672df90de7ce847610364338531e3f4025131a18fb1055ee22aa71256a17f1f8

Sharing

Copy URL Twitter E-mail

General

Target

672df90de7ce847610364338531e3f4025131a18fb1055ee22aa71256a17f1f8
Size

5.8MB
MD5

713f4f053fbecdca1765e2d74822daa4
SHA1

37945c66e10095653cc3a5d80e46d3e70cf8bfc1
SHA256

672df90de7ce847610364338531e3f4025131a18fb1055ee22aa71256a17f1f8
SHA512

b8f61c136e4d54ecf3ecb0e03a21ec4489a107c9c081c5fa79fb3d10108b7946ed8de96f06b630881b96df07d66778bb9044facd560c540da3087b70e0222f54
SSDEEP

98304:mSscz8hVyTsm8IHjdyWJVkOvW4tiCIzj5b0ng+5UrcvdRqMGP:mSscz8/yTsm86jcIvWYQj5Fa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
672df90de7ce847610364338531e3f4025131a18fb1055ee22aa71256a17f1f8

Files

672df90de7ce847610364338531e3f4025131a18fb1055ee22aa71256a17f1f8
.exe windows:6 windows x86 arch:x86

b8695b96bc5af5839f91b204b3a0d012

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

K32GetProcessImageFileNameW
K32GetProcessMemoryInfo
K32GetModuleFileNameExW
K32GetModuleBaseNameW
K32EnumProcessModules
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetSystemDefaultUILanguage
WideCharToMultiByte
MultiByteToWideChar
GetTimeZoneInformation
FileTimeToSystemTime
MoveFileW
CopyFileW
SetDllDirectoryW
LocalFree
LocalAlloc
GlobalLock
GlobalUnlock
LoadLibraryW
GetProcAddress
GetModuleFileNameW
FreeLibrary
DeleteTimerQueue
DeleteTimerQueueTimer
CreateTimerQueueTimer
WaitForSingleObjectEx
GetExitCodeThread
GetNativeSystemInfo
GetStringTypeW
InitializeCriticalSectionEx
QueryPerformanceCounter
CreateTimerQueue
EncodePointer
DecodePointer
LCMapStringEx
GetSystemTimeAsFileTime
GetModuleHandleW
GetCPInfo
GetStdHandle
FreeConsole
AttachConsole
WriteConsoleA
WriteConsoleW
FillConsoleOutputCharacterW
GetConsoleScreenBufferInfo
SetConsoleCursorPosition
ReadConsoleOutputCharacterA
ExitProcess
MulDiv
GetCommandLineW
GlobalAlloc
GlobalSize
GlobalHandle
GlobalFree
SetErrorMode
RaiseException
CreateMutexW
SetThreadPriority
TerminateThread
ResumeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FormatMessageW
SetCurrentDirectoryW
GetFileAttributesW
GetFileType
WriteFile
SetHandleInformation
CreatePipe
SetNamedPipeHandleState
PeekNamedPipe
SetEvent
CreateEventW
WaitForMultipleObjects
CreateProcessW
GetFileSize
GetLongPathNameW
GetTempFileNameW
GetEnvironmentVariableW
IsDebuggerPresent
LoadResource
LockResource
SizeofResource
FindResourceW
GetComputerNameW
IsValidCodePage
GetACP
GetLocaleInfoW
IsBadReadPtr
IsBadStringPtrA
GetSystemDirectoryA
LoadLibraryA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
ResetEvent
GetStartupInfoW
InitializeSListHead
RtlUnwind
LoadLibraryExW
GetFullPathNameW
SetEnvironmentVariableW
GetCurrentDirectoryW
GetFileInformationByHandle
SystemTimeToTzSpecificLocalTime
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
MoveFileExW
SetStdHandle
FlushFileBuffers
GetConsoleMode
ReadConsoleW
GetConsoleOutputCP
SetFilePointerEx
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileSizeEx
HeapReAlloc
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEndOfFile
FindFirstFileExW
GetCommandLineA
HeapSize
GetVersionExW
GetSystemDirectoryW
GetTickCount
GetSystemTime
OpenProcess
GetProcessId
GetCurrentThreadId
GetCurrentThread
CreateThread
GetExitCodeProcess
TerminateProcess
GetCurrentProcessId
GetCurrentProcess
Sleep
WaitForSingleObject
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeviceIoControl
GetProcessHeap
HeapFree
HeapAlloc
SetLastError
GetLastError
CloseHandle
OutputDebugStringW
GetTempPathW
RemoveDirectoryW
ReadFile
QueryDosDeviceW
GetVolumeInformationW
GetLogicalDriveStringsW
GetFileTime
GetFileAttributesExW
GetDriveTypeW
GetDriveTypeA
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToLocalFileTime
DeleteFileW
CreateFileW
CreateDirectoryW
QueryPerformanceFrequency
ExpandEnvironmentStringsW

