2a1d5ce0122c0da7cab8b25cb869a1f416771b93f0d76966760aad5d85685e39

Sharing

Copy URL

Twitter E-mail

General

Target

2a1d5ce0122c0da7cab8b25cb869a1f416771b93f0d76966760aad5d85685e39
Size

9.7MB
MD5

b1a22fb85d64f414f440045c320d781e
SHA1

b818c4ec49a690fdcc18cb73991878fb04661f06
SHA256

2a1d5ce0122c0da7cab8b25cb869a1f416771b93f0d76966760aad5d85685e39
SHA512

83c42be27b750ad73b2994ef14d5b919c096e2f328f22b257bae5aba55b091e6645bf0879477481c358cd67ba54d79b4f09adfc791ed13bb1a02deadd44c8021
SSDEEP

98304:5XgJhss73Jvs3yDvtsAFcqpPnQNu0CfrPPFFlr+EuQGARdi2j:5XgkqJU3Q+qtKu0CLFFlrx1Y2j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a1d5ce0122c0da7cab8b25cb869a1f416771b93f0d76966760aad5d85685e39

Files

2a1d5ce0122c0da7cab8b25cb869a1f416771b93f0d76966760aad5d85685e39
.exe windows:4 windows x86 arch:x86

3a074d270fa07212679eb6ec68225695

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

t:\pub\x86\ship\0\mspub.pdb

Imports

msvcr80

memcpy
_wsplitpath_s
swscanf_s
atoi
wcsrchr
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_controlfp_s
_invoke_watson
_crt_debugger_hook
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
_except_handler4_common
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
memset
fwprintf_s
fclose
wcscpy_s
sprintf_s
_CxxThrowException
strncpy_s
floor
_CIcos
wcstol
_vsnprintf
strncmp
swprintf_s
bsearch
srand
rand
_CIpow
strtol
strchr
_vsnwprintf
wcschr
iswxdigit
iswdigit
towupper
_wtoi
iswpunct
iswcntrl
_wcsnicmp
wcstoul
qsort
_wcsupr_s
iswspace
wcstok_s
_CIsqrt
ceil
memmove
fopen_s
_CIsin
vsprintf_s
vswprintf_s
_wmakepath_s
_getdiskfree
wcsstr
iswascii

kernel32

GetStringTypeExW
GetUserDefaultLCID
GetSystemDefaultLCID
GetSystemDirectoryW
CreateProcessW
CompareFileTime
GetDiskFreeSpaceA
GetCurrencyFormatW
GetNumberFormatW
WaitForSingleObject
CreateEventW
ResetEvent
GetCurrentThread
OpenThread
GlobalHandle
ReadDirectoryChangesW
GetOverlappedResult
EnumSystemLocalesW
lstrlenW
VirtualProtect
QueryPerformanceCounter
GetProcessHeap
CreateProcessA
GetTempFileNameA
GetTempPathA
HeapFree
HeapAlloc
InterlockedExchange
InterlockedCompareExchange
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetUserGeoID
GetGeoInfoW
GetLocaleInfoW
IsValidCodePage
GetFileSize
GetCurrentProcessId
FileTimeToLocalFileTime
LoadLibraryExA
OpenFile
LoadLibraryExW
FileTimeToSystemTime
WaitForMultipleObjects
FindNextChangeNotification
FindCloseChangeNotification
FindFirstChangeNotificationW
GetUserDefaultLangID
GetSystemTimeAsFileTime
CopyFileW
CreateFileW
SetFileTime
LocalAlloc
GetFileTime
CopyFileExW
GetFileAttributesExW
GlobalReAlloc
GetLocalTime
GetSystemDefaultLangID
ExpandEnvironmentStringsW
MoveFileW
SetFileAttributesW
GetTempFileNameW
GetFileType
DeviceIoControl
GetDiskFreeSpaceW
ExitProcess
FormatMessageW
GetOEMCP
GetACP
WideCharToMultiByte
MultiByteToWideChar
FreeLibrary
GlobalSize
WriteFile
DeleteFileW
SetFilePointer
ReadFile
InitializeCriticalSection
GetCommandLineW
AddAtomW
GetSystemTime
SystemTimeToFileTime
OpenEventW
SetEvent
CreateFileMappingW
MapViewOfFile
OpenProcess
DuplicateHandle
UnmapViewOfFile
CloseHandle
DeleteCriticalSection
GetSystemInfo
GetCurrentProcess
SetProcessWorkingSetSize
GetDriveTypeW
GetPrivateProfileStringW
IsDBCSLeadByteEx
FindNextFileW
FindClose
Sleep
EnterCriticalSection
LeaveCriticalSection
SetCurrentDirectoryW
SetErrorMode
FindFirstFileW
LoadLibraryA
GlobalMemoryStatus
GlobalFlags
FindResourceW
LoadResource
LockResource
SizeofResource
FreeResource
GetCurrentThreadId
OutputDebugStringA
GetModuleFileNameW
SetLastError
GetLastError
LoadLibraryW
GetTickCount
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
RaiseException

