0d55b2fb5dbf40200063fec66f6cf95a6f63c5582c5d7d9457f952bf3d2daa30

Sharing

Copy URL Twitter E-mail

General

Target

0d55b2fb5dbf40200063fec66f6cf95a6f63c5582c5d7d9457f952bf3d2daa30
Size

4.7MB
MD5

51eb62312679012e7d795c71c36a62dc
SHA1

174903fe5522710009d69ebdd9ca1c03a472df67
SHA256

0d55b2fb5dbf40200063fec66f6cf95a6f63c5582c5d7d9457f952bf3d2daa30
SHA512

6cb3bd5191de92f1b86f3b3ccd554f827dfef6019a67dde6e5b147e4d28d9bb4f08e603cbbee4de353ddca00def1dc11c3c6a595b3b718def78bf64606f1f0f8
SSDEEP

98304:5fCRyJIQPbImK1Mz0DOxthJLvPl7d2MU6Tc/NOQEDJhveuF2bj94s:5fCgJIQ8h1MzEahJztd2oopus

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d55b2fb5dbf40200063fec66f6cf95a6f63c5582c5d7d9457f952bf3d2daa30

Files

0d55b2fb5dbf40200063fec66f6cf95a6f63c5582c5d7d9457f952bf3d2daa30
.exe windows:5 windows x86 arch:x86

28093d84c918e1d0af324f4df2cc185e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundW
waveOutOpen
waveOutPrepareHeader
waveOutReset
waveOutUnprepareHeader
waveOutWrite
waveOutClose

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

comctl32

_TrackMouseEvent
ImageList_ReplaceIcon

kernel32

SetLastError
SetPriorityClass
SetStdHandle
SetThreadExecutionState
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
SuspendThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
SetErrorMode
VirtualAlloc
VirtualProtect
VirtualQuery
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
WriteFile
WritePrivateProfileStringW
SetEnvironmentVariableW
SetEndOfFile
SetConsoleCtrlHandler
SearchPathW
ResumeThread
RemoveDirectoryW
ReleaseSemaphore
RtlUnwind
GetStartupInfoA
GetVersion
GetCurrentProcess
ReadFile
ReadConsoleW
RaiseException
QueryPerformanceFrequency
QueryPerformanceCounter
OutputDebugStringW
OutputDebugStringA
MultiByteToWideChar
MulDiv
MoveFileW
lstrcpyW
lstrcmpW
lstrcmpiW
lstrcmpA
LockResource
LockFile
LocalUnlock
LocalReAlloc
LocalLock
LocalFree
LocalFileTimeToFileTime
LocalAlloc
LoadResource
LoadLibraryW
LoadLibraryExW
LoadLibraryExA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
SetHandleCount
GetEnvironmentVariableA
GetVersionExA
HeapCreate
VirtualFree
InterlockedDecrement
LCMapStringW
IsValidLocale
IsValidCodePage
IsProcessorFeaturePresent
IsBadWritePtr
HeapSize
HeapReAlloc
HeapFree
HeapDestroy
HeapAlloc
GlobalUnlock
GlobalSize
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalGetAtomNameW
SetFileTime
GlobalFlags
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetWindowsDirectoryW
GetVolumeInformationW
GetVersionExW
GetUserDefaultLCID
GetTimeZoneInformation
GetTimeFormatW
SetSystemPowerState
GetThreadLocale
GetTempPathW
GetTempFileNameW
GetSystemTimeAsFileTime
GetSystemInfo
GetSystemDirectoryW
GetSystemDefaultLCID
GetStringTypeW
GetStringTypeExW
GetStdHandle
GetShortPathNameW
GetProfileIntW
GetProcessHeap
GetProcAddress
GetPrivateProfileStringW
GetPrivateProfileIntW
GetOEMCP
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetLongPathNameW
GetLogicalDriveStringsW
GetLocalTime
GetLocaleInfoW
GetLastError
GetFullPathNameW
GetFileType
GetFileTime
GetFileSize
GetFileAttributesW
GetFileAttributesExW
GetEnvironmentStringsW
GetDriveTypeW
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentDirectoryW
GetCPInfo
GetConsoleOutputCP
GetACP
FreeLibraryAndExitThread
FreeLibrary
FreeEnvironmentStringsW
FormatMessageW
FlushFileBuffers
FindResourceW
FindResourceExW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
ExitThread
ExitProcess
EnumSystemLocalesW
DuplicateHandle
DeleteFileW
DeleteCriticalSection
CreateThread
CreateSemaphoreW
CreateFileW
CreateEventW
CreateDirectoryW
CopyFileW
CompareStringW
CompareStringA
CloseHandle
GetStartupInfoW
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
GetTickCount
LeaveCriticalSection
LoadLibraryA
GetCommandLineW
GetConsoleMode
SetFilePointer
SetFileAttributesW
GlobalFree
SetEvent
InterlockedIncrement
GetStringTypeA
LCMapStringA
UnlockFile

