94f3d47d5662c8069778aea99bb046714c2e6aa44e676158139e40c58fffb69a

Sharing

Copy URL Twitter E-mail

General

Target

94f3d47d5662c8069778aea99bb046714c2e6aa44e676158139e40c58fffb69a
Size

4.5MB
MD5

e8800a4df23222fa9f9d99c67a19930f
SHA1

2a5f13a88df7bac8239a419cdcf7ffdca93f8798
SHA256

94f3d47d5662c8069778aea99bb046714c2e6aa44e676158139e40c58fffb69a
SHA512

2e694779488fada45ffe400d549b6f1777bcd4db79ede8ef4d35a00022bf34ded73bfac9dbdff7721540a8bb6f67a587eca89a28d8d12e0c013b99b46e77a058
SSDEEP

98304:EWgzuBPTjP3LN4S7eoiCCt7qVp0t2C/L4A4UTt1Bg+H:EWgCBLjPbyZtGp1O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94f3d47d5662c8069778aea99bb046714c2e6aa44e676158139e40c58fffb69a

Files

94f3d47d5662c8069778aea99bb046714c2e6aa44e676158139e40c58fffb69a
.exe windows:5 windows x86 arch:x86

e8303ec81c98b131b0efb0776e72e9ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmGetContext
ImmGetCompositionWindow

comctl32

ImageList_Destroy

kernel32

GetSystemTimeAsFileTime
GetTempFileNameW
GetTempPathW
GetThreadLocale
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExA
GetVersionExW
GetVolumeInformationW
GlobalAddAtomW
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomW
GlobalFlags
GlobalFree
GlobalGetAtomNameW
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsValidCodePage
IsValidLocale
LCMapStringA
LCMapStringW
LoadLibraryW
LoadResource
LocalAlloc
LocalFileTimeToFileTime
LocalFree
LocalReAlloc
LockFile
LockResource
lstrcatW
lstrcmpA
lstrcmpiW
lstrcmpW
lstrcpynW
lstrcpyW
lstrlenA
lstrlenW
MapViewOfFile
MoveFileW
MulDiv
GetSystemDirectoryW
OpenProcess
QueryPerformanceCounter
RaiseException
ReadFile
ResumeThread
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFilePointer
SetFileTime
SetHandleCount
SetLastError
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SuspendThread
SystemTimeToFileTime
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnlockFile
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
WritePrivateProfileStringW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
LoadLibraryA
LeaveCriticalSection
GetTickCount
MultiByteToWideChar
EnterCriticalSection
InitializeCriticalSection
GetCommandLineA
CreateFileA
CloseHandle
CompareStringA
CompareStringW
ConnectNamedPipe
ConvertDefaultLocale
CopyFileW
CreateDirectoryW
GetStringTypeW
GetStringTypeExW
GetStringTypeA
GetStdHandle
GetStartupInfoW
GetStartupInfoA
GetShortPathNameW
GetProcessHeap
GetProcAddress
GetPrivateProfileStringW
GetOEMCP
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
GetLogicalDriveStringsW
GetLocaleInfoW
GetLocaleInfoA
GetLastError
GetFullPathNameW
GetFileType
GetFileTime
GetFileSize
GetFileAttributesW
GetFileAttributesExW
GetEnvironmentStringsW
GetEnvironmentStrings
GetDriveTypeW
GetDriveTypeA
GetDiskFreeSpaceW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentDirectoryW
CreateEventW
GetCurrentDirectoryA
GetCPInfo
GetConsoleOutputCP
GetConsoleMode
GetConsoleCP
GetCommandLineW
GetACP
FreeResource
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FormatMessageW
FlushFileBuffers
FindResourceW
FindResourceExW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
ExitThread
ExitProcess
EnumSystemLocalesA
EnumResourceLanguagesW
DuplicateHandle
DosDateTimeToFileTime
DeleteFileW
DeleteCriticalSection
CreateThread
CreateProcessW
CreateNamedPipeW
CreateMutexW
CreateFileW
CreateFileMappingW

