df8066e6a1d152e013e36d9176911f53a36e8bdacd425642222e44451e21ab34

Sharing

Copy URL Twitter E-mail

General

Target

df8066e6a1d152e013e36d9176911f53a36e8bdacd425642222e44451e21ab34
Size

15.8MB
MD5

eefc34b027308db8f9a680526db68dc6
SHA1

76b40fba9bb8e9993adbfbaf5e177cd00bfa4c8f
SHA256

df8066e6a1d152e013e36d9176911f53a36e8bdacd425642222e44451e21ab34
SHA512

78695aebb4e049a33ea03ea53322f4be98b59d5275004fd0f2775f621d4dc403aff4764a70195eda1209026cf65283f66ed928c3fa84b1a31ee063dab3f182ce
SSDEEP

393216:jr9zJUZaey5jjMzzjijjqBvBvBOAJhh+U8U8UJxcU8U8UJxIjjrzzjVjjOBvBvBB:jrdM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df8066e6a1d152e013e36d9176911f53a36e8bdacd425642222e44451e21ab34

Files

df8066e6a1d152e013e36d9176911f53a36e8bdacd425642222e44451e21ab34
.exe windows:4 windows x86 arch:x86

a002d4fe310c8a72b3ccf07e03bcb022

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvfw32

DrawDibDraw

avifil32

AVIStreamInfoA
AVIStreamGetFrame

iphlpapi

GetAdaptersInfo

winmm

waveOutGetNumDevs
midiStreamRestart
midiStreamClose
midiOutReset
midiStreamStop
midiStreamOut
midiOutPrepareHeader
midiStreamProperty
midiStreamOpen
midiOutUnprepareHeader
waveOutWrite
waveOutPrepareHeader
waveOutUnprepareHeader
PlaySoundA
waveOutClose
waveOutReset
waveOutPause
waveOutOpen

ws2_32

sendto
recvfrom
ioctlsocket
connect
recv
listen
getpeername
setsockopt
inet_addr
__WSAFDIsSet
shutdown
getsockname
ntohs
bind
WSASetLastError
WSAGetLastError
socket
htonl
inet_ntoa
htons
WSAAsyncSelect
closesocket
send
select
WSACleanup
WSAStartup
gethostname
gethostbyname
accept

kernel32

GetEnvironmentStringsW
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetEnvironmentStrings
CompareStringW
SetEnvironmentVariableA
InterlockedExchange
RtlUnwind
FileTimeToLocalFileTime
FileTimeToSystemTime
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
GetFileTime
GetFileSize
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
LocalFree
LocalAlloc
GetCurrentThread
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
DuplicateHandle
lstrcmpA
GetVersion
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
SuspendThread
SetStdHandle
SetThreadPriority
lstrcpynA
SetLastError
InterlockedIncrement
InterlockedDecrement
GetStartupInfoA
UnmapViewOfFile
LoadLibraryExA
GetWindowsDirectoryA
Beep
QueryPerformanceFrequency
QueryPerformanceCounter
IsDBCSLeadByte
SystemTimeToFileTime
GetLocalTime
DosDateTimeToFileTime
SetFileTime
GetSystemTime
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetFileType
GetStdHandle
SetHandleCount
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetTimeZoneInformation
GetACP
HeapSize
TerminateProcess
ExitThread
RaiseException
CreateSemaphoreA
ResumeThread
ReleaseSemaphore
EnterCriticalSection
LeaveCriticalSection
GetProfileStringA
WriteFile
WaitForMultipleObjects
CreateFileA
SetEvent
FindResourceA
LoadResource
LockResource
ReadFile
lstrlenW
GetModuleFileNameA
WideCharToMultiByte
MultiByteToWideChar
GetCurrentThreadId
ExitProcess
GlobalSize
GlobalFree
DeleteCriticalSection
InitializeCriticalSection
lstrcatA
lstrlenA
WinExec
lstrcpyA
FindNextFileA
GlobalReAlloc
HeapFree
HeapReAlloc
GetProcessHeap
HeapAlloc
GetUserDefaultLCID
GetFullPathNameA
FreeLibrary
LoadLibraryA
GetLastError
GetVersionExA
WritePrivateProfileStringA
CreateThread
CreateEventA
Sleep
ExpandEnvironmentStringsA
GlobalAlloc
GlobalLock
GlobalUnlock
FindFirstFileA
FindClose
SetFileAttributesA
GetFileAttributesA
CreateDirectoryA
SetCurrentDirectoryA
GetVolumeInformationA
GetModuleHandleA
GetProcAddress
MulDiv
GetCommandLineA
GetTickCount
CreateProcessA
WaitForSingleObject
CloseHandle
CompareStringA

user32

SetMenuItemBitmaps
CheckMenuItem
GetNextDlgTabItem
SetWindowTextA
CharUpperA
LoadIconA
TranslateMessage
DrawFrameControl
DrawEdge
DrawFocusRect
WindowFromPoint
GetMessageA
DispatchMessageA
SetRectEmpty
RegisterClipboardFormatA
CreateIconFromResourceEx
CreateIconFromResource
DrawIconEx
CreatePopupMenu
AppendMenuA
ModifyMenuA
CreateMenu
CreateAcceleratorTableA
GetDlgCtrlID
GetSubMenu
EnableMenuItem
ClientToScreen
EnumDisplaySettingsA
LoadImageA
SystemParametersInfoA
ShowWindow
IsWindowEnabled
TranslateAcceleratorA
GetKeyState
CopyAcceleratorTableA
PostQuitMessage
IsZoomed
GetClassInfoA
DefWindowProcA
GetSystemMenu
DeleteMenu
GetMenu
SetMenu
PeekMessageA
IsIconic
SetFocus
GetActiveWindow
GetWindow
DestroyAcceleratorTable
SetWindowRgn
GetMessagePos
ScreenToClient
ChildWindowFromPointEx
CopyRect
LoadBitmapA
WinHelpA
KillTimer
SetTimer
GetMenuState
GetCapture
SetCapture
GetScrollRange
SetScrollRange
SetScrollPos
SetRect
InflateRect
IntersectRect
DestroyIcon
PtInRect
OffsetRect
IsWindowVisible
EnableWindow
RedrawWindow
GetWindowLongA
SetWindowLongA
GetSysColor
SetActiveWindow
SetCursorPos
LoadCursorA
SetCursor
GetDC
FillRect
InvertRect
IsRectEmpty
ScrollDC
ReleaseDC
IsChild
DestroyMenu
AdjustWindowRectEx
GetWindowRect
EqualRect
UpdateWindow
ValidateRect
InvalidateRect
GetClientRect
GetFocus
GetParent
GetTopWindow
PostMessageA
IsWindow
SetParent
DestroyCursor
SendMessageA
SetWindowPos
MessageBoxA
GetCursorPos
GetSystemMetrics
EmptyClipboard
SetClipboardData
OpenClipboard
GetClipboardData
CloseClipboard
wsprintfA
WaitForInputIdle
GetMenuCheckMarkDimensions
GetSysColorBrush
UnregisterClassA
LoadStringA
GetClassNameA
MoveWindow
IsDialogMessageA
ScrollWindowEx
SendDlgItemMessageA
GetScrollPos
EndDialog
CreateDialogIndirectParamA
GetWindowDC
GetWindowTextLengthA
FindWindowExA
DrawStateA
FrameRect
CreateIconIndirect
GetIconInfo
CopyIcon
GetDesktopWindow
GetMenuItemID
MapWindowPoints
RegisterClassA
WaitMessage
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
SetWindowsHookExA
GetMenuItemCount
GetDlgItem
GetWindowTextA
SetForegroundWindow
CallNextHookEx
UnhookWindowsHookEx
GetWindowPlacement
RegisterWindowMessageA
GetForegroundWindow
GetLastActivePopup
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
CreateWindowExA
ReleaseCapture
DestroyWindow

