e1eff237b4c4149588745e24e57265165377c1b7d9b9b54069a9eec98239c88f

Sharing

Copy URL Twitter E-mail

General

Target

e1eff237b4c4149588745e24e57265165377c1b7d9b9b54069a9eec98239c88f
Size

7.6MB
MD5

0f9faba69cfc34f7c8e90cd3501abe14
SHA1

d38d2a6183b68d3dfb4d649f3567e63f92bdc412
SHA256

e1eff237b4c4149588745e24e57265165377c1b7d9b9b54069a9eec98239c88f
SHA512

057ac349f2da92434e7a6b86d17f0403e1d4c0a440166ed72cf3386752f1262884d960326ea3e392492bca88bb6377a856c15fccaee3086d9dc6c36b316bd885
SSDEEP

196608:z/44BSVd6SE+ul4V3uuSge14jNHQeDZP:yVo6V3uu1HlQe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1eff237b4c4149588745e24e57265165377c1b7d9b9b54069a9eec98239c88f

Files

e1eff237b4c4149588745e24e57265165377c1b7d9b9b54069a9eec98239c88f
.exe windows:6 windows x86 arch:x86

1f4935115451df93fc662248ccb07017

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeW
GetFileAttributesExW
GetFileTime
GetLogicalDriveStringsW
GetVolumeInformationW
QueryDosDeviceW
ReadFile
RemoveDirectoryW
GetTempPathW
OutputDebugStringA
OutputDebugStringW
CloseHandle
SetHandleInformation
GetLastError
SetLastError
K32GetProcessImageFileNameW
K32GetProcessMemoryInfo
K32GetModuleFileNameExW
K32GetModuleBaseNameW
K32EnumProcessModules
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetDriveTypeA
WideCharToMultiByte
MultiByteToWideChar
CompareStringW
GetTimeZoneInformation
FileTimeToSystemTime
MoveFileW
CopyFileW
SetDllDirectoryW
LocalFree
LocalAlloc
GlobalLock
GlobalUnlock
LoadLibraryW
GetProcAddress
GetModuleFileNameW
FreeLibrary
DeleteTimerQueue
DeleteTimerQueueTimer
CreateTimerQueueTimer
CreateTimerQueue
GetVersionExW
GetSystemDirectoryW
GetTickCount
GetVersion
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToLocalFileTime
DeleteFileW
CreateFileW
CreateDirectoryW
GetSystemDefaultUILanguage
GetSystemTime
OpenProcess
GetProcessId
CreateProcessW
TerminateThread
GetCurrentThreadId
GetCurrentThread
GetStringTypeW
InitializeCriticalSectionEx
EncodePointer
DecodePointer
CompareStringEx
GetCPInfo
LCMapStringEx
GetStdHandle
FreeConsole
AttachConsole
WriteConsoleA
WriteConsoleW
FillConsoleOutputCharacterW
GetConsoleScreenBufferInfo
SetConsoleCursorPosition
ReadConsoleOutputCharacterA
ExitProcess
MulDiv
GetCommandLineW
GlobalAlloc
GlobalSize
GlobalHandle
GlobalFree
SetErrorMode
GetSystemTimeAsFileTime
RaiseException
SetThreadPriority
GetExitCodeThread
ResumeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FormatMessageW
SetCurrentDirectoryW
GetFileAttributesW
GetFileType
WriteFile
SetNamedPipeHandleState
PeekNamedPipe
SetEvent
CreateEventW
WaitForMultipleObjects
GetFileSize
GetLongPathNameW
GetTempFileNameW
GetModuleHandleW
GetEnvironmentVariableW
IsDebuggerPresent
GetNativeSystemInfo
LoadResource
LockResource
SizeofResource
FindResourceW
GetComputerNameW
IsValidCodePage
QueryPerformanceCounter
QueryPerformanceFrequency
GetACP
GetLocaleInfoW
IsBadReadPtr
IsBadStringPtrA
GetSystemDirectoryA
LoadLibraryA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
ResetEvent
WaitForSingleObjectEx
GetStartupInfoW
InitializeSListHead
InterlockedPushEntrySList
RtlUnwind
LoadLibraryExW
GetFullPathNameW
SetEnvironmentVariableW
GetCurrentDirectoryW
GetFileInformationByHandle
SystemTimeToTzSpecificLocalTime
GetModuleHandleExW
ExitThread
FreeLibraryAndExitThread
MoveFileExW
SetStdHandle
FlushFileBuffers
GetConsoleMode
ReadConsoleW
GetConsoleOutputCP
SetFilePointerEx
GetDateFormatW
GetTimeFormatW
LCMapStringW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileSizeEx
HeapReAlloc
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEndOfFile
FindFirstFileExW
GetCommandLineA
HeapSize
CreateThread
GetExitCodeProcess
TerminateProcess
GetCurrentProcessId
GetCurrentProcess
Sleep
CreatePipe
CreateMutexW
WaitForSingleObject
ReleaseMutex
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeviceIoControl
GetProcessHeap
HeapFree
HeapAlloc
CallNamedPipeW
ExpandEnvironmentStringsW

