268f8405f6a9e1113f6431a14862b9b16f73ada6b53b6edf0f083f75ae5df2b9

Sharing

Copy URL

Twitter E-mail

General

Target

268f8405f6a9e1113f6431a14862b9b16f73ada6b53b6edf0f083f75ae5df2b9
Size

2.0MB
MD5

8557c0f95f0e2f13bed3db6cbf9c0941
SHA1

205174314488526471cb679403459d84d07a57e9
SHA256

268f8405f6a9e1113f6431a14862b9b16f73ada6b53b6edf0f083f75ae5df2b9
SHA512

0bb9eec439d2cc72bbbaa88435c33c751aca76f1532184d4be6f31d9c98083c40c7fe00a6e802151442d69de0afd4bc22d1cf0b1a3d4a308cf20d18999c8c728
SSDEEP

24576:uhOymWZnbsGmKcMmB9P3hkttHOcCjO8Qx:GOygMmB9PkJCjOB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
268f8405f6a9e1113f6431a14862b9b16f73ada6b53b6edf0f083f75ae5df2b9

Files

268f8405f6a9e1113f6431a14862b9b16f73ada6b53b6edf0f083f75ae5df2b9
.exe windows:4 windows x86 arch:x86

23fdc6e8ee840381791ceebc5da9ca50

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

des

Ddes
Ddes3
DdesN
des
des3
desN

kernel32

IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetSystemDirectoryA
CopyFileA
MultiByteToWideChar
GlobalFree
GlobalSize
GlobalReAlloc
GlobalAlloc
GetVersionExA
GlobalUnlock
GetDriveTypeA
GlobalLock
MulDiv
GetModuleFileNameA
InterlockedDecrement
GetTempFileNameA
GetTempPathA
GetTickCount
InterlockedIncrement
lstrlenA
WideCharToMultiByte
GetLastError
DuplicateHandle
GetCurrentProcess
CreateFileA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
CloseHandle
LockFile
UnlockFile
GetStringTypeW
GetStringTypeA
SetUnhandledExceptionFilter
LCMapStringW
LCMapStringA
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
HeapSize
GetFileType
SetStdHandle
HeapReAlloc
GetACP
GetLocalTime
GetSystemTime
GetTimeZoneInformation
ExitThread
CreateThread
SetEndOfFile
MoveFileA
DeleteFileA
GetProcAddress
LoadLibraryA
GetProfileStringA
TerminateProcess
RaiseException
ExitProcess
GetCommandLineA
GetStartupInfoA
HeapFree
RtlUnwind
HeapAlloc
GetCurrentDirectoryA
SizeofResource
GetOEMCP
GetCPInfo
GlobalFlags
GetProcessVersion
SetErrorMode
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
GetProfileIntA
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrlenW
FindNextFileA
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LocalAlloc
EnterCriticalSection
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFileAttributesA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
WaitForSingleObject
GetCurrentThread
lstrcmpA
SetLastError
FormatMessageA
LocalFree
FreeLibrary
FindResourceA
LoadResource
LockResource
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GetShortPathNameA
lstrcmpiA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
FindFirstFileA
FindClose
lstrcpyA

user32

GetNextDlgGroupItem
CopyAcceleratorTableA
CharNextA
DestroyIcon
GetMenuStringA
InsertMenuA
GetClassNameA
GetSysColorBrush
FindWindowA
GetSystemMenu
DeleteMenu
AppendMenuA
SetParent
IsZoomed
LoadStringA
RegisterClipboardFormatA
wvsprintfA
GetTabbedTextExtentA
DestroyCursor
SetCursorPos
RedrawWindow
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
LoadMenuA
DestroyMenu
GetDesktopWindow
TranslateAcceleratorA
LoadAcceleratorsA
MapDialogRect
SetWindowContextHelpId
GetMessageA
TranslateMessage
ValidateRect
ShowOwnedPopups
PostQuitMessage
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
EndPaint
BeginPaint
GetWindowDC
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
MessageBeep
SetFocus
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
WinHelpA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
RemovePropA
GetMessageTime
GetForegroundWindow
SetForegroundWindow
SetWindowPos
RegisterWindowMessageA
GetWindowPlacement
GetDlgCtrlID
IsIconic
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
IsChild
AdjustWindowRectEx
CharUpperA
wsprintfA
GetLastActivePopup
IsWindowEnabled
WindowFromPoint
ClientToScreen
IsRectEmpty
CopyRect
GetDoubleClickTime
LoadBitmapA
GetWindow
IsWindowVisible
SetRectEmpty
GetWindowLongA
GetDlgItem
SetWindowLongA
CallWindowProcA
PostThreadMessageA
GetDCEx
LockWindowUpdate
SetActiveWindow
MessageBoxA
LoadIconA
OffsetRect
GetCapture
ReleaseCapture
SetCapture
SetTimer
ClipCursor
InvertRect
PtInRect
PostMessageA
GetFocus
GetMessagePos
GetParent
KillTimer
GetSystemMetrics
ScreenToClient
IsClipboardFormatAvailable
GrayStringA
TabbedTextOutA
IntersectRect
GetCursorPos
GetKeyState
GetClassInfoA
DefWindowProcA
IsWindow
LoadCursorA
DrawEdge
FrameRect
FillRect
InflateRect
SetCursor
DrawTextA
SystemParametersInfoA
SetRect
ReleaseDC
GetDC
GetClientRect
SendMessageA
GetSysColor
UpdateWindow
InvalidateRect
EnableWindow
GetWindowRect
HideCaret
UnregisterClassA
DispatchMessageA

gdi32

Escape
StartDocA
StartPage
EndPage
AbortDoc
EndDoc
CreateSolidBrush
CreatePolygonRgn
PtInRegion
FillRgn
Polyline
PatBlt
GetClipBox
SetTextColor
SetBkColor
DeleteDC
SaveDC
RestoreDC
SelectObject
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetCurrentPositionEx
ExtTextOutA
Rectangle
DeleteObject
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
CreatePatternBrush
GetMapMode
SetRectRgn
CombineRgn
CreateRectRgnIndirect
SetAbortProc
CreateDCA
GetViewportOrgEx
DeleteMetaFile
CloseMetaFile
GetTextAlign
StretchDIBits
GetCharWidthA
LPtoDP
GetTextColor
GetNearestColor
GetStretchBltMode
GetPolyFillMode
GetBkMode
GetROP2
GetTextFaceA
GetWindowOrgEx
CopyMetaFileA
TextOutA
BitBlt
RectVisible
PtVisible
GetBkColor
CreateCompatibleBitmap
GetCurrentObject
GetTextMetricsA
GetStockObject
SelectPalette
RealizePalette
GetDIBits
CreateCompatibleDC
CreateBitmap
CloseEnhMetaFile
CreateEnhMetaFileA
GetWinMetaFileBits
DeleteEnhMetaFile
GetObjectA
CreateFontIndirectA
Polygon
CreateFontA
GetTextExtentPointA
CreateDIBitmap
GetTextExtentPoint32A
CreatePen
DPtoLP
GetDeviceCaps

comdlg32

GetSaveFileNameA
GetOpenFileNameA
CommDlgExtendedError
GetFileTitleA
PrintDlgA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegSetValueA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
SetFileSecurityA
GetFileSecurityA
RegCloseKey
RegCreateKeyA

shell32

DragQueryFileA
DragFinish
SHGetFileInfoA
ExtractIconA

comctl32

ImageList_Draw
ImageList_GetImageInfo
ImageList_AddMasked
ord17
ImageList_Destroy
ImageList_Create

oledlg

ord8

ole32

CoGetClassObject
CoUninitialize
CoInitialize
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
ReleaseStgMedium
CoTaskMemFree
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
OleGetClipboard
DoDragDrop
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleRun
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemAlloc
OleDuplicateData
CreateStreamOnHGlobal
CoRevokeClassObject
CoRegisterMessageFilter

olepro32

ord253

oleaut32

SysStringLen
VariantTimeToSystemTime
VariantChangeType
SysAllocStringByteLen
SysAllocString
VariantCopy
SysAllocStringLen
SysFreeString
VariantInit
VariantClear

wininet

InternetQueryOptionA
InternetSetStatusCallback
InternetOpenUrlA
InternetCloseHandle
InternetOpenA
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetSetFilePointer
InternetWriteFile
InternetReadFile
InternetQueryDataAvailable
InternetGetLastResponseInfoA
HttpQueryInfoA

Sections

.text
Size: 700KB - Virtual size: 697KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

23fdc6e8ee840381791ceebc5da9ca50

Headers

File Characteristics

Imports

des

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wininet

Sections

.text Size: 700KB - Virtual size: 697KB

.rdata Size: 96KB - Virtual size: 94KB

.data Size: 28KB - Virtual size: 185KB

.rsrc Size: 1.2MB - Virtual size: 1.2MB

.text
Size: 700KB - Virtual size: 697KB

.rdata
Size: 96KB - Virtual size: 94KB

.data
Size: 28KB - Virtual size: 185KB

.rsrc
Size: 1.2MB - Virtual size: 1.2MB