616766800cf2c176b89b6e1c67aac278e39ed771c35e559c6f55ef1ae1c32e05

Sharing

Copy URL Twitter E-mail

General

Target

616766800cf2c176b89b6e1c67aac278e39ed771c35e559c6f55ef1ae1c32e05
Size

12.0MB
MD5

a6ba683c6a67353417dbf01e236749f1
SHA1

2959e46007b8eeb3a02f36349ea3a66d3e6871b0
SHA256

616766800cf2c176b89b6e1c67aac278e39ed771c35e559c6f55ef1ae1c32e05
SHA512

530aa4f828fc32e5449a200a0f93e0b5c82855c97c2a982d701a26dbe7259620d2ffe98d996a43c44ef00a9fff94051c5354f82116e4a575a77d7858588f8540
SSDEEP

196608:HxgEZWu+z5rnWjt7jBuq4dQLZ0SKGbwMCWp4quui5/gyQm4e6yZZJMLjhoj+aDoH:HxgEZW95rot7AqpLrbfHTi2LwNZZJNSh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
616766800cf2c176b89b6e1c67aac278e39ed771c35e559c6f55ef1ae1c32e05

Files

616766800cf2c176b89b6e1c67aac278e39ed771c35e559c6f55ef1ae1c32e05
.exe windows:4 windows x86 arch:x86

a0041838bb73c81b8537b07c1a73302e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
HeapReAlloc
GetStartupInfoA
GetCommandLineA
RaiseException
CreateThread
ExitThread
HeapSize
GetACP
GetTimeZoneInformation
GetSystemTime
GetLocalTime
FatalAppExitA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
HeapFree
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetConsoleCtrlHandler
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
TerminateProcess
ExitProcess
RtlUnwind
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentDirectoryA
GetPrivateProfileStringA
GetPrivateProfileIntA
SetErrorMode
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileTime
GetFileSize
GetOEMCP
GetCPInfo
GetProcessVersion
GetCurrentThread
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GlobalAlloc
GlobalFlags
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
DuplicateHandle
MulDiv
SetLastError
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetProcAddress
GlobalLock
GlobalUnlock
GlobalFree
FormatMessageA
LocalFree
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
LoadResource
LockResource
GetModuleHandleA
FindResourceA
SizeofResource
lstrlenA
lstrcmpA
Sleep
WritePrivateProfileStringA
CreateProcessA
CreateFileA
ReadFile
WriteFile
GetTempPathA
WaitForSingleObject
CloseHandle
GetModuleFileNameA
GetSystemDirectoryA
CopyFileA
FindFirstFileA
SetFileAttributesA
DeleteFileA
FindNextFileA
FindClose
RemoveDirectoryA
CreateDirectoryA
GetFileAttributesA
GetLastError
GetWindowsDirectoryA
LCMapStringA
MultiByteToWideChar

user32

ClientToScreen
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
DestroyMenu
InflateRect
GetCursorPos
ValidateRect
TranslateMessage
GetMessageA
GetClassNameA
PtInRect
GetDesktopWindow
GetDialogBaseUnits
PostQuitMessage
LoadCursorA
GetSysColorBrush
ShowOwnedPopups
SetCursor
InsertMenuA
DeleteMenu
GetMenuStringA
MoveWindow
IsDialogMessageA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
PostMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
wvsprintfA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
GetKeyState
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
SetWindowTextA
SendMessageA
MessageBoxA
LoadStringA
CharUpperA
GetSystemMetrics
GetDlgItem
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
OemToCharA
CharToOemA
RedrawWindow
InvalidateRect
GrayStringA
DrawTextA
TabbedTextOutA
IsWindow
GetSysColor
LoadIconA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
WinHelpA
ShowWindow
EnableWindow
GetClientRect
IsIconic
GetSystemMenu
AppendMenuA
DrawIcon
GetDlgCtrlID

gdi32

SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetCurrentPositionEx
ArcTo
SetArcDirection
PolyDraw
PtVisible
PolylineTo
SetColorAdjustment
PolyBezierTo
DeleteObject
OffsetViewportOrgEx
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreatePen
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreatePatternBrush
CreateDIBPatternBrushPt
PatBlt
CreateRectRgnIndirect
GetMapMode
SetRectRgn
CombineRgn
CreateFontIndirectA
DPtoLP
GetTextExtentPoint32A
GetTextMetricsA
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SelectPalette
GetStockObject
SelectObject
RestoreDC
SaveDC
StartDocA
DeleteDC
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
Escape
ExtTextOutA
TextOutA
BitBlt
GetClipRgn
CreateCompatibleBitmap
CreateCompatibleDC
CreateRectRgn
RectVisible

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCreateKeyExA
CheckTokenMembership
AllocateAndInitializeSid
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegFlushKey
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyA
RegSetValueExA
FreeSid
RegDeleteValueA
RegDeleteKeyA

shell32

DragAcceptFiles
SHFileOperationA
ShellExecuteExA
SHGetMalloc
SHGetDesktopFolder
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetFileInfoA

comctl32

ord17
ord13
ord14
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
ImageList_Merge
ImageList_Read
ImageList_Write

ole32

CoCreateGuid

rpcrt4

UuidToStringA
RpcStringFreeA

Sections

.text
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a0041838bb73c81b8537b07c1a73302e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

ole32

rpcrt4

Sections

.text Size: 196KB - Virtual size: 195KB

.rdata Size: 48KB - Virtual size: 44KB

.data Size: 20KB - Virtual size: 31KB

.rsrc Size: 40KB - Virtual size: 37KB

.text
Size: 196KB - Virtual size: 195KB

.rdata
Size: 48KB - Virtual size: 44KB

.data
Size: 20KB - Virtual size: 31KB

.rsrc
Size: 40KB - Virtual size: 37KB