ae4a7de3aa62aefb6950d1b5ee234e8d0e4d60f1f14c02829b1bdabbb494d5c7

Sharing

Copy URL Twitter E-mail

General

Target

ae4a7de3aa62aefb6950d1b5ee234e8d0e4d60f1f14c02829b1bdabbb494d5c7
Size

9.5MB
MD5

388ef54d1342d1abbf3c394e2965c97e
SHA1

057a2b2c993a51a82c8de85b7d9426d4aabe950d
SHA256

ae4a7de3aa62aefb6950d1b5ee234e8d0e4d60f1f14c02829b1bdabbb494d5c7
SHA512

be18c72922e33bb71476aa803b8a3bb86a2901d19c6109252584bca5d4dcca47e1882d30988921ec89f996bfcd37048f9dfc9455b579b81635aec790efdf3e67
SSDEEP

196608:jnsv0aNIPuRNDRItCHyfaG15KE8EP9LU4QosktuCYd/:OFhKDCG15KXYUposktpI/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae4a7de3aa62aefb6950d1b5ee234e8d0e4d60f1f14c02829b1bdabbb494d5c7

Files

ae4a7de3aa62aefb6950d1b5ee234e8d0e4d60f1f14c02829b1bdabbb494d5c7
.exe windows:6 windows x86 arch:x86

fff329d8d823cb8c5f692f0ca3714d70

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryW
CreateFileW
DeleteFileW
FileTimeToLocalFileTime
FindClose
FindFirstFileW
FindNextFileW
GetDiskFreeSpaceW
GetDiskFreeSpaceExW
GetDriveTypeA
GetDriveTypeW
GetFileAttributesExW
GetFileTime
GetLogicalDriveStringsW
GetVolumeInformationW
QueryDosDeviceW
ReadFile
SetFileAttributesW
GetTempPathW
OutputDebugStringW
CloseHandle
GetLastError
SetLastError
K32GetProcessImageFileNameW
K32GetProcessMemoryInfo
K32GetModuleFileNameExW
K32GetModuleBaseNameW
K32EnumProcessModules
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetSystemDefaultUILanguage
WideCharToMultiByte
MultiByteToWideChar
GetTimeZoneInformation
FileTimeToSystemTime
MoveFileW
CopyFileW
SetDllDirectoryW
LocalFree
LocalAlloc
GlobalLock
GlobalUnlock
LoadLibraryW
GetProcAddress
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObjectEx
GetExitCodeThread
GetNativeSystemInfo
GetStringTypeW
InitializeCriticalSectionEx
GetSystemTimeAsFileTime
GetModuleHandleW
EncodePointer
DecodePointer
CompareStringEx
GetCPInfo
LCMapStringEx
GetStdHandle
FreeConsole
AttachConsole
WriteConsoleA
WriteConsoleW
FillConsoleOutputCharacterW
GetConsoleScreenBufferInfo
SetConsoleCursorPosition
ReadConsoleOutputCharacterA
ExitProcess
MulDiv
GetCommandLineW
GlobalAlloc
GlobalSize
GlobalHandle
GlobalFree
SetCurrentDirectoryW
SetErrorMode
RaiseException
CreateMutexW
SetThreadPriority
TerminateThread
ResumeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FormatMessageW
GetFileAttributesW
GetFileType
WriteFile
SetHandleInformation
CreatePipe
SetNamedPipeHandleState
PeekNamedPipe
SetEvent
CreateEventW
WaitForMultipleObjects
CreateProcessW
GetFileSize
GetLongPathNameW
GetTempFileNameW
GetModuleFileNameW
GetEnvironmentVariableW
IsDebuggerPresent
LoadResource
LockResource
SizeofResource
FindResourceW
GetComputerNameW
IsValidCodePage
GetACP
GetLocaleInfoW
IsBadReadPtr
IsBadStringPtrA
GetSystemDirectoryA
LoadLibraryA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
ResetEvent
GetStartupInfoW
InitializeSListHead
RtlUnwind
LoadLibraryExW
GetFileInformationByHandle
SystemTimeToTzSpecificLocalTime
GetFullPathNameW
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
MoveFileExW
SetStdHandle
FlushFileBuffers
GetConsoleMode
ReadConsoleW
GetConsoleOutputCP
SetFilePointerEx
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileSizeEx
GetCurrentDirectoryW
HeapReAlloc
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetEndOfFile
FindFirstFileExW
GetCommandLineA
HeapSize
FreeLibrary
DeleteTimerQueue
DeleteTimerQueueTimer
HeapAlloc
CreateTimerQueueTimer
CreateTimerQueue
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetVersionExW
GetSystemDirectoryW
GetTickCount64
GetTickCount
GetSystemTime
OpenProcess
GetProcessId
GetCurrentThreadId
GetCurrentThread
CreateThread
GetExitCodeProcess
TerminateProcess
GetCurrentProcessId
GetCurrentProcess
Sleep
WaitForSingleObject
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeviceIoControl
GetProcessHeap
HeapFree
ExpandEnvironmentStringsW

