a90e2576974dde921a0450c6fd296fa5c4d43b6c0823387be4da17e246a405af

Sharing

Copy URL Twitter E-mail

General

Target

a90e2576974dde921a0450c6fd296fa5c4d43b6c0823387be4da17e246a405af
Size

2.4MB
MD5

c7b3eba58b45f9ba0ee39d724db4dd06
SHA1

cb67d40cb57fac873e7e4ae9beb4c984d120aa28
SHA256

a90e2576974dde921a0450c6fd296fa5c4d43b6c0823387be4da17e246a405af
SHA512

cca2ffad6f46b2f9626073f457f8bb3d6b5e47e43578388b93eb8b15fab1c625c9ae7cfc324985d2906af99ca971a73836335e53bbcc5ad2d0ae3876755c91b4
SSDEEP

49152:LM6r+SyUwHkZNmH89GYtW365EUXljBh3:LfFy3kZE89jtXyUXl7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a90e2576974dde921a0450c6fd296fa5c4d43b6c0823387be4da17e246a405af

Files

a90e2576974dde921a0450c6fd296fa5c4d43b6c0823387be4da17e246a405af
.exe windows:4 windows x86 arch:x86

2f1b9f2bbe15fd3f92e3c8bc308caa51

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

trayicon2

CreateTrayManager
DestroyTrayManager

tmpdlg10

ord4
ord1
ord2
ord5
ord6

spell32

ord4

rps32

ord13
ord11
ord8
ord2
ord9

rds32

ord10
ord8
ord2
ord9

drs32

ord9
ord8
ord10
ord2

ter32

ord68
ord121
ord105
ord135
ord33
ord175
ord208
ord51
ord196
ord162
ord43
ord50
ord106
ord10
ord126
ord65
ord90
ord164
ord161
ord186
ord108
ord59
ord357
ord14
ord13
ord109
ord44
ord526
ord223
ord54
ord47
ord75
ord60
ord92
ord98
ord17
ord82
ord12
ord97
ord18
ord64
ord524
ord525
ord53
ord55
ord11
ord15
ord32
ord42
ord16
ord24
ord79
ord67
ord40
ord28
ord48
ord31
ord30
ord29
ord52
ord205
ord58
ord129
ord128
ord193
ord468
ord99
ord49
ord120
ord87
ord321

kernel32

GetShortPathNameA
FileTimeToSystemTime
FileTimeToLocalFileTime
lstrlenW
GetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
SetEvent
ResumeThread
SetThreadPriority
SuspendThread
CreateEventA
GetCurrentThread
GetTickCount
SearchPathA
GlobalFlags
SizeofResource
LocalAlloc
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
TlsFree
LeaveCriticalSection
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
GetProcessVersion
GetCPInfo
GetOEMCP
lstrcpyW
RtlUnwind
GetTimeZoneInformation
GetSystemTime
HeapFree
HeapAlloc
SetEnvironmentVariableA
RaiseException
GetSystemTimeAsFileTime
TerminateProcess
GetStartupInfoA
GetCommandLineA
GetFileType
SetStdHandle
GetACP
HeapReAlloc
CreateThread
ExitThread
HeapSize
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
GetThreadLocale
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCurrentProcessId
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
GetStringTypeExA
UnlockFile
LockFile
FlushFileBuffers
WriteFile
GetCurrentProcess
DuplicateHandle
FormatMessageA
LocalFree
SetLastError
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
_lclose
_llseek
_lwrite
_lread
GetComputerNameA
GetLocaleInfoA
GetDateFormatA
GetCurrentDirectoryA
GlobalFree
GlobalUnlock
GlobalHandle
GetTempFileNameA
GlobalLock
GlobalAlloc
EnumTimeFormatsA
EnumDateFormatsA
GetUserDefaultLCID
GetLocalTime
GetTimeFormatA
lstrcpyA
GetVolumeInformationA
SetErrorMode
GetTempPathA
FindClose
FindNextFileA
FindFirstFileA
GetDriveTypeA
GetDiskFreeSpaceA
CreateDirectoryA
RemoveDirectoryA
DeleteFileA
SetFileAttributesA
GetVersionExA
MulDiv
lstrcmpA
Sleep
CopyFileA
MoveFileA
GetVersion
lstrcatA
lstrlenA
MultiByteToWideChar
FreeLibrary
LoadLibraryA
GlobalFindAtomA
GlobalDeleteAtom
LockResource
FindResourceA
LoadResource
GetFileSize
ReadFile
ExitProcess
GetProfileStringA
GetProfileIntA
lstrcpynA
SetCurrentDirectoryA
GetModuleHandleA
SetFilePointer
SetEndOfFile
GetModuleFileNameA
GlobalReAlloc
GetFileAttributesA
GetEnvironmentVariableA
GetProcAddress
GlobalSize
GetLastError
WaitForSingleObject
GetLogicalDriveStringsA
GetSystemDirectoryA
CreateProcessA
GetFullPathNameA
GetLogicalDrives
GetWindowsDirectoryA
WinExec
CloseHandle
DeviceIoControl
CreateFileA
FreeEnvironmentStringsA