user32

ValidateRect
SetPropW
MsgWaitForMultipleObjects
GetPropW
wsprintfA
GetMenuItemCount
DefDlgProcW
NotifyWinEvent
GetWindowThreadProcessId
GetQueueStatus
UnregisterClassW
CopyIcon
DestroyMenu
TrackPopupMenuEx
SetMenuItemInfoW
GetMenuItemInfoW
GetSubMenu
LoadMenuW
DrawTextW
RegisterClassExW
RemoveMenu
GetMenu
SetMenu
DrawMenuBar
GetClassNameA
CreateDialogIndirectParamW
CreateDialogParamW
GetCursor
GetShellWindow
CharLowerA
EnumWindows
AppendMenuW
MessageBoxW
GetWindowTextW
GetKeyboardLayoutList
GetDlgItemTextW
GetDlgItemTextA
PostMessageW
SetDlgItemTextW
SetDlgItemTextA
PostMessageA
OpenIcon
InvertRect
LoadImageW
DrawIconEx
CopyRect
OpenClipboard
CloseClipboard
GetMessagePos
ChangeClipboardChain
CreateCaret
SetCaretPos
DestroyCaret
GetInputState
InSendMessage
FlashWindow
CharToOemBuffA
EnableScrollBar
GetSystemMenu
EnableMenuItem
SetClipboardViewer
RegisterClipboardFormatW
LoadAcceleratorsW
GetWindowPlacement
SetWindowPlacement
SetForegroundWindow
PostQuitMessage
GetCaretBlinkTime
SendNotifyMessageW
IsWindowUnicode
BeginDeferWindowPos
EndDeferWindowPos
TranslateAcceleratorW
CopyAcceleratorTableW
IsZoomed
MonitorFromRect
DeferWindowPos
GetAsyncKeyState
DrawFrameControl
MapWindowPoints
ScrollWindow
UnionRect
SetRectEmpty
GetDlgCtrlID
IsWindowEnabled
IsWindow
GetWindowDC
GetScrollPos
SetScrollPos
GetScrollInfo
SetScrollInfo
GetUpdateRgn
IsRectEmpty
GetKeyboardLayout
SetScrollRange
SystemParametersInfoA
GetCapture
GetWindow
FrameRect
SetCursorPos
ReleaseCapture
SetCapture
ScrollWindowEx
SystemParametersInfoW
PtInRect
MessageBeep
BringWindowToTop
GetScrollRange
RegisterWindowMessageW
VkKeyScanW
GetForegroundWindow
GetDoubleClickTime
CheckDlgButton
CallWindowProcW
CreatePopupMenu
InsertMenuItemW
GetWindowTextLengthW
DrawFocusRect
GetSysColor
SetFocus
GetActiveWindow
SetActiveWindow
DialogBoxIndirectParamW
SendMessageA
GetKeyState
SendMessageW
GetSystemMetrics
MoveWindow
DrawEdge
MonitorFromWindow
GetMonitorInfoW
IsIconic
IsDlgButtonChecked
GetClassNameW
EnableWindow
GetFocus
GetWindowLongW
EnumChildWindows
SetWindowLongW
ScreenToClient
GetLastActivePopup
IsDialogMessageW
TranslateMessage
DispatchMessageW
GetCursorPos
IsChild
SetTimer
GetClassInfoW
LoadIconW
LoadCursorW
SetWindowsHookExW
CallNextHookEx
IsWindowVisible
DefWindowProcW
DrawIcon
WindowFromPoint
ShowWindow
CreateWindowExW
RegisterClassW
SetWindowPos
SetWindowRgn
KillTimer
DestroyWindow
DestroyIcon
GetDesktopWindow
UnhookWindowsHookEx
PeekMessageW
GetParent
InvalidateRgn
GetUpdateRect
EqualRect
InvalidateRect
UpdateWindow
SetCursor
InflateRect
GetSysColorBrush
FillRect
OffsetRect
ClientToScreen
GetWindowRect
IsMenu
TranslateAcceleratorA
SetParent
CreateMenu
GetMenuStringW
InsertMenuW
EndDialog
BeginPaint
EndPaint
LoadBitmapW
CheckRadioButton
GetDlgItem
GetClientRect
GetDC
ReleaseDC
IntersectRect
SetRect
RedrawWindow

