f5e8f9df866fbabfe032625fd9088ad5546bc769e8e7f91d57e733ab1b5616d7

Sharing

Copy URL Twitter E-mail

General

Target

f5e8f9df866fbabfe032625fd9088ad5546bc769e8e7f91d57e733ab1b5616d7
Size

2.2MB
MD5

ed7736181c6465428639e0da18d64a77
SHA1

c62622cbef54f5bab6092dfef3ccec150e5e70bd
SHA256

f5e8f9df866fbabfe032625fd9088ad5546bc769e8e7f91d57e733ab1b5616d7
SHA512

f53196b77ac1995a48f346677f2aaae0c3c36ffbf5485e480c918f394b3c5d11712d3d5279d22f37a740d841cb2f382dc3cba758c45a5edc0c2b4a7ba9c89701
SSDEEP

12288:2T9KWKj6YoPtWhIm+DRaQ5wafBgtjbOWpOQwAsSBAfSVo99Ho9U0/+0DKEezfhPl:2pKLIm+DRajafBgtjSoc2wcXD4YxGNr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5e8f9df866fbabfe032625fd9088ad5546bc769e8e7f91d57e733ab1b5616d7

Files

f5e8f9df866fbabfe032625fd9088ad5546bc769e8e7f91d57e733ab1b5616d7
.exe windows:4 windows x86 arch:x86

9b63d168cfa395ababd4268f423ef99f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sleep
IsBadReadPtr
IsBadCodePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
GetFileType
GetUserDefaultLCID
SetConsoleCtrlHandler
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
InterlockedExchange
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FatalAppExitA
IsBadWritePtr
GetVersionExA
HeapCreate
HeapDestroy
GetEnvironmentVariableA
HeapReAlloc
HeapSize
GetACP
GetLocalTime
GetSystemTime
GetTimeZoneInformation
ExitThread
CreateThread
GetCommandLineA
GetStartupInfoA
RaiseException
TerminateProcess
ExitProcess
RtlUnwind
HeapAlloc
HeapFree
SetFileAttributesA
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileTime
GetFileSize
GetFileAttributesA
GetTickCount
GetShortPathNameA
GetStringTypeExA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
SetErrorMode
CopyFileA
GlobalSize
GetThreadLocale
GetCurrentDirectoryA
WritePrivateProfileStringA
GetPrivateProfileIntA
SizeofResource
GetOEMCP
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalFlags
GetModuleFileNameA
GetCurrentThread
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcmpA
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
CreateEventA
SuspendThread
GetCurrentThreadId
SetThreadPriority
ResumeThread
SetEvent
WaitForSingleObject
CloseHandle
FormatMessageA
LocalFree
GlobalUnlock
GetModuleHandleA
SetLastError
MultiByteToWideChar
WideCharToMultiByte
InterlockedIncrement
GetProfileStringA
GlobalFree
GlobalLock
GlobalAlloc
lstrcpynA
FreeLibrary
VirtualFree
VirtualAlloc
LoadLibraryA
GetProcAddress
MulDiv
InterlockedDecrement
GetPrivateProfileStringA
lstrcmpiA
FreeResource
FindResourceA
LoadResource
LockResource
GetCPInfo
lstrlenW
lstrlenA
GetVersion
EnumSystemLocalesA