user32

InvertRect
GetSystemMenu
SetParent
GetNextDlgGroupItem
CharNextA
PostThreadMessageA
DestroyIcon
LockWindowUpdate
GetDCEx
GetSysColorBrush
SetCursorPos
DestroyCursor
SetWindowContextHelpId
RegisterClipboardFormatA
ShowOwnedPopups
PostQuitMessage
GetMessageA
ValidateRect
MapDialogRect
CopyAcceleratorTableA
InSendMessage
UnpackDDElParam
ReuseDDElParam
SetMenu
DestroyMenu
LoadAcceleratorsA
DefMDIChildProcA
TranslateAcceleratorA
TranslateMDISysAccel
DefFrameProcA
BringWindowToTop
CharUpperA
GrayStringA
TabbedTextOutA
EndPaint
BeginPaint
GetMenuCheckMarkDimensions
GetMenuState
SetMenuItemBitmaps
CheckMenuItem
ShowWindow
SetWindowTextA
IsDlgButtonChecked
CheckDlgButton
SendDlgItemMessageA
MapWindowPoints
SetFocus
AdjustWindowRectEx
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
ShowScrollBar
SetScrollRange
GetScrollPos
SetScrollPos
IsChild
WinHelpA
GetClassInfoA
RegisterClassA
TrackPopupMenu
SetWindowPlacement
GetWindowTextLengthA
GetDlgCtrlID
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetMessageTime
GetWindowPlacement
GetNextDlgTabItem
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
GetDlgItem
IsWindowEnabled
SendMessageA
EnableWindow
GetWindowRect
InvalidateRect
GetSysColor
GetSystemMetrics
CloseClipboard
EmptyClipboard
IsIconic
GetClientRect
OpenClipboard
GetParent
MessageBoxA
GetWindowLongA
PostMessageA
CreateWindowExA
DestroyWindow
EndDialog
wvsprintfA
wsprintfA
LoadStringA
ChangeDisplaySettingsA
EnumDisplaySettingsA
LoadImageA
IsClipboardFormatAvailable
CallWindowProcA
IsWindowVisible
SetWindowRgn
UnhookWindowsHookEx
GetForegroundWindow
GetWindowDC
GetScrollRange
GetScrollInfo
SetScrollInfo
WindowFromPoint
SubtractRect
EqualRect
IsRectEmpty
IntersectRect
SetRectEmpty
GetDialogBaseUnits
GetDesktopWindow
SetWindowLongA
SetMenuItemInfoA
DrawStateA
OffsetRect
SystemParametersInfoA
GetMenuItemInfoA
DrawTextA
GetWindow
GetClassNameA
DeleteMenu
InsertMenuA
DrawMenuBar
SetKeyboardState
IsZoomed
EnumChildWindows
GetClipboardData
GetCursorPos
GetKeyState
GetAsyncKeyState
GetKeyboardState
ModifyMenuA
GetMenuItemID
GetCaretPos
ReleaseDC
SetWindowPos
ClientToScreen
GetMenu
RemoveMenu
RedrawWindow
GetMenuStringA
RegisterWindowMessageA
ReleaseCapture
MessageBeep
PtInRect
SetRect
UnregisterClassA
HideCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
InvalidateRgn
GetMenuDefaultItem
SetMenuDefaultItem
IsMenu
DrawIconEx
DrawFrameControl
CreatePopupMenu
FrameRect
InflateRect
LoadBitmapA
FillRect
DrawEdge
GetCapture
SetCapture
IsWindow
DestroyCaret
CopyRect
GetFocus
MoveWindow
GetSubMenu
LoadMenuA
ShowCaret
LoadIconA
SetWindowsHookExA
CallNextHookEx
SetCursor
SetClipboardData
UpdateWindow
LoadCursorA
GetDC
SetTimer
KillTimer
GetMessagePos
ScreenToClient
CopyIcon
DrawIcon
DrawFocusRect
SetDlgItemTextA
GetDlgItemTextA
DispatchMessageA
TranslateMessage
PeekMessageA
DefWindowProcA
FindWindowA
GetLastActivePopup
SetForegroundWindow
EnumWindows
GetWindowTextA
IsDialogMessageA
AppendMenuA
EnableMenuItem
GetMenuItemCount
GetTopWindow