advapi32

RegCloseKey
RegDeleteValueW
RegEnumValueW
RegQueryValueExW
RegSetValueExW
RegQueryValueExA
RegOpenKeyExA
CryptReleaseContext
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
CryptAcquireContextW
RegOpenKeyExW
RegOpenKeyA

winspool.drv

SetJobW

shell32

SHGetSpecialFolderPathW
ShellExecuteExW
DragQueryFileW
ord195
SHGetPathFromIDListW
SHGetFileInfoW
SHGetSpecialFolderLocation

msimg32

TransparentBlt
AlphaBlend

rpcrt4

RpcCancelThread

shlwapi

wnsprintfW
PathFindExtensionW
SHCreateStreamOnFileW
PathGetDriveNumberW
PathQuoteSpacesW
PathFindFileNameW
StrFormatByteSizeW
PathFileExistsW
PathRemoveFileSpecW
PathIsDirectoryW
StrCmpIW
StrChrW
wnsprintfA

oleacc

LresultFromObject
AccessibleObjectFromWindow

gdi32

SetWindowExtEx
SetWindowOrgEx
EnumMetaFile
DeleteObject
PlayMetaFileRecord
RealizePalette
GetObjectType
SelectPalette
RestoreDC
SaveDC
LPtoDP
DPtoLP
GetViewportOrgEx
LineTo
MoveToEx
Rectangle
SelectObject
GetStockObject
DeleteDC
StretchBlt
SetStretchBltMode
GetObjectW
CreateCompatibleDC
CreateHatchBrush
SetBkColor
SetTextColor
SetROP2
BitBlt
SetViewportOrgEx
SetViewportExtEx
SetMapMode
CreateCompatibleBitmap
GetDeviceCaps
Polygon
Polyline
Arc
Chord
Pie
GetClipBox
GetCurrentObject
StretchDIBits
GetViewportExtEx
PlayMetaFile
SetBkMode
CreatePolygonRgn
GetWindowExtEx
GetTextColor
GetBkColor
RoundRect
PolyPolygon
Ellipse
PatBlt
CreateRectRgn
CombineRgn
CreateRoundRectRgn
OffsetRgn
FrameRgn
FillRgn
SetMetaFileBitsEx
GetTextAlign
GetEnhMetaFileBits
GetMetaFileBitsEx
SelectClipPath
EndPath
BeginPath
SetPixelV
SetTextCharacterExtra
CreateBitmap
SelectClipRgn
GetTextExtentPointW
CreateFontW
Escape
CreateFontIndirectA
GetLayout
SetTextAlign
CreatePen
GetMapMode
GetTextExtentExPointW
GetBkMode
StrokePath
StrokeAndFillPath
ExtCreatePen
SetWorldTransform
SetGraphicsMode
CloseEnhMetaFile
CreateEnhMetaFileW
DeleteEnhMetaFile
IntersectClipRect
CloseFigure
CreateDIBitmap
ExtTextOutW
CreateDIBPatternBrushPt
GetPaletteEntries
GetNearestPaletteIndex
CreateDCW
GetDIBits
GdiFlush
CreateDIBSection
PlayEnhMetaFile
PtVisible
ExtSelectClipRgn
GetFontData
EnumFontFamiliesExW
TranslateCharsetInfo
CloseMetaFile
CreateMetaFileW
GetTextCharsetInfo
GetOutlineTextMetricsW
GetTextExtentPoint32W
CreateBitmapIndirect
GetPixel
CreateRectRgnIndirect
GetPath
GetClipRgn
EnumFontFamiliesExA
SetEnhMetaFileBits
SetRectRgn
ExcludeClipRect
PlayEnhMetaFileRecord
EnumEnhMetaFile
GetEnhMetaFileHeader
GetRgnBox
SetPixel
SetICMMode
CreateBrushIndirect
CreatePenIndirect
MaskBlt
SetDIBitsToDevice
ModifyWorldTransform
GetWorldTransform
GetGraphicsMode
PlgBlt
GdiComment
GetNearestColor
DeleteMetaFile
AbortDoc
ExtEscape
SetAbortProc
GdiSetBatchLimit
GetBitmapDimensionEx
GetEnhMetaFileW
StartPage
EndPage
EndDoc
CancelDC
GetTextMetricsW
UnrealizeObject
GetWindowOrgEx
SetBrushOrgEx
CreatePatternBrush
CreateFontIndirectW
CreateSolidBrush

