67517cd6e51b4d021e4451518d43fdbc9efe1ad302a23104d7feeffc3f843046

Sharing

Copy URL Twitter E-mail

General

Target

67517cd6e51b4d021e4451518d43fdbc9efe1ad302a23104d7feeffc3f843046
Size

752KB
MD5

b349bf7dda2b0fff13d295c481c8a692
SHA1

e224faecd5ed902cb803eec92f010452e10480d1
SHA256

67517cd6e51b4d021e4451518d43fdbc9efe1ad302a23104d7feeffc3f843046
SHA512

d3cb0a1d15835088414f3ad195723ed0146d3f8bb517800db74ad309859947b5817a91657e44e407e3ccc6eb6c73eb0fef0ba2bd360a2df3b0d4210f49591a3a
SSDEEP

6144:bPYxiSM6L9GrtuhUuG7BXlMVBQ8/X5lUq:DYsSM66uOL1uVi8/puq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67517cd6e51b4d021e4451518d43fdbc9efe1ad302a23104d7feeffc3f843046

Files

67517cd6e51b4d021e4451518d43fdbc9efe1ad302a23104d7feeffc3f843046
.exe windows:4 windows x86 arch:x86

119d331e3e302ae92bda5244abab1d9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrStrIA

kernel32

TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
GetFileAttributesA
GetFileSize
GetFileTime
SetErrorMode
FileTimeToSystemTime
FileTimeToLocalFileTime
RtlUnwind
GetStartupInfoA
GetCommandLineA
ExitProcess
RaiseException
HeapAlloc
HeapFree
TerminateProcess
HeapSize
HeapReAlloc
GetACP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetFullPathNameA
GetVolumeInformationA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
SetLastError
lstrcmpA
GetCurrentThread
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
lstrlenA
lstrcpynA
lstrcpyA
FindFirstFileA
FindClose
ExpandEnvironmentStringsA
WinExec
CreateToolhelp32Snapshot
Process32First
Process32Next
lstrcmpiA
UnmapViewOfFile
LocalAlloc
CreateFileMappingA
MapViewOfFile
LocalFree
GetProcAddress
LoadLibraryA
CreateThread
WaitForSingleObject
FreeLibrary
Sleep
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
ReleaseMutex
CreateMutexA
CloseHandle
GetModuleFileNameA
OutputDebugStringA
GetPrivateProfileIntA
GetPrivateProfileStructA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
WritePrivateProfileStringA
GetPrivateProfileStringA
GetLastError
GetTimeZoneInformation

user32

GetClientRect
AdjustWindowRectEx
SetFocus
GetFocus
DispatchMessageA
PeekMessageA
GetSysColor
MapWindowPoints
LoadIconA
SetWindowTextA
IsWindowEnabled
GetNextDlgTabItem
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
PostQuitMessage
SetCursor
ValidateRect
GetActiveWindow
TranslateMessage
ClientToScreen
GetDC
ReleaseDC
TabbedTextOutA
DrawTextA
GrayStringA
CharUpperA
PtInRect
LoadCursorA
GetSysColorBrush
CopyRect
IsWindowVisible
GetTopWindow
MessageBoxA
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
RegisterWindowMessageA
GetWindowPlacement
wsprintfA
WindowFromPoint
SetCursorPos
GetSystemMetrics
AttachThreadInput
GetForegroundWindow
GetWindowThreadProcessId
GetLastActivePopup
CreatePopupMenu
AppendMenuA
SetMenuDefaultItem
TrackPopupMenu
DestroyMenu
MapVirtualKeyA
keybd_event
LoadStringA
SetWindowLongA
GetMessageExtraInfo
mouse_event
SendMessageA
SystemParametersInfoA
GetMessageA
PostThreadMessageA
SetTimer
KillTimer
PostMessageA
FindWindowA
IsIconic
ShowWindow
SetForegroundWindow
SetActiveWindow
EnableWindow
GetWindow
GetWindowLongA
GetCursorPos
ScreenToClient
ChildWindowFromPoint
GetParent
EnumChildWindows
GetWindowRect
GetClassNameA
GetDesktopWindow
SetWindowPos
UnregisterClassA

gdi32

OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SetBkColor
SetViewportOrgEx
DeleteObject
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetMapMode
SetTextColor
GetClipBox
GetStockObject
RestoreDC
SaveDC
DeleteDC
GetObjectA
SelectObject
CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl

shell32

SHGetFileInfoA
ShellExecuteA
Shell_NotifyIconA

comctl32

ord17

ole32

CoCreateInstance
CoUninitialize
CoInitialize

Sections

.text
Size: 112KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 600KB - Virtual size: 599KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

119d331e3e302ae92bda5244abab1d9a

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

ole32

Sections

.text Size: 112KB - Virtual size: 109KB

.rdata Size: 28KB - Virtual size: 26KB

.data Size: 8KB - Virtual size: 22KB

.rsrc Size: 600KB - Virtual size: 599KB

.text
Size: 112KB - Virtual size: 109KB

.rdata
Size: 28KB - Virtual size: 26KB

.data
Size: 8KB - Virtual size: 22KB

.rsrc
Size: 600KB - Virtual size: 599KB