53feacad686eca649854fea3b9f9bf4b6ee73421fd0b7edb6f81f3d46c31ff4a

Sharing

Copy URL Twitter E-mail

General

Target

53feacad686eca649854fea3b9f9bf4b6ee73421fd0b7edb6f81f3d46c31ff4a
Size

1.4MB
MD5

2e700860e24ca2e5a0f2524ddee6e469
SHA1

64f32f7ff43dc9e691d732e7060ae05a614e0063
SHA256

53feacad686eca649854fea3b9f9bf4b6ee73421fd0b7edb6f81f3d46c31ff4a
SHA512

81a0c41ab2e84b28b705a1be3da8f39407bfc08ee0761473dbc866d931325daecd7387e5cef9f132bfe9a00025e2b89224597f02f0e30b6bc0a9c41c4a6efba2
SSDEEP

6144:lNOCpyutGw+k5/toZaFgs1n8Z/XuVt0VIbr7R1SMMMdrq0QNVGucpT:lNOPuR/toZC1n8ZmrdSMMMFQNVG/p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53feacad686eca649854fea3b9f9bf4b6ee73421fd0b7edb6f81f3d46c31ff4a

Files

53feacad686eca649854fea3b9f9bf4b6ee73421fd0b7edb6f81f3d46c31ff4a
.exe windows:4 windows x86 arch:x86

4083c90b63eb8e731e41af397ca3beea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

zenapp32

ord169
ord168
ord167
ord166
ord165
ord174
ord159
ord158
ord157
ord156
ord275
ord251
ord267
ord273
ord114
ord207
ord225
ord19
ord86
ord170
ord109
ord108
ord105
ord104
ord102
ord103
ord110
ord27
ord145
ord144
ord137
ord208
ord221
ord22
ord252
ord17
ord271
ord255
ord18
ord269
ord216
ord260
ord283
ord243
ord73
ord236
ord237
ord270
ord195
ord226
ord279
ord254
ord246
ord97
ord115
ord240
ord218
ord241
ord234
ord238
ord244
ord242
ord177
ord5
ord193
ord235
ord184
ord247
ord211
ord282
ord265
ord266
ord205
ord263
ord256
ord227
ord258
ord257
ord250
ord248
ord85
ord245

clxwin32

ord113
ord115

calwin32

ord377
ord75

locwin32

ord125
ord34
ord23
ord30
ord10

netwin32

ord1004
ord1002
ord1001
ord1093
ord1031
ord1003
ord2008
ord2040
ord1162

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

kernel32

DeleteCriticalSection
TerminateThread
WaitForSingleObject
GetModuleFileNameA
SetThreadPriority
ResumeThread
EnterCriticalSection
lstrlenA
lstrcmpiA
CreateEventA
InitializeCriticalSection
GetTickCount
LeaveCriticalSection
lstrcmpA
ResetEvent
GetVersionExA
WideCharToMultiByte
GetFileAttributesA
GetCurrentProcess
lstrcpyA
_lread
_llseek
PulseEvent
lstrcatA
GlobalLock
GlobalAlloc
Sleep
LoadLibraryA
WaitForMultipleObjects
UnmapViewOfFile
MapViewOfFile
OpenFile
LocalFree
CreateFileMappingA
WriteFile
CloseHandle
SetEvent
CreateFileA
MultiByteToWideChar
FreeLibrary
GetSystemDirectoryA
GetProcAddress
GetModuleHandleA
SearchPathA
GetProfileIntA
GetTimeFormatA
GetDateFormatA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
GetVersion
LockResource
LoadResource
FindResourceA
InterlockedIncrement
InterlockedDecrement
VirtualProtect
SetLastError
MulDiv
GetCurrentThread
SuspendThread
FormatMessageA
GetProfileStringA
ReadFile
GetLastError
GetProcessVersion
LocalAlloc
TlsAlloc
GlobalHandle
SetFilePointer
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetCPInfo
GetOEMCP
SizeofResource
WritePrivateProfileStringA
SetErrorMode
FlushFileBuffers
SetEndOfFile
DeleteFileA
RtlUnwind
CreateThread
ExitThread
HeapFree
HeapAlloc
GetTimeZoneInformation
GetStartupInfoA
GetCommandLineA
ExitProcess
RaiseException
TerminateProcess
HeapSize
HeapReAlloc
GetACP
UnhandledExceptionFilter
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
FindNextFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetStdHandle
FindFirstFileA
GetDriveTypeA
FindClose
GetLogicalDriveStringsA
TlsFree
lstrcpynA
GlobalReAlloc
GlobalFree
GlobalUnlock
IsBadCodePtr

