78ce8d839951152fa3e5b085a9d78340N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

78ce8d839951152fa3e5b085a9d78340N.exe
Size

561KB
MD5

78ce8d839951152fa3e5b085a9d78340
SHA1

bc0096303334c45ba3e39ae0335aeef981be173f
SHA256

dd7d66c674d5ebb2174c059a81def0cebb1e52633e0b6e258991cd9a563bf266
SHA512

2114be8dba862708b1e1062fe4c1421fd4bae4822fd4d41f9fc5d553b9cc667f7eb79042e8c73a0110dbb2e212becde0f3a1c3411c15e46b2bfd5fa8189ab551
SSDEEP

6144:AoaQ/qaTJXtY8ATbH58XXl5SIZ5hebiSJHtz1oE3bbLGYwDMihVl/26nfYVnmuiu:AoaQ/nTle+hopHtz113bGMihneWgmlE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78ce8d839951152fa3e5b085a9d78340N.exe

Files

78ce8d839951152fa3e5b085a9d78340N.exe
.exe windows:4 windows x86 arch:x86

d9cef778657c901aec9dd8421b8495dd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetConnectW
HttpSendRequestW
InternetSetOptionW
HttpAddRequestHeadersW
HttpQueryInfoW
HttpOpenRequestA
InternetReadFile
InternetErrorDlg
HttpAddRequestHeadersA
HttpSendRequestA
InternetOpenA
InternetCloseHandle
InternetQueryOptionW
HttpOpenRequestW
InternetOpenW
InternetConnectA

ws2_32

WSAStartup
WSAGetLastError
WSACleanup
gethostbyname
gethostname
inet_ntoa

shlwapi

PathFindFileNameW
PathStripPathW
PathFileExistsW
PathRemoveFileSpecW
PathIsUNCW
PathFindExtensionW
PathStripToRootW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

kernel32

GlobalFree
GlobalUnlock
MulDiv
GetTickCount
GetModuleHandleA
GetThreadLocale
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetVolumeInformationW
GetFullPathNameW
GetVersionExA
LoadLibraryA
CompareStringW
GlobalFindAtomW
InterlockedDecrement
lstrlenA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GlobalFlags
FileTimeToSystemTime
GlobalAddAtomW
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
InterlockedIncrement
SetErrorMode
FileTimeToLocalFileTime
SetFileAttributesW
GetFileTime
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
ExitProcess
GetSystemTimeAsFileTime
GetDriveTypeW
UnhandledExceptionFilter
IsDebuggerPresent
GetTimeZoneInformation
SetStdHandle
GetFileType
HeapReAlloc
RtlUnwind
RaiseException
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCPInfo
GetACP
GetOEMCP
GetCurrentDirectoryA
GetDriveTypeA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
CreateFileA
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
SetLastError
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
GlobalLock
lstrcmpW
GlobalAlloc
FreeLibrary
GlobalDeleteAtom
LocalSize
OutputDebugStringW
FreeResource
LocalFree
LocalAlloc
VerifyVersionInfoW
GetExitCodeProcess
GetVersionExW
GetComputerNameW
VerSetConditionMask
LocalFileTimeToFileTime
GetCurrentDirectoryW
CreateFileW
ReadFile
WriteFile
SetFileTime
SystemTimeToFileTime
SetFilePointer
MoveFileW
CreateThread
GetExitCodeThread
TerminateThread
GetModuleHandleW
GetCurrentProcessId
ReleaseMutex
GetStdHandle
lstrlenW
CopyFileW
WaitForSingleObject
IsBadStringPtrW
CreateToolhelp32Snapshot
FindNextFileW
Process32NextW
Process32FirstW
FindClose
TerminateProcess
GetFileAttributesW
OpenProcess
CreateProcessW
FindFirstFileW
DeleteFileW
RemoveDirectoryW
FormatMessageW
WideCharToMultiByte
CreateMutexW
WriteProcessMemory
CloseHandle
GetUserDefaultUILanguage
SetCurrentDirectoryW
LockResource
GetProcAddress
GetLastError
MultiByteToWideChar
GetModuleFileNameW
SizeofResource
Sleep
LoadLibraryW
CreateDirectoryW
GetCurrentProcess
SetUnhandledExceptionFilter
LoadResource
FindResourceW
GetCommandLineW
WritePrivateProfileStringW