user32

CreateDialogParamW
GetDlgItem
SetWindowRgn
GetWindowPlacement
SetLayeredWindowAttributes
FlashWindowEx
IsIconic
IsZoomed
CreateDialogIndirectParamW
GetDialogBaseUnits
DrawMenuBar
EnableMenuItem
DrawTextW
DrawFocusRect
DrawIconEx
DrawStateW
SetRect
SetRectEmpty
CopyRect
OffsetRect
DrawEdge
DrawFrameControl
GetMenuState
CheckMenuItem
GetSubMenu
GetMenuItemID
SetMenuItemInfoW
GetSysColorBrush
CheckMenuRadioItem
CreateMenu
CreatePopupMenu
DestroyMenu
InsertMenuW
ModifyMenuW
RemoveMenu
SetMenuInfo
InsertMenuItemW
RegisterClipboardFormatW
GetClipboardFormatNameW
GetComboBoxInfo
ChildWindowFromPoint
CreateAcceleratorTableW
DestroyAcceleratorTable
TranslateAcceleratorW
MessageBeep
GetMessageW
PostThreadMessageW
ValidateRect
GetWindowDC
BeginPaint
EndPaint
UnionRect
GetDesktopWindow
ValidateRgn
IsRectEmpty
IsClipboardFormatAvailable
ChangeDisplaySettingsExW
EnumDisplaySettingsW
MonitorFromPoint
MonitorFromWindow
GetMonitorInfoW
EnumDisplayMonitors
WaitForInputIdle
MsgWaitForMultipleObjects
SetTimer
KillTimer
DdePostAdvise
DdeNameService
DdeCreateDataHandle
DdeGetData
DdeQueryStringW
TrackPopupMenu
GetMenuItemCount
IsWindowEnabled
ReleaseCapture
LoadIconW
GetCapture
MapVirtualKeyW
VkKeyScanW
GetDoubleClickTime
GetActiveWindow
SetFocus
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
MoveWindow
AnimateWindow
IsWindow
CreateWindowExW
CallWindowProcW
PostQuitMessage
DefWindowProcW
GetMessageTime
GetMessagePos
UnregisterHotKey
RegisterHotKey
PeekMessageW
DispatchMessageW
TranslateMessage
LoadCursorW
GetProcessDefaultLayout
UnregisterClassW
RegisterClassW
SystemParametersInfoW
HideCaret
SetCursor
SetWindowTextW
keybd_event
GetKeyState
DestroyWindow
IsMenu
GetWindowRect
SetMenu
PostMessageW
RegisterWindowMessageW
wsprintfW
SendMessageW
AttachThreadInput
ShowWindow
SetWindowPos
IsWindowVisible
BringWindowToTop
OpenClipboard
CloseClipboard
GetClipboardData
EmptyClipboard
EnableWindow
GetSystemMetrics
SetActiveWindow
GetSystemMenu
GetFocus
AppendMenuW
UpdateWindow
GetForegroundWindow
SetForegroundWindow
GetDC
ReleaseDC
GetWindowTextA
GetWindowTextW
GetWindowTextLengthW
MessageBoxW
GetWindowLongW
SetWindowLongW
FindWindowW
FindWindowExW
EnumWindows
GetClassNameW
LoadBitmapW
GetScrollInfo
SetScrollInfo
GetWindowThreadProcessId
GetWindow
DdeInitializeW
IsDialogMessageW
DdeUninitialize
DdeConnect
DdeDisconnect
DdeClientTransaction
DdeAccessData
DdeUnaccessData
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
SetParent
GetCaretBlinkTime
DestroyIcon
CreateIconIndirect
DestroyCursor
GetIconInfo
GetAsyncKeyState
GetParent
PtInRect
InflateRect
LoadImageW
FillRect
GetSysColor
ChildWindowFromPointEx
WindowFromPoint
MapWindowPoints
ScreenToClient
ClientToScreen
GetCursorPos
SetCursorPos
GetClientRect
EnableScrollBar
ScrollWindow
RedrawWindow
InvalidateRect
GetUpdateRgn
SetCapture
DdeFreeStringHandle
DdeCreateStringHandleW
DdeGetLastError
DdeFreeDataHandle
GetMenuItemInfoW

