82fadc2e5045ad789f50f4769a4f34ed1ac74ee612364e492933c7729f77dfa1

Sharing

Copy URL Twitter E-mail

General

Target

82fadc2e5045ad789f50f4769a4f34ed1ac74ee612364e492933c7729f77dfa1
Size

340KB
MD5

726b002aa05398a9ea983833008f41ed
SHA1

d9f9e0c13ae959b5da105398e1883484bea7c2b8
SHA256

82fadc2e5045ad789f50f4769a4f34ed1ac74ee612364e492933c7729f77dfa1
SHA512

a2d37d132b9461b2626eea60121288b4ae6a1869a8af0171e62af3d63c68d526ef42dc21103c0d625cf4aba74abacd5f3d49e4d2b6612c94fc7115e236fb343e
SSDEEP

6144:dpSHoMmJhGzSZJ/Gia3fkBBQ9kRD7JtOHK/Fvv4YrZ:aBAMz6BuKQs1tD/h4A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82fadc2e5045ad789f50f4769a4f34ed1ac74ee612364e492933c7729f77dfa1

Files

82fadc2e5045ad789f50f4769a4f34ed1ac74ee612364e492933c7729f77dfa1
.exe windows:4 windows x86 arch:x86

af837e03850dc6ff78e70817b08a3604

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
lstrcmpiW
CreateMutexW
HeapDestroy
TerminateThread
GetUserDefaultLangID
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetStartupInfoW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetModuleHandleA
GetFileAttributesW
Sleep
GetTimeZoneInformation
lstrcpynW
GetLogicalDriveStringsW
GetDriveTypeW
RemoveDirectoryW
lstrcatW
CreateDirectoryW
SetFileAttributesW
InitializeCriticalSection
DeleteCriticalSection
lstrcmpW
GlobalHandle
FreeResource
DeleteFileW
CopyFileW
GetTempPathW
CreateFileW
WideCharToMultiByte
WriteFile
CloseHandle
GetModuleFileNameW
GetCurrentProcess
FlushInstructionCache
lstrlenA
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
GetCurrentThreadId
LoadLibraryW
GetProcAddress
OutputDebugStringW
GetTimeFormatW
GetUserDefaultLCID
EnumTimeFormatsW
SystemTimeToFileTime
FileTimeToSystemTime
FindResourceW
SizeofResource
LoadResource
LockResource
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
GetLocalTime
lstrcpyW
GetLocaleInfoW
lstrlenW
CreateThread
InterlockedExchange

user32

IsWindowVisible
SetWindowTextW
IsChild
IsDialogMessageW
CallWindowProcW
GetWindowLongW
SetWindowLongW
FindWindowExW
EnumChildWindows
CopyRect
FillRect
GetParent
CharLowerW
GetWindowTextW
CreateWindowExW
ShowWindow
GetWindowRect
ScreenToClient
GetClientRect
SetWindowPos
GetFocus
DefWindowProcW
GetDlgItem
SendMessageW
GetActiveWindow
SetParent
DestroyWindow
PostQuitMessage
KillTimer
SetTimer
CreateDialogParamW
DialogBoxParamW
MapWindowPoints
SystemParametersInfoW
GetWindow
CreateDialogIndirectParamW
RegisterClassExW
LoadCursorW
GetClassInfoExW
RegisterWindowMessageW
LoadImageW
GetWindowTextLengthW
CharNextW
LoadStringW
wsprintfW
MessageBoxW
MessageBoxA
CreateAcceleratorTableW
ReleaseCapture
SetCapture
InvalidateRect
InvalidateRgn
GetSysColor
SetFocus
ReleaseDC
GetDC
EndPaint
BeginPaint
IsWindow
RedrawWindow
GetClassNameW
SetMenuItemBitmaps
DrawIconEx
CopyImage
CallNextHookEx
SetWindowsHookExW
TrackPopupMenuEx
UnhookWindowsHookEx
GetMessagePos
DestroyMenu
GetMenuItemCount
GetMenuItemInfoW
RegisterClassW
GetWindowPlacement
SetCursor
GetIconInfo
CreateIconIndirect
GetSubMenu
DrawAnimatedRects
DestroyIcon
PeekMessageW
PostMessageW
UpdateWindow
LoadIconW
LoadAcceleratorsW
GetMessageW
TranslateMessage
DispatchMessageW
SendMessageTimeoutW
FindWindowW
SetMenuItemInfoW
SetActiveWindow
CheckMenuItem
SetRect
MoveWindow
SetForegroundWindow
InsertMenuW
CreatePopupMenu
AppendMenuW
ClientToScreen
TrackPopupMenu
SendMessageA
SetDlgItemTextW
PtInRect
GetCursorPos
UnhookWinEvent
GetSystemMetrics
EnableWindow
EnumWindows
EndDialog
GetDesktopWindow

