8d607ebc42c93fd143bf120db439e13daff3635ceca7e3dbc1b5f1d6c152d210

Sharing

Copy URL Twitter E-mail

General

Target

8d607ebc42c93fd143bf120db439e13daff3635ceca7e3dbc1b5f1d6c152d210
Size

14.1MB
MD5

7c34a6a43a626ef39930a18ced99d61a
SHA1

51da49b8aa079a033c922264562b39147d97b69d
SHA256

8d607ebc42c93fd143bf120db439e13daff3635ceca7e3dbc1b5f1d6c152d210
SHA512

227eaacba2627501c817e76e5f27b3fe6967ac6e5aad3e025683d8d546313b7c0949f8e8fd5470a69bd71a08fa65575c011f4f31c467afd2b0eb2ba5ec1d06b2
SSDEEP

196608:Hd7/DfitF2tRVZNkPNyjqWdZTJBePtVXuXQuDKKnd5EBO+xKmIz0kr94TT7:9/fg4L4VypdzBeV8JDKKkxKmIz0Qi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d607ebc42c93fd143bf120db439e13daff3635ceca7e3dbc1b5f1d6c152d210

Files

8d607ebc42c93fd143bf120db439e13daff3635ceca7e3dbc1b5f1d6c152d210
.exe windows:6 windows x86 arch:x86

449a2abce0409a95c5a90dc25470c8ca

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OutputDebugStringW
lstrlenW
lstrcmpiW
lstrcpyW
GetTickCount
FreeLibrary
LoadLibraryW
GetProcAddress
GlobalLock
GlobalAlloc
GlobalUnlock
QueryPerformanceCounter
QueryPerformanceFrequency
HeapAlloc
HeapFree
GetProcessHeap
GetCurrentThreadId
FindResourceW
LoadResource
GetModuleHandleW
SizeofResource
LockResource
GetDriveTypeW
MoveFileExW
SetEnvironmentVariableW
Sleep
CopyFileW
GetSystemWow64DirectoryW
SetCurrentDirectoryW
FormatMessageA
GetModuleFileNameA
LoadLibraryExA
OutputDebugStringA
CreateMutexW
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
ReleaseMutex
WaitForMultipleObjects
LocalFree
SetEndOfFile
SetEnvironmentVariableA
WriteConsoleW
SetStdHandle
EnumSystemLocalesEx
IsValidLocaleName
LCMapStringEx
GetUserDefaultLocaleName
CreateThread
EnterCriticalSection
GetTimeFormatEx
GetLocaleInfoEx
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount64
LoadLibraryExW
GetTimeZoneInformation
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreatePipe
GetCurrentProcessId
GetConsoleCP
FlushFileBuffers
GetStartupInfoW
InitOnceExecuteOnce
GetFileType
SetFilePointer
ReadConsoleW
GetConsoleMode
GetStdHandle
HeapSize
SetLastError
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
IsDebuggerPresent
RaiseException
GetCommandLineA
GetModuleHandleExW
ExitProcess
GetSystemTimeAsFileTime
AreFileApisANSI
CreateProcessA
DuplicateHandle
GetTempPathA
RtlUnwind
IsProcessorFeaturePresent
GetFileAttributesExW
HeapReAlloc
DecodePointer
EncodePointer
TlsAlloc
DeleteCriticalSection
CreateEventW
FindClose
GetTempPathW
CreateFileW
GetModuleFileNameW
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
SetEvent
InterlockedDecrement
InterlockedIncrement
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
GetLastError
TerminateProcess
GetExitCodeProcess
GetVersionExW
OpenProcess
K32GetModuleFileNameExW
WaitForSingleObject
GetCurrentProcess
SetFileAttributesW
DeleteFileW
CloseHandle
FindNextFileW
GetDateFormatEx
RemoveDirectoryW
ReadFile
GetFileAttributesW
WriteFile
CreateDirectoryW
SetFilePointerEx
FindFirstFileW
MultiByteToWideChar
CompareStringEx
WideCharToMultiByte

user32

MapWindowPoints
GetSystemMetrics
GetActiveWindow
MoveWindow
PtInRect
ExitWindowsEx
MessageBoxW
EndPaint
PostThreadMessageW
DispatchMessageW
TranslateMessage
AnimateWindow
UpdateLayeredWindow
SetWindowRgn
SetCapture
GetFocus
SetFocus
BeginPaint
InvalidateRect
ReleaseCapture
UpdateWindow
GetCaretBlinkTime
IsIconic
TrackMouseEvent
CallNextHookEx
IsWindowEnabled
LoadIconW
EnableWindow
GetTopWindow
GetWindowLongW
SetWindowLongW
SetTimer
KillTimer
GetWindowRect
SetActiveWindow
GetCursorPos
SetWindowsHookExW
UnhookWindowsHookEx
FillRect
DrawTextW
SetCursor
CloseClipboard
GetKeyState
IsClipboardFormatAvailable
LoadCursorW
GetClipboardData
EmptyClipboard
OpenClipboard
SetClipboardData
DestroyWindow
RegisterClassExW
CreateWindowExW
DefWindowProcW
IsWindow
OffsetRect
IntersectRect
SendMessageW
GetClientRect
PeekMessageW
SetWindowPos
ShowWindow
IsWindowVisible
ClientToScreen
GetMessageW
PostQuitMessage
PostMessageW
ScreenToClient

gdi32

CreateRoundRectRgn
SetBkMode
SaveDC
RestoreDC
BitBlt
CreateDIBSection
StretchBlt
GetCharWidth32W
GetClipRgn
SetTextColor
SelectClipRgn
CreateRectRgnIndirect
GetTextMetricsW
DeleteDC
SelectObject
CreateCompatibleDC
CreateSolidBrush
CreateFontIndirectW
DeleteObject
GetObjectW
GetStockObject
CreateRectRgn

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW
RegCloseKey
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExW
RegCreateKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
SetSecurityInfo
GetSecurityDescriptorSacl
RegSetValueExW

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetSpecialFolderPathW
ShellExecuteW
ShellExecuteExW

ole32

CoCreateInstance
OleUninitialize
OleInitialize
CoInitialize
CoUninitialize
RevokeDragDrop

shlwapi

PathIsDirectoryEmptyW
SHDeleteKeyW

imm32

ImmGetContext
ImmGetDefaultIMEWnd
ImmNotifyIME
ImmReleaseContext

Sections

.text
Size: 514KB - Virtual size: 514KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 417KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13.5MB - Virtual size: 13.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data
.rsrc/GROUP_ICON/2
.rsrc/ICON/1.ico
.rsrc/MANIFEST/1
.xml
.rsrc/_6ROOMRESC/111
.rsrc/_6ROOMRESC/113
.rsrc/_6ROOMRESC/114
.rsrc/_6ROOMRESC/115
.rsrc/_6ROOMRESC/116
.rsrc/version.txt
.text

Sharing

General

Malware Config

Signatures

Files

449a2abce0409a95c5a90dc25470c8ca

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

shlwapi

imm32

Sections

.text Size: 514KB - Virtual size: 514KB

.data Size: 12KB - Virtual size: 417KB

.rsrc Size: 13.5MB - Virtual size: 13.5MB

.text
Size: 514KB - Virtual size: 514KB

.data
Size: 12KB - Virtual size: 417KB

.rsrc
Size: 13.5MB - Virtual size: 13.5MB