36a72acdfbcac2424047cade723201d81270c4a514bc662c86f9b1ff026ff26b

Sharing

Copy URL Twitter E-mail

General

Target

36a72acdfbcac2424047cade723201d81270c4a514bc662c86f9b1ff026ff26b
Size

744KB
MD5

9bc41f0247284a9718c8dde124cb73f7
SHA1

86181ca0add5a78b8908b48ece437a4f85e5a5a0
SHA256

36a72acdfbcac2424047cade723201d81270c4a514bc662c86f9b1ff026ff26b
SHA512

b679eb5af07523faaf7adf1fa5038bf01e8e01ba21ab356acd8bd8e2afc4fe1cd7975f6523ad21d64c659b0f6fb4e52ce43cacdb0812fbd49f522405b12fa16d
SSDEEP

12288:B//hrIoM99W92yZoGOSuptlrF7++0kUQKERGo:4nFKAtt7ZuE4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36a72acdfbcac2424047cade723201d81270c4a514bc662c86f9b1ff026ff26b

Files

36a72acdfbcac2424047cade723201d81270c4a514bc662c86f9b1ff026ff26b
.exe windows:4 windows x86 arch:x86

9acbb33ec47b5c3e08d977c727d5ec8f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
lstrcmpiA
SetFileAttributesA
SetErrorMode
OpenEventA
GetSystemInfo
GlobalMemoryStatus
LoadLibraryW
FreeLibrary
WaitForMultipleObjects
TerminateProcess
DisconnectNamedPipe
GetTickCount
GlobalSize
GlobalLock
GlobalUnlock
GlobalFree
GetProcessHeap
HeapAlloc
HeapFree
GetLocalTime
GetSystemDirectoryA
CreateToolhelp32Snapshot
Process32First
Process32Next
GetCurrentProcess
SetLastError
GetModuleFileNameA
WriteFile
SetFilePointer
ReadFile
CreateFileA
GetFileSize
RemoveDirectoryA
LocalAlloc
FindFirstFileA
LocalReAlloc
FindNextFileA
LocalFree
FindClose
GetLogicalDriveStringsA
GetVolumeInformationA
GetDiskFreeSpaceExA
CreateProcessA
GetFileAttributesA
CreateDirectoryA
GetLastError
DeleteFileA
GetVersionExA
GetPrivateProfileStringA
lstrcmpA
WideCharToMultiByte
MultiByteToWideChar
GetWindowsDirectoryA
lstrcatA
GetPrivateProfileSectionNamesA
lstrlenA
lstrcpyA
CancelIo
InterlockedExchange
ResetEvent
Sleep
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateThread
LoadLibraryA
GetProcAddress
ResumeThread
CreateEventA
SetEvent
WaitForSingleObject
GetProfileStringA
GetLocaleInfoW
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetStdHandle
SetConsoleCtrlHandler
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetExitCodeProcess
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
TerminateThread
CloseHandle
HeapCreate
HeapDestroy
GetEnvironmentVariableA
SetUnhandledExceptionFilter
FatalAppExitA
GetSystemTime
GetTimeZoneInformation
GetACP
HeapSize
HeapReAlloc
GetCommandLineA
GetCurrentThread
GlobalDeleteAtom
GlobalAlloc
SetThreadPriority
SuspendThread
LoadResource
FindResourceA
LockResource
GetModuleHandleA
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetVersion
InterlockedIncrement
InterlockedDecrement
MulDiv
lstrcpynA
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
TlsGetValue
GlobalFlags
GetPrivateProfileIntA
WritePrivateProfileStringA
GetCurrentDirectoryA
GetProcessVersion
SizeofResource
GetThreadLocale
GetCPInfo
GetOEMCP
DuplicateHandle
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
MoveFileA
GetFullPathNameA
GetStringTypeExA
GetShortPathNameA
lstrlenW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
FormatMessageA
CopyFileA
RtlUnwind
RaiseException
ExitProcess
ExitThread
GetStartupInfoA