user32

SetFocus
SetForegroundWindow
SetMenu
SetMenuDefaultItem
SetMenuItemBitmaps
SetMenuItemInfoW
SetParent
SetPropW
SetRectEmpty
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetWindowContextHelpId
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowsHookExW
SetWindowTextW
ShowOwnedPopups
ShowScrollBar
ShowWindow
SubtractRect
SystemParametersInfoW
TabbedTextOutW
ToUnicodeEx
TrackPopupMenuEx
TranslateAcceleratorW
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnionRect
UnregisterClassW
UpdateWindow
ValidateRect
WaitMessage
WindowFromDC
WinHelpW
SetDlgItemTextW
SetDlgItemInt
SetCursorPos
SetCursor
SetClipboardData
SetClassLongW
SetCapture
SetActiveWindow
SendNotifyMessageW
SendMessageW
SendDlgItemMessageW
SendDlgItemMessageA
ScrollWindowEx
ScrollWindow
ScreenToClient
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PtInRect
PostThreadMessageW
PostQuitMessage
PostMessageW
PeekMessageW
OpenClipboard
OffsetRect
MoveWindow
ModifyMenuW
MessageBoxW
MessageBeep
MapWindowPoints
MapVirtualKeyW
MapVirtualKeyExW
MapDialogRect
LockWindowUpdate
LoadMenuW
LoadImageW
LoadIconW
LoadCursorW
LoadBitmapW
LoadAcceleratorsW
KillTimer
IsZoomed
IsWindowVisible
IsWindowEnabled
IsRectEmpty
IsMenu
IsIconic
IsDlgButtonChecked
IsDialogMessageW
IsClipboardFormatAvailable
IsChild
InvalidateRgn
InvalidateRect
IntersectRect
InsertMenuW
InsertMenuItemW
InSendMessage
InflateRect
HideCaret
GrayStringW
GetWindowThreadProcessId
GetWindowTextW
GetWindowTextLengthW
GetWindowRgn
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowDC
GetTopWindow
GetTabbedTextExtentW
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetNextDlgTabItem
GetNextDlgGroupItem
GetMessageW
GetMessageTime
GetMessagePos
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenuDefaultItem
GetMenuCheckMarkDimensions
GetLastActivePopup
GetKeyState
GetKeyNameTextW
GetKeyboardState
GetKeyboardLayout
GetIconInfo
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDlgItemTextW
GetDlgItemInt
GetDlgItem
GetDlgCtrlID
GetDialogBaseUnits
GetDesktopWindow
GetDCEx
GetCursorPos
GetClipboardData
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetClassInfoExW
GetCapture
GetAsyncKeyState
GetActiveWindow
FrameRect
FillRect
ExitWindowsEx
EqualRect
EnumChildWindows
EndPaint
EndDialog
EndDeferWindowPos
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextExW
DrawStateW
DrawMenuBar
DrawIconEx
DrawIcon
ReuseDDElParam
UnpackDDElParam
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DestroyAcceleratorTable
DeleteMenu
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreateWindowExW
CreatePopupMenu
CreateMenu
CreateDialogIndirectParamW
CreateAcceleratorTableW
CopyRect
CopyImage
CopyIcon
CopyAcceleratorTableW
CloseClipboard
ClientToScreen
CheckRadioButton
CheckMenuRadioItem
CheckMenuItem
CheckDlgButton
CharUpperW
CharUpperBuffW
CharNextW
CallWindowProcW
CallNextHookEx
BringWindowToTop
BeginPaint
BeginDeferWindowPos
AppendMenuW
AdjustWindowRectEx
GetUpdateRect

