6fdd09fe0ad91162851c177ef1a54f7e8ebc7711b609395109f7f369e9501e6f

Sharing

Copy URL Twitter E-mail

General

Target

6fdd09fe0ad91162851c177ef1a54f7e8ebc7711b609395109f7f369e9501e6f
Size

2.3MB
MD5

798ba85bf4635eac428a7c83370a44ea
SHA1

ee5e86777d6fc71a211f04bfdce7e0e91bda0f9f
SHA256

6fdd09fe0ad91162851c177ef1a54f7e8ebc7711b609395109f7f369e9501e6f
SHA512

53b477ed059bf86700e8ba29f7d92a6cd2fc8744a19cd7a64060600e2fa1efa8fa16fe3eb26af5b9c1dfb6f3e1baf7001017bfaba799e756a39b465e9998892c
SSDEEP

49152:unr/cDXrW7mk1ShLLrlh/n69I/qp5dy0U3snMsL:2cDXa7m3rl969I/qp5Mz0ZL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fdd09fe0ad91162851c177ef1a54f7e8ebc7711b609395109f7f369e9501e6f

Files

6fdd09fe0ad91162851c177ef1a54f7e8ebc7711b609395109f7f369e9501e6f
.exe windows:4 windows x86 arch:x86

f1c4293126ce8f4e74d9442c6ec9e634

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

_TrackMouseEvent
FlatSB_GetScrollInfo
FlatSB_GetScrollPos
FlatSB_SetScrollInfo
FlatSB_SetScrollPos
FlatSB_SetScrollProp
ImageList_Add
ImageList_BeginDrag
ImageList_Copy
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_DrawEx
ImageList_EndDrag
ImageList_GetBkColor
ImageList_GetDragImage
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_LoadImageW
ImageList_Read
ImageList_Remove
ImageList_Replace
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_SetIconSize
ImageList_SetImageCount
ImageList_SetOverlayImage
ImageList_Write
ord17
InitializeFlatSB

kernel32

GetProcAddress
LoadLibraryA
LeaveCriticalSection
GetTickCount
EnterCriticalSection
InitializeCriticalSection
GetCommandLineA
GetStartupInfoW
CloseHandle
CompareStringA
CompareStringW
CreateDirectoryW
CreateEventW
CreateFileMappingW
CreateFileW
CreateMutexW
CreateThread
DeleteCriticalSection
EnumCalendarInfoW
EnumResourceNamesW
EnumSystemLocalesW
ExitProcess
ExitThread
FileTimeToDosDateTime
FileTimeToLocalFileTime
FindClose
FindFirstFileW
FindNextFileW
FindResourceW
FormatMessageW
FreeLibrary
FreeResource
GetACP
GetCommandLineW
GetConsoleCP
GetConsoleOutputCP
GetCPInfoExW
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetDiskFreeSpaceW
GetExitCodeThread
GetFileAttributesW
GetFileSize
GetFileType
GetFullPathNameW
GetLastError
GetLocaleInfoW
GetLocalTime
GetModuleFileNameW
GetModuleHandleW
GetPrivateProfileStringW
GetStdHandle
GetStringTypeExA
GetStringTypeExW
GetSystemInfo
GetThreadLocale
GetThreadPriority
GetVersion
GetVersionExW
GlobalAddAtomW
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomW
GlobalFree
GlobalHandle
GlobalLock
GlobalSize
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapSize
InterlockedCompareExchange
InterlockedExchange
IsValidLocale
LoadLibraryExW
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LockResource
lstrcmpW
lstrcpynW
lstrlenW
MapViewOfFile
MulDiv
MultiByteToWideChar
OpenFileMappingW
OpenMutexW
OpenProcess
QueryPerformanceCounter
RaiseException
ReadFile
ReadProcessMemory
ReleaseMutex
ResetEvent
ResumeThread
SetEndOfFile
SetErrorMode
SetEvent
SetFilePointer
SetLastError
SetThreadLocale
SetThreadPriority
SizeofResource
Sleep
SuspendThread
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualAllocEx
VirtualFree
VirtualFreeEx
VirtualProtect
VirtualQuery
VirtualQueryEx
WaitForMultipleObjectsEx
WaitForSingleObjectEx
WideCharToMultiByte
WriteFile
WritePrivateProfileStringW
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
HeapReAlloc
GetOEMCP
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetVersionExA
GetEnvironmentVariableA
TlsAlloc
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
GetCurrentProcess
TerminateProcess
GetStartupInfoA
GetModuleHandleA
RtlUnwind

