59067195cf57cbde5eba4c99b52ee70f8efc924e0b508544cadd939f4e118925

Sharing

Copy URL

Twitter E-mail

General

Target

59067195cf57cbde5eba4c99b52ee70f8efc924e0b508544cadd939f4e118925
Size

748KB
MD5

be1b1f6e34ddb088af1655eec642204a
SHA1

eb33dd315298e0383b57540240064b82ea6ed9fe
SHA256

59067195cf57cbde5eba4c99b52ee70f8efc924e0b508544cadd939f4e118925
SHA512

efc0dddcd3bd8956f969abf6532e71370923a52885076ce8dc0324ad5a9e51f715227fe46cb065bc8acebe0dafc8b852ef32a374e6b57e57070c7fb6a2757ce0
SSDEEP

12288:VRbhnBiL0hzbEhOARvB3EKgDuWZXQopqmgO7A88RKetgF5QIXlCxNieiGcO2Gbec:/bhY0SrEKgiWZXQmbgO7A8EKetgFpV+7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59067195cf57cbde5eba4c99b52ee70f8efc924e0b508544cadd939f4e118925

Files

59067195cf57cbde5eba4c99b52ee70f8efc924e0b508544cadd939f4e118925
.exe windows:4 windows x86 arch:x86

e83617dd7933c0a2cbcb5de42dd5a066

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHChangeNotify
SHGetFileInfoA
ShellExecuteA

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

kernel32

GetCPInfo
GetOEMCP
GetProcessVersion
TlsGetValue
SetErrorMode
FileTimeToSystemTime
FileTimeToLocalFileTime
ExitProcess
TerminateProcess
HeapFree
HeapAlloc
TlsSetValue
LocalReAlloc
RaiseException
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RtlUnwind
HeapSize
GetACP
GetCommandLineA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetStartupInfoA
GlobalHandle
GetCurrentThread
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
IsBadCodePtr
SetStdHandle
IsValidLocale
IsValidCodePage
GetLocaleInfoA
GetUserDefaultLCID
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
EnumResourceLanguagesA
EnumSystemLocalesA
CreateFileA
CreateDirectoryA
GetFileAttributesA
SetFileAttributesA
CopyFileA
FindResourceA
LoadResource
LockResource
SizeofResource
GlobalAlloc
GlobalLock
GlobalUnlock
MulDiv
OutputDebugStringA
GetVersionExA
ReleaseMutex
CreateMutexA
WaitForSingleObject
CloseHandle
Sleep
GetTickCount
InterlockedExchange
GlobalReAlloc
TlsFree
GlobalFlags
TlsAlloc
LocalAlloc
IsBadStringPtrA
IsBadReadPtr
IsBadWritePtr
GetFullPathNameA
SetEndOfFile
SetFilePointer
FlushFileBuffers
ReadFile
GetCurrentProcess
lstrcpynA
lstrcmpA
GetModuleFileNameA
FreeEnvironmentStringsW
SetLastError
GetProfileStringA
lstrlenA
InterlockedDecrement
InterlockedIncrement
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GlobalFree
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetLogicalDriveStringsA
GetDriveTypeA
GetCurrentProcessId
GetProcAddress
GetCurrentDirectoryA
GetWindowsDirectoryA
SetCurrentDirectoryA
DeviceIoControl
GetComputerNameA
ResetEvent
SetEvent
CreateEventA
GetSystemDirectoryA
LoadLibraryA
FreeResource
FreeLibrary
GetLastError
FindFirstFileA
FindNextFileA
FindClose
CreateThread
GetExitCodeThread
lstrcpyA
FormatMessageA
LocalFree
WriteFile
MultiByteToWideChar
DeleteFileA
GetTempPathA
GetPrivateProfileStringA
WritePrivateProfileStringA
FindResourceExA
WideCharToMultiByte
GetUserDefaultLangID
GetEnvironmentStrings
GetEnvironmentStringsW
HeapReAlloc