user32

IsWindowVisible
GetLastActivePopup
GetMessagePos
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
UnhookWindowsHookEx
SetPropA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
GetDlgCtrlID
GetWindowTextLengthA
TrackPopupMenu
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
GetClassInfoA
WinHelpA
GetCapture
IsChild
GetTopWindow
IntersectRect
OffsetRect
EndDeferWindowPos
BeginDeferWindowPos
DeferWindowPos
EqualRect
ScreenToClient
AdjustWindowRectEx
GetFocus
DispatchMessageA
PeekMessageA
MapWindowPoints
SendDlgItemMessageA
IsDlgButtonChecked
IsDialogMessageA
IsWindowEnabled
GetNextDlgTabItem
EnableMenuItem
GetDlgItem
ShowWindow
ModifyMenuA
GetMenuState
GetMenuCheckMarkDimensions
MapDialogRect
PtInRect
GetActiveWindow
CreateDialogIndirectParamA
EndDialog
ClientToScreen
GetWindowDC
TabbedTextOutA
DrawTextA
GrayStringA
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
IsZoomed
PostQuitMessage
ShowOwnedPopups
ValidateRect
TranslateMessage
GetMessageA
GetSysColorBrush
GetClassNameA
WindowFromPoint
GetDCEx
LockWindowUpdate
SetParent
SetMenuDefaultItem
SetForegroundWindow
PostMessageA
MessageBeep
FindWindowA
SetTimer
LoadIconA
DestroyIcon
RegisterWindowMessageA
EnableWindow
SendMessageA
wsprintfA
GetIconInfo
CreateIconIndirect
ExitWindowsEx
FindWindowExA
SetWindowTextA
InvalidateRect
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
LoadBitmapA
MessageBoxA
IsWindow
KillTimer
GetCursorPos
SystemParametersInfoA
GetWindowPlacement
InflateRect
CopyRect
FrameRect
GetWindowLongA
FillRect
SetRect
SetWindowPos
SetWindowLongA
GetAsyncKeyState
ReleaseCapture
SetCapture
SetFocus
GetKeyState
CopyIcon
DrawFocusRect
RegisterClassA
BringWindowToTop
DestroyWindow
BeginPaint
CreateWindowExA
InsertMenuA
GetForegroundWindow
GetWindowRect
EndPaint
SetCursor
GetWindow
SetActiveWindow
UpdateWindow
LoadCursorA
GetDesktopWindow
EnumChildWindows
GetParent
GetWindowTextA
EnumWindows
RegisterClipboardFormatA
GetSysColor
LoadImageA
GetDC
LoadStringA
ReleaseDC
DestroyMenu
CheckMenuItem
CreatePopupMenu
SetMenuItemBitmaps
DefWindowProcA
IsWindowUnicode
CharNextA
ShowCaret
UnregisterClassA
DefDlgProcA
ExcludeUpdateRgn
HideCaret

gdi32

SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
SelectClipRgn
ExcludeClipRect
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetBkMode
RestoreDC
SaveDC
CreateRectRgnIndirect
CreateRectRgn
CreateFontIndirectA
CombineRgn
SetRectRgn
GetTextExtentPointA
DeleteDC
SetBkColor
GetClipBox
Rectangle
CreateICA
GetTextMetricsA
GetStockObject
CreatePatternBrush
CreateDIBitmap
GetDeviceCaps
GetPixel
PatBlt
CreateSolidBrush
SetTextColor
CreateDCA
StretchBlt
Escape
ExtTextOutA
TextOutA
RectVisible
GetMapMode
CreateCompatibleBitmap
SetMapMode
DPtoLP
GetObjectA
CreateBitmap
SelectObject
CreateCompatibleDC
PtVisible
DeleteObject
BitBlt

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
LookupPrivilegeValueA
RegEnumValueA
RegEnumKeyExA
RegQueryValueA
AdjustTokenPrivileges
OpenProcessToken

shell32

DragQueryFileA
DragFinish
SHChangeNotify
ShellExecuteA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
DuplicateIcon
Shell_NotifyIconA

comctl32

ImageList_ReplaceIcon
ImageList_SetBkColor
PropertySheetA
DestroyPropertySheetPage
ord17
ImageList_Destroy
ImageList_Create
CreatePropertySheetPageA

ole32

CoInitialize
CoCreateInstance
CoUninitialize

Sections

.text
Size: 272KB - Virtual size: 271KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4083c90b63eb8e731e41af397ca3beea

Headers

File Characteristics

Imports

zenapp32

clxwin32

calwin32

locwin32

netwin32

version

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

ole32

Sections

.text Size: 272KB - Virtual size: 271KB

.rdata Size: 60KB - Virtual size: 58KB

.data Size: 12KB - Virtual size: 27KB

.rsrc Size: 1.1MB - Virtual size: 1.1MB

.text
Size: 272KB - Virtual size: 271KB

.rdata
Size: 60KB - Virtual size: 58KB

.data
Size: 12KB - Virtual size: 27KB

.rsrc
Size: 1.1MB - Virtual size: 1.1MB