ole32

ReadClassStm
StgIsStorageFile
CoRegisterClassObject
CoRevokeClassObject
CoDisconnectObject
CoUnmarshalInterface
CoRegisterMessageFilter
OleSetClipboard
CoGetMalloc
CreateOleAdviseHolder
CoCreateInstance
DoDragDrop
RegisterDragDrop
RevokeDragDrop
OleSetMenuDescriptor
CreateBindCtx
CoCreateGuid
CLSIDFromProgID
CoUninitialize
CoInitialize
ProgIDFromCLSID
CoTaskMemFree
OleIsCurrentClipboard
OleFlushClipboard
CoMarshalInterface
CoFreeUnusedLibraries
OleSave
OleGetClipboard
ReadClassStg
ReleaseStgMedium
CreateStreamOnHGlobal
CoLockObjectExternal
CreateDataAdviseHolder
OleIsRunning
GetHGlobalFromILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoIsOle1Class
MkParseDisplayName
StringFromCLSID
CoTreatAsClass
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
ReadFmtUserTypeStg
CreateGenericComposite
CreateItemMoniker
CreateFileMoniker
OleQueryCreateFromData
GetConvertStg
OleCreateMenuDescriptor
OleCreateDefaultHandler
OleLoad
OleRun
OleDestroyMenuDescriptor
OleSetContainedObject
OleNoteObjectVisible
OleConvertOLESTREAMToIStorage
OleCreateFromData
OleCreateStaticFromData
OleCreateLinkFromData
OleCreate
CLSIDFromString
OleCreateFromFile
OleCreateLink
OleUninitialize
OleBuildVersion
OleInitialize
CoGetCurrentProcess
WriteClassStm
StringFromGUID2

Sections

.text
Size: 6.6MB - Virtual size: 6.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 901KB - Virtual size: 947KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 904KB - Virtual size: 908KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3a074d270fa07212679eb6ec68225695

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcr80

kernel32

user32

advapi32

winspool.drv

shell32

msimg32

rpcrt4

shlwapi

oleacc

gdi32

ole32

Sections

.text Size: 6.6MB - Virtual size: 6.6MB

.data Size: 901KB - Virtual size: 947KB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.reloc Size: 904KB - Virtual size: 908KB

.text
Size: 6.6MB - Virtual size: 6.6MB

.data
Size: 901KB - Virtual size: 947KB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

.reloc
Size: 904KB - Virtual size: 908KB