gdi32

CreateRectRgn
CreateRectRgnIndirect
ExtTextOutA
SaveDC
RestoreDC
SelectObject
SetPolyFillMode
SetROP2
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetViewportExtEx
GetWindowExtEx
PtVisible
CombineRgn
TextOutA
Escape
GetWindowOrgEx
GetViewportOrgEx
GetCharWidthA
CopyMetaFileA
LPtoDP
GetTextFaceA
SetTextColor
SetBkColor
SetBkMode
CreateICA
CreateRoundRectRgn
CreatePolygonRgn
CreateEllipticRgn
CreateCompatibleBitmap
DeleteDC
EndDoc
AbortDoc
EndPage
StartPage
StartDocA
ResetDCA
CreatePen
GetBkColor
CreateFontIndirectA
GetObjectA
Rectangle
PatBlt
CreateCompatibleDC
GetDeviceCaps
GetTextColor
DPtoLP
BitBlt
EnumFontFamiliesA
CreateFontA
GetTextMetricsA
SetRectRgn
CreatePatternBrush
GetMapMode
RectVisible
GetClipBox
StretchDIBits
GetTextExtentPoint32A
CreateSolidBrush
CreateDCA
CreateDIBitmap
GetNearestColor
Polyline
Polygon
DeleteObject
RealizePalette
SetPaletteEntries
GetRgnBox
PtInRegion
FillRgn
RectInRegion
StretchBlt
PaintRgn
SelectPalette
CreatePalette
GetSystemPaletteEntries
SetDIBitsToDevice
SetStretchBltMode
GetStockObject
GetDIBits
CreateBitmap
CreateHalftonePalette
GetPaletteEntries
GetTextExtentPointA
ExtCreatePen

comdlg32

ChooseFontA
FindTextA
ChooseColorA
GetFileTitleA
PrintDlgA
ReplaceTextA
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegUnLoadKeyA
RegSetKeySecurity
RegSaveKeyA
RegRestoreKeyA
RegReplaceKeyA
RegNotifyChangeKeyValue
RegLoadKeyA
RegGetKeySecurity
RegFlushKey
RegEnumValueA
RegEnumKeyExA
RegConnectRegistryA
RegQueryValueExA
RegCreateKeyA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteValueA
RegDeleteKeyA
RegQueryInfoKeyA
RegQueryValueA
RegOpenKeyA
SetFileSecurityA
GetFileSecurityA
RegSetValueA
RegCloseKey

shell32

DragQueryPoint
SHBrowseForFolderA
FindExecutableA
SHGetPathFromIDListA
ShellExecuteA
SHGetFileInfoA
SHGetMalloc
DragAcceptFiles
DragFinish
ExtractIconA
SHGetSpecialFolderLocation
DragQueryFileA

comctl32

ImageList_DragMove
ImageList_BeginDrag
ImageList_AddMasked
ImageList_GetBkColor
ImageList_ReplaceIcon
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_GetIcon
ImageList_SetBkColor
ord17
ImageList_Draw
ImageList_Add
ImageList_DragShowNolock
ImageList_DragEnter
ImageList_DragLeave
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
ImageList_Read
ImageList_Write
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ImageList_EndDrag
ord8

oledlg

ord8

ole32

OleGetClipboard
CoDisconnectObject
CoTreatAsClass
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteFmtUserTypeStg
SetConvertStg
CreateBindCtx
CoTaskMemAlloc
OleDuplicateData
CoUninitialize
CoInitialize
CoGetClassObject
CoLockObjectExternal
WriteClassStg
GetRunningObjectTable
CLSIDFromString
CLSIDFromProgID
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
OleSetMenuDescriptor
OleIsRunning
OleRun
OleFlushClipboard
CreateGenericComposite
CreateItemMoniker
CreateStreamOnHGlobal
OleSaveToStream
WriteClassStm
OleGetIconOfClass
ReleaseStgMedium
GetHGlobalFromILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleSave
OleLoad
OleCreateStaticFromData
OleSetContainedObject
StringFromCLSID
OleLockRunning
StgIsStorageFile
StgOpenStorage
StgCreateDocfile
CreateFileMoniker
CoTaskMemFree
CoCreateInstance
OleIsCurrentClipboard
CoRegisterMessageFilter
CoRevokeClassObject

olepro32

ord253

oleaut32

SysStringLen
VariantTimeToSystemTime
SysAllocStringLen
SysFreeString
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate
VariantInit
VariantClear
VariantCopy
SysAllocString
SysAllocStringByteLen
VariantChangeType
VarBstrFromCy

Sections

.rdata
Size: 281KB - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 451KB - Virtual size: 450KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2f1b9f2bbe15fd3f92e3c8bc308caa51

Headers

File Characteristics

Imports

trayicon2

tmpdlg10

spell32

rps32

rds32

drs32

ter32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.rdata Size: 281KB - Virtual size: 281KB

.data Size: 1.7MB - Virtual size: 1.7MB

.rsrc Size: 451KB - Virtual size: 450KB

.rdata
Size: 281KB - Virtual size: 281KB

.data
Size: 1.7MB - Virtual size: 1.7MB

.rsrc
Size: 451KB - Virtual size: 450KB