gdi32

SetWorldTransform
ModifyWorldTransform
ExtTextOutW
CreatePolygonRgn
DPtoLP
LPtoDP
Polygon
Polyline
PolyBezier
SetViewportExtEx
CreateRectRgn
SetWindowOrgEx
GetBkColor
LineTo
MoveToEx
CombineRgn
EqualRgn
GetRgnBox
PtInRegion
RectInRegion
CreatePalette
SetROP2
GetPaletteEntries
CreateRectRgnIndirect
GetCharABCWidthsW
GetTextExtentExPointW
CreateDIBitmap
GetDIBits
CreateDIBSection
GetDIBColorTable
SetDIBColorTable
CreateICW
GetSystemPaletteEntries
CreateDCW
EnumFontFamiliesExW
StretchDIBits
GetWorldTransform
SetPixel
GetLayout
SetLayout
SetMapMode
SetGraphicsMode
ExtSelectClipRgn
SelectClipRgn
RoundRect
Rectangle
SetPolyFillMode
Pie
MaskBlt
GetWindowExtEx
SetViewportOrgEx
CloseEnhMetaFile
CreateEnhMetaFileW
DeleteEnhMetaFile
GetEnhMetaFileW
GetEnhMetaFileHeader
PlayEnhMetaFile
GetViewportExtEx
GetPixel
GetObjectType
GetGraphicsMode
GetClipBox
GetDeviceCaps
GetStockObject
SetBkMode
SetTextColor
ExtFloodFill
Ellipse
Arc
ExtCreatePen
CreatePen
CreateSolidBrush
CreatePatternBrush
CreateHatchBrush
CreateCompatibleBitmap
CreateBitmapIndirect
CreateBitmap
BitBlt
GetTextExtentPoint32W
SetBkColor
OffsetRgn
GetRegionData
ExtCreateRegion
GetOutlineTextMetricsW
CreateFontIndirectW
SetStretchBltMode
StretchBlt
DeleteDC
CreateCompatibleDC
GetObjectW
DeleteObject
GdiFlush
SetBrushOrgEx
GetTextMetricsW
PolyPolygon
SelectPalette
SelectObject
RealizePalette
ExcludeClipRect
GetNearestPaletteIndex
SetWindowExtEx
EndPage
StartPage
EndDoc
StartDocW
SetAbortProc

advapi32

FreeSid
RegEnumKeyW
GetUserNameW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
IsValidSid
IsValidSecurityDescriptor
InitializeSecurityDescriptor
InitializeAcl
GetTokenInformation
GetSidSubAuthorityCount
GetSidSubAuthority
GetSidIdentifierAuthority
GetLengthSid
OpenProcessToken
DuplicateToken
AllocateAndInitializeSid
AddAccessAllowedAce
AccessCheck
OpenThreadToken

shell32

SHCreateDirectoryExW
DragFinish
DragAcceptFiles
ExtractIconW
ExtractIconExW
CommandLineToArgvW
Shell_NotifyIconW
SHGetFolderPathW
SHChangeNotify
SHEmptyRecycleBinW
ShellExecuteExW
SHGetPathFromIDListW
SHGetFileInfoW
ord6
SHFileOperationW
ShellExecuteW
SHGetSpecialFolderLocation
DragQueryFileW
DragQueryPoint

rpcrt4

RpcStringFreeW
UuidToStringA
UuidCreate
UuidToStringW

shlwapi

UrlCanonicalizeW
UrlUnescapeW
AssocQueryStringW
SHAutoComplete
StrToIntW

client

Release
SetClientCallback
GetClientManager

wininet

InternetOpenW
InternetCloseHandle
InternetConnectW
InternetOpenUrlW
InternetReadFile
InternetQueryDataAvailable
InternetQueryOptionW
InternetSetOptionW
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestW
HttpQueryInfoW
FindFirstUrlCacheEntryW
FindNextUrlCacheEntryW
FindCloseUrlCache

ws2_32

WSAAsyncSelect
ioctlsocket
WSASetLastError
gethostbyname
getservbyport
ntohl
htonl
shutdown
gethostname
WSAStartup
WSACleanup
getservbyname
WSAGetLastError
WSASocketW
closesocket
accept
bind
socket
htons
inet_addr
inet_ntoa
listen
ntohs
recv
recvfrom
send
sendto
setsockopt
gethostbyaddr
__WSAFDIsSet
connect
getsockname
getsockopt
select

crypt32

CertVerifySubjectCertificateContext
CertFindCertificateInStore
CertCloseStore
CertOpenStore
CertFreeCertificateContext
CertGetNameStringW
CertGetCertificateContextProperty