user32

CreateAcceleratorTableW
DestroyAcceleratorTable
TranslateAcceleratorW
GetDoubleClickTime
GetCaretBlinkTime
GetMenuState
CreateMenu
CreatePopupMenu
DestroyMenu
GetSubMenu
InsertMenuW
ModifyMenuW
RemoveMenu
SetMenuInfo
InsertMenuItemW
SetMenuItemInfoW
MessageBeep
DrawEdge
DrawFrameControl
CheckMenuItem
GetMenuItemID
GetSysColorBrush
CheckMenuRadioItem
GetMessageW
PostThreadMessageW
ValidateRect
GetWindowDC
BeginPaint
EndPaint
UnionRect
GetDesktopWindow
ValidateRgn
IsRectEmpty
GetComboBoxInfo
ChildWindowFromPoint
IsClipboardFormatAvailable
ChangeDisplaySettingsExW
EnumDisplaySettingsW
MonitorFromPoint
MonitorFromWindow
GetMonitorInfoW
EnumDisplayMonitors
wsprintfW
WaitForInputIdle
MsgWaitForMultipleObjects
SetTimer
KillTimer
DdePostAdvise
DdeNameService
DdeCreateDataHandle
DdeGetData
DdeQueryStringW
SetScrollInfo
IsDialogMessageW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
SetParent
GetParent
PtInRect
InflateRect
FillRect
GetSysColor
ChildWindowFromPointEx
WindowFromPoint
MapWindowPoints
ScreenToClient
ClientToScreen
GetCursorPos
SetCursorPos
GetClientRect
EnableScrollBar
RegisterClipboardFormatW
RedrawWindow
InvalidateRect
GetUpdateRgn
DrawIconEx
TrackPopupMenu
GetMenuItemCount
GetSystemMetrics
IsWindowEnabled
ReleaseCapture
SetCapture
GetCapture
MapVirtualKeyW
VkKeyScanW
GetAsyncKeyState
GetActiveWindow
SetFocus
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
MoveWindow
AnimateWindow
IsWindow
CreateWindowExW
CallWindowProcW
PostQuitMessage
DefWindowProcW
GetMessageTime
GetMessagePos
UnregisterHotKey
PeekMessageW
DispatchMessageW
TranslateMessage
LoadCursorW
GetProcessDefaultLayout
UnregisterClassW
RegisterClassW
SystemParametersInfoW
HideCaret
SetCursor
SetWindowTextW
keybd_event
GetKeyState
GetFocus
DestroyWindow
IsMenu
GetWindowRect
SetMenu
PostMessageW
RegisterWindowMessageW
SendMessageW
AttachThreadInput
ShowWindow
SetWindowPos
IsWindowVisible
BringWindowToTop
OpenClipboard
CloseClipboard
GetClipboardData
RegisterHotKey
EmptyClipboard
EnableWindow
SetActiveWindow
GetSystemMenu
AppendMenuW
UpdateWindow
GetForegroundWindow
SetForegroundWindow
GetDC
ReleaseDC
GetWindowTextA
GetWindowTextW
GetWindowTextLengthW
MessageBoxW
GetWindowLongW
SetWindowLongW
FindWindowW
GetClipboardFormatNameW
OffsetRect
CopyRect
SetRectEmpty
SetRect
ScrollWindow
DrawFocusRect
DrawTextW
EnableMenuItem
DrawStateW
FindWindowExW
EnumWindows
GetClassNameW
DrawMenuBar
GetDialogBaseUnits
CreateDialogIndirectParamW
IsZoomed
IsIconic
FlashWindowEx
SetLayeredWindowAttributes
GetWindowPlacement
DdeFreeStringHandle
DdeCreateStringHandleW
DdeGetLastError
DdeFreeDataHandle
SetWindowRgn
GetDlgItem
CreateDialogParamW
DestroyIcon
CreateIconIndirect
DestroyCursor
GetIconInfo
LoadImageW
LoadIconW
LoadBitmapW
GetMenuItemInfoW
GetWindowThreadProcessId
GetWindow
DdeInitializeW
GetScrollInfo
DdeUninitialize
DdeConnect
DdeDisconnect
DdeClientTransaction
DdeAccessData
DdeUnaccessData

