e8a88072c61a91676a7a7fac5b9c547625f168149c77f6c114d6d013c615b827

Sharing

Copy URL Twitter E-mail

General

Target

e8a88072c61a91676a7a7fac5b9c547625f168149c77f6c114d6d013c615b827
Size

4.8MB
MD5

614f71d75e2037df5e14dffdec773472
SHA1

9462cacccd505459fd8b9f24f313cad7ac9009f9
SHA256

e8a88072c61a91676a7a7fac5b9c547625f168149c77f6c114d6d013c615b827
SHA512

10330ab06ca77be3fb97880a9a032f26d5ccf2e9849156132f24b0580136a07f2221a081050a3489b75efed0744a073a674a2c9cb2e20328c063aa74ed90def0
SSDEEP

98304:6giMrNHY0lnv1ChcoojHCByZHN3w2dCRPTlh+eoW:6FMrpYYtChBoLkUeF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8a88072c61a91676a7a7fac5b9c547625f168149c77f6c114d6d013c615b827

Files

e8a88072c61a91676a7a7fac5b9c547625f168149c77f6c114d6d013c615b827
.exe windows:5 windows x86 arch:x86

c989954827db687b6ce47583775d2a23

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmGetContext
ImmGetCompositionWindow

comctl32

ImageList_Destroy

kernel32

GetTempFileNameW
GetTempPathW
GetThreadLocale
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExA
GetVersionExW
GetVolumeInformationW
GlobalAddAtomW
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomW
GlobalFlags
GlobalFree
GlobalGetAtomNameW
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsValidCodePage
IsValidLocale
LCMapStringA
LCMapStringW
LoadLibraryW
LoadResource
LocalAlloc
LocalFileTimeToFileTime
LocalFree
LocalReAlloc
LockFile
LockResource
lstrcatW
lstrcmpA
lstrcmpiW
lstrcmpW
lstrcpynW
lstrcpyW
lstrlenA
lstrlenW
MapViewOfFile
MoveFileW
MulDiv
GetSystemTimeAsFileTime
OpenProcess
QueryPerformanceCounter
RaiseException
ReadFile
ResumeThread
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFilePointer
SetFileTime
SetHandleCount
SetLastError
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SuspendThread
SystemTimeToFileTime
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnlockFile
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
WritePrivateProfileStringW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
LoadLibraryA
LeaveCriticalSection
GetTickCount
MultiByteToWideChar
EnterCriticalSection
InitializeCriticalSection
GetCommandLineA
CreateFileA
CompareStringA
CompareStringW
ConnectNamedPipe
ConvertDefaultLocale
CopyFileW
CreateDirectoryW
CreateEventW
GetSystemDirectoryW
GetStringTypeW
GetStringTypeExW
GetStringTypeA
GetStdHandle
GetStartupInfoW
GetStartupInfoA
GetShortPathNameW
GetProcessHeap
GetProcAddress
GetPrivateProfileStringW
GetOEMCP
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
GetLogicalDriveStringsW
GetLocaleInfoW
GetLocaleInfoA
GetLastError
GetFullPathNameW
GetFileType
GetFileTime
GetFileSize
GetFileAttributesW
GetFileAttributesExW
GetEnvironmentStringsW
GetEnvironmentStrings
GetDriveTypeW
GetDriveTypeA
GetDiskFreeSpaceW
GetCurrentThreadId
GetCurrentProcessId
CreateFileMappingW
GetCurrentDirectoryW
GetCurrentDirectoryA
GetCPInfo
GetConsoleOutputCP
GetConsoleMode
GetConsoleCP
GetCommandLineW
GetACP
FreeResource
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FormatMessageW
FlushFileBuffers
FindResourceW
FindResourceExW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
ExitThread
ExitProcess
EnumSystemLocalesA
EnumResourceLanguagesW
DuplicateHandle
DosDateTimeToFileTime
DeleteFileW
DeleteCriticalSection
CreateThread
CreateProcessW
CreateNamedPipeW
CreateMutexW
CreateFileW