user32

EndPaint
EnumChildWindows
EnumClipboardFormats
EnumThreadWindows
EnumWindows
ExitWindowsEx
FillRect
FindWindowExW
FindWindowW
FrameRect
GetActiveWindow
GetCapture
GetCaretPos
GetClassInfoExW
GetClassInfoW
GetClassLongW
GetClassNameW
GetClientRect
GetClipboardData
GetCursorPos
GetDCEx
GetDesktopWindow
GetDlgCtrlID
GetDoubleClickTime
GetFocus
GetForegroundWindow
GetIconInfo
GetKeyboardLayoutList
GetKeyboardLayoutNameW
GetKeyboardState
GetKeyNameTextW
GetKeyState
GetLastActivePopup
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoW
GetMenuItemRect
GetMenuState
GetMenuStringW
GetMessageExtraInfo
GetMessagePos
GetMessageTime
GetParent
GetPropW
GetScrollInfo
GetScrollPos
GetScrollRange
GetSubMenu
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetTopWindow
GetWindowDC
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
HideCaret
InflateRect
InsertMenuItemW
InsertMenuW
InvalidateRect
IsCharAlphaNumericW
IsCharAlphaW
IsChild
IsClipboardFormatAvailable
IsDialogMessageA
IsDialogMessageW
IsIconic
IsRectEmpty
IsWindowEnabled
IsWindowUnicode
IsWindowVisible
DestroyWindow
KillTimer
LoadBitmapW
LoadCursorW
DrawTextExW
LoadKeyboardLayoutW
LoadStringW
MapVirtualKeyW
MapWindowPoints
MessageBeep
MessageBoxA
MessageBoxIndirectW
MessageBoxW
MoveWindow
MsgWaitForMultipleObjectsEx
OffsetRect
OpenClipboard
PeekMessageA
PeekMessageW
PostMessageW
PostQuitMessage
PtInRect
RedrawWindow
RegisterClassW
RegisterClipboardFormatW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropW
ScreenToClient
ScrollWindowEx
SendMessageA
SendMessageW
SetActiveWindow
SetCapture
SetCaretPos
SetClassLongW
SetClipboardData
SetCursorPos
SetFocus
SetForegroundWindow
SetKeyboardState
SetMenuItemInfoW
SetParent
SetPropW
SetRect
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowsHookExW
SetWindowTextW
ShowCaret
ShowOwnedPopups
ShowScrollBar
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnregisterClassW
UpdateWindow
ValidateRect
WaitMessage
WindowFromDC
WindowFromPoint
VkKeyScanW
ActivateKeyboardLayout
AdjustWindowRectEx
EnableScrollBar
EnableMenuItem
EmptyClipboard
IsZoomed
DrawTextW
BeginPaint
CallNextHookEx
CallWindowProcW
CharLowerBuffA
CharLowerBuffW
CharLowerW
CharNextW
CharUpperBuffA
CharUpperBuffW
DrawMenuBar
DrawIconEx
DrawFrameControl
DrawFocusRect
DrawEdge
DrawAnimatedRects
DispatchMessageW
LoadIconW
DispatchMessageA
DestroyMenu
DestroyIcon
DestroyCursor
DestroyCaret
DeleteMenu
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreateWindowExW
CreatePopupMenu
CreateMenu
CreateIconIndirect
CreateCaret
CreateAcceleratorTableW
CountClipboardFormats
CopyRect
CopyImage
CopyIcon
CloseClipboard
ClientToScreen
CheckMenuItem
CharUpperW
EnableWindow

comdlg32

CommDlgExtendedError

shell32

ShellExecuteExW
Shell_NotifyIconW
ExtractIconW
ShellExecuteW

ole32

CoUninitialize
OleInitialize
CoTaskMemAlloc
CoInitialize
CoCreateInstance
OleUninitialize
CoTaskMemFree
CreateStreamOnHGlobal

oleaut32

VariantCopy
VariantClear
VariantChangeType
SysReAllocStringLen
SysFreeString
SysAllocStringLen
GetErrorInfo
VariantInit

Sections

.text
Size: 768KB - Virtual size: 766KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.dhead4
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 400KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ehead4
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f1c4293126ce8f4e74d9442c6ec9e634

Headers

File Characteristics

Imports

comctl32

kernel32

user32

comdlg32

shell32

ole32

oleaut32

Sections

.text Size: 768KB - Virtual size: 766KB

.dhead4 Size: 12KB - Virtual size: 11KB

.data Size: 16KB - Virtual size: 21KB

.rsrc Size: 400KB - Virtual size: 400KB

.ehead4 Size: 1.2MB - Virtual size: 1.2MB

.text
Size: 768KB - Virtual size: 766KB

.dhead4
Size: 12KB - Virtual size: 11KB

.data
Size: 16KB - Virtual size: 21KB

.rsrc
Size: 400KB - Virtual size: 400KB

.ehead4
Size: 1.2MB - Virtual size: 1.2MB