ab9c0f079a4a9b87681ed619baa3b2d97011f9dadc13ba034a0ded3055121f96

Sharing

Copy URL Twitter E-mail

General

Target

ab9c0f079a4a9b87681ed619baa3b2d97011f9dadc13ba034a0ded3055121f96
Size

10.0MB
MD5

cc31e46b06aab1f67a1299736eb028d3
SHA1

5604a13143373049377e42525258e6e6a87fa45a
SHA256

ab9c0f079a4a9b87681ed619baa3b2d97011f9dadc13ba034a0ded3055121f96
SHA512

e02821a740398f2563265e7f735268db05a7ff2a3ab55e36d692004eb05376352b8fe88cf016de4e716d63f384ffc592aea61ab24524f52d2242674e62f0365a
SSDEEP

196608:gk5w3xl+T6utoAjeQGLYKVYMq4pNxrzU6QGXYQt7f7wyDB9LkZnr:g8w3x87tXefLYKSspNx/QGXR7fnB1ynr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab9c0f079a4a9b87681ed619baa3b2d97011f9dadc13ba034a0ded3055121f96

Files

ab9c0f079a4a9b87681ed619baa3b2d97011f9dadc13ba034a0ded3055121f96
.exe windows:6 windows x86 arch:x86

384a39fa9500ec80c6b5305d55fc3ac0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime

kernel32

WriteConsoleW
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
SleepEx
QueryPerformanceFrequency
GetEnvironmentVariableA
FormatMessageW
QueryPerformanceCounter
GetStdHandle
GetFileType
PeekNamedPipe
VerifyVersionInfoW
GetFileSizeEx
ExpandEnvironmentStringsA
GetWindowsDirectoryA
CreateFileW
ReadFile
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetACP
IsValidCodePage
FlushFileBuffers
SetEndOfFile
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
ExitProcess
SetFilePointerEx
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetDriveTypeW
SetStdHandle
GetTimeZoneInformation
FreeLibraryAndExitThread
ExitThread
CreateThread
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlUnwind
GetCPInfo
GetFullPathNameW
LCMapStringEx
EncodePointer
GetModuleHandleExW
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
InitOnceComplete
InitOnceBeginInitialize
GetFileInformationByHandleEx
AreFileApisANSI
SetFileInformationByHandle
lstrcpyA
GetFileInformationByHandle
GetFileAttributesExW
FindFirstFileExW
GetCurrentDirectoryW
GetLocaleInfoEx
FormatMessageA
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
TryAcquireSRWLockExclusive
InitializeSRWLock
GetExitCodeThread
RaiseException
InitializeSListHead
GetCurrentProcessId
GetStartupInfoW
IsDebuggerPresent
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
lstrlenA
GetStringTypeW
GlobalLock
GlobalUnlock
GlobalAlloc
FreeLibrary
FlushInstructionCache
HeapCreate
MulDiv
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
GetCurrentThreadId
GetCPInfoExW
GetOEMCP
MultiByteToWideChar
GetModuleHandleA
FindResourceExW
GetSystemTimeAsFileTime
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
VerSetConditionMask
OpenProcess
GetProcessId
TerminateProcess
GetCurrentProcess
WaitForMultipleObjects
OutputDebugStringW
OutputDebugStringA
LoadLibraryW
GlobalMemoryStatus
GetSystemInfo
lstrlenW
FindResourceW
SizeofResource
LockResource
LoadResource
FreeResource
GetSystemDirectoryW
CreateProcessW
GetTempPathW
RemoveDirectoryW
GetLongPathNameW
GetFileAttributesW
FindNextFileW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
lstrcmpiW
SetFilePointer
GetProcAddress
GetModuleHandleW
GetTickCount
Sleep
GetLogicalDrives
GetDiskFreeSpaceExW
DosDateTimeToFileTime
FindFirstFileW
FindClose
CreateDirectoryW
LocalFree
GetModuleFileNameW
CreateMutexW
SetCurrentDirectoryW
GetCommandLineW
WideCharToMultiByte
lstrcpyW
LoadLibraryA
GetSystemTime
GetVersionExA
GetLocalTime
SetLastError
WriteFile
CloseHandle
GetLastError
MoveFileExW
CopyFileW
InitializeCriticalSectionEx
DecodePointer
VirtualAlloc
VirtualFree
GetVersionExW
EnterCriticalSection
LeaveCriticalSection
DeleteFileW
CreateEventW
ResetEvent
SetEvent
InitializeCriticalSection
DeleteCriticalSection