user32

SetWindowTextW
MoveWindow
GetSysColorBrush
LoadCursorW
CharNextW
CopyAcceleratorTableW
IsRectEmpty
SetRect
InvalidateRgn
MessageBeep
PostThreadMessageW
DestroyMenu
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
SetForegroundWindow
UpdateWindow
GetMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowTextLengthW
GetWindowTextW
SetFocus
CharUpperW
EndPaint
UnregisterClassA
IsDialogMessageW
ScreenToClient
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
RegisterClipboardFormatW
GetMenuItemID
GetMenuItemCount
GetSubMenu
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetNextDlgTabItem
EndDialog
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
ValidateRect
UnhookWindowsHookEx
UnregisterClassW
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetLastActivePopup
IsWindowEnabled
SetCursor
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetFocus
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
FindWindowW
LoadStringW
ClientToScreen
GetNextDlgGroupItem
GetParent
WindowFromPoint
DrawEdge
GetCapture
DrawFocusRect
OffsetRect
GetWindowLongW
GetSysColor
LoadBitmapW
GetWindowRect
LoadImageW
SetCapture
DrawIcon
ReleaseDC
GetWindowRgn
GetCursorPos
ReleaseCapture
GetSystemMetrics
SetWindowRgn
SetTimer
FillRect
PostMessageW
KillTimer
GetClientRect
GetDC
InvalidateRect
GetDlgItem
RedrawWindow
ShowWindow
FrameRect
EnableWindow
GetDesktopWindow
SendMessageW
MessageBoxW
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetWindowDC
GetClassLongW
GetWindowThreadProcessId
BeginPaint

gdi32

SetMapMode
GetClipBox
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
SetTextColor
MoveToEx
LineTo
SetBkMode
SetBkColor
RestoreDC
SaveDC
GetDeviceCaps
CreateBitmap
BitBlt
DeleteDC
StretchBlt
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectW
FrameRgn
PatBlt
CreateRectRgnIndirect
CreateRectRgn
CreatePen
GetStockObject
GetTextExtentPoint32W
CreateFontIndirectW
DeleteObject
CreateRoundRectRgn
CreateSolidBrush

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

ChangeServiceConfigW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegCreateKeyW
CreateWellKnownSid
RegSetValueExW
ControlService
CheckTokenMembership
FreeSid
RegEnumValueW
AllocateAndInitializeSid
GetUserNameW
RegDeleteValueW
SetSecurityDescriptorDacl
RegDeleteKeyW
InitializeSecurityDescriptor
DuplicateToken
RegCreateKeyExW
GetTokenInformation
OpenServiceW
OpenSCManagerW
OpenProcessToken
CloseServiceHandle
RegCloseKey
RegOpenKeyExW
RegQueryValueExW

shell32

ShellExecuteExW
SHGetFolderPathW
ShellExecuteW

comctl32

_TrackMouseEvent

oledlg

OleUIBusyW

ole32

CoCreateInstance
CoUninitialize
CoInitialize
CLSIDFromProgID
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CLSIDFromString
CoTaskMemFree
CoRevokeClassObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoTaskMemAlloc

oleaut32

VariantInit
VariantChangeType
VariantClear
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysAllocString
VariantCopy
SysFreeString
SysAllocStringLen
SysStringLen

oleacc

CreateStdAccessibleObject
LresultFromObject

Sections

.text
Size: 378KB - Virtual size: 378KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d9cef778657c901aec9dd8421b8495dd

Headers

File Characteristics

Imports

wininet

ws2_32

shlwapi

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

oleaut32

oleacc

Sections

.text Size: 378KB - Virtual size: 378KB

.rdata Size: 136KB - Virtual size: 136KB

.data Size: 12KB - Virtual size: 33KB

.rsrc Size: 27KB - Virtual size: 27KB

.text
Size: 378KB - Virtual size: 378KB

.rdata
Size: 136KB - Virtual size: 136KB

.data
Size: 12KB - Virtual size: 33KB

.rsrc
Size: 27KB - Virtual size: 27KB