gdi32

PtInRegion
RectInRegion
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
CreateRectRgnIndirect
GetCharABCWidthsW
GetTextExtentExPointW
CreateDIBitmap
GetDIBits
CreateDIBSection
GetDIBColorTable
SetDIBColorTable
CreateICW
GetSystemPaletteEntries
CreateDCW
ExcludeClipRect
EqualRgn
SelectObject
SelectPalette
GetTextMetricsW
SetBrushOrgEx
GdiFlush
DeleteObject
GetObjectW
CreateCompatibleDC
DeleteDC
StretchBlt
CombineRgn
CreateHatchBrush
GetTextExtentPoint32W
MoveToEx
LineTo
GetBkColor
SetWindowOrgEx
SetWindowExtEx
SetViewportExtEx
PolyBezier
Polyline
Polygon
LPtoDP
DPtoLP
CreatePolygonRgn
SetStretchBltMode
CreateFontIndirectW
GetOutlineTextMetricsW
ExtCreateRegion
GetRegionData
OffsetRgn
SetBkColor
BitBlt
CreateBitmap
CreateBitmapIndirect
ExtTextOutW
ModifyWorldTransform
SetWorldTransform
GetWorldTransform
SetROP2
GetDeviceCaps
GetStockObject
SetBkMode
SetTextColor
EnumFontFamiliesExW
StretchDIBits
SetPolyFillMode
SetPixel
CreateCompatibleBitmap
GetLayout
SetLayout
SetMapMode
SetGraphicsMode
ExtSelectClipRgn
SelectClipRgn
RoundRect
Rectangle
PolyPolygon
Pie
MaskBlt
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetGraphicsMode
GetClipBox
ExtFloodFill
Ellipse
Arc
GetRgnBox
ExtCreatePen
CreatePen
CreateSolidBrush
CreatePatternBrush
RealizePalette
CreateRectRgn
EndPage
StartPage
EndDoc
StartDocW
SetAbortProc
PlayEnhMetaFile
GetEnhMetaFileHeader
GetEnhMetaFileW
DeleteEnhMetaFile
CreateEnhMetaFileW
CloseEnhMetaFile
SetViewportOrgEx

advapi32

AllocateAndInitializeSid
RegEnumKeyW
GetUserNameW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
IsValidSecurityDescriptor
InitializeSecurityDescriptor
InitializeAcl
GetLengthSid
FreeSid
DuplicateToken
OpenProcessToken
AddAccessAllowedAce
AccessCheck
OpenThreadToken

shell32

ExtractIconW
DragAcceptFiles
DragFinish
DragQueryPoint
DragQueryFileW
CommandLineToArgvW
ShellExecuteW
SHFileOperationW
ShellExecuteExW
SHGetPathFromIDListW
SHCreateDirectoryExW
SHGetSpecialFolderLocation
SHGetFolderPathW
SHGetFileInfoW
ord6
ExtractIconExW

rpcrt4

UuidToStringA
UuidCreate
UuidToStringW
RpcStringFreeW

shlwapi

UrlCanonicalizeW
AssocQueryStringW
SHAutoComplete
StrToIntW

client

Release
SetClientCallback
GetClientManager

wininet

InternetReadFile
InternetQueryDataAvailable
FindNextUrlCacheEntryW
InternetSetOptionW
InternetOpenUrlW
HttpAddRequestHeadersW
HttpSendRequestW
HttpQueryInfoW
FindFirstUrlCacheEntryW
FindCloseUrlCache
InternetConnectW
InternetCloseHandle
HttpOpenRequestW
InternetOpenW
InternetQueryOptionW

ws2_32

WSACleanup
WSAAsyncSelect
WSAStartup
ioctlsocket
WSAGetLastError
WSASetLastError
getservbyname
getservbyport
gethostbyname
__WSAFDIsSet
accept
bind
closesocket
connect
getsockname
getsockopt
listen
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket
htonl
htons
inet_addr
inet_ntoa
ntohl
ntohs
gethostbyaddr

crypt32

CertCloseStore
CertFindCertificateInStore
CertGetNameStringW
CertGetCertificateContextProperty
CertFreeCertificateContext
CertVerifySubjectCertificateContext
CertOpenStore