user32

EnableMenuItem
DrawIconEx
DrawStateW
SetRect
SetRectEmpty
CopyRect
OffsetRect
DrawEdge
DrawFrameControl
GetMenuState
CheckMenuItem
GetSubMenu
GetMenuItemID
SetMenuItemInfoW
GetSysColorBrush
CheckMenuRadioItem
CreateMenu
CreatePopupMenu
DestroyMenu
InsertMenuW
ModifyMenuW
RemoveMenu
SetMenuInfo
InsertMenuItemW
RegisterClipboardFormatW
GetClipboardFormatNameW
UnionRect
MessageBeep
GetMessageW
PostThreadMessageW
ValidateRect
GetWindowDC
BeginPaint
EndPaint
GetDesktopWindow
ValidateRgn
IsRectEmpty
IsClipboardFormatAvailable
wsprintfW
ChangeDisplaySettingsExW
EnumDisplaySettingsW
MonitorFromPoint
MonitorFromWindow
GetMonitorInfoW
EnumDisplayMonitors
AdjustWindowRectEx
WaitForInputIdle
MsgWaitForMultipleObjects
SetTimer
KillTimer
DdePostAdvise
DdeNameService
DdeCreateDataHandle
DdeGetData
DdeQueryStringW
InflateRect
FillRect
GetSysColor
ChildWindowFromPointEx
MapWindowPoints
ScreenToClient
ClientToScreen
SetCursorPos
EnableScrollBar
ScrollWindow
RedrawWindow
InvalidateRect
GetUpdateRgn
GetMenuItemInfoW
TrackPopupMenu
GetMenuItemCount
GetSystemMetrics
IsWindowEnabled
ReleaseCapture
SetCapture
GetCapture
MapVirtualKeyW
VkKeyScanW
GetAsyncKeyState
GetDialogBaseUnits
SetFocus
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
MoveWindow
AnimateWindow
IsWindow
CreateWindowExW
PostQuitMessage
DefWindowProcW
GetMessageTime
GetMessagePos
UnregisterHotKey
RegisterHotKey
LoadCursorW
GetProcessDefaultLayout
UnregisterClassW
RegisterClassW
GetComboBoxInfo
GetParent
ChildWindowFromPoint
CallWindowProcW
HideCaret
SetWindowTextW
keybd_event
GetFocus
DestroyWindow
SetMenu
PostMessageW
RegisterWindowMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
SendMessageW
AttachThreadInput
ShowWindow
SetWindowPos
IsWindowVisible
BringWindowToTop
OpenClipboard
CloseClipboard
SetActiveWindow
GetClipboardData
EmptyClipboard
GetKeyState
EnableWindow
GetSystemMenu
AppendMenuW
UpdateWindow
GetForegroundWindow
SetForegroundWindow
GetDC
ReleaseDC
DrawMenuBar
PtInRect
CreateDialogIndirectParamW
IsZoomed
IsIconic
FlashWindowEx
GetWindowTextA
GetWindowTextW
SetLayeredWindowAttributes
GetWindowPlacement
GetWindowTextLengthW
GetClientRect
GetWindowRect
MessageBoxW
SetWindowRgn
GetDlgItem
CreateDialogParamW
GetCaretBlinkTime
GetDoubleClickTime
TranslateAcceleratorW
DestroyAcceleratorTable
CreateAcceleratorTableW
DestroyIcon
ShowCursor
SetCursor
GetCursorPos
WindowFromPoint
FrameRect
GetWindowLongW
DdeFreeStringHandle
DdeCreateStringHandleW
DdeGetLastError
DdeFreeDataHandle
DdeUnaccessData
DdeAccessData
DdeClientTransaction
DdeDisconnect
DdeConnect
DdeUninitialize
DdeInitializeW
CreateIconIndirect
DestroyCursor
GetIconInfo
LoadImageW
LoadIconW
LoadBitmapW
DrawFocusRect
DrawTextW
GetScrollInfo
SetScrollInfo
IsDialogMessageW
SetWindowLongW
FindWindowW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
SetParent
FindWindowExW
EnumWindows
GetClassNameW
GetActiveWindow
GetWindowThreadProcessId
GetWindow
SystemParametersInfoW
SetWinEventHook
UnhookWinEvent
GetTitleBarInfo
IsMenu

