d04b09db3288eafd884adf22b41e6f1ec03f3fab0df67db8a2fec15945feb2ff

Sharing

Copy URL Twitter E-mail

General

Target

d04b09db3288eafd884adf22b41e6f1ec03f3fab0df67db8a2fec15945feb2ff
Size

1.3MB
MD5

0d91ebb941daf70f4a349d6058653425
SHA1

bbfdf2610c3ea47839faa7723cf599d236bc1536
SHA256

d04b09db3288eafd884adf22b41e6f1ec03f3fab0df67db8a2fec15945feb2ff
SHA512

541497f17942b9e69ca71419e0e807139adbb7c4166cb76633f21861e77a380fa38b8399316595ea3762c4d57a0bc312c2995546477ffe11c96bb7dc3cb80e29
SSDEEP

12288:Lt9uolnw9+BTPopciCMkRZIELeX8J5+CN8k:LSCnMwLIkRZIEr5b8k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d04b09db3288eafd884adf22b41e6f1ec03f3fab0df67db8a2fec15945feb2ff

Files

d04b09db3288eafd884adf22b41e6f1ec03f3fab0df67db8a2fec15945feb2ff
.exe windows:4 windows x86 arch:x86

b74299a4672a9bd61929d953dc6cfdc0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsA

kernel32

GetACP
RaiseException
TerminateProcess
HeapReAlloc
HeapSize
LCMapStringA
LCMapStringW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
LocalFree
GetTickCount
GetTimeZoneInformation
GetProfileStringA
InterlockedDecrement
InterlockedIncrement
DeleteFileA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetCurrentDirectoryA
FindNextFileA
FindFirstFileA
SetCurrentDirectoryA
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
FormatMessageA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetModuleFileNameA
LoadResource
FindResourceA
LockResource
GlobalFree
GlobalUnlock
GlobalLock
GetProcAddress
GetModuleHandleA
lstrcpyA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
GetCurrentThreadId
lstrcatA
GetVersion
FreeLibrary
LoadLibraryA
SetLastError
MulDiv
ExitProcess
GetCommandLineA
GetStartupInfoA
ExitThread
CreateThread
HeapAlloc
HeapFree
RtlUnwind
SetErrorMode
GetFileTime
GetFileSize
GetFileAttributesA
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
SizeofResource
GlobalFlags
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetLastError
lstrcpynA
ResumeThread
CloseHandle
GlobalAlloc
lstrcmpA
GetCurrentThread

user32

MessageBeep
GetNextDlgGroupItem
CopyAcceleratorTableA
CharNextA
GetSysColorBrush
LoadCursorA
GetDesktopWindow
PtInRect
GetClassNameA
PostThreadMessageA
LoadStringA
CharUpperA
MapDialogRect
SetWindowContextHelpId
DestroyMenu
ValidateRect
GetCursorPos
PostQuitMessage
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
wvsprintfA
GetMenuCheckMarkDimensions
GetMenuState
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
IsDialogMessageA
SetDlgItemTextA
SetDlgItemInt
PostMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
CopyRect
IsWindowVisible
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
PeekMessageA
DispatchMessageA
TranslateMessage
GetMessageA
UnregisterClassA
HideCaret
ExcludeUpdateRgn
DrawFocusRect
GetMenuItemID
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
DefDlgProcA
IsWindowUnicode
MessageBoxA
SendMessageA
EnableWindow
GetSysColor
RedrawWindow
SetCursor
LoadIconA
SetMenuItemInfoA
ModifyMenuA
GetSubMenu
GetWindowRect
SetMenu
LoadMenuA
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
ShowCaret
CreateCaret
InvalidateRect
SetWindowLongA
GetWindowLongA
wsprintfA
KillTimer
SetTimer
InflateRect
SetRect
ReleaseDC
LoadBitmapA
GetDC
IsWindowEnabled
GetLastActivePopup
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
RegisterClipboardFormatA
GetParent
SetWindowTextA

gdi32

MoveToEx
LineTo
SetBkColor
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreatePen
IntersectClipRect
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
PatBlt
GetMapMode
DPtoLP
GetTextColor
GetBkColor
LPtoDP
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetTextColor
GetClipBox
CreateCompatibleDC
Ellipse
BitBlt
SelectObject
Rectangle
DeleteObject
SetBkMode
RestoreDC
SaveDC
DeleteDC
GetObjectA
CreateFontIndirectA
CreateSolidBrush
GetStockObject
GetTextExtentPointA
CreateDIBitmap
CreateBitmap

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA

shell32

SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA

comctl32

ord17
ImageList_Destroy

oledlg

ord8

ole32

CoTaskMemAlloc
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
OleIsCurrentClipboard
OleFlushClipboard
CoTaskMemFree
CoRevokeClassObject
CoGetClassObject
CoRegisterMessageFilter
CLSIDFromString
CLSIDFromProgID
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoInitialize
CoCreateInstance
OleRun

olepro32

ord253

oleaut32

SysFreeString
VariantInit
SysAllocStringByteLen
SysStringByteLen
VariantChangeType
VariantCopy
SysAllocString
SysAllocStringLen
VariantTimeToSystemTime
SysStringLen
GetErrorInfo
VariantClear

Sections

.text
Size: 400KB - Virtual size: 398KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 768KB - Virtual size: 764KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b74299a4672a9bd61929d953dc6cfdc0

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 400KB - Virtual size: 398KB

.rdata Size: 72KB - Virtual size: 69KB

.data Size: 40KB - Virtual size: 61KB

.rsrc Size: 768KB - Virtual size: 764KB

.text
Size: 400KB - Virtual size: 398KB

.rdata
Size: 72KB - Virtual size: 69KB

.data
Size: 40KB - Virtual size: 61KB

.rsrc
Size: 768KB - Virtual size: 764KB