
DACreateImage
DAEjectDevice
DAErase
DAGetBurnSpeed
DAGetDeviceCapabilities
DAGetDeviceCapabilitiesHandle
DAGetDeviceInformation
DAGetDeviceInformationEx
DAGetMaxBurnSpeed
DAGetMaxReadSpeed
DAGetMediumFreedbId
DAGetMediumInformation
DAGetPossibleBurnSpeeds
DAGetPossibleImageFormats
DAGetPossibleReadSpeeds
DAGetReadSpeed
DAGetSessionInformation
DAGetTrackFormatEx
DAGetTrackISRC
DAGetTrackIndexes
DAGetTrackInformation
DAGrabAudioTrack
DAImportFile
DAImportFileEx
DAIsDeviceReady
DALockMedium
DAOpenDiskSession
DAPlayAudioTrack
DAPrepare
DAReadCDText
DAReadFileContents
DAReadSectors
DASaveTrackToFile
DASetBurnSpeed
DASetReadSpeed
DASetRegionalCode
DAVerifyFile
DeInitialize
DeleteProject
DirExists
EjectDevice
EnableImageDevice
EnableMCNDisabling
Erase
EraseDialog
EraseMpegByIndex
ForceDeInitialize
GetASPI
GetActiveDevicesCount
GetAudioFileSize
GetBootInfoEx
GetBootVolumeInformation
GetBurnDevice
GetBurnDevices
GetBurnDoneEventCallback
GetBurnFileEventCallback
GetBurnSpeed
GetCDTextDiskTagString
GetCDTextTrackTagString
GetCompareFilesForArrangementEventCallback
GetCompressEncrypt
GetDVDVideoOptions
GetDeviceCapabilities
GetDeviceCapabilitiesHandle
GetDeviceInformation
GetDeviceInformationEx
GetDevices
GetEraseDoneEventCallback
GetErrorDeviceName
GetFileAllocationTable
GetFileEntry
GetFileTimeEx
GetFinalizeEventCallback
GetISOInfoEx
GetISOVolumeInformation
GetImageFilePath
GetImageSize
GetInfoTextEventCallback
GetJobDoneEventCallback
GetLanguage
GetMaxBurnSpeed
GetMaxReadSpeed
GetMediumFreedbId
GetMediumInformation
GetMpegCount
GetNetworkDiskTagInt
GetNetworkDiskTagString
GetNetworkTrackTagInt
GetNetworkTrackTagString
GetNumberOfFiles
GetOptions
GetPlayTime
GetPossibleBurnSpeeds
GetPossibleImageFormats
GetPossibleReadSpeeds
GetPrecisePlayTime
GetProcessEventCallback
GetProjectType
GetRAWDataEventCallback
GetReadDevice
GetReadSpeed
GetSessionInformation
GetStartVerifyEventCallback
GetText
GetTmpPath
GetTrackFormatEx
GetTrackISRC
GetTrackIndexes
GetTrackInformation
GetUDFOptions
GetUDFOptionsEx
GetUDFVolumeInformation
GetVerify
GetVerifyDoneEventCallback
GetVerifyErrorEventCallback
GetVerifyFileEventCallback
GetVerifySectorEventCallback
GetWriteCDTextInUnicode
GrabAudioTrack
ImportFile
ImportFileEx
Initialize
IsDeviceReady
IsValidVideoTsFolder
LoadBassPlugin
LockMedium
MultiDeviceDialog
OpenDirectory
OpenDiskSession
PlayAudioFile
PlayAudioTrack
Prepare
ReadCDText
ReadDirectory
ReadFileContents
ReadSectors
ReleaseDeviceCapabilities
RemoveBurnDevice
RemoveDir
RemoveFile
RenameDir
RenameFile
RescanDevices
ResetCallbacks
SaveLogToFile
SaveOptionsToFile
SaveTrackToFile
SetASPI
SetAddFileEventCallback
SetAudioDecodeDoneEventCallback
SetAudioDecoderEventCallback
SetAudioFileProperty
SetBootInfoEx
SetBurnDevice
SetBurnDoneEventCallback
SetBurnFileEventCallback
SetBurnSpeed
SetCompareFilesForArrangementEventCallback
SetCompressEncrypt
SetCreateDirEventCallback
SetDVDVideoOptions
SetEraseDoneEventCallback
SetFXApp
SetFileAttr
SetFileTimeEx
SetFileTimes
SetFileUserParam
SetFinalizeEventCallback
SetGetTextEventCallback
SetISOInfoEx
SetIgnoreFileExist
SetImageFilePath
SetInfoTextEventCallback
SetJobDoneEventCallback
SetLanguage
SetOptions
SetOptionsFromFile
SetProcessEventCallback
SetRAWDataEventCallback
SetRAWStructure
SetReadDevice
SetReadSpeed
SetRegionalCode
SetRemoveFileEventCallback
SetStartVerifyEventCallback
SetTmpPath
SetUDFOptions
SetUDFOptionsEx
SetVCDKeyHandler
SetVCDTimeOutHandler
SetVerify
SetVerifyDoneEventCallback
SetVerifyErrorEventCallback
SetVerifyFileEventCallback
SetVerifySectorEventCallback
SetVideoScanDoneEventCallback
SetVideoScannerEventCallback
SetWriteCDTextInUnicode
StopMpegAction
TagsFromNetworkDialog
VerifyFile

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1018KB - Virtual size: 1018KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dbaf2c41b21ad46a2aeb3b8dfe5b9469

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

setupapi

kernel32

user32

gdi32

shell32

oleaut32

comdlg32

advapi32

msimg32

uxtheme

winmm

ws2_32

gdiplus

oleacc

imm32

winspool.drv

ole32

Exports

Exports

Sections

.text Size: 2.8MB - Virtual size: 2.8MB

.rdata Size: 1018KB - Virtual size: 1018KB

.data Size: 54KB - Virtual size: 1.1MB

.pdata Size: 134KB - Virtual size: 134KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 69KB - Virtual size: 69KB

.text
Size: 2.8MB - Virtual size: 2.8MB

.rdata
Size: 1018KB - Virtual size: 1018KB

.data
Size: 54KB - Virtual size: 1.1MB

.pdata
Size: 134KB - Virtual size: 134KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 69KB - Virtual size: 69KB