user32

EnableMenuItem
MoveWindow
SetWindowTextA
CheckMenuItem
ModifyMenuA
GetMenuState
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetWindowDC
BeginPaint
EndPaint
ValidateRect
TranslateMessage
GetMessageA
ReleaseDC
InflateRect
LoadCursorA
GetSysColorBrush
DestroyMenu
LoadStringA
MapWindowPoints
DispatchMessageA
SetFocus
AdjustWindowRectEx
ScreenToClient
CopyRect
IsDialogMessageA
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetDlgCtrlID
SendDlgItemMessageA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetWindow
SetWindowLongA
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
RegisterClassExA
CreateWindowExA
DefWindowProcA
MsgWaitForMultipleObjects
PeekMessageA
FindWindowExA
CreateDialogIndirectParamA
ShowWindow
DestroyWindow
GetDesktopWindow
IsWindowVisible
PtInRect
GetFocus
GetWindowTextA
EnumWindows
SetCursor
FillRect
RedrawWindow
UpdateWindow
LoadBitmapA
GetNextDlgGroupItem
PostMessageA
ReleaseCapture
InvalidateRect
ClientToScreen
GetDC
SetWindowRgn
GetCapture
GetTopWindow
GetCursorPos
WindowFromPoint
DrawEdge
OffsetRect
DrawFocusRect
GetWindowLongA
GetSysColor
GrayStringA
DrawTextA
TabbedTextOutA
GetParent
GetWindowRect
GetClassNameA
FindWindowA
SetWindowPos
SetForegroundWindow
MessageBoxA
EnableWindow
PostQuitMessage
KillTimer
IsIconic
SendMessageA
GetSystemMetrics
GetClientRect
DrawIcon
SetTimer
LoadIconA
GetKeyState
SetWindowsHookExA
IsWindowEnabled
GetDlgItem
GetForegroundWindow
ShowCaret
CharNextA
UnregisterClassA
HideCaret
DefDlgProcA
IsWindowUnicode
ExcludeUpdateRgn

gdi32

CreateDIBitmap
GetTextExtentPointA
CreateCompatibleDC
GetBkColor
DPtoLP
GetMapMode
LPtoDP
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetObjectA
StretchBlt
GetBitmapDimensionEx
SelectClipRgn
CombineRgn
CreateRectRgn
GetPixel
GetTextExtentPoint32A
CreateSolidBrush
CreateFontIndirectA
SetViewportOrgEx
GetViewportOrgEx
Rectangle
GetDeviceCaps
CreateICA
GetClipBox
SetTextColor
SetBkColor
SaveDC
RestoreDC
GetStockObject
SetBkMode
SetMapMode
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
SetTextAlign
CreateCompatibleBitmap
PatBlt
CreateBitmap
SelectObject
DeleteObject
BitBlt
DeleteDC

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueA
RegCreateKeyA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegGetKeySecurity
SetSecurityDescriptorDacl
RegSetKeySecurity
RegEnumValueA
InitializeSecurityDescriptor

comctl32

_TrackMouseEvent
ord17

ole32

CoInitialize
CoUninitialize
CoInitializeEx
CoCreateInstance
CreateStreamOnHGlobal

olepro32

ord251

oleaut32

SysAllocStringLen
SysFreeString

Sections

.text
Size: 448KB - Virtual size: 444KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 188KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e83617dd7933c0a2cbcb5de42dd5a066

Headers

File Characteristics

Imports

shell32

version

kernel32

user32

gdi32

winspool.drv

advapi32

comctl32

ole32

olepro32

oleaut32

Sections

.text Size: 448KB - Virtual size: 444KB

.rdata Size: 76KB - Virtual size: 74KB

.data Size: 32KB - Virtual size: 48KB

.rsrc Size: 188KB - Virtual size: 186KB

.text
Size: 448KB - Virtual size: 444KB

.rdata
Size: 76KB - Virtual size: 74KB

.data
Size: 32KB - Virtual size: 48KB

.rsrc
Size: 188KB - Virtual size: 186KB