a1ec07dc6721a83d45a642f472fb82e0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

a1ec07dc6721a83d45a642f472fb82e0N.exe
Size

698KB
MD5

a1ec07dc6721a83d45a642f472fb82e0
SHA1

0a1fb59b5d9369700e863608a9d3c68a902f50f8
SHA256

b04acee8567021199bdde138c10d39fe3836ace3c95bf56f8b49c01530636ae6
SHA512

08b540c84863d086453925ed11ad89369ab91aeeac3f41828083693ea74e31f911155862a2efb89d1ba0ee1eaf70d677d6a8be57e751c8aaaf0ebd117812e737
SSDEEP

12288:OwRRCz9v6M1FtJgMMtZm0M0I5np17Zy1tLx2:Rchv6MRcO0I5tq2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1ec07dc6721a83d45a642f472fb82e0N.exe

Files

a1ec07dc6721a83d45a642f472fb82e0N.exe
.exe windows:5 windows x86 arch:x86

6e971539499da61d330b490a2413bf9e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\OutMyFile\浏览器\IE6.pdb

Imports

kernel32

GlobalFlags
lstrlenA
SetErrorMode
GetCurrentDirectoryW
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
RtlUnwind
RaiseException
ExitThread
HeapReAlloc
ExitProcess
HeapSize
SetStdHandle
GetFileType
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapCreate
TlsFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetCurrentDirectoryA
GetDriveTypeA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GetDiskFreeSpaceW
GetTempFileNameW
GetTickCount
GetFileTime
GetFileSizeEx
GetFileAttributesW
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
GetModuleHandleA
GetShortPathNameW
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpiW
GetThreadLocale
GetStringTypeExW
MoveFileW
LocalAlloc
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
FindClose
GlobalGetAtomNameW
GlobalFree
FormatMessageW
LocalFree
MulDiv
InterlockedDecrement
GlobalAlloc
GlobalLock
GlobalUnlock
InterlockedIncrement
lstrlenW
SuspendThread
WaitForSingleObject
ResumeThread
SetThreadPriority
FreeResource
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
ResetEvent
CreateEventW
CloseHandle
CreateFileW
GetExitCodeThread
VirtualProtectEx
CreateDirectoryW
OutputDebugStringW
DeleteFileW
TerminateProcess
GetCurrentProcessId
CreateProcessW
GetPrivateProfileIntW
LoadLibraryExW
GetModuleFileNameW
SetEvent
GetTempPathW
WriteProfileStringW
WritePrivateProfileStringW
GetProfileStringW
GetVersionExW
ExpandEnvironmentStringsW
WinExec
Sleep
FreeLibrary
GetCurrentThreadId
WideCharToMultiByte
MultiByteToWideChar
TerminateThread
FindResourceW
LoadResource
LockResource
SizeofResource
CreateThread
GetProcAddress
GetModuleHandleW
LoadLibraryW
GetLastError
SetLastError
VirtualFree
GetPrivateProfileStringW

