dac21b37bc22e9cf99c379d5d01c179cee18f20932ee27859ce643a8e2c896c7

Sharing

Copy URL Twitter E-mail

General

Target

dac21b37bc22e9cf99c379d5d01c179cee18f20932ee27859ce643a8e2c896c7
Size

1.6MB
MD5

48ad1ade7595ecf81d6211ca77a35036
SHA1

a2aa5d79f3aa7ff1f0b3490f5ae2e03c5b2e8b7b
SHA256

dac21b37bc22e9cf99c379d5d01c179cee18f20932ee27859ce643a8e2c896c7
SHA512

1a7d9a709285fa6f0ddc5f04f96afe26063c134955e3ef51ab83b5e2e51f65df265d14c140e85e2a8e6dcf4b020b8d410d77d0f6c0b70c91f9a1b0ecf6df2707
SSDEEP

12288:tMNUh2Z1iTkgrtRKCE9+4JqT7qn65d3BcicKlD79ut8l5m+Ggd05+sv2mU:tMNw2ChMCM+4JqT7+65JD797+5Fv2X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dac21b37bc22e9cf99c379d5d01c179cee18f20932ee27859ce643a8e2c896c7

Files

dac21b37bc22e9cf99c379d5d01c179cee18f20932ee27859ce643a8e2c896c7
.exe windows:4 windows x86 arch:x86

980d4a5a1d374a276ea0c1abff47a1a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

PropertySheetA
InitCommonControlsEx
ImageList_LoadImageA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

winmm

waveOutGetPosition
waveOutRestart
waveOutPause
waveOutOpen
waveOutPrepareHeader
waveOutWrite
waveOutUnprepareHeader
waveOutReset
PlaySoundA
waveOutGetVolume
waveOutSetVolume
waveOutGetNumDevs
waveOutClose

msimg32

TransparentBlt

kernel32

GetLongPathNameA
GlobalDeleteAtom
GlobalGetAtomNameA
GetDriveTypeA
GlobalFindAtomA
FreeLibrary
GetSystemDirectoryA
GlobalAddAtomA
CreateMutexA
SetErrorMode
SetEvent
WaitForSingleObject
ReleaseMutex
CreateEventA
DeviceIoControl
WriteFile
ResetEvent
SetFilePointer
FindNextFileA
GetCurrentProcess
GetModuleHandleA
GetVersionExA
QueryPerformanceCounter
MulDiv
MultiByteToWideChar
GetACP
WideCharToMultiByte
OutputDebugStringA
GetCurrentThreadId
QueryPerformanceFrequency
Sleep
SetThreadPriority
InterlockedIncrement
InterlockedDecrement
GetFileAttributesA
MoveFileA
CopyFileExA
CopyFileA
GetOverlappedResult
CancelIo
SetCommState
GetCommState
GetTempPathA
GetTempFileNameA
GetLogicalDriveStringsA
FindResourceA
GetFullPathNameA
FormatMessageA
WaitForMultipleObjects
GetDiskFreeSpaceExA
GetCurrentDirectoryA
GetLogicalDrives
HeapFree
GetSystemTimeAsFileTime
HeapAlloc
HeapReAlloc
FileTimeToSystemTime
GetModuleFileNameA
GetCommandLineA
GetProcessHeap
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetOEMCP
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
ExitProcess
GetStdHandle
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
RtlUnwind
RaiseException
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetCurrentProcessId
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
WinExec
LoadLibraryA
GetProcAddress
GetLastError
CreateFileA
CloseHandle
ReadFile
InitializeCriticalSection
CreateThread
GetExitCodeThread
DeleteCriticalSection
GetTickCount
EnterCriticalSection
LeaveCriticalSection
FindFirstFileA
FindClose
GetVolumeInformationA
Beep
DeleteFileA
FileTimeToLocalFileTime

