631ce9fe0e585d6906cf1610a05f6a92acf54827ce2a4959fbdc6b64230773b8

Sharing

Copy URL Twitter E-mail

General

Target

631ce9fe0e585d6906cf1610a05f6a92acf54827ce2a4959fbdc6b64230773b8
Size

4.8MB
MD5

3b158a6f5cc0d2c803f9b61f80240fc6
SHA1

cfa2da0f6e28f0b2aeaee0e12a8a8c9408406cb7
SHA256

631ce9fe0e585d6906cf1610a05f6a92acf54827ce2a4959fbdc6b64230773b8
SHA512

67033c2b8d4ce3dc70f31371707c02af023e57faa345b15da1d883de40c7c783f7edbb13c37b0792b66dd4e1ce212f88f642c4e7f3df6d5092774caf280e676e
SSDEEP

98304:ixvhXTq3zYs4PtSY9/QJKOK8Bf0t+JKnEK5b2VU7AqT3w:0XW3+tWJVBf0ttnEK5YqTA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
631ce9fe0e585d6906cf1610a05f6a92acf54827ce2a4959fbdc6b64230773b8

Files

631ce9fe0e585d6906cf1610a05f6a92acf54827ce2a4959fbdc6b64230773b8
.exe windows:4 windows x86 arch:x86

cb0ec9aca24a304b414a7817ea6d4140

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetStdHandle
IsBadCodePtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
GetCPInfo
LCMapStringW
LCMapStringA
GetCommandLineA
GetCommandLineW
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentDirectoryW
GetFileType
GetStdHandle
SetHandleCount
SetFilePointer
HeapSize
VirtualAlloc
VirtualFree
GetEnvironmentVariableA
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
GetVersion
GetStartupInfoW
TerminateProcess
GetSystemTime
GetSystemTimeAsFileTime
RtlUnwind
HeapReAlloc
GetDriveTypeA
SetEndOfFile
CompareStringA
GetACP
GetOEMCP
SetEnvironmentVariableA
InterlockedExchange
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetExitCodeThread
HeapCreate
HeapAlloc
HeapFree
GetLocaleInfoW
GetNumberFormatW
GetFullPathNameW
lstrcpynA
GetProfileStringW
FlushFileBuffers
FindClose
FindNextFileW
FindFirstFileW
CreateProcessW
SetLastError
GetWindowsDirectoryW
GetVersionExA
RemoveDirectoryW
SetFileAttributesW
LoadLibraryA
MulDiv
GetDateFormatW
GetTimeFormatW
GetUserDefaultLCID
EnumDateFormatsW
EnumTimeFormatsW
GetPrivateProfileStringW
WritePrivateProfileStringW
CreateDirectoryW
GetFileAttributesW
GlobalHandle
FreeResource
DeleteFileW
GetFileSize
ReadFile
CopyFileW
WriteFile
WideCharToMultiByte
GetTimeZoneInformation
FormatMessageW
LocalFree
GetLogicalDriveStringsW
GetDriveTypeW
SizeofResource
GlobalUnlock
GlobalFree
GlobalAlloc
GlobalLock
CreateFileW
OutputDebugStringW
GetLocalTime
GetUserDefaultLangID
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
CreateMutexW
lstrcmpW
GetLastError
TerminateThread
CloseHandle
GetModuleHandleA
CompareStringW
lstrcmpiW
FindResourceW
LoadResource
LockResource
GetVersionExW
lstrcpynW
GetFileAttributesA
GetTempPathW
lstrcatW
GetModuleHandleW
FlushInstructionCache
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
FreeLibrary
lstrcpyW
InterlockedIncrement
Sleep
GetCurrentProcess
GetModuleFileNameW
lstrlenW
CreateThread
ExitProcess
OutputDebugStringA
lstrlenA
MultiByteToWideChar
LoadLibraryW
InterlockedDecrement
GetProcAddress
GetStartupInfoA

user32

GetMenuItemCount
CharUpperW
GetFocus
SetCursor
UpdateWindow
SetRectEmpty
SetClipboardData
OpenClipboard
GetClipboardData
CloseClipboard
GetIconInfo
TranslateMessage
EnumWindows
SendMessageTimeoutW
LoadIconW
GetClassInfoExW
SetRect
MessageBoxW
CharLowerW
IsDialogMessageW
SetWindowTextW
IsWindow
SendMessageW
GetWindowRect
GetDlgItem
LoadStringW
GetScrollPos
SetScrollInfo
SetScrollPos
TrackPopupMenu
DestroyMenu
SetWindowsHookExW
GetWindowDC
FillRect
CallNextHookEx
RegisterWindowMessageW
PtInRect
GetDlgCtrlID
CallWindowProcW
BeginPaint
EndPaint
MoveWindow
keybd_event
SetDlgItemTextW
GetKeyState
UnhookWindowsHookEx
EnumChildWindows
FindWindowExW
IsChild
SetParent
CreateDialogIndirectParamW
RedrawWindow
GetDesktopWindow
CreateAcceleratorTableW
InvalidateRgn
EnableWindow
ClientToScreen
DeleteMenu
GetMessagePos
EmptyClipboard
GetWindowPlacement
MapWindowPoints
SystemParametersInfoW
GetWindow
GetParent
GetWindowLongW
SetWindowPos
ScreenToClient
GetClientRect
LoadImageW
GetSystemMetrics
SetClassLongW
PostMessageW
SetWindowLongW
SetTimer
SetMenuItemInfoW
SetMenuDefaultItem
IsZoomed
LoadStringA
ScrollWindowEx
GetScrollInfo
SetForegroundWindow
GetKeyboardState
DestroyIcon
RegisterClassExW
PeekMessageW
GetMessageW
DispatchMessageW
SetCapture
GetCapture
ReleaseCapture
CopyRect
DrawFocusRect
InflateRect
DrawEdge
FrameRect
InvalidateRect
DefWindowProcW
GetSysColor
PostQuitMessage
DestroyWindow
GetActiveWindow
ShowWindow
wsprintfW
CharNextW
KillTimer
InsertMenuW
AppendMenuW
CreatePopupMenu
CheckMenuItem
GetMenuItemInfoW
IsWindowVisible
GetCursorPos
GetSubMenu
SetFocus
GetDC
CreateDialogParamW
CreateWindowExW
DialogBoxParamW
DialogBoxIndirectParamW
EnableMenuItem
GetSystemMenu
TrackPopupMenuEx
GetSysColorBrush
OffsetRect
GetWindowTextW
GetWindowTextLengthW
LoadCursorW
GetClassNameW
ReleaseDC
DrawTextW
EndDialog

gdi32

LPtoDP
OffsetViewportOrgEx
EnumFontFamiliesExW
PatBlt
CreatePatternBrush
CreateBitmap
CreateFontW
AddFontResourceW
GetCurrentObject
SetWindowOrgEx
ExcludeClipRect
RemoveFontResourceW
RemoveFontResourceExW
AddFontResourceExW
DeleteEnhMetaFile
RestoreDC
SetViewportExtEx
SetWindowExtEx
GetViewportExtEx
GetWindowExtEx
SetMapMode
SaveDC
IntersectClipRect
DPtoLP
GetEnhMetaFileHeader
SelectClipRgn
EndDoc
AbortDoc
EndPage
StartPage
ResetDCW
StartDocW
SetPixel
SetStretchBltMode
SetDIBitsToDevice
MoveToEx
LineTo
CreateDIBSection
CreateEnhMetaFileW
CloseEnhMetaFile
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
GetDIBits
OffsetWindowOrgEx
CreateDCW
SetViewportOrgEx
GetClipBox
GetBkColor
Rectangle
DeleteObject
GetObjectW
CreateSolidBrush
SetTextColor
SetBkColor
GetDeviceCaps
SelectObject
CreateFontIndirectW
DeleteDC
ExtTextOutW
CreatePen
GetTextExtentPoint32W
SetBkMode
GetStockObject

winspool.drv

ClosePrinter
OpenPrinterW
GetPrinterW

comdlg32

GetSaveFileNameW
GetOpenFileNameW
ChooseColorW
PageSetupDlgW
PrintDlgW

advapi32

LookupPrivilegeValueW
OpenProcessToken
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
CryptCreateHash
CryptAcquireContextW
CryptDestroyHash
CryptReleaseContext
CryptHashData
CryptGetHashParam
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyW
AdjustTokenPrivileges
RegEnumValueW

shell32

ord155
Shell_NotifyIconW
ord18
ord17
ord16
SHOpenFolderAndSelectItems
DragQueryFileW
ord190
SHGetDesktopFolder
SHGetSpecialFolderPathW
SHGetSpecialFolderLocation
SHFileOperationW
ShellExecuteExW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
ShellExecuteW
SHGetFileInfoW

ole32

CoInitializeSecurity
CoSetProxyBlanket
CoInitialize
CLSIDFromProgID
CoCreateInstance
OleInitialize
OleUninitialize
CLSIDFromString
CoTaskMemFree
StringFromCLSID
CoTaskMemAlloc
OleLockRunning
CoInitializeEx
CreateStreamOnHGlobal

oleaut32

VariantClear
SysAllocStringLen
SysAllocString
SysFreeString
OleCreateFontIndirect
DispCallFunc
LoadRegTypeLi
SysStringLen
SafeArrayDestroy
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
VariantInit

comctl32

ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_Create
ImageList_LoadImageW
InitCommonControlsEx
ImageList_GetImageCount
ImageList_DrawEx
ImageList_SetImageCount
CreateStatusWindowW
ImageList_Draw
ImageList_Replace
ImageList_GetBkColor

gdiplus

GdipDeleteFontFamily
GdipGetImageWidth
GdipGetImageHeight
GdipCreateFontFamilyFromName
GdipSetInterpolationMode
GdipSetCompositingQuality
GdipDrawImageRectI
GdipDeleteGraphics
GdipCreateHICONFromBitmap
GdiplusStartup
GdipDisposeImage
GdipFree
GdipCloneImage
GdipAlloc
GdipDeletePrivateFontCollection
GdipGetFamilyName
GdipCloneFontFamily
GdipGetFontCollectionFamilyList
GdipPrivateAddFontFile
GdipNewPrivateFontCollection
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0

winmm

timeGetTime

Sections

.text
Size: 404KB - Virtual size: 403KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 328KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6.1MB - Virtual size: 6.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cb0ec9aca24a304b414a7817ea6d4140

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

gdiplus

winmm

Sections

.text Size: 404KB - Virtual size: 403KB

.rdata Size: 20KB - Virtual size: 16KB

.data Size: 100KB - Virtual size: 328KB

.rsrc Size: 6.1MB - Virtual size: 6.1MB

.text
Size: 404KB - Virtual size: 403KB

.rdata
Size: 20KB - Virtual size: 16KB

.data
Size: 100KB - Virtual size: 328KB

.rsrc
Size: 6.1MB - Virtual size: 6.1MB