user32

ReleaseDC
RemovePropW
ScreenToClient
ScrollWindow
SendDlgItemMessageA
SendDlgItemMessageW
SendMessageW
SetActiveWindow
SetCapture
SetClipboardData
SetCursor
SetFocus
SetForegroundWindow
SetMenuDefaultItem
SetMenuItemBitmaps
SetParent
SetPropW
SetRect
SetRectEmpty
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetWindowLongW
SetWindowPos
SetWindowRgn
SetWindowsHookExW
SetWindowTextW
ShowOwnedPopups
ShowScrollBar
ShowWindow
SystemParametersInfoA
SystemParametersInfoW
TabbedTextOutW
TrackPopupMenu
TranslateAcceleratorW
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UnregisterClassW
UpdateWindow
ValidateRect
WindowFromPoint
WinHelpW
LoadIconW
LoadCursorW
LoadBitmapW
LoadAcceleratorsW
KillTimer
IsZoomed
IsWindowVisible
IsWindowEnabled
IsIconic
IsDialogMessageW
IsChild
InvalidateRect
IntersectRect
InsertMenuItemW
InflateRect
GrayStringW
GetWindowThreadProcessId
GetWindowTextW
ReleaseCapture
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowDC
GetSystemMetrics
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetNextDlgTabItem
GetMessageW
GetMessageTime
GetMessagePos
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenuCheckMarkDimensions
GetMenu
GetLastActivePopup
GetIconInfo
GetForegroundWindow
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetClassInfoExW
GetCapture
GetAsyncKeyState
GetActiveWindow
FindWindowW
FillRect
EqualRect
EndPaint
EndDialog
EndDeferWindowPos
EnableWindow
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextExW
DrawStateW
DrawIcon
DrawFocusRect
DrawEdge
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DefWindowProcW
CreateWindowExW
CreatePopupMenu
CreateIconIndirect
RegisterWindowMessageW
RegisterClassW
RedrawWindow
PtInRect
PostQuitMessage
PostMessageW
PeekMessageW
OpenClipboard
OffsetRect
ModifyMenuW
MessageBoxW
MapWindowPoints
MapDialogRect
LockWindowUpdate
LoadMenuW
GetWindowTextLengthW
LoadImageW
CreateDialogIndirectParamW
CopyRect
CopyIcon
CloseClipboard
ClientToScreen
CheckMenuItem
CharUpperW
CallWindowProcW
CallNextHookEx
BringWindowToTop
BeginPaint
BeginDeferWindowPos
AdjustWindowRectEx
MessageBoxA
GetKeyState
GetDCEx

gdi32

GetTextExtentPoint32W
GetTextMetricsW
GetViewportOrgEx
IntersectClipRect
LPtoDP
OffsetViewportOrgEx
PatBlt
PtVisible
Rectangle
RectVisible
RestoreDC
GetObjectW
ScaleViewportExtEx
ScaleWindowExtEx
SelectClipRgn
SelectObject
SetBkColor
SetBkMode
SetMapMode
SetRectRgn
SetTextAlign
SetTextColor
SetViewportExtEx
SetViewportOrgEx
GetStockObject
TextOutW
GetDIBits
GetDeviceCaps
GetClipBox
GetBkColor
ExtTextOutW
ExcludeClipRect
Escape
EnumFontFamiliesExW
Ellipse
DPtoLP
DeleteDC
CreateSolidBrush
CreateRectRgnIndirect
CreateRectRgn
CreatePatternBrush
CreateFontIndirectW
CreateEllipticRgn
CreateDIBitmap
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
CombineRgn
SetWindowExtEx
GetPixel
SaveDC
BitBlt

advapi32

StartServiceW
SetFileSecurityW
RegSetValueExW
RegQueryValueW
RegQueryValueExW
RegQueryValueExA
RegQueryInfoKeyW
RegOpenKeyW
RegOpenKeyExW
RegOpenKeyExA
RegEnumValueW
RegEnumKeyW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyW
RegCreateKeyExW
RegCloseKey
OpenThreadToken
OpenServiceW
OpenSCManagerW
OpenProcessToken
LookupPrivilegeValueW
GetFileSecurityW
ControlService
CloseServiceHandle
AdjustTokenPrivileges
RegSetValueW

shell32

DragQueryFileW
ExtractIconW
Shell_NotifyIconW
ShellExecuteW
SHFileOperationW
SHGetFileInfoW
DragFinish

shlwapi

PathFindFileNameW
PathIsUNCW
PathStripToRootW
StrCmpIW
StrCmpW
StrCpyW
PathFindExtensionW
StrToIntW

msvcrt

_except_handler3
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_controlfp
__set_app_type

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 216KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fcore9
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e8303ec81c98b131b0efb0776e72e9ad

Headers

File Characteristics

Imports

imm32

comctl32

kernel32

user32

gdi32

advapi32

shell32

shlwapi

msvcrt

Sections

.text Size: 2.3MB - Virtual size: 2.3MB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 4KB - Virtual size: 4.0MB

.rsrc Size: 216KB - Virtual size: 214KB

.fcore9 Size: 2.0MB - Virtual size: 2.0MB

.text
Size: 2.3MB - Virtual size: 2.3MB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 4KB - Virtual size: 4.0MB

.rsrc
Size: 216KB - Virtual size: 214KB

.fcore9
Size: 2.0MB - Virtual size: 2.0MB