user32

GetCursorPos
DestroyWindow
OpenIcon
SetForegroundWindow
PostQuitMessage
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
IsIconic
IsWindowVisible
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
IsDialogMessageA
GetMessageA
ShowWindow
LoadAcceleratorsA
CreateDialogParamA
SetMenu
LoadMenuA
CreateWindowExA
RegisterClassExA
LoadImageA
GetSysColor
EnableWindow
GetSysColorBrush
GetDlgItem
EndPaint
BeginPaint
GetSystemMetrics
CharPrevA
IsWindowEnabled
AppendMenuA
RemoveMenu
PtInRect
GetFocus
ReleaseCapture
SetCapture
DestroyMenu
ReleaseDC
GetDC
FillRect
SetRect
GetSubMenu
InvalidateRect
SetMenuDefaultItem
GetMenuStringA
GetDesktopWindow
RegisterWindowMessageA
FindWindowA
CheckRadioButton
CheckMenuRadioItem
PeekMessageA
MsgWaitForMultipleObjects
LoadIconA
CreatePopupMenu
CharNextA
CharUpperA
CharToOemA
MessageBoxA
GetMenuItemCount
InflateRect
DestroyIcon
DeleteMenu
GetAsyncKeyState
DestroyCursor
ExitWindowsEx
GetDlgCtrlID
GetClassNameA
EnumChildWindows
GetWindowTextA
InsertMenuA
GetWindowTextLengthA
ModifyMenuA
wvsprintfA
LoadStringA
DrawTextA
CopyRect
GetMenuItemInfoA
DrawTextExA
DrawEdge
GetMenuState
SetMenuItemInfoA
CharLowerA
CloseWindow
MoveWindow
IsWindow
CallWindowProcA
ScrollWindowEx
SetScrollInfo
GetScrollInfo
SetScrollRange
MapWindowPoints
TrackPopupMenu
DefWindowProcA
GetClientRect
SetTimer
KillTimer
PostMessageA
UpdateWindow
DialogBoxParamA
SetFocus
GetMenu
SystemParametersInfoA
GetWindowRect
IsZoomed
SetWindowPos
SetWindowLongA
GetWindowLongA
EndDialog
GetDlgItemInt
SetDlgItemInt
GetParent
SetWindowTextA
LoadCursorA
SetCursor
GetKeyState
CheckDlgButton
SendDlgItemMessageA
GetDlgItemTextA
wsprintfA
SetDlgItemTextA
EnableMenuItem
DrawMenuBar
CheckMenuItem
IsDlgButtonChecked
SendMessageA

gdi32

GetStockObject
SetTextColor
TextOutA
GetTextExtentPoint32A
StartPage
StartDocA
GetTextMetricsA
Polyline
Rectangle
CreatePen
SetBkColor
EndDoc
SelectObject
CreateSolidBrush
ExtFloodFill
CreateFontIndirectA
CreateFontA
GetDeviceCaps
DeleteObject
DeleteDC
CreateCompatibleDC
SetBkMode
EndPage

comdlg32

GetOpenFileNameA
PrintDlgA
GetSaveFileNameA

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegDeleteKeyA
GetUserNameA
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegEnumValueA
RegEnumKeyExA
RegSetValueA
RegQueryValueA
RegOpenKeyExA
RegDeleteValueA

shell32

DragFinish
DragQueryFileA
DragAcceptFiles
ShellExecuteA
ShellExecuteExA
Shell_NotifyIconA
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
SHGetSpecialFolderPathA

ole32

CoInitialize
GetRunningObjectTable
CreateClassMoniker
CoUninitialize

Sections

.text
Size: 628KB - Virtual size: 624KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 377KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 840KB - Virtual size: 860KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

980d4a5a1d374a276ea0c1abff47a1a3

Headers

File Characteristics

Imports

comctl32

version

winmm

msimg32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

Sections

.text Size: 628KB - Virtual size: 624KB

.rdata Size: 68KB - Virtual size: 64KB

.data Size: 60KB - Virtual size: 377KB

.rsrc Size: 840KB - Virtual size: 860KB

.text
Size: 628KB - Virtual size: 624KB

.rdata
Size: 68KB - Virtual size: 64KB

.data
Size: 60KB - Virtual size: 377KB

.rsrc
Size: 840KB - Virtual size: 860KB