user32

IsRectEmpty
InvertRect
CharUpperA
RegisterClipboardFormatA
PostThreadMessageA
LockWindowUpdate
GetDCEx
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
LoadMenuA
ReleaseCapture
TranslateAcceleratorA
LoadAcceleratorsA
LoadCursorA
GetClassNameA
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
PostQuitMessage
wvsprintfA
EndDialog
CreateDialogIndirectParamA
LoadStringA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
MapWindowPoints
GetFocus
SetActiveWindow
SetFocus
AdjustWindowRectEx
EqualRect
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
WinHelpA
wsprintfA
SetParent
RegisterClassA
GetMenu
TrackPopupMenu
SetWindowPlacement
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
RegisterWindowMessageA
GetWindowPlacement
DeferWindowPos
DefWindowProcA
GetCapture
GetDialogBaseUnits
KillTimer
SetTimer
SetRectEmpty
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
SetWindowsHookExA
IntersectRect
EndPaint
BeginPaint
GetMenuItemInfoA
GetSysColor
SystemParametersInfoA
DestroyIcon
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
GetWindowDC
ScreenToClient
OemToCharA
CharToOemA
DestroyMenu
UpdateWindow
GetDlgCtrlID
SetWindowPos
SetWindowLongA
SetClassLongA
GetCursorPos
IsWindow
PtInRect
MessageBeep
GetNextDlgGroupItem
CopyAcceleratorTableA
CharNextA
GetWindowThreadProcessId
GetClassInfoA
WaitMessage
CallWindowProcA
LoadIconA
IsIconic
GetSystemMenu
DrawIcon
MessageBoxA
GetWindowLongA
WindowFromPoint
GetParent
GetNextDlgTabItem
GetActiveWindow
InvalidateRect
ClientToScreen
GetClientRect
GetWindowRect
SendMessageA
DrawFocusRect
DefDlgProcA
IsWindowUnicode
DrawIconEx
DrawTextA
GetSystemMetrics
SetRect
CopyRect
FillRect
GetSysColorBrush
LoadBitmapA
DrawEdge
TabbedTextOutA
GrayStringA
CreateMenu
CreatePopupMenu
DeleteMenu
AppendMenuA
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMenuStringA
GetSubMenu
InsertMenuA
ModifyMenuA
RemoveMenu
GetDC
ReleaseDC
GetDesktopWindow
EnableWindow
DestroyCursor
IsMenu
SetCursor
PostMessageA
CreateIconIndirect
GetIconInfo
LoadImageA
IsChild
SetCapture
DrawStateA
FrameRect
OffsetRect
InflateRect
SendDlgItemMessageA

gdi32

PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
GetClipRgn
CreateRectRgn
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
GetViewportExtEx
GetWindowExtEx
SetArcDirection
CreateDIBPatternBrushPt
GetMapMode
SetRectRgn
CombineRgn
DPtoLP
StretchDIBits
GetCharWidthA
GetDCOrgEx
GetTextMetricsA
GetTextColor
GetBkColor
LPtoDP
CopyMetaFileA
ArcTo
GetCurrentPositionEx
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
LineTo
MoveToEx
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SelectClipRgn
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SelectPalette
RestoreDC
SaveDC
ExtCreatePen
GetTextExtentPoint32W
CreatePatternBrush
CreateDCA
SetWindowOrgEx
EndDoc
AbortDoc
EndPage
StartPage
StartDocA
CreateFontA
CreateBitmap
SetBkColor
SetTextColor
GetStockObject
Rectangle
CreateHatchBrush
Escape
GetTextExtentPoint32A
ExtTextOutA
TextOutA
SetPixel
GetPixel
PatBlt
Ellipse
RectVisible
PtVisible
GetBkMode
GetObjectA
CreateDIBSection
SelectObject
BitBlt
DeleteObject
DeleteDC
GetDeviceCaps
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontIndirectA
GetTextExtentPointA
CreateDIBitmap
CreateSolidBrush
CreatePen
CreateRectRgnIndirect

comdlg32

GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegCloseKey
RegOpenKeyExA
RegOpenKeyA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegSetValueA
RegQueryValueA
RegEnumKeyA
RegCreateKeyA
RegQueryValueExA

shell32

SHGetFileInfoA
DragQueryFileA
DragFinish
DragAcceptFiles
ShellExecuteExA
ExtractIconA

comctl32

ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_GetIconSize
ImageList_GetIcon
ImageList_Draw
_TrackMouseEvent
ord13
ord14
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
ImageList_Merge
ImageList_Read
ImageList_Write
ImageList_GetImageCount
ord17

oledlg

ord8

ole32

OleUninitialize
OleInitialize
CoDisconnectObject
ReleaseStgMedium
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoFreeUnusedLibraries
OleDuplicateData
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoInitialize
CoCreateInstance
OleRun
CoRegisterMessageFilter
CoRegisterClassObject
CoRevokeClassObject
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
CreateStreamOnHGlobal
CreateBindCtx

olepro32

ord253

oleaut32

VariantInit
SysFreeString
CreateErrorInfo
VariantCopy
VariantClear
SysAllocString
VariantChangeType
SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VarCyFromStr
VarBstrFromCy
VarDateFromStr
VarBstrFromDate
SafeArrayCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
SysReAllocStringLen
SysStringLen
LoadTypeLi
GetErrorInfo
SetErrorInfo
SafeArrayDestroyData

Sections

.text
Size: 484KB - Virtual size: 483KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 328KB - Virtual size: 345KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9b63d168cfa395ababd4268f423ef99f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 484KB - Virtual size: 483KB

.rdata Size: 100KB - Virtual size: 96KB

.data Size: 328KB - Virtual size: 345KB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.text
Size: 484KB - Virtual size: 483KB

.rdata
Size: 100KB - Virtual size: 96KB

.data
Size: 328KB - Virtual size: 345KB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB