d88e5304e1a5f0c2d16f1b10ae1255c55941dfcb4e7685141a43e1ed0b75b464

Sharing

Copy URL

Twitter E-mail

General

Target

d88e5304e1a5f0c2d16f1b10ae1255c55941dfcb4e7685141a43e1ed0b75b464
Size

1.1MB
MD5

b336915258e2dcae02f1e645c17a9780
SHA1

77c93e76b64acbee9e1e1edcf8efa21421a2f233
SHA256

d88e5304e1a5f0c2d16f1b10ae1255c55941dfcb4e7685141a43e1ed0b75b464
SHA512

a3bb21325f4c212890ea13230e02849c6382cc1a7f5cb317b7c40549062839c416f3c8b2470db3080dde5e0e500f59e29716183f7c5482918183f20fb0b8179d
SSDEEP

24576:u+BxgLD6FFuUyknari+6PMJCmKS2dyzqyzXRcx9:XGxevPMgy2dvtx9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d88e5304e1a5f0c2d16f1b10ae1255c55941dfcb4e7685141a43e1ed0b75b464

Files

d88e5304e1a5f0c2d16f1b10ae1255c55941dfcb4e7685141a43e1ed0b75b464
.exe windows:6 windows x86 arch:x86

13a35ac32aeef0b86544178d2399e724

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemInfo
GetThreadLocale
SetThreadLocale
lstrlenA
lstrcmpA
GetFileSize
GetFileAttributesExW
ResetEvent
SetEvent
PostQueuedCompletionStatus
GetExitCodeThread
CreateEventW
CreateIoCompletionPort
GetQueuedCompletionStatus
InitializeCriticalSectionAndSpinCount
WriteConsoleW
FlushFileBuffers
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetTimeZoneInformation
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetConsoleOutputCP
SetStdHandle
SetFileAttributesW
GetConsoleMode
SetFilePointerEx
GetFileType
GetStdHandle
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlUnwind
GetSystemTimeAsFileTime
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
LCMapStringEx
GetCPInfo
GetStringTypeW
LoadLibraryExA
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
EncodePointer
IsDebuggerPresent
DeviceIoControl
InitializeCriticalSection
MoveFileExW
GetFileSizeEx
SetFilePointer
SetEndOfFile
GetSystemTime
GetNativeSystemInfo
OutputDebugStringW
GetVersionExW
DeleteFileW
CloseHandle
WriteFile
CreateFileW
GetTempPathW
LoadLibraryW
GetTickCount
GetCurrentProcessId
OpenProcess
MulDiv
VerSetConditionMask
VerifyVersionInfoW
GetVersion
FreeResource
GlobalFree
GlobalAlloc
WideCharToMultiByte
SystemTimeToFileTime
LocalFree
GetPrivateProfileStringW
K32GetModuleFileNameExW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
ReadFile
GetStartupInfoW
TerminateProcess
RemoveDirectoryW
FindClose
FindNextFileW
FindFirstFileW
GetShortPathNameW
GetCurrentThread
SetThreadPriority
GetCurrentProcess
SetPriorityClass
GetEnvironmentVariableW
lstrlenW
CreateThread
TerminateThread
ReadConsoleW
WaitForSingleObject
Sleep
SetLastError
GetCurrentThreadId
HeapDestroy
GetModuleFileNameW
LoadLibraryExW
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
lstrcmpiW
GetProcAddress
FreeLibrary
DecodePointer
InitializeCriticalSectionEx
GetLastError
RaiseException
DeleteCriticalSection
GetModuleHandleW
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize

user32

SetCaretPos
GetSysColor
RegisterClipboardFormatW
IsClipboardFormatAvailable
GetWindowTextLengthW
SetWindowTextW
SetTimer
wsprintfW
SetWindowLongW
UnregisterClassW
GetDlgItem
ShowWindow
IsWindow
PostQuitMessage
GetWindow
GetWindowLongW
MonitorFromWindow
GetMonitorInfoW
GetWindowRect
GetParent
GetClientRect
MapWindowPoints
SetWindowPos
SendMessageW
LoadIconW
KillTimer
SetActiveWindow
BringWindowToTop
GetCaretBlinkTime
AttachThreadInput
GetWindowThreadProcessId
UpdateLayeredWindow
ReleaseDC
DefWindowProcW
CallWindowProcW
CharNextW
UpdateWindow
TranslateMessage
WindowFromPoint
GetCursorPos
GetMessageW
PeekMessageW
SystemParametersInfoW
DestroyWindow
RegisterClassExW
GetClassInfoExW
LoadCursorW
CreateWindowExW
BeginPaint
CopyRect
EndPaint
IsIconic
EqualRect
InvalidateRect
PtInRect
PostMessageW
TrackMouseEvent
SetFocus
SetCapture
ReleaseCapture
ClientToScreen
SetWindowRgn
MoveWindow
EnableWindow
GetForegroundWindow
GetWindowTextW
SetForegroundWindow
IsWindowVisible
IsZoomed
MonitorFromRect
OffsetRect
SetLayeredWindowAttributes
LoadImageW
GetDC
GetCursor
DrawTextW
FillRect
IntersectRect
GetDoubleClickTime
SetRectEmpty
IsRectEmpty
CreateCaret
DispatchMessageW
GetIconInfo
SetCursor
ScreenToClient
GetFocus

gdi32

Rectangle
GetStockObject
CreatePen
RestoreDC
ExtSelectClipRgn
CreateRectRgnIndirect
SaveDC
SetBitmapBits
SetTextColor
SetBkMode
CreateSolidBrush
CreateFontIndirectW
StretchBlt
SetStretchBltMode
SetPixel
GetObjectW
CreateDIBSection
CreateRectRgn
CombineRgn
CreateRoundRectRgn
DeleteDC
BitBlt
SelectObject
CreateCompatibleDC
DeleteObject
GetDeviceCaps
GetTextColor
GetCurrentObject
SetTextCharacterExtra
SetBkColor
GetViewportOrgEx
GetBitmapBits

advapi32

RegEnumKeyExW
DeleteService
CloseServiceHandle
ControlService
QueryServiceStatus
OpenServiceW
OpenSCManagerW
RegEnumKeyW
RegQueryValueExW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
GetUserNameW

shell32

ShellExecuteExW
SHChangeNotify
SHGetSpecialFolderPathW
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHCreateDirectoryExW
ord165
ShellExecuteW

ole32

CoInitializeSecurity
OleRun
RegisterDragDrop
CoTaskMemFree
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc

oleaut32

VariantClear
VariantCopy
VariantInit
VarBstrCmp
LoadTypeLi
LoadRegTypeLi
SysStringLen
SysAllocString
VarUI4FromStr
SysFreeString
GetErrorInfo

shlwapi

PathSearchAndQualifyW
PathIsDirectoryW
SHGetValueW
SHDeleteValueW
StrCmpIW
PathFindFileNameW
PathCombineW
PathAppendW
PathRemoveFileSpecW
PathFileExistsW
PathRemoveBackslashW

comctl32

ord17
DrawShadowText
InitCommonControlsEx

msimg32

AlphaBlend

gdiplus

GdipFree
GdiplusStartup
GdipDeleteFont
GdipCreateFont
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipDrawString
GdipSetTextRenderingHint
GdipCreateSolidFill
GdipDeleteBrush
GdipBitmapLockBits
GdipCreateBitmapFromHICON
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipCreateFromHDC
GdipDisposeImage
GdipAlloc
GdipCreateBitmapFromStream

crypt32

CryptBinaryToStringW
CryptStringToBinaryW

wininet

InternetCloseHandle
HttpOpenRequestW
HttpQueryInfoW
InternetCrackUrlW
InternetOpenW
InternetSetOptionW
HttpSendRequestW
InternetReadFile
InternetConnectW

netapi32

Netbios

iphlpapi

GetAdaptersInfo
GetIpAddrTable

secur32

GetUserNameExW

Sections

.text
Size: 740KB - Virtual size: 739KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 157KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

13a35ac32aeef0b86544178d2399e724

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

msimg32

gdiplus

crypt32

wininet

netapi32

iphlpapi

secur32

Sections

.text Size: 740KB - Virtual size: 739KB

.rdata Size: 157KB - Virtual size: 156KB

.data Size: 14KB - Virtual size: 86KB

.rsrc Size: 131KB - Virtual size: 131KB

.reloc Size: 40KB - Virtual size: 40KB

.text
Size: 740KB - Virtual size: 739KB

.rdata
Size: 157KB - Virtual size: 156KB

.data
Size: 14KB - Virtual size: 86KB

.rsrc
Size: 131KB - Virtual size: 131KB

.reloc
Size: 40KB - Virtual size: 40KB