user32

RemovePropW
ScreenToClient
ScrollWindow
SendDlgItemMessageA
SendDlgItemMessageW
SendMessageW
SetActiveWindow
SetCapture
SetClipboardData
SetCursor
SetFocus
SetForegroundWindow
SetMenuDefaultItem
SetMenuItemBitmaps
SetParent
SetPropW
SetRect
SetRectEmpty
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetWindowLongW
SetWindowPos
SetWindowRgn
SetWindowsHookExW
SetWindowTextW
ShowOwnedPopups
ShowScrollBar
ShowWindow
SystemParametersInfoA
SystemParametersInfoW
TabbedTextOutW
TrackPopupMenu
TranslateAcceleratorW
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UnregisterClassW
UpdateWindow
ValidateRect
WindowFromPoint
WinHelpW
LoadImageW
LoadIconW
LoadCursorW
LoadBitmapW
LoadAcceleratorsW
KillTimer
IsZoomed
IsWindowVisible
IsWindowEnabled
IsIconic
IsDialogMessageW
IsChild
InvalidateRect
IntersectRect
InsertMenuItemW
InflateRect
GrayStringW
GetWindowThreadProcessId
GetWindowTextW
ReleaseDC
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowDC
GetSystemMetrics
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetNextDlgTabItem
GetMessageW
GetMessageTime
GetMessagePos
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenuCheckMarkDimensions
GetMenu
GetLastActivePopup
GetIconInfo
GetForegroundWindow
GetFocus
GetDlgItem
GetDlgCtrlID
GetDCEx
GetDC
GetCursorPos
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetClassInfoExW
GetCapture
GetAsyncKeyState
GetActiveWindow
FindWindowW
FillRect
EqualRect
EndPaint
EndDialog
EndDeferWindowPos
EnableWindow
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextExW
DrawStateW
DrawIcon
DrawFocusRect
DrawEdge
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DefWindowProcW
CreateWindowExW
CreatePopupMenu
ReleaseCapture
RegisterWindowMessageW
RegisterClassW
RedrawWindow
PtInRect
PostQuitMessage
PostMessageW
PeekMessageW
OpenClipboard
OffsetRect
ModifyMenuW
MessageBoxW
MapWindowPoints
MapDialogRect
LockWindowUpdate
GetWindowTextLengthW
LoadMenuW
CreateIconIndirect
CreateDialogIndirectParamW
CopyRect
CopyIcon
CloseClipboard
ClientToScreen
CheckMenuItem
CharUpperW
CallWindowProcW
CallNextHookEx
BringWindowToTop
BeginPaint
BeginDeferWindowPos
MessageBoxA
GetKeyState
GetDesktopWindow

gdi32

GetTextExtentPoint32W
GetTextMetricsW
GetViewportOrgEx
IntersectClipRect
LPtoDP
OffsetViewportOrgEx
PatBlt
PtVisible
Rectangle
RectVisible
RestoreDC
GetObjectW
ScaleViewportExtEx
ScaleWindowExtEx
SelectClipRgn
SelectObject
SetBkColor
SetBkMode
SetMapMode
SetRectRgn
SetTextAlign
SetTextColor
SetViewportExtEx
SetViewportOrgEx
GetStockObject
TextOutW
GetDIBits
GetDeviceCaps
GetClipBox
GetBkColor
ExtTextOutW
ExcludeClipRect
Escape
EnumFontFamiliesExW
Ellipse
DPtoLP
DeleteDC
CreateSolidBrush
CreateRectRgnIndirect
CreateRectRgn
CreatePatternBrush
CreateFontIndirectW
CreateEllipticRgn
CreateDIBitmap
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
CombineRgn
SetWindowExtEx
GetPixel
SaveDC
BitBlt

advapi32

StartServiceW
SetFileSecurityW
RegSetValueExW
RegQueryValueW
RegQueryValueExW
RegQueryValueExA
RegQueryInfoKeyW
RegOpenKeyW
RegOpenKeyExW
RegOpenKeyExA
RegEnumValueW
RegEnumKeyW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyW
RegCreateKeyExW
RegCloseKey
OpenThreadToken
OpenServiceW
OpenSCManagerW
OpenProcessToken
LookupPrivilegeValueW
GetFileSecurityW
ControlService
CloseServiceHandle
AdjustTokenPrivileges
RegSetValueW

shell32

DragQueryFileW
ExtractIconW
Shell_NotifyIconW
ShellExecuteW
SHFileOperationW
SHGetFileInfoW
DragFinish

shlwapi

PathFindFileNameW
PathIsUNCW
PathStripToRootW
StrCmpIW
StrCmpW
StrCpyW
PathFindExtensionW
StrToIntW

msvcrt

_except_handler3
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_controlfp
__set_app_type

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 324KB - Virtual size: 322KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_fcore_9
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c989954827db687b6ce47583775d2a23

Headers

File Characteristics

Imports

imm32

comctl32

kernel32

user32

gdi32

advapi32

shell32

shlwapi

msvcrt

Sections

.text Size: 2.3MB - Virtual size: 2.3MB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 4KB - Virtual size: 4.0MB

.rsrc Size: 324KB - Virtual size: 322KB

_fcore_9 Size: 2.1MB - Virtual size: 2.1MB

.text
Size: 2.3MB - Virtual size: 2.3MB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 4KB - Virtual size: 4.0MB

.rsrc
Size: 324KB - Virtual size: 322KB

_fcore_9
Size: 2.1MB - Virtual size: 2.1MB