user32

SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
GetDlgItem
DestroyWindow
CreateDialogIndirectParamA
SetActiveWindow
EndDialog
SetWindowContextHelpId
GetWindow
SetWindowPos
MapDialogRect
GetWindowRect
GetWindowPlacement
IntersectRect
OffsetRect
RegisterWindowMessageA
SetWindowLongA
SetForegroundWindow
GetMessagePos
GetMessageTime
DefWindowProcA
RemovePropA
CallWindowProcA
GetPropA
UnhookWindowsHookEx
SetPropA
GetClassLongA
GetDlgCtrlID
GetWindowTextLengthA
SetWindowPlacement
TrackPopupMenu
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
IsChild
GetTopWindow
SetScrollPos
IsWindowEnabled
SetScrollRange
GetScrollRange
GetWindowLongA
SetScrollInfo
GetScrollInfo
ScrollWindow
EndDeferWindowPos
CopyRect
BeginDeferWindowPos
DeferWindowPos
EqualRect
ScreenToClient
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
LoadIconA
GetFocus
GetParent
CheckMenuItem
GetDlgItemTextA
SetDlgItemInt
SetDlgItemTextA
IsDlgButtonChecked
ScrollWindowEx
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
CharToOemA
OemToCharA
LoadStringA
DestroyMenu
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
ReleaseCapture
WaitMessage
GetClassNameA
PtInRect
InsertMenuA
DeleteMenu
GetMenuStringA
GetSysColorBrush
GetDialogBaseUnits
CopyAcceleratorTableA
GetNextDlgGroupItem
MessageBeep
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
InvalidateRect
BringWindowToTop
CharUpperA
InflateRect
RegisterClipboardFormatA
RemoveMenu
wvsprintfA
UnregisterClassA
DestroyIcon
IsWindowUnicode
DefDlgProcA
DrawFocusRect
ExcludeUpdateRgn
ShowCaret
HideCaret
GetNextDlgTabItem
GetActiveWindow
CallNextHookEx
ValidateRect
DispatchMessageA
TranslateMessage
GetMessageA
wsprintfA
CharNextA
MessageBoxA
GetWindowTextA
EnumWindows
GetForegroundWindow
GetDlgItemInt
EnableMenuItem
PeekMessageA
CheckDlgButton
SetWindowsHookExA
SetCursor
ShowOwnedPopups
CheckRadioButton
GetLastActivePopup
PostQuitMessage
ShowScrollBar
GetScrollPos
PostThreadMessageA
IsWindow
CloseWindow
CreateWindowExA
PostMessageA
OpenDesktopA
GetThreadDesktop
GetUserObjectInformationA
OpenInputDesktop
SetThreadDesktop
CloseDesktop
IsWindowVisible
GetWindowThreadProcessId
ExitWindowsEx
GetProcessWindowStation
OpenWindowStationA
SetProcessWindowStation
GetCursorInfo
GetCursorPos
SetRect
GetDesktopWindow
GetDC
ReleaseDC
SystemParametersInfoA
DestroyCursor
LoadCursorA
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SetCursorPos
WindowFromPoint
SetCapture
mouse_event
MapVirtualKeyA
GetClientRect
IsIconic
DrawIcon
GetSystemMetrics
SendMessageA
GetSystemMenu
AppendMenuA
EnableWindow
GetKeyState
GetAsyncKeyState

gdi32

SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SelectPalette
GetStockObject
RestoreDC
SaveDC
StartDocA
GetObjectA
SetBkColor
SetTextColor
SetViewportOrgEx
GetDCOrgEx
CreateBitmap
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
DeleteDC
CreateCompatibleDC
GetClipBox
OffsetViewportOrgEx
CreateDIBitmap
GetTextExtentPointA
CreateDCA
CopyMetaFileA
CreateRectRgnIndirect
CombineRgn
SetRectRgn
PatBlt
GetMapMode
LPtoDP
DPtoLP
GetBkColor
GetTextColor
CreateFontIndirectA
GetTextMetricsA
GetTextExtentPoint32A
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateDIBPatternBrushPt
CreatePatternBrush
CreateHatchBrush
CreateSolidBrush
ExtCreatePen
CreatePen
GetWindowExtEx
GetViewportExtEx
GetDeviceCaps
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
ExtSelectClipRgn
SelectClipPath
CreateRectRgn
GetClipRgn
PolyBezierTo
SetColorAdjustment
PolylineTo
PolyDraw
SetArcDirection
ArcTo
GetCurrentPositionEx
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
LineTo
MoveToEx
OffsetClipRgn
IntersectClipRect
DeleteObject
GetDIBits
CreateCompatibleBitmap
BitBlt
SelectObject
CreateDIBSection