gdi32

GetBkColor
LineTo
MoveToEx
CombineRgn
EqualRgn
GetRgnBox
PtInRegion
RectInRegion
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
SetWindowOrgEx
GetViewportExtEx
GetTextExtentExPointW
CreateDIBitmap
SetWindowExtEx
SetViewportExtEx
PolyBezier
Polyline
CreateICW
CreateRectRgn
DPtoLP
Polygon
ExtTextOutW
ModifyWorldTransform
SetWorldTransform
GetWorldTransform
SetROP2
StretchDIBits
SetPolyFillMode
SetPixel
GetWindowExtEx
GetLayout
SetLayout
SetMapMode
SetGraphicsMode
ExtSelectClipRgn
SelectClipRgn
GetDIBits
CreateDIBSection
GetDIBColorTable
SetDIBColorTable
GetSystemPaletteEntries
CreateDCW
EnumFontFamiliesExW
SetViewportOrgEx
CloseEnhMetaFile
GetPixel
GetObjectType
GetGraphicsMode
GetClipBox
CreatePolygonRgn
RoundRect
Rectangle
PolyPolygon
Pie
MaskBlt
CreateRectRgnIndirect
EndPage
CreateSolidBrush
DeleteObject
GetDeviceCaps
GetStockObject
SetBkMode
SetTextColor
ExtFloodFill
Ellipse
Arc
ExtCreatePen
CreatePen
CreatePatternBrush
CreateHatchBrush
CreateCompatibleBitmap
CreateBitmapIndirect
CreateBitmap
BitBlt
GetTextExtentPoint32W
SetBkColor
OffsetRgn
GetRegionData
ExtCreateRegion
GetOutlineTextMetricsW
CreateFontIndirectW
SetStretchBltMode
StretchBlt
DeleteDC
CreateCompatibleDC
GetObjectW
GdiFlush
SetBrushOrgEx
GetTextMetricsW
SelectPalette
SelectObject
RealizePalette
ExcludeClipRect
GetCharABCWidthsW
LPtoDP
StartPage
EndDoc
StartDocW
SetAbortProc
PlayEnhMetaFile
GetEnhMetaFileHeader
GetEnhMetaFileW
DeleteEnhMetaFile
CreateEnhMetaFileW

advapi32

CryptDuplicateHash
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
GetUserNameW
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
IsValidSecurityDescriptor
InitializeSecurityDescriptor
InitializeAcl
GetLengthSid
FreeSid
DuplicateToken
AllocateAndInitializeSid
AddAccessAllowedAce
AccessCheck
OpenThreadToken
OpenProcessToken
RegEnumKeyW

shell32

SHBrowseForFolderW
SHGetMalloc
CommandLineToArgvW
ExtractIconExW
ExtractIconW
DragAcceptFiles
DragFinish
SHGetFileInfoW
DragQueryFileW
ShellExecuteW
SHFileOperationW
ShellExecuteExW
Shell_NotifyIconW
SHGetPathFromIDListW
SHCreateDirectoryExW
SHGetSpecialFolderLocation
SHGetSpecialFolderPathW
SHGetFolderPathA
SHGetFolderPathW
ord6
DragQueryPoint

ole32

CoTaskMemAlloc
OleInitialize
RevokeDragDrop
ReleaseStgMedium
OleUninitialize
CoCreateInstance
CoTaskMemFree
OleSetContainedObject
OleRun
OleLockRunning
DoDragDrop
CoLockObjectExternal
RegisterDragDrop
OleFlushClipboard
CoInitialize
CoCreateGuid
CoUninitialize
OleSetClipboard
OleGetClipboard
OleIsCurrentClipboard

rpcrt4

UuidToStringW
UuidToStringA
RpcStringFreeA
RpcStringFreeW

bcrypt

BCryptGenRandom

shlwapi

StrToIntW
UrlCanonicalizeW
AssocQueryStringW
SHAutoComplete

wininet

HttpAddRequestHeadersW
HttpSendRequestW
HttpQueryInfoW
FindFirstUrlCacheEntryW
FindNextUrlCacheEntryW
HttpOpenRequestW
InternetSetOptionW
InternetQueryOptionW
InternetQueryDataAvailable
InternetReadFile
InternetOpenUrlW
InternetConnectW
InternetCloseHandle
InternetOpenW
FindCloseUrlCache

ws2_32

WSAStartup
WSACleanup
ioctlsocket
WSAAsyncSelect
socket
WSAGetLastError
WSASetLastError
getservbyname
getservbyport
gethostbyname
gethostbyaddr
__WSAFDIsSet
accept
bind
closesocket
connect
getsockname
getsockopt
listen
recv
recvfrom
select
send
sendto
setsockopt
shutdown
ntohs
htonl
htons
inet_addr
inet_ntoa
ntohl