winspool.drv

DocumentPropertiesW
ClosePrinter
GetPrinterW
OpenPrinterW

comdlg32

GetOpenFileNameW
PageSetupDlgW
PrintDlgW
ChooseFontW
GetSaveFileNameW
CommDlgExtendedError

ole32

RevokeDragDrop
OleInitialize
CoTaskMemFree
OleSetContainedObject
OleUninitialize
OleLockRunning
CoLockObjectExternal
RegisterDragDrop
ReleaseStgMedium
CoCreateInstance
OleRun
CoTaskMemAlloc
OleGetClipboard
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard

oleaut32

SafeArrayPtrOfIndex
SafeArrayDestroy
SafeArrayCreate
SysFreeString
VariantInit
SysAllocString
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayGetVartype
VarBstrFromCy
SafeArrayLock
SafeArrayUnlock
VariantClear
SysStringLen

msimg32

GradientFill
AlphaBlend

oleacc

LresultFromObject

uxtheme

IsThemePartDefined
GetCurrentThemeName
SetWindowTheme
GetThemeBackgroundExtent
GetThemeFont
IsAppThemed
IsThemeActive
GetThemeSysFont
GetThemeSysColor
GetThemeInt
GetThemePartSize
GetThemeMargins
DrawThemeParentBackground
GetThemeColor
OpenThemeData
IsThemeBackgroundPartiallyTransparent
GetThemeBackgroundContentRect
DrawThemeBackground
CloseThemeData

comctl32

ImageList_Create
ImageList_GetIconSize
ImageList_GetImageInfo
ord17
ord16
ImageList_Destroy
ImageList_GetImageCount
ImageList_Add
ImageList_SetBkColor
ImageList_Draw
ImageList_Replace

Exports

Exports

pcre2_code_copy_16
pcre2_code_copy_with_tables_16
pcre2_code_free_16
pcre2_compile_16
pcre2_compile_context_copy_16
pcre2_compile_context_create_16
pcre2_compile_context_free_16
pcre2_config_16
pcre2_convert_context_copy_16
pcre2_convert_context_create_16
pcre2_convert_context_free_16
pcre2_general_context_copy_16
pcre2_general_context_create_16
pcre2_general_context_free_16
pcre2_get_error_message_16
pcre2_get_mark_16
pcre2_get_match_data_size_16
pcre2_get_ovector_count_16
pcre2_get_ovector_pointer_16
pcre2_get_startchar_16
pcre2_jit_compile_16
pcre2_jit_free_unused_memory_16
pcre2_jit_match_16
pcre2_jit_stack_assign_16
pcre2_jit_stack_create_16
pcre2_jit_stack_free_16
pcre2_match_16
pcre2_match_context_copy_16
pcre2_match_context_create_16
pcre2_match_context_free_16
pcre2_match_data_create_16
pcre2_match_data_create_from_pattern_16
pcre2_match_data_free_16
pcre2_set_bsr_16
pcre2_set_callout_16
pcre2_set_character_tables_16
pcre2_set_compile_extra_options_16
pcre2_set_compile_recursion_guard_16
pcre2_set_depth_limit_16
pcre2_set_glob_escape_16
pcre2_set_glob_separator_16
pcre2_set_heap_limit_16
pcre2_set_match_limit_16
pcre2_set_max_pattern_length_16
pcre2_set_newline_16
pcre2_set_offset_limit_16
pcre2_set_parens_nest_limit_16
pcre2_set_recursion_limit_16
pcre2_set_recursion_memory_management_16
pcre2_set_substitute_callout_16

Sections

.text
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b8695b96bc5af5839f91b204b3a0d012

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

rpcrt4

shlwapi

client

wininet

ws2_32

crypt32

winspool.drv

comdlg32

ole32

oleaut32

msimg32

oleacc

uxtheme

comctl32

Exports

Exports

Sections

.text Size: 4.1MB - Virtual size: 4.1MB

.rdata Size: 1.6MB - Virtual size: 1.6MB

.data Size: 60KB - Virtual size: 248KB

.rsrc Size: 37KB - Virtual size: 36KB

.text
Size: 4.1MB - Virtual size: 4.1MB

.rdata
Size: 1.6MB - Virtual size: 1.6MB

.data
Size: 60KB - Virtual size: 248KB

.rsrc
Size: 37KB - Virtual size: 36KB