cee4841fe17eccbadd8665db0936c93348e85b132d1ab93f750bec76327be0f2

Sharing

Copy URL

Twitter E-mail

General

Target

cee4841fe17eccbadd8665db0936c93348e85b132d1ab93f750bec76327be0f2
Size

4.8MB
MD5

2a10fd4c4b4821d781f101bb9d08952d
SHA1

c0d2e01f2101ef4dc29a352945cae6ec92c2792b
SHA256

cee4841fe17eccbadd8665db0936c93348e85b132d1ab93f750bec76327be0f2
SHA512

bd4b019c3f80bdd6ea303de6a74c97231f904979c7609e7cf9cbb0b18e78fc9f9ec1fa5b4c7e7e8fdeb933717040b4bc0958ec8ddb5b95bfa2025a57ecb552bb
SSDEEP

98304:DEXrBa1GL2ffnvzKm1OXBGRUbBDQ/mGBb/tH4t:IbBL2ffvzKWOXBGRUtstHq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cee4841fe17eccbadd8665db0936c93348e85b132d1ab93f750bec76327be0f2

Files

cee4841fe17eccbadd8665db0936c93348e85b132d1ab93f750bec76327be0f2
.exe windows:4 windows x86 arch:x86

807364efa64de40eebe8ba47161ac816

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEvent
SetFileAttributesA
SetFileAttributesW
SetFilePointer
SetFileTime
SetLastError
SetThreadLocale
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SetErrorMode
TerminateProcess
TerminateThread
TlsAlloc
TlsGetValue
TlsSetValue
UnlockFile
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteFile
SetEndOfFile
SetCurrentDirectoryW
SetCurrentDirectoryA
ResumeThread
ResetEvent
RemoveDirectoryW
RemoveDirectoryA
ReadProcessMemory
ReadFile
PeekNamedPipe
MultiByteToWideChar
MulDiv
MoveFileW
MoveFileA
LockResource
LockFile
LocalFree
LocalFileTimeToFileTime
LocalAlloc
LoadResource
HeapFree
HeapAlloc
GlobalUnlock
GlobalSize
GlobalReAlloc
GlobalLock
GlobalFree
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomA
GetWindowsDirectoryA
GetVersionExA
GetUserDefaultLCID
GetThreadPriority
GetThreadLocale
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetStartupInfoA
GetProfileStringA
GetProcessHeap
GetProcessAffinityMask
GetProcAddress
GetOEMCP
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
GetLogicalDriveStringsA
GetLocalTime
GetLocaleInfoA
GetLastError
GetFileAttributesW
GetFileAttributesA
GetExitCodeProcess
GetEnvironmentStrings
GetDateFormatA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryW
GetCurrentDirectoryA
GetConsoleOutputCP
GetConsoleMode
GetComputerNameA
GetCommandLineW
GetACP
FreeResource
FreeLibrary
FreeEnvironmentStringsA
FormatMessageA
FindResourceExA
FindResourceA
FindNextFileW
FindNextFileA
FindFirstFileW
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExitThread
ExitProcess
EnumSystemLocalesA
EnumSystemCodePagesA
EnumResourceTypesA
EnumResourceNamesA
EnumResourceLanguagesA
EnumCalendarInfoA
DuplicateHandle
DosDateTimeToFileTime
DeleteFileW
DeleteFileA
DeleteCriticalSection
CreateThread
CreateProcessA
CreatePipe
CreateFileW
CreateFileA
CreateEventA
CreateDirectoryW
CreateDirectoryA
CompareStringW
CompareStringA
CloseHandle
GetStartupInfoW
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
GetTickCount
LeaveCriticalSection
SuspendThread
LoadLibraryA

