9b80438fea39c5ccd070078eedad59f9c69bd7377d58944cc2cab7d2c41d499f

Sharing

Copy URL Twitter E-mail

General

Target

9b80438fea39c5ccd070078eedad59f9c69bd7377d58944cc2cab7d2c41d499f
Size

2.1MB
MD5

8368d8fb9ed8868c74959121f1a1c7f4
SHA1

0005f1a494f0dd0c36eb1f2f1fb14f3f6cef64d9
SHA256

9b80438fea39c5ccd070078eedad59f9c69bd7377d58944cc2cab7d2c41d499f
SHA512

992ad4f162d3c8063901401fc4fbdab8106f6225834feda6705df93b53152be9a30f8e8dc0df56f44d7b0750aac19ee62acfa56a21bf44206fbd9500aa064048
SSDEEP

24576:X+Zqwd2GDPW/HqWhRBbkhAS1lzFKE6wOgAogfECY+8wTcmSwAv:X+kwd2RIxj0hbzVbTR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b80438fea39c5ccd070078eedad59f9c69bd7377d58944cc2cab7d2c41d499f

Files

9b80438fea39c5ccd070078eedad59f9c69bd7377d58944cc2cab7d2c41d499f
.exe windows:4 windows x86 arch:x86

d75106cc3546319391165ba28554aa58

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
HeapSize
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
SetEnvironmentVariableA
GetDriveTypeA
ExitThread
GetFileType
FindResourceA
GlobalAddAtomA
GetProfileStringA
InterlockedExchange
SetStdHandle
HeapReAlloc
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RaiseException
HeapAlloc
HeapFree
RtlUnwind
GetStartupInfoW
SetErrorMode
FindResourceExW
GetCurrentDirectoryW
CopyFileW
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetThreadLocale
GetStringTypeExW
GetVolumeInformationW
UnlockFile
LockFile
DuplicateHandle
GlobalFlags
lstrcmpiW
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GetProcessVersion
lstrcmpA
lstrcmpiA
GetCurrentThread
SuspendThread
GlobalGetAtomNameW
GetDiskFreeSpaceW
GetFileTime
SetFileTime
GetFullPathNameW
GetFileAttributesW
GetProfileIntW
MulDiv
FindNextFileW
SetLastError
InterlockedDecrement
InterlockedIncrement
GetModuleHandleA
LoadLibraryA
GetVersion
lstrcatW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
lstrcpyW
FindResourceW
ExitProcess
SizeofResource
LoadResource
LockResource
GlobalSize
FlushFileBuffers
WriteFile
ReadFile
SetFilePointer
SetEndOfFile
GetFileSize
GetExitCodeProcess
CreateProcessW
TerminateProcess
TerminateThread
GetTempFileNameW
WritePrivateProfileStringW
GetPrivateProfileIntW
lstrlenA
CreateEventW
CreateThread
WaitForMultipleObjects
SetEvent
GetDriveTypeW
GetWindowsDirectoryW
GetTickCount
WaitForSingleObject
MultiByteToWideChar
WideCharToMultiByte
GetPrivateProfileStringW
Sleep
GetTempPathW
CreateDirectoryW
FindFirstFileW
FindClose
GetShortPathNameW
GetCurrentProcess
GetLocaleInfoW
GetNumberFormatW
FormatMessageW
LocalFree
MoveFileW
DeleteFileW
GlobalAlloc
GetModuleHandleW
GetModuleFileNameW
lstrlenW
GetVersionExW
lstrcpynW
LoadLibraryW
GetProcAddress
FreeLibrary
SetThreadPriority
ResumeThread
lstrcmpW
CreateMutexW
GetLastError
CreateFileW
CloseHandle
GlobalLock
GlobalUnlock
GlobalFree
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetCurrentDirectoryA
InitializeCriticalSection