gdi32

EnumMetaFile
Escape
ExcludeClipRect
ExtCreatePen
ExtFloodFill
ExtSelectClipRgn
ExtTextOutW
FillRgn
FrameRgn
GetBkColor
GetBkMode
GetBoundsRect
GetCharWidthW
GetClipBox
GetClipRgn
GetCurrentObject
GetCurrentPositionEx
GetDeviceCaps
GetDIBits
GetMapMode
GetNearestColor
GetNearestPaletteIndex
GetObjectType
GetObjectW
GetPaletteEntries
GetPixel
GetPolyFillMode
GetRgnBox
GetROP2
GetStockObject
GetStretchBltMode
GetSystemPaletteEntries
GetTextAlign
GetTextCharsetInfo
GetTextColor
GetTextExtentPoint32W
GetTextFaceW
GetTextMetricsW
CreateHatchBrush
GetViewportExtEx
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
IntersectClipRect
LineTo
LPtoDP
ModifyWorldTransform
MoveToEx
EndDoc
OffsetRgn
OffsetViewportOrgEx
EnumFontFamiliesW
PatBlt
PlayMetaFile
PlayMetaFileRecord
PolyBezierTo
PolyDraw
PolylineTo
PtInRegion
PtVisible
RealizePalette
Rectangle
RectVisible
RestoreDC
SaveDC
ScaleViewportExtEx
ScaleWindowExtEx
SelectClipPath
SelectClipRgn
SelectObject
SelectPalette
SetAbortProc
SetArcDirection
SetBkColor
SetBkMode
SetColorAdjustment
SetDIBColorTable
SetDIBits
SetGraphicsMode
SetMapMode
SetMapperFlags
SetPaletteEntries
SetPixelV
SetPolyFillMode
SetRectRgn
SetROP2
SetStretchBltMode
SetTextAlign
SetTextCharacterExtra
SetTextColor
SetTextJustification
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
SetWorldTransform
StartDocW
StartPage
StretchDIBits
TextOutW
Ellipse
DPtoLP
EnumFontFamiliesExW
OffsetWindowOrgEx
EndPage
DeleteObject
DeleteMetaFile
DeleteDC
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgnIndirect
CreateRectRgn
CreatePolygonRgn
CreatePen
CreatePatternBrush
CreatePalette
OffsetClipRgn
AbortDoc
CreateFontW
CreateFontIndirectW
CreateEllipticRgn
CreateDIBSection
CreateDIBPatternBrushPt
CreateDIBitmap
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
CopyMetaFileW
CombineRgn
CloseMetaFile
BitBlt
ArcTo
CreateMetaFileW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter
GetJobW

comdlg32

GetOpenFileNameW
ChooseColorW
GetSaveFileNameW

advapi32

RegSetValueW
RegSetValueExW
RegQueryValueW
RegEnumValueW
RegEnumKeyW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
OpenProcessToken
LookupPrivilegeValueW
GetFileSecurityW
AdjustTokenPrivileges
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
SetFileSecurityW

shell32

CommandLineToArgvW
DragAcceptFiles
DragFinish
DragQueryFileW
ExtractIconW
ShellExecuteExW
ShellExecuteW

ole32

OleCreateFromData
OleCreateFromFile
OleCreateLinkFromData
OleCreateLinkToFile
OleCreateMenuDescriptor
OleCreateStaticFromData
OleDestroyMenuDescriptor
OleDuplicateData
OleFlushClipboard
OleGetClipboard
OleGetIconOfClass
OleInitialize
OleIsCurrentClipboard
OleIsRunning
OleLoad
OleLockRunning
OleQueryCreateFromData
OleQueryLinkFromData
OleRegEnumVerbs
OleRegGetMiscStatus
OleRegGetUserType
OleRun
OleSaveToStream
OleSetClipboard
OleSetContainedObject
OleSetMenuDescriptor
OleTranslateAccelerator
OleUninitialize
IsAccelerator
ReadClassStg
ReadFmtUserTypeStg
RegisterDragDrop
ReleaseStgMedium
RevokeDragDrop
SetConvertStg
StgCreateDocfile
StgCreateDocfileOnILockBytes
StgIsStorageFile
StgOpenStorage
StgOpenStorageOnILockBytes
StringFromCLSID
StringFromGUID2
WriteClassStg
WriteClassStm
WriteFmtUserTypeStg
CoRegisterMessageFilter
CoRegisterClassObject
CoLockObjectExternal
CoInitialize
CoGetMalloc
CoGetClassObject
CoFreeUnusedLibraries
CoDisconnectObject
CoCreateInstance
CoCreateGuid
CLSIDFromString
CLSIDFromProgID
GetRunningObjectTable
GetHGlobalFromILockBytes
CreateStreamOnHGlobal
DoDragDrop
CreateOleAdviseHolder
CreateItemMoniker
CreateILockBytesOnHGlobal
CreateFileMoniker
CreateGenericComposite
CreateDataAdviseHolder
CreateBindCtx
CoUninitialize
CoTreatAsClass
CoTaskMemFree
CoTaskMemAlloc
PropVariantCopy
CoRevokeClassObject

shlwapi

PathStripToRootW
PathRemoveFileSpecW
PathRemoveExtensionW
PathIsUNCW
PathFindFileNameW
PathFindExtensionW
PathFileExistsW

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 392KB - Virtual size: 389KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bitmap8
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

28093d84c918e1d0af324f4df2cc185e

Headers

File Characteristics

Imports

winmm

imm32

comctl32

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

shlwapi

Sections

.text Size: 2.3MB - Virtual size: 2.3MB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 16KB - Virtual size: 4.0MB

.rsrc Size: 392KB - Virtual size: 389KB

.bitmap8 Size: 1.9MB - Virtual size: 1.9MB

.text
Size: 2.3MB - Virtual size: 2.3MB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 16KB - Virtual size: 4.0MB

.rsrc
Size: 392KB - Virtual size: 389KB

.bitmap8
Size: 1.9MB - Virtual size: 1.9MB