user32

SetClassLongA
SetClipboardData
SetCursor
SetCursorPos
SetFocus
SetForegroundWindow
SetMenu
SetMenuItemInfoA
SetMenuItemInfoW
SetParent
SetPropA
SetRect
SetScrollInfo
SetSysColors
SetTimer
SetWindowLongA
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowTextA
SetWindowTextW
ShowCaret
ShowOwnedPopups
ShowScrollBar
ShowWindow
ShowWindowAsync
SystemParametersInfoA
TrackPopupMenuEx
TranslateMessage
UnregisterClassA
UnregisterClassW
UpdateWindow
WindowFromDC
VkKeyScanW
OpenClipboard
OffsetRect
OemToCharBuffA
OemToCharA
MsgWaitForMultipleObjects
MessageBoxW
MessageBeep
MapWindowPoints
LoadImageA
LoadIconA
LoadCursorA
LoadBitmapA
KillTimer
IsWindowVisible
IsWindowEnabled
IsWindow
IsRectEmpty
IsMenu
IsIconic
IsClipboardFormatAvailable
InvalidateRgn
InvalidateRect
IntersectRect
InsertMenuItemW
InsertMenuItemA
InflateRect
HideCaret
GetWindowThreadProcessId
GetWindowTextW
GetWindowTextLengthW
GetWindowTextLengthA
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowLongA
GetWindowDC
GetWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollInfo
ScrollWindow
GetParent
GetMenuItemInfoW
GetMenuItemInfoA
GetMenuItemCount
SetCaretPos
GetKeyState
GetIconInfo
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDlgItem
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetClipboardFormatNameA
GetClipboardData
GetClientRect
GetClassNameA
GetClassLongA
GetClassInfoW
GetClassInfoA
GetCaretPos
GetCapture
GetActiveWindow
FrameRect
FillRect
EnumThreadWindows
EnumPropsA
EnumClipboardFormats
EndPaint
EndDeferWindowPos
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextA
DrawStateW
DrawStateA
DrawMenuBar
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DestroyCaret
DeleteMenu
DefWindowProcW
DefWindowProcA
CreateWindowExW
CreateWindowExA
CreatePopupMenu
CreateMenu
CreateIconIndirect
CreateCaret
CountClipboardFormats
CopyImage
MessageBoxA
AdjustWindowRectEx
BeginDeferWindowPos
BeginPaint
BringWindowToTop
CallNextHookEx
CallWindowProcA
CallWindowProcW
CharLowerA
CharLowerBuffA
CharLowerBuffW
CharToOemA
CharToOemBuffA
CharUpperA
CharUpperBuffA
ScreenToClient
RemovePropA
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterClipboardFormatA
RegisterClassW
RegisterClassA
RedrawWindow
CloseClipboard
ClientToScreen
ChildWindowFromPointEx
CharUpperBuffW
SetCapture
SetActiveWindow
SendMessageW
SendMessageA
GetMenu
ScrollWindowEx
PtInRect
PostQuitMessage
PostMessageW
PostMessageA
PeekMessageW
GetPropA
PeekMessageA
IsZoomed

gdi32

DeleteObject
DPtoLP
Ellipse
EndPage
EnumFontFamiliesA
EnumFontFamiliesExA
EnumFontFamiliesExW
EqualRgn
ExcludeClipRect
ExtCreatePen
ExtCreateRegion
ExtFloodFill
ExtSelectClipRgn
ExtTextOutA
ExtTextOutW
FillRgn
GetBitmapBits
GetBkColor
GetCharABCWidthsA
GetCharABCWidthsW
GetClipBox
GetClipRgn
GetCurrentObject
GetDCOrgEx
GetDeviceCaps
GetDIBits
GetMapMode
GetObjectA
GetObjectType
GetObjectW
GetPixel
GetRegionData
GetRgnBox
GetROP2
GetStockObject
GetTextAlign
GetTextColor
GetTextExtentExPointA
GetTextExtentExPointW
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextExtentPointA
GetTextMetricsA
DeleteDC
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
IntersectClipRect
LineTo
LPtoDP
MaskBlt
MoveToEx
OffsetRgn
OffsetViewportOrgEx
PaintRgn
PatBlt
Pie
PolyBezier
Polyline
PtInRegion
RealizePalette
Rectangle
RectInRegion
RectVisible
RestoreDC
SaveDC
SelectObject
SelectPalette
SetArcDirection
SetBkColor
SetBkMode
SetBrushOrgEx
SetMapMode
SetPixel
SetPolyFillMode
SetRectRgn
SetROP2
SetStretchBltMode
SetTextAlign
SetTextCharacterExtra
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
StartPage
CreateSolidBrush
CreateRoundRectRgn
GetViewportExtEx
CombineRgn
CreatePolygonRgn
CreatePenIndirect
CreatePen
CreatePatternBrush
CreateFontIndirectW
CreateFontIndirectA
CreateEllipticRgn
CreateDIBSection
CreateDIBitmap
CreateDCW
CreateDCA
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CreateRectRgn

winspool.drv

StartPagePrinter
EnumPrintersA
EnumPrintersW
OpenPrinterA
OpenPrinterW
GetPrinterA
StartDocPrinterA
WritePrinter
EndPagePrinter
EndDocPrinter
DeviceCapabilitiesW
DeviceCapabilitiesA
ClosePrinter
DocumentPropertiesW
DocumentPropertiesA

comdlg32

GetOpenFileNameA
GetOpenFileNameW
GetSaveFileNameA
GetSaveFileNameW
PrintDlgA
PrintDlgW
CommDlgExtendedError

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

shell32

DragQueryFileW
DragQueryFileA
DragFinish
DragAcceptFiles
ShellExecuteA

ole32

OleUninitialize
OleInitialize

oleaut32

SafeArrayGetUBound
SafeArrayGetElement
SafeArrayCreate
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayRedim
SafeArrayUnaccessData
SysAllocStringLen
SysFreeString
SysReAllocStringLen
VariantChangeTypeEx
VariantClear
VariantCopy
VariantInit
SafeArrayGetLBound

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 932KB - Virtual size: 931KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_bcore_5
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

807364efa64de40eebe8ba47161ac816

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

msvcrt

Sections

.text Size: 2.3MB - Virtual size: 2.3MB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 4.0MB

.rsrc Size: 932KB - Virtual size: 931KB

_bcore_5 Size: 1.6MB - Virtual size: 1.6MB

.text
Size: 2.3MB - Virtual size: 2.3MB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 4.0MB

.rsrc
Size: 932KB - Virtual size: 931KB

_bcore_5
Size: 1.6MB - Virtual size: 1.6MB