9de21129b367f12e1a535e6e7452ad62cff06a5dff869f2d41760034ddc7c2e6

Sharing

Copy URL Twitter E-mail

General

Target

9de21129b367f12e1a535e6e7452ad62cff06a5dff869f2d41760034ddc7c2e6
Size

2.0MB
MD5

1bbd843cd8b0d71de108ba6622c438ae
SHA1

8c86506b4b8d5e4685dae57adde9dca077c2a9d7
SHA256

9de21129b367f12e1a535e6e7452ad62cff06a5dff869f2d41760034ddc7c2e6
SHA512

e727eeffdf9d6656ef067772c2297ba958fceb18376c95d0f3bab5b314fdc8ce1aa3b071a69f06f03d207860fcb9898528595f7a1bf906dd518cdd4b4b388716
SSDEEP

49152:Ta2YLyILZY7zNROjXVkL608fxpDiLFWtQrumbvVd22LSUk1W7jmJmc8Q:Tc2ILYNROjXVkV0xpDiLFW23bvC127ja

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9de21129b367f12e1a535e6e7452ad62cff06a5dff869f2d41760034ddc7c2e6

Files

9de21129b367f12e1a535e6e7452ad62cff06a5dff869f2d41760034ddc7c2e6
.exe windows:5 windows x86 arch:x86

0a48217650b8d38d3028327497b44a8f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringW
GetTimeZoneInformation
WriteConsoleW
CreateFileW
GetEnvironmentStringsW
GetDateFormatA
GetTimeFormatA
InterlockedCompareExchange
FreeEnvironmentStringsW
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetConsoleMode
GetConsoleCP
SetHandleCount
GetStdHandle
HeapCreate
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetLocaleInfoW
GetStringTypeW
LCMapStringW
IsProcessorFeaturePresent
GetFileType
SetStdHandle
HeapQueryInformation
HeapSize
GetSystemTimeAsFileTime
HeapReAlloc
CreateThread
ExitThread
VirtualQuery
GetSystemInfo
VirtualAlloc
GetStartupInfoW
HeapSetInformation
GetCommandLineA
EncodePointer
DecodePointer
ExitProcess
RtlUnwind
HeapAlloc
RaiseException
HeapFree
FindResourceExW
GetUserDefaultLCID
VirtualProtect
GetNumberFormatA
GetWindowsDirectoryA
GetFileTime
GetFileSizeEx
FileTimeToLocalFileTime
GetFileAttributesExA
SetErrorMode
GetTempPathA
GetTempFileNameA
SearchPathA
GetProfileIntA
GetTickCount
GetOEMCP
GetCPInfo
GetACP
FileTimeToSystemTime
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpiA
GetThreadLocale
DeleteFileA
GetCurrentDirectoryA
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
TlsGetValue
LocalAlloc
InterlockedIncrement
lstrcpyA
GlobalGetAtomNameA
GlobalFindAtomA
GetVersionExA
LoadLibraryW
lstrcmpW
InterlockedDecrement
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
CreateFileA
GetFileSize
GetFileAttributesA
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GlobalReAlloc
EnterCriticalSection
LeaveCriticalSection
FindResourceA
FreeResource
GetCurrentProcessId
GlobalAddAtomA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetModuleHandleA
WaitForSingleObject
ResumeThread
SetThreadPriority
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetModuleFileNameA
GetLocaleInfoA
CompareStringA
ActivateActCtx
DeactivateActCtx
InterlockedExchange
lstrcmpA
GetModuleHandleW
FreeLibrary
GetLastError
SetLastError
GlobalFree
CopyFileA
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
lstrlenW
MultiByteToWideChar
MulDiv
lstrlenA
LoadLibraryA
GetProcAddress
WideCharToMultiByte
CreateToolhelp32Snapshot
Process32First
Process32Next
CloseHandle
QueryPerformanceFrequency
QueryPerformanceCounter
Sleep
FindResourceW
LoadResource
LockResource
SetEnvironmentVariableA
SizeofResource
GetProcessHeap

user32

SetCapture
KillTimer
SetTimer
GetSystemMenu
DeleteMenu
InvalidateRect
SetRect
DrawIconEx
SetWindowRgn
DrawFocusRect
DrawFrameControl
DrawEdge
MoveWindow
SetWindowTextA
IsDialogMessageA
CheckDlgButton
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
UpdateWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowContextHelpId
MapDialogRect
SetWindowPos
DestroyIcon
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
CopyImage
OpenClipboard
IntersectRect
SetRectEmpty
IsRectEmpty
WindowFromPoint
MapVirtualKeyA
GetKeyNameTextA
UnhookWindowsHookEx
GetWindowRect
PtInRect
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetNextDlgTabItem
EndDialog
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
ScreenToClient
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
ShowOwnedPopups
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
OffsetRect
IsCharLowerA
CharUpperBuffA
GetUpdateRect
MessageBeep
RedrawWindow
SendMessageA
GetClassNameA
GetDlgItem
ShowWindow
InvalidateRgn
IsZoomed
PostQuitMessage
GetSysColor
SystemParametersInfoA
DestroyMenu
GetMenuItemInfoA
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
RemoveMenu
GetParent
PostMessageA
InflateRect
LoadCursorW
LoadCursorA
ReleaseCapture
NotifyWinEvent
GetAsyncKeyState
CharUpperA
SetLayeredWindowAttributes
GetWindowRgn
CreateMenu
GetSysColorBrush
FillRect
CopyRect
LoadImageA
GetSystemMetrics
LoadIconW
EnableWindow
GetClientRect
IsIconic
LoadMenuW
DestroyCursor
HideCaret
InvertRect
SubtractRect
MapVirtualKeyExA
GetWindow
DrawIcon
GetSubMenu
FrameRect
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
IsClipboardFormatAvailable
GetDoubleClickTime
CopyIcon
SetCursorPos
UnregisterClassA
MonitorFromPoint
CharNextA
GetMenuDefaultItem
SetMenuDefaultItem
UpdateLayeredWindow
EnableScrollBar
GetDialogBaseUnits
RegisterClipboardFormatA
EnumChildWindows
LockWindowUpdate
IsMenu
UnpackDDElParam
ReuseDDElParam
LoadMenuA
LoadAcceleratorsA
InsertMenuItemA
BringWindowToTop
TranslateAcceleratorA
SetClassLongA
SetParent
CreatePopupMenu
CreateAcceleratorTableA
LoadAcceleratorsW
DestroyAcceleratorTable
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
CopyAcceleratorTableA
PostThreadMessageA
WaitMessage
RealChildWindowFromPoint
GetNextDlgGroupItem
UnionRect
GetIconInfo
DrawStateA
EnumDisplayMonitors

gdi32

GetLayout
SetLayout
DeleteObject
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
GetStockObject
SelectPalette
GetObjectType
CreatePen
CreateSolidBrush
CreateHatchBrush
CreateRectRgnIndirect
PatBlt
SetDIBColorTable
GetDIBits
RealizePalette
CreateCompatibleBitmap
CombineRgn
StretchBlt
SetTextAlign
CreateDIBSection
CreateEllipticRgn
CreatePolygonRgn
GetBkColor
GetTextColor
Polyline
Ellipse
Polygon
CreateRoundRectRgn
GetTextMetricsA
RoundRect
Rectangle
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
SetRectRgn
GetMapMode
DPtoLP
OffsetRgn
GetRgnBox
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
ExtFloodFill
SetPaletteEntries
GetWindowOrgEx
LPtoDP
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetViewportOrgEx
EnumFontFamiliesExA
SetPixelV
GetTextFaceA
LineTo
MoveToEx
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateBitmap
GetTextExtentPoint32A
ExtTextOutA
BitBlt
CreateCompatibleDC
CreateDCA
CopyMetaFileA
GetDeviceCaps
SetPixel
CreateFontIndirectA
GetObjectA

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegCloseKey
RegEnumKeyExA
RegEnumValueA
RegQueryValueA

shell32

SHAppBarMessage
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListA
SHGetFileInfoA
ShellExecuteA
DragQueryFileA
DragFinish
SHBrowseForFolderA

comctl32

ImageList_GetIconSize

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathRemoveFileSpecW

ole32

OleUninitialize
CoInitializeEx
OleGetClipboard
OleLockRunning
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoFreeUnusedLibraries
CLSIDFromString
CLSIDFromProgID
CreateStreamOnHGlobal
CoCreateGuid
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
OleInitialize
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
CoRegisterMessageFilter
CoRevokeClassObject
CoGetClassObject
CoTaskMemFree
CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

VariantCopy
SysStringLen
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
OleCreateFontIndirect
SysAllocString
VariantChangeType
VariantClear
SysAllocStringByteLen
SysAllocStringLen
VariantInit
SysFreeString

oledlg

ord8

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageRectI

wininet

InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 326KB - Virtual size: 326KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 221KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0a48217650b8d38d3028327497b44a8f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

wininet

oleacc

imm32

winmm

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 326KB - Virtual size: 326KB

.data Size: 29KB - Virtual size: 60KB

.rsrc Size: 221KB - Virtual size: 221KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 326KB - Virtual size: 326KB

.data
Size: 29KB - Virtual size: 60KB

.rsrc
Size: 221KB - Virtual size: 221KB