daea9a0a7b64e4a9bd797ce6b4c61fab4b7fc30090fef4b1884a72418b70450f

Sharing

Copy URL

Twitter E-mail

General

Target

daea9a0a7b64e4a9bd797ce6b4c61fab4b7fc30090fef4b1884a72418b70450f
Size

300KB
MD5

65e99278bac6189b1e20b8e9f729dcf5
SHA1

5a436c0db08c404fe6f347025d42ad3fad57abeb
SHA256

daea9a0a7b64e4a9bd797ce6b4c61fab4b7fc30090fef4b1884a72418b70450f
SHA512

5d7714321cb2ae7171c58371daa2425f2b0f2604a9a6808e313a44be5c8e4f8929ef159283e21e555142e630058d3196900e757948d1e0bc8d54a4acfe2e453e
SSDEEP

6144:SfF5sqUY0wogvYFSf/71n7Ioppea+GGwZ+RzeRCPGMer5v:S0q3vgPoXBRV5v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
daea9a0a7b64e4a9bd797ce6b4c61fab4b7fc30090fef4b1884a72418b70450f

Files

daea9a0a7b64e4a9bd797ce6b4c61fab4b7fc30090fef4b1884a72418b70450f
.exe windows:4 windows x86 arch:x86

b85231966c779125dcab61da2f116965

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
WideCharToMultiByte
lstrlenW
WaitForSingleObject
TerminateProcess
GlobalAlloc
GetTickCount
Process32Next
Process32First
CreateToolhelp32Snapshot
CloseHandle
GlobalFree
GetProcessHeap
HeapAlloc
RtlMoveMemory
HeapFree
lstrcpyn
LocalFree
lstrcatA
LocalAlloc
OpenProcess
GetCurrentDirectoryW
GetCurrentProcess
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
InterlockedExchange
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetACP
HeapSize
RaiseException
RtlUnwind
ExitProcess
GetCommandLineA
GetStartupInfoA
CloseHandle
GlobalFree
GlobalUnlock
GlobalLock
DeleteFileA
FindClose
FindNextFileA
FindFirstFileA
WriteFile
SetFilePointer
HeapFree
HeapAlloc
GetLastError
GetCurrentProcess
GetVersionExA
GetDriveTypeA
TerminateProcess
GetProcAddress
GetModuleHandleA
Sleep
FreeLibrary
lstrcpyA
LoadLibraryA
lstrlenA
MultiByteToWideChar
GlobalAlloc
SetLastError
lstrcatA
HeapReAlloc
GetTimeZoneInformation
GetVersion
GetCurrentThreadId
lstrcmpiA
lstrcmpA
GlobalDeleteAtom
GetModuleFileNameA
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
LocalFree
FlushFileBuffers
lstrcpynA
GetFullPathNameA
LocalAlloc
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
LeaveCriticalSection
GlobalReAlloc
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetCurrentDirectoryA
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetProcessVersion
FileTimeToSystemTime
FileTimeToLocalFileTime
GetCPInfo
GetOEMCP

ntdll

sprintf
NtQueryInformationProcess

user32

GetWindowThreadProcessId
GetClassNameA
GetWindowTextLengthW
GetWindowTextW
IsWindowVisible
GetParent
CallWindowProcA
GetInputState
FindWindowExA
LoadStringA
GetSysColorBrush
LoadCursorA
LoadIconA
MapWindowPoints
GetSysColor
AdjustWindowRectEx
GetClientRect
CopyRect
DestroyMenu
GetSystemMetrics
GetWindowRect
SendMessageA
GetClassNameA
wsprintfA
ReleaseDC
GetDC
SystemParametersInfoA
GetDlgItem
SetWindowLongA
GetWindowTextA
GetWindowLongA
PtInRect
GetWindow
GetParent
PostQuitMessage
PostMessageA
EnableWindow
MessageBoxA
IsWindowEnabled
GetLastActivePopup
SetWindowsHookExA
PeekMessageA
CallNextHookEx
GetKeyState
DispatchMessageA
GetNextDlgTabItem
GetFocus
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
ClientToScreen
TabbedTextOutA
DrawTextA
GrayStringA
UnhookWindowsHookEx
DestroyWindow
GetDlgCtrlID
SetWindowTextA
GetMenuItemCount
SetWindowPos
SetFocus
GetWindowPlacement
IsIconic
RegisterWindowMessageA
SetForegroundWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
DefWindowProcA
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
CreateWindowExA
GetMenuItemID
GetSubMenu
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow

msvcrt

strlen

shell32

ShellExecuteExW
SHChangeNotify
SHGetSpecialFolderPathA

ole32

CoUninitialize
CoCreateInstance
CoInitialize

odbc32

SQLDisconnect
SQLDriverConnect
SQLSetStmtAttr
SQLFetchScroll
SQLGetData
SQLDescribeCol
SQLNumResultCols
SQLFreeHandle
SQLEndTran
SQLGetConnectAttr
SQLGetDiagRec
SQLBrowseConnect
SQLExecDirect
SQLRowCount
SQLPrepare
SQLSetEnvAttr
SQLAllocHandle
SQLBindParameter
SQLSetConnectAttr
SQLExecute

advapi32

DeleteService
EnumDependentServicesA
StartServiceA
EnumServicesStatusA
OpenSCManagerA
OpenServiceA
QueryServiceStatus
CloseServiceHandle
QueryServiceConfigA
ControlService
CreateServiceA
QueryServiceConfig2A
GetServiceKeyNameA
EnumServicesStatusExA
ChangeServiceConfigA
GetServiceDisplayNameA
ChangeServiceConfig2A
RegOpenKeyA
RegCloseKey
RegSetValueExA
RegDeleteValueA

wininet

InternetOpenUrlA
HttpQueryInfoA
InternetReadFile
InternetGetConnectedState
InternetCloseHandle
InternetConnectA
FtpFindFirstFileA
FtpOpenFileA
InternetSetFilePointer
InternetOpenA

wmvert

wm_WriteFile
wm_StrComp
wm_InStr
wm_DoEvents
wm_Space
wm_CnvToBin
wm_MkDir
wm_SpaceBin
wm_GetBinData
wm_pbin
wm_TimePart
wm_BinLen
wm_BOr
wm_ObjClear
wm_ObjCreateObject
wm_Now
wm_Sleep
wm_IsFileExist
wm_Str
wm_SaveRegItem
wm_IsRegItemExist
wm_GetRunPath
wm_ObjCopy
wm_ObjRunMethod
wm_ObjSetProperty
wm_GetRunFileName
wm_ReadFile
wm_Len
wm_RpSubText
wm_Split
wm_VariantSet
wm_ObjGetProperty
wm_VariantGetBin
wm_VariantClear
wm_ObjGetTextProperty
wm_ObjGetNumProperty
wm_Trim
wm_Right
wm_Left
wm_Mid
wm_Asc
wm_UCase
wm_Mod
wm_SHR
wm_BAnd
wm_SHL
wm_ToByte
wm_InStrRev
wm_Chr
wm_BinMid
wm_SetVariantType
wm_VariantCreateArray
wm_ObjRunTextMethod
wm_RunVariantMethod
wm_pstr
wm_ZeroAry
wm_GetTickCount
wm_BinLeft
wm_Open
wm_SeekToEnd
wm_Close
wm_WriteBin
wm_ToInt
wm_NotifySys
wm_CreateWindowFromTemplate

gdi32

GetStockObject
GetDeviceCaps
SelectObject
DeleteDC
GetObjectA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
DeleteObject
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
CreateBitmap

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

comctl32

ord17

Sections

.text
Size: 164KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b85231966c779125dcab61da2f116965

Headers

File Characteristics

Imports

kernel32

ntdll

user32

msvcrt

shell32

ole32

odbc32

advapi32

wininet

wmvert

gdi32

winspool.drv

comctl32

Sections

.text Size: 164KB - Virtual size: 162KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 20KB - Virtual size: 81KB

.rsrc Size: 92KB - Virtual size: 89KB

.text
Size: 164KB - Virtual size: 162KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 20KB - Virtual size: 81KB

.rsrc
Size: 92KB - Virtual size: 89KB