iphlpapi

IcmpSendEcho2
IcmpCreateFile
GetAdaptersInfo
SetIfEntry
GetTcpTable
GetIpForwardTable
GetIpNetTable
GetIfTable
GetIfEntry

vpn

GetVPNManager
SetCallback

winspool.drv

DocumentPropertiesW
GetPrinterW
OpenPrinterW
ClosePrinter

comdlg32

GetOpenFileNameW
PageSetupDlgW
PrintDlgW
ChooseFontW
GetSaveFileNameW
CommDlgExtendedError

ole32

OleUninitialize
ReleaseStgMedium
CoCreateInstance
OleInitialize
RevokeDragDrop
OleRun
OleLockRunning
CoTaskMemAlloc
CoTaskMemFree
CoLockObjectExternal
RegisterDragDrop
OleSetContainedObject
OleGetClipboard
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard

oleaut32

SafeArrayUnlock
SafeArrayGetVartype
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SafeArrayLock
VariantClear
SetErrorInfo
VarBstrFromCy
VariantInit
SafeArrayPtrOfIndex
SafeArrayDestroy
SafeArrayCreate
SysFreeString
SysAllocString
GetErrorInfo

msimg32

GradientFill
AlphaBlend

oleacc

LresultFromObject

uxtheme

IsThemePartDefined
GetCurrentThemeName
SetWindowTheme
GetThemeBackgroundExtent
GetThemeFont
IsAppThemed
IsThemeActive
GetThemeSysFont
GetThemeSysColor
GetThemeInt
GetThemePartSize
GetThemeMargins
DrawThemeParentBackground
GetThemeColor
IsThemeBackgroundPartiallyTransparent
GetThemeBackgroundContentRect
DrawThemeBackground
CloseThemeData
OpenThemeData

comctl32

ImageList_Create
ImageList_GetIconSize
ImageList_GetImageInfo
ord17
ord16
ImageList_Destroy
ImageList_GetImageCount
ImageList_Add
ImageList_SetBkColor
ImageList_Draw
ImageList_Replace

Exports

Exports

pcre2_code_copy_16
pcre2_code_copy_with_tables_16
pcre2_code_free_16
pcre2_compile_16
pcre2_compile_context_copy_16
pcre2_compile_context_create_16
pcre2_compile_context_free_16
pcre2_config_16
pcre2_convert_context_copy_16
pcre2_convert_context_create_16
pcre2_convert_context_free_16
pcre2_general_context_copy_16
pcre2_general_context_create_16
pcre2_general_context_free_16
pcre2_get_error_message_16
pcre2_get_mark_16
pcre2_get_match_data_size_16
pcre2_get_ovector_count_16
pcre2_get_ovector_pointer_16
pcre2_get_startchar_16
pcre2_jit_compile_16
pcre2_jit_free_unused_memory_16
pcre2_jit_match_16
pcre2_jit_stack_assign_16
pcre2_jit_stack_create_16
pcre2_jit_stack_free_16
pcre2_match_16
pcre2_match_context_copy_16
pcre2_match_context_create_16
pcre2_match_context_free_16
pcre2_match_data_create_16
pcre2_match_data_create_from_pattern_16
pcre2_match_data_free_16
pcre2_set_bsr_16
pcre2_set_callout_16
pcre2_set_character_tables_16
pcre2_set_compile_extra_options_16
pcre2_set_compile_recursion_guard_16
pcre2_set_depth_limit_16
pcre2_set_glob_escape_16
pcre2_set_glob_separator_16
pcre2_set_heap_limit_16
pcre2_set_match_limit_16
pcre2_set_max_pattern_length_16
pcre2_set_newline_16
pcre2_set_offset_limit_16
pcre2_set_parens_nest_limit_16
pcre2_set_recursion_limit_16
pcre2_set_recursion_memory_management_16
pcre2_set_substitute_callout_16

Sections

.text
Size: 4.7MB - Virtual size: 4.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 63KB - Virtual size: 307KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1f4935115451df93fc662248ccb07017

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

rpcrt4

shlwapi

client

wininet

ws2_32

crypt32

iphlpapi

vpn

winspool.drv

comdlg32

ole32

oleaut32

msimg32

oleacc

uxtheme

comctl32

Exports

Exports

Sections

.text Size: 4.7MB - Virtual size: 4.7MB

.rdata Size: 1.7MB - Virtual size: 1.7MB

.data Size: 63KB - Virtual size: 307KB

.rsrc Size: 1.2MB - Virtual size: 1.2MB

.text
Size: 4.7MB - Virtual size: 4.7MB

.rdata
Size: 1.7MB - Virtual size: 1.7MB

.data
Size: 63KB - Virtual size: 307KB

.rsrc
Size: 1.2MB - Virtual size: 1.2MB