b0061dd383d18905444302a93b6b82ada1128920757b672ab633abd12d5c77cb

Sharing

Copy URL Twitter E-mail

General

Target

b0061dd383d18905444302a93b6b82ada1128920757b672ab633abd12d5c77cb
Size

368KB
MD5

a56e6e6bf344818f793b3722026c4d23
SHA1

e51e43eadaaa66db709b66710e222fa04f2acd29
SHA256

b0061dd383d18905444302a93b6b82ada1128920757b672ab633abd12d5c77cb
SHA512

758db5c4332b289b85dda2f28de306a5d128170eb7fa76957d746b4a98cb936323406cc3e8e1b309c634580f5e2921550103e2f88b4b3fbdc674d8dfb32cce39
SSDEEP

3072:DOUtG/Or5Ap/nhM2e0x1/ouQUOtXRch2M6abU+QzFtuotz9V5Y6g2C4WhjGNVa7S:DOUtwOr5e/+2e41F+vz9V5Yb2VM7o/p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0061dd383d18905444302a93b6b82ada1128920757b672ab633abd12d5c77cb

Files

b0061dd383d18905444302a93b6b82ada1128920757b672ab633abd12d5c77cb
.exe windows:4 windows x86 arch:x86

565bdbb10f62933683b8c76d5cf58d00

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetStdHandle
IsBadCodePtr
GetStringTypeW
GetStringTypeA
LCMapStringW
SetUnhandledExceptionFilter
IsBadWritePtr
GetVersionExA
GetEnvironmentVariableA
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetACP
HeapSize
RaiseException
TerminateProcess
RtlUnwind
LCMapStringA
LoadLibraryA
FreeLibrary
CreateDirectoryA
GetTickCount
Sleep
WriteFile
SetFilePointer
GetFileSize
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetUserDefaultLCID
WritePrivateProfileStringA
GetModuleFileNameA
GetPrivateProfileStringA
GetProcAddress
IsBadReadPtr
HeapReAlloc
ExitProcess
GetModuleHandleA
GetLocalTime
lstrcmpA
lstrlenA
DeleteCriticalSection
EnterCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
GetLastError
GetExitCodeThread
GetThreadId
SuspendThread
ResumeThread
GetCurrentThread
OpenThread
GetConsoleScreenBufferInfo
FreeConsole
WriteConsoleA
SetConsoleTextAttribute
SetConsoleTitleA
AllocConsole
GetStdHandle
SetEvent
ResetEvent
OpenEventA
CreateEventA
GetCurrentThreadId
OutputDebugStringA
ReleaseMutex
CreateMutexA
VirtualFree
VirtualAlloc
lstrcmpiW
lstrcmpW
lstrlenW
HeapCreate
HeapDestroy
RtlZeroMemory
InterlockedDecrement
InterlockedIncrement
InterlockedExchangeAdd
RtlMoveMemory
InitializeCriticalSection
HeapFree
HeapAlloc
GetProcessHeap
GetCommandLineA
GetStartupInfoA
ReadFile
GetFileSizeEx
CreateFileA
MultiByteToWideChar
WaitForSingleObject
CreateThread
GetComputerNameExA
SetDllDirectoryA
WideCharToMultiByte
CloseHandle
lstrcpynA
OpenProcess
Module32First
CreateToolhelp32Snapshot
UnhandledExceptionFilter
GetOEMCP
GetCPInfo
FlushFileBuffers
GetCurrentProcess
SetErrorMode
GetProcessVersion
FindResourceA
LoadResource
LockResource
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
SetLastError
lstrcpyA
lstrcatA
GlobalFlags
MulDiv
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalFree
LocalAlloc
GlobalDeleteAtom
lstrcmpiA

ws2_32

closesocket
__WSAFDIsSet
select
connect
ioctlsocket
htons
socket
inet_addr
WSACleanup
gethostname
WSAStartup
WSAGetLastError

shlwapi

PathRemoveBackslashA
PathRemoveFileSpecA
StrToIntExW
StrToIntW
PathFileExistsA
PathFindFileNameA

ole32

OleUninitialize
OleInitialize
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoFreeUnusedLibraries
CoInitialize
CoUninitialize
OleRun
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter

user32

PostThreadMessageA
UnregisterClassA
wsprintfA
DestroyMenu
IsGUIThread
IsWindow
SendMessageTimeoutA
LoadStringA
GetSysColorBrush
LoadCursorA
LoadIconA
UpdateWindow
MapWindowPoints
GetSysColor
SetActiveWindow
CreateDialogIndirectParamA
EndDialog
MessageBoxA
AdjustWindowRectEx
GetClientRect
CopyRect
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetSubMenu
GetMenuItemID
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
PostQuitMessage
PostMessageA
SendMessageA
SetCursor
EnableWindow
GetWindowLongA
IsWindowEnabled
GetLastActivePopup
GetParent
SetWindowsHookExA
GetCursorPos
PeekMessageA
IsWindowVisible
ValidateRect
CallNextHookEx
GetKeyState
GetActiveWindow
DispatchMessageA
TranslateMessage
GetMessageA
GetNextDlgTabItem
GetFocus
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
RegisterClipboardFormatA
GetClassNameA
PtInRect
GetWindowRect
GetDlgCtrlID
GetWindow
ClientToScreen
SetWindowTextA
GetWindowTextA
UnhookWindowsHookEx
GetMenuItemCount
GetDC
ReleaseDC
TabbedTextOutA
DrawTextA
GrayStringA
GetDlgItem
SendDlgItemMessageA
IsDialogMessageA
SetWindowLongA
SetWindowPos
ShowWindow
SetFocus
GetSystemMetrics
GetWindowPlacement
IsIconic
SystemParametersInfoA
RegisterWindowMessageA
SetForegroundWindow

gdi32

GetObjectA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetDeviceCaps
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetTextColor
SetBkColor
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
DeleteObject
CreateBitmap

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegOpenKeyExA

comctl32

ord17

oledlg

ord8

oleaut32

VariantTimeToSystemTime
VariantChangeType
LoadTypeLi
LHashValOfNameSys
RegisterTypeLi
VariantCopy
SafeArrayCreate
SysAllocString
VariantClear
SafeArrayDestroy

Sections

.text
Size: 308KB - Virtual size: 307KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

565bdbb10f62933683b8c76d5cf58d00

Headers

File Characteristics

Imports

kernel32

ws2_32

shlwapi

ole32

user32

gdi32

winspool.drv

advapi32

comctl32

oledlg

oleaut32

Sections

.text Size: 308KB - Virtual size: 307KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 28KB - Virtual size: 87KB

.rsrc Size: 4KB - Virtual size: 780B

.text
Size: 308KB - Virtual size: 307KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 28KB - Virtual size: 87KB

.rsrc
Size: 4KB - Virtual size: 780B