crypt32

CertOpenStore
CertCloseStore
CertGetNameStringW
CertGetCertificateContextProperty
CertFreeCertificateContext
CertVerifySubjectCertificateContext
CertFindCertificateInStore

winspool.drv

GetPrinterW
DocumentPropertiesW
OpenPrinterW
ClosePrinter

comdlg32

ChooseFontW
CommDlgExtendedError
GetSaveFileNameW
PrintDlgW
PageSetupDlgW
GetOpenFileNameW

oleaut32

VarBstrFromCy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SafeArrayUnlock
SafeArrayLock
VariantClear
SafeArrayGetVartype
VariantInit
SafeArrayPtrOfIndex
SafeArrayDestroy
SafeArrayCreate
SysFreeString
SysAllocString

msimg32

GradientFill
AlphaBlend

oleacc

LresultFromObject

uxtheme

DrawThemeParentBackground
IsThemePartDefined
GetCurrentThemeName
GetThemeBackgroundExtent
GetThemeFont
IsAppThemed
IsThemeActive
SetWindowTheme
GetThemeSysFont
GetThemeSysColor
GetThemeInt
GetThemePartSize
GetThemeMargins
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeBackgroundContentRect
IsThemeBackgroundPartiallyTransparent
GetThemeColor

comctl32

ImageList_Add
ImageList_SetDragCursorImage
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ord17
ImageList_GetImageCount
ImageList_Draw
ImageList_GetIconSize
ImageList_Create
ImageList_Destroy
ImageList_SetBkColor
ImageList_Replace
ImageList_AddMasked
ImageList_Remove
ImageList_GetImageInfo
ord16
ImageList_Copy
ImageList_ReplaceIcon
ImageList_BeginDrag

Exports

Exports

pcre2_code_copy_16
pcre2_code_copy_with_tables_16
pcre2_code_free_16
pcre2_compile_16
pcre2_compile_context_copy_16
pcre2_compile_context_create_16
pcre2_compile_context_free_16
pcre2_config_16
pcre2_convert_context_copy_16
pcre2_convert_context_create_16
pcre2_convert_context_free_16
pcre2_general_context_copy_16
pcre2_general_context_create_16
pcre2_general_context_free_16
pcre2_get_error_message_16
pcre2_get_mark_16
pcre2_get_match_data_size_16
pcre2_get_ovector_count_16
pcre2_get_ovector_pointer_16
pcre2_get_startchar_16
pcre2_jit_compile_16
pcre2_jit_free_unused_memory_16
pcre2_jit_match_16
pcre2_jit_stack_assign_16
pcre2_jit_stack_create_16
pcre2_jit_stack_free_16
pcre2_match_16
pcre2_match_context_copy_16
pcre2_match_context_create_16
pcre2_match_context_free_16
pcre2_match_data_create_16
pcre2_match_data_create_from_pattern_16
pcre2_match_data_free_16
pcre2_set_bsr_16
pcre2_set_callout_16
pcre2_set_character_tables_16
pcre2_set_compile_extra_options_16
pcre2_set_compile_recursion_guard_16
pcre2_set_depth_limit_16
pcre2_set_glob_escape_16
pcre2_set_glob_separator_16
pcre2_set_heap_limit_16
pcre2_set_match_limit_16
pcre2_set_max_pattern_length_16
pcre2_set_newline_16
pcre2_set_offset_limit_16
pcre2_set_parens_nest_limit_16
pcre2_set_recursion_limit_16
pcre2_set_recursion_memory_management_16
pcre2_set_substitute_callout_16

Sections

.text
Size: 7.1MB - Virtual size: 7.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 83KB - Virtual size: 291KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fff329d8d823cb8c5f692f0ca3714d70

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

rpcrt4

bcrypt

shlwapi

wininet

ws2_32

crypt32

winspool.drv

comdlg32

oleaut32

msimg32

oleacc

uxtheme

comctl32

Exports

Exports

Sections

.text Size: 7.1MB - Virtual size: 7.1MB

.rdata Size: 2.1MB - Virtual size: 2.1MB

.data Size: 83KB - Virtual size: 291KB

.rsrc Size: 140KB - Virtual size: 139KB

.text
Size: 7.1MB - Virtual size: 7.1MB

.rdata
Size: 2.1MB - Virtual size: 2.1MB

.data
Size: 83KB - Virtual size: 291KB

.rsrc
Size: 140KB - Virtual size: 139KB