msvfw32

ICSeqCompressFrame
ICSendMessage
ICOpen
ICClose
ICCompressorFree
ICSeqCompressFrameEnd
ICSeqCompressFrameStart

advapi32

OpenEventLogA
RegEnumKeyA
LsaClose
LsaRetrievePrivateData
LsaOpenPolicy
IsValidSid
LookupAccountNameA
LsaFreeMemory
RegCloseKey
RegQueryValueA
RegOpenKeyExA
CloseServiceHandle
DeleteService
ControlService
QueryServiceStatus
OpenServiceA
OpenSCManagerA
RegSetValueExA
RegCreateKeyA
RegQueryValueExA
GetTokenInformation
LookupAccountSidA
RegDeleteKeyA
RegEnumKeyExA
RegEnumValueA
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegSetKeySecurity
FreeSid
RegDeleteValueA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCreateKeyExA
RegSetValueA
ClearEventLogA
CloseEventLog
SetEntriesInAclA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetNamedSecurityInfoA
RegOpenKeyA

shell32

SHGetSpecialFolderPathA
DragAcceptFiles
DragFinish
DragQueryFileA
ExtractIconA
SHGetFileInfoA

shlwapi

SHDeleteKeyA

winmm

waveOutReset
waveInClose
waveInUnprepareHeader
waveInReset
waveInStop
waveOutUnprepareHeader
waveOutOpen
waveOutPrepareHeader
waveInGetNumDevs
waveInPrepareHeader
waveOutGetNumDevs
waveOutClose
waveOutWrite
waveInStart
waveInAddBuffer

ws2_32

WSAGetLastError
ioctlsocket
__WSAFDIsSet
gethostname
sendto
listen
accept
getpeername
bind
getsockname
ntohs
inet_addr
recvfrom
send
closesocket
socket
gethostbyname
htons
connect
setsockopt
WSAIoctl
WSACleanup
inet_ntoa
select
recv
WSAStartup

comctl32

ord17

oledlg

ord8

olepro32

ord253

wininet

InternetGetConnectedState

psapi

GetModuleFileNameExA

wtsapi32

WTSQuerySessionInformationA
WTSFreeMemory

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

ole32

OleSetClipboard
CoRevokeClassObject
CoRegisterClassObject
CoRegisterMessageFilter
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateBindCtx
OleFlushClipboard
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoDisconnectObject
OleRun
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleIsCurrentClipboard
OleDuplicateData
CreateStreamOnHGlobal
ReleaseStgMedium

oleaut32

SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCopy
VarBstrFromDate
VarDateFromStr
VarBstrFromCy
VarCyFromStr
SysStringByteLen
SysAllocStringByteLen
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocString
SysReAllocStringLen
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString
LoadTypeLi
SysStringLen
SafeArrayDestroyDescriptor

Exports

Exports

Feer

Sections

.text
Size: 524KB - Virtual size: 521KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

AAA
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9acbb33ec47b5c3e08d977c727d5ec8f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msvfw32

advapi32

shell32

shlwapi

winmm

ws2_32

comctl32

oledlg

olepro32

wininet

psapi

wtsapi32

winspool.drv

comdlg32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 524KB - Virtual size: 521KB

AAA Size: 12KB - Virtual size: 9KB

.rdata Size: 64KB - Virtual size: 63KB

.data Size: 44KB - Virtual size: 62KB

.idata Size: 20KB - Virtual size: 19KB

.rsrc Size: 44KB - Virtual size: 43KB

.reloc Size: 32KB - Virtual size: 30KB

.text
Size: 524KB - Virtual size: 521KB

AAA
Size: 12KB - Virtual size: 9KB

.rdata
Size: 64KB - Virtual size: 63KB

.data
Size: 44KB - Virtual size: 62KB

.idata
Size: 20KB - Virtual size: 19KB

.rsrc
Size: 44KB - Virtual size: 43KB

.reloc
Size: 32KB - Virtual size: 30KB