gdi32

SaveDC
SetGraphicsMode
RestoreDC
GetPixel
SetPixel
EnumFontsW
CreateBitmap
GetDeviceCaps
GetStockObject
CreateFontIndirectW
BitBlt
CreateDIBSection
GetObjectW
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteObject
DeleteDC

comdlg32

ChooseColorW
GetOpenFileNameW

advapi32

RegDeleteKeyW
RegSetValueExW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
CryptCreateHash
CryptAcquireContextW
CryptDestroyHash
RegOpenKeyW
RegQueryValueExW
RegDeleteValueW
CryptGetHashParam
CryptHashData
CryptReleaseContext

shell32

ord190
ord18
ord17
ord16
ord155
SHAppBarMessage
Shell_NotifyIconW
DragQueryFileW
DragFinish
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetSpecialFolderPathW
ShellExecuteW
ShellExecuteExW
SHGetDesktopFolder

ole32

CreateStreamOnHGlobal
OleInitialize
OleUninitialize
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoTaskMemFree
StringFromCLSID
CoTaskMemAlloc
OleLockRunning
CoUninitialize

oleaut32

OleCreateFontIndirect
SysStringLen
LoadRegTypeLi
DispCallFunc
SafeArrayDestroy
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocString
VariantClear
SysAllocStringLen
SysFreeString

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
_XcptFilter
_exit
_onexit
__dllonexit
wcscpy
_wsetlocale
_wcsicmp
mktime
fwrite
getc
putc
exit
wcschr
wcscat
wcsrchr
_purecall
realloc
memmove
_wfopen
fread
fclose
wcsstr
localtime
wcsftime
wcscmp
time
clock
_wtoi
iswdigit
swprintf
vswprintf
??2@YAPAXI@Z
_ftol
wcslen
malloc
free
??3@YAXPAX@Z

comctl32

ImageList_Create
ImageList_Replace
ImageList_LoadImageW
ord17
InitCommonControlsEx
ImageList_ReplaceIcon

gdiplus

GdipAddPathEllipse
GdipDeletePath
GdipDrawPath
GdipClosePathFigure
GdipCreatePath
GdipFillPath
GdipDeletePen
GdipCreatePen1
GdipGetPathWorldBounds
GdipAddPathStringI
GdipResetPath
GdipDeleteBrush
GdipCreateLineBrushFromRect
GdipAlloc
GdipCloneBrush
GdipFree
GdipDeleteGraphics
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipDeleteStringFormat
GdipSetStringFormatLineAlign
GdipCreateStringFormat
GdipSetInterpolationMode
GdipSetSmoothingMode
GdipCreateSolidFill
GdiplusStartup
GdipTranslateWorldTransform
GdipCreateFromHDC
GdipResetWorldTransform
GdipSetPathGradientCenterPointI
GdipSetPathGradientCenterColor
GdipCreatePathGradientFromPath
GdipSetPathGradientSurroundColorsWithCount
GdipGetPathGradientPointCount

Sections

.text
Size: 120KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 132KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

af837e03850dc6ff78e70817b08a3604

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

msvcrt

comctl32

gdiplus

Sections

.text Size: 120KB - Virtual size: 117KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 72KB - Virtual size: 157KB

.rsrc Size: 132KB - Virtual size: 129KB

.text
Size: 120KB - Virtual size: 117KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 72KB - Virtual size: 157KB

.rsrc
Size: 132KB - Virtual size: 129KB