user32

SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpW
wsprintfW
GetClassInfoW
RegisterClassW
TrackPopupMenu
GetWindowTextLengthW
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
UnhookWindowsHookEx
DefWindowProcW
GetMessageTime
GetMessagePos
GetForegroundWindow
IntersectRect
SystemParametersInfoW
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
MessageBoxW
DrawIconEx
FillRect
CallWindowProcW
GetMenuDefaultItem
CreatePopupMenu
FindWindowW
SetTimer
KillTimer
LoadIconW
PeekMessageW
IsWindowUnicode
GetMessageW
TranslateMessage
DispatchMessageW
GetMenuStringW
InsertMenuW
ExitWindowsEx
EmptyClipboard
SetClipboardData
FindWindowExW
GetWindowLongW
SetWindowLongW
GetWindowTextW
GetDlgCtrlID
SetWindowPos
GetMenuItemCount
GetMenuItemID
DrawFrameControl
IsWindowEnabled
SetFocus
RegisterWindowMessageW
GetFocus
OpenClipboard
IsClipboardFormatAvailable
GetClipboardData
GetScrollRange
ReleaseDC
DrawFocusRect
SetCursor
SetCursorPos
ClientToScreen
MapDialogRect
TrackPopupMenuEx
DrawAnimatedRects
GetSystemMenu
AppendMenuW
DeleteMenu
RemovePropW
EnableWindow
SendMessageW
UnregisterClassW
GetWindowTextLengthA
HideCaret
ShowCaret
ExcludeUpdateRgn
GetWindowTextA
SetClassLongW
SetPropW
GetMenu
SetMenu
DestroyMenu
LoadImageW
DestroyIcon
GetDesktopWindow
GetWindow
GetPropW
IsIconic
IsWindowVisible
GetLastActivePopup
UpdateWindow
GetDC
LoadMenuW
GetSubMenu
SetMenuDefaultItem
ShowScrollBar
SetScrollInfo
GetScrollInfo
ScrollWindow
DeferWindowPos
EqualRect
AdjustWindowRectEx
MessageBeep
GetNextDlgGroupItem
CopyAcceleratorTableW
SetParent
SetWindowContextHelpId
CharNextW
SetCapture
PostMessageW
GetSystemMetrics
IsWindow
DestroyCursor
LoadBitmapW
LoadCursorW
GetCursorPos
ScreenToClient
PtInRect
InflateRect
GetParent
GrayStringW
DrawTextW
TabbedTextOutW
CopyRect
BeginDeferWindowPos
GetClientRect
OffsetRect
InvalidateRect
DrawTextA
GetClassInfoA
DefDlgProcA
DefWindowProcA
CharNextA
CallWindowProcA
RemovePropA
SetWindowsHookExA
GetWindowLongA
SendMessageA
GetClassNameA
SetWindowLongA
SetPropA
GetPropA
SetForegroundWindow
GetKeyState
GetWindowRect
EndDeferWindowPos
LockWindowUpdate
GetDCEx
PostThreadMessageW
CharUpperW
GetClassNameW
GetSysColorBrush
SetRect
RegisterClipboardFormatW
IsZoomed
ShowOwnedPopups
PostQuitMessage
ValidateRect
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
ReleaseCapture
TranslateAcceleratorW
LoadAcceleratorsW
SetRectEmpty
EndPaint
BeginPaint
GetSysColor
GetAsyncKeyState
GetWindowDC
LoadStringW
WindowFromPoint
wvsprintfW
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuW
MapWindowPoints
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
SetDlgItemTextW
GetDlgItemInt
CheckDlgButton
SendDlgItemMessageW
CloseClipboard
SendDlgItemMessageA
SetMenuItemBitmaps

gdi32

SetTextColor
CombineRgn
CreateRectRgn
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
SetBkMode
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreatePatternBrush
GetMapMode
SetRectRgn
DPtoLP
GetTextMetricsW
GetCharWidthW
CreateFontW
LPtoDP
CopyMetaFileW
EnumFontFamiliesExW
SetBkColor
SaveDC
GetClipBox
CreateRectRgnIndirect
ExtSelectClipRgn
SetStretchBltMode
StretchDIBits
SetDIBitsToDevice
RestoreDC
CreateDIBSection
DeleteDC
PatBlt
SelectObject
DeleteObject
CreateSolidBrush
GetTextExtentPoint32W
CreateBitmap
GetStockObject
GetObjectW
CreateFontIndirectW
GetBkMode
GetBkColor
GetTextColor
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
BitBlt
CreateCompatibleDC
CreateDIBitmap
ExtTextOutA
GetTextExtentPointA
CreateCompatibleBitmap

comdlg32

GetOpenFileNameW
GetSaveFileNameW
GetFileTitleW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

RegCloseKey
RegSetValueExW
RegCreateKeyW
RegSetValueW
RegDeleteKeyW
RegEnumKeyW
RegOpenKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegDeleteValueW
SetFileSecurityW
GetFileSecurityW
RegQueryValueW

shell32

DragQueryFileW
ShellExecuteW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetMalloc
SHGetDesktopFolder
Shell_NotifyIconW
SHFileOperationW
ExtractIconW
SHGetFileInfoW
DragAcceptFiles
DragFinish
SHGetSpecialFolderPathW

comctl32

ImageList_Draw
ImageList_AddMasked
_TrackMouseEvent
ImageList_GetImageInfo
ord17
ImageList_Destroy
ImageList_Create
PropertySheetW
DestroyPropertySheetPage
CreatePropertySheetPageW
ImageList_DrawIndirect

oledlg

OleUIBusyW

ole32

CoTaskMemAlloc
CoGetClassObject
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CLSIDFromProgID
CLSIDFromString
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
OleDuplicateData
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
OleGetClipboard
ReleaseStgMedium
CoTaskMemFree
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
CoInitialize
CoCreateInstance
CoUninitialize
CoCreateGuid
StgCreateDocfileOnILockBytes
CoRegisterMessageFilter

olepro32

ord253

oleaut32

VariantChangeType
VariantCopy
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocStringLen
VariantClear
SysAllocString
SysFreeString
VariantTimeToSystemTime
SysStringLen

shlwapi

PathIsURLW
PathRemoveFileSpecW
PathFindExtensionW
PathFindFileNameW
PathIsDirectoryW
PathFileExistsW

winmm

timeSetEvent
timeKillEvent

wininet

InternetCrackUrlW
InternetQueryOptionW
HttpQueryInfoW
InternetReadFile
InternetCloseHandle
HttpSendRequestW
HttpOpenRequestW
InternetConnectW
InternetOpenW
InternetSetOptionW

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 224KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 384KB - Virtual size: 399KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 253KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d75106cc3546319391165ba28554aa58

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

shlwapi

winmm

wininet

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 224KB - Virtual size: 221KB

.data Size: 384KB - Virtual size: 399KB

.rsrc Size: 256KB - Virtual size: 253KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 224KB - Virtual size: 221KB

.data
Size: 384KB - Virtual size: 399KB

.rsrc
Size: 256KB - Virtual size: 253KB