user32

CharNextW
UnregisterClassW
DeleteMenu
GetNextDlgGroupItem
MessageBeep
SystemParametersInfoW
GetMenuItemInfoW
InflateRect
UnionRect
CharUpperW
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
WindowFromPoint
ClientToScreen
UnpackDDElParam
ReuseDDElParam
DestroyMenu
SetCursor
LoadAcceleratorsW
InsertMenuItemW
SetRectEmpty
BringWindowToTop
TranslateAcceleratorW
GetMenuStringW
InsertMenuW
ReleaseCapture
GetDesktopWindow
SetCapture
InvalidateRgn
InvalidateRect
ReleaseDC
GetDC
SetRect
IsRectEmpty
CopyAcceleratorTableW
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
GetMenuState
EnableMenuItem
GetSysColorBrush
GetActiveWindow
ValidateRect
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetWindowTextLengthW
GetWindowTextW
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
UpdateWindow
GetMenuItemID
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcW
GetMenu
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
GetClientRect
SetClassLongW
CallWindowProcW
PostThreadMessageW
GetClassNameW
FindWindowExW
LoadCursorW
SetWindowRgn
DrawIcon
ShowOwnedPopups
SetWindowContextHelpId
MapDialogRect
RegisterClipboardFormatW
GetWindowThreadProcessId
GetForegroundWindow
PostQuitMessage
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
CheckMenuItem
FillRect
TranslateMessage
GetMessageA
PeekMessageW
MsgWaitForMultipleObjects
DispatchMessageW
GetMessageW
RedrawWindow
SetWindowPos
SetWindowLongW
GetSystemMetrics
GetWindowLongW
SetFocus
GetKeyState
GetFocus
GetParent
GetCursorPos
IsZoomed
IsWindowVisible
CloseWindow
GetSubMenu
AppendMenuW
GetMenuItemCount
LoadMenuW
SetWindowsHookExW
CreatePopupMenu
CallNextHookEx
mouse_event
PostMessageW
KillTimer
MessageBoxW
SetTimer
IsWindow
LoadImageW
LoadIconW
DestroyIcon
GetWindowRect
EnableWindow
SendMessageW
RegisterWindowMessageW
GetLastActivePopup

gdi32

ExtSelectClipRgn
CreatePatternBrush
GetStockObject
ScaleWindowExtEx
CreateEllipticRgn
LPtoDP
Ellipse
GetTextColor
GetMapMode
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
TextOutW
RectVisible
PtVisible
GetPixel
GetWindowExtEx
GetViewportExtEx
CreateSolidBrush
IntersectClipRect
ExcludeClipRect
SetMapMode
SetBkMode
RestoreDC
SaveDC
ExtTextOutW
BitBlt
CreateFontIndirectW
StretchDIBits
DeleteDC
CreateFontW
GetCharWidthW
DeleteObject
GetTextExtentPoint32W
GetTextMetricsW
SelectObject
GetBkColor
CreateCompatibleDC
CreateCompatibleBitmap
GetDeviceCaps
GetRgnBox
CreateRectRgnIndirect
CreateBitmap
GetObjectW
SetBkColor
SetTextColor
GetClipBox

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegSetValueW
GetFileSecurityW
SetFileSecurityW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegOpenKeyExW
RegCreateKeyW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegEnumValueW
RegOpenKeyW
RegQueryValueExA

shell32

SHGetFileInfoW
ShellExecuteW
DragFinish
DragQueryFileW
ExtractIconW
SHGetSpecialFolderPathW

comctl32

InitCommonControlsEx

shlwapi

StrStrIW
PathStripToRootW
PathIsUNCW
PathFindExtensionW
PathFindFileNameW
PathFileExistsW
UrlUnescapeW
PathRemoveFileSpecW

oledlg

OleUIBusyW

ole32

CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoInitializeEx
CLSIDFromString
CoGetInterfaceAndReleaseStream
CoTaskMemAlloc
CoTaskMemFree
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CLSIDFromProgID
CoRevokeClassObject

oleaut32

OleCreateFontIndirect
VariantCopy
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantChangeType
VariantInit
SysAllocStringLen
VariantClear
SysFreeString
SysAllocString

urlmon

CoInternetSetFeatureEnabled
URLDownloadToFileW

wininet

InternetOpenUrlW
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetOpenW
InternetGetLastResponseInfoW
InternetCloseHandle
HttpQueryInfoW
InternetQueryDataAvailable
InternetQueryOptionW
InternetCanonicalizeUrlW
InternetCrackUrlW

Sections

.text
Size: 396KB - Virtual size: 395KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6e971539499da61d330b490a2413bf9e

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

urlmon

wininet

Sections

.text Size: 396KB - Virtual size: 395KB

.rdata Size: 114KB - Virtual size: 114KB

.data Size: 14KB - Virtual size: 30KB

.rsrc Size: 173KB - Virtual size: 172KB

.text
Size: 396KB - Virtual size: 395KB

.rdata
Size: 114KB - Virtual size: 114KB

.data
Size: 14KB - Virtual size: 30KB

.rsrc
Size: 173KB - Virtual size: 172KB