user32

PtInRect
SetCursor
IntersectRect
IsWindowVisible
ClientToScreen
IsRectEmpty
LoadIconW
SetWindowTextW
SetRect
MonitorFromWindow
GetMonitorInfoW
GetSystemMetrics
LoadCursorW
CopyRect
InflateRect
DefWindowProcW
CallWindowProcW
RegisterClassExW
CreateWindowExW
ShowWindow
GetDlgItem
GetClientRect
GetWindowRect
MapWindowPoints
GetWindowLongW
SetWindowLongW
GetParent
GetWindow
TrackMouseEvent
AnimateWindow
SetLayeredWindowAttributes
IsIconic
IsZoomed
SetWindowPos
GetCapture
SetCapture
ReleaseCapture
SetTimer
KillTimer
UpdateWindow
GetDC
ReleaseDC
BeginPaint
EndPaint
InvalidateRect
GetCursorPos
ScreenToClient
UnionRect
GetClassNameW
DestroyIcon
MessageBoxW
MonitorFromRect
DrawTextW
FillRect
InvertRect
DrawIconEx
GetIconInfo
EqualRect
GetFocus
GetKeyState
GetActiveWindow
EnableWindow
IsWindowEnabled
SetActiveWindow
GetDesktopWindow
CharNextW
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
GetAsyncKeyState
EnableMenuItem
GetSysColor
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
LoadBitmapW
CreateIconFromResource
LoadImageW
DestroyWindow
PostQuitMessage
wsprintfW
OffsetRect
SendMessageW
IsWindow
UnregisterClassW
PostMessageW
SetFocus
WindowFromPoint
CreateIconIndirect
OemToCharBuffW
UpdateLayeredWindow
SetMenuContextHelpId
SetForegroundWindow
GetMenuItemInfoW
SetMenuInfo
GetMenuInfo
TrackPopupMenu
AppendMenuW
GetMenuItemCount
DestroyMenu
CreatePopupMenu
IsMenu
MapVirtualKeyA
CharLowerBuffW
SystemParametersInfoA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW

gdi32

CreatePolygonRgn
GetObjectW
ExtCreatePen
CreateDIBSection
SetWorldTransform
SetViewportOrgEx
SetTextColor
SetROP2
SetRectRgn
SetGraphicsMode
SetBkMode
SelectObject
ExtSelectClipRgn
SaveDC
RoundRect
RestoreDC
Rectangle
RectInRegion
PtInRegion
Pie
OffsetRgn
IntersectClipRect
GetTextExtentPoint32W
GetTextColor
GetStockObject
GetRgnBox
GetClipRgn
GetClipBox
ExcludeClipRect
EqualRgn
Ellipse
DeleteObject
DeleteDC
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgnIndirect
CreateRectRgn
CreatePatternBrush
CreatePen
CreateFontIndirectW
CreateEllipticRgnIndirect
CreateCompatibleDC
CreateCompatibleBitmap
CombineRgn
Arc
GetDeviceCaps
BitBlt
CreateBitmap
CreateDIBitmap
GetCurrentObject
GetViewportOrgEx
StretchBlt
CreateDCW
StretchDIBits
GetWorldTransform

shell32

ShellExecuteW
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetSpecialFolderPathW
SHChangeNotify
CommandLineToArgvW
SHFileOperationW

ole32

CoInitializeEx
CoUninitialize
CoInitialize
CoCreateInstance
CoInitializeSecurity
CLSIDFromString
CLSIDFromProgID
CoGetApartmentType
CoGetObjectContext
OleLockRunning
CreateBindCtx
CreateStreamOnHGlobal
CoSetProxyBlanket

oleaut32

SysAllocString
SysFreeString
SysStringLen
SysAllocStringByteLen
VariantClear

advapi32

CryptImportKey
CryptDestroyKey
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGenRandom
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
RegQueryInfoKeyW
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegDeleteValueW
RegCreateKeyExW
RegCloseKey
CryptEncrypt
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA

msimg32

GradientFill
AlphaBlend

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

shlwapi

PathAppendW
PathFileExistsW
StrToIntExW

imagehlp

MakeSureDirectoryPathExists

rpcrt4

UuidCreate

imm32

ImmCreateContext
ImmDestroyContext
ImmAssociateContext
ImmGetContext
ImmReleaseContext

gdiplus

GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipDrawImageRectI
GdipCreateBitmapFromStream
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipSaveImageToFile
GdipDisposeImage
GdipCloneImage
GdiplusShutdown
GdiplusStartup
GdipFillEllipse
GdipDrawLines
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipSetPenDashArray
GdipSetPenDashStyle
GdipDeletePen
GdipCreatePen1
GdipCreateSolidFill
GdipDeleteBrush
GdipFree
GdipAlloc
GdipBitmapUnlockBits
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipGraphicsClear
GdipCreateBitmapFromFile

ws2_32

listen
accept
sendto
recvfrom
select
__WSAFDIsSet
WSACleanup
WSAStartup
WSAIoctl
WSASetLastError
socket
setsockopt
ntohs
htons
getsockopt
getsockname
getpeername
connect
closesocket
bind
WSAGetLastError
recv
WSAWaitForMultipleEvents
WSAResetEvent
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
WSACloseEvent
send
inet_pton
ntohl
ioctlsocket
getservbyname
gethostname
htonl

crypt32

CertOpenStore
CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateContext
CryptStringToBinaryW
PFXImportCertStore
CryptDecodeObjectEx
CertAddCertificateContextToStore
CertFreeCertificateChain
CertGetCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CryptQueryObject
CertGetNameStringW
CertFindExtension

iphlpapi

FreeMibTable
GetUnicastIpAddressTable

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 349KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24.7MB - Virtual size: 24.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

384a39fa9500ec80c6b5305d55fc3ac0

Headers

DLL Characteristics

File Characteristics

Imports

winmm

kernel32

user32

gdi32

shell32

ole32

oleaut32

advapi32

msimg32

version

shlwapi

imagehlp

rpcrt4

imm32

gdiplus

ws2_32

crypt32

iphlpapi

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 349KB - Virtual size: 348KB

.data Size: 36KB - Virtual size: 115KB

.rsrc Size: 24.7MB - Virtual size: 24.7MB

.reloc Size: 102KB - Virtual size: 101KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 349KB - Virtual size: 348KB

.data
Size: 36KB - Virtual size: 115KB

.rsrc
Size: 24.7MB - Virtual size: 24.7MB

.reloc
Size: 102KB - Virtual size: 101KB