gdi32

LPtoDP
DPtoLP
GetCurrentObject
RoundRect
Pie
Chord
BitBlt
GetPixel
CreateCompatibleDC
SetPixelV
Ellipse
Arc
Polygon
GetTextExtentPoint32A
GetDeviceCaps
GetViewportExtEx
StartPage
StartDocA
DeleteDC
EndDoc
EndPage
GetObjectA
GetStockObject
CreateFontIndirectA
CreateSolidBrush
FillRgn
CreateRectRgn
CombineRgn
PatBlt
CreatePen
SelectObject
CreatePatternBrush
CreateBitmap
CreateHatchBrush
CreateBrushIndirect
CreateDCA
CreateCompatibleBitmap
GetPolyFillMode
GetStretchBltMode
GetROP2
GetBkColor
GetBkMode
GetTextColor
CreateRoundRectRgn
CreateEllipticRgn
PathToRegion
EndPath
BeginPath
GetWindowOrgEx
GetViewportOrgEx
GetWindowExtEx
GetDIBits
RealizePalette
SelectPalette
StretchBlt
CreatePalette
GetSystemPaletteEntries
CreateDIBitmap
DeleteObject
SelectClipRgn
CreatePolygonRgn
GetClipRgn
SetStretchBltMode
ExtCreateRegion
SetPixel
CreateDIBSection
CreateRectRgnIndirect
SetBkColor
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
OffsetViewportOrgEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
SetMapMode
SetTextColor
RestoreDC
SaveDC
GetNearestPaletteIndex
FrameRgn
OffsetRgn
GetTextMetricsA
LineTo
MoveToEx
SetBkMode
SetDIBitsToDevice
SetPolyFillMode
SetROP2
SetWindowOrgEx
ExcludeClipRect
ExtSelectClipRgn
Rectangle

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

comdlg32

GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA
ChooseColorA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegQueryValueA
RegCreateKeyExA

shell32

Shell_NotifyIconA
ShellExecuteA

ole32

CLSIDFromString
OleUninitialize
OleInitialize
CoInitialize
CoUninitialize
CLSIDFromProgID
CoCreateInstance
OleRun

oleaut32

UnRegisterTypeLi
LoadTypeLi
LHashValOfNameSys
RegisterTypeLi
SafeArrayPutElement
SafeArrayCreate
SafeArrayDestroy
SysAllocString
VariantInit
VariantCopyInd
SafeArrayGetElement
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
VariantChangeType
VariantCopy
VariantClear

odbc32

ord48
ord49
ord20
ord17
ord59
ord8
ord44
ord46
ord68
ord43
ord41
ord2
ord1
ord23
ord50
ord45
ord51
ord15
ord9
ord14
ord11
ord10
ord3
ord19
ord72
ord12
ord18
ord13
ord61
ord16
ord5
ord4

comctl32

ord17
ImageList_GetIcon
ImageList_Duplicate
ImageList_GetImageInfo
ImageList_GetImageCount
_TrackMouseEvent
ImageList_Destroy
ImageList_Read

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12.5MB - Virtual size: 12.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 156KB - Virtual size: 524KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a002d4fe310c8a72b3ccf07e03bcb022

Headers

File Characteristics

Imports

msvfw32

avifil32

iphlpapi

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

odbc32

comctl32

Sections

.text Size: 3.2MB - Virtual size: 3.2MB

.rdata Size: 12.5MB - Virtual size: 12.5MB

.data Size: 156KB - Virtual size: 524KB

.rsrc Size: 32KB - Virtual size: 28KB

.text
Size: 3.2MB - Virtual size: 3.2MB

.rdata
Size: 12.5MB - Virtual size: 12.5MB

.data
Size: 156KB - Virtual size: 524KB

.rsrc
Size: 32KB - Virtual size: 28KB