880ee4530056e8de80f6a0945336d9410315ec3a48dc8c0f55a78802790d6e2c

Sharing

Copy URL Twitter E-mail

General

Target

880ee4530056e8de80f6a0945336d9410315ec3a48dc8c0f55a78802790d6e2c
Size

2.8MB
MD5

83e404bbff107dae1f1a032a67669832
SHA1

99f052bce69bf117e7ada76d2bec5938109c516e
SHA256

880ee4530056e8de80f6a0945336d9410315ec3a48dc8c0f55a78802790d6e2c
SHA512

40a994403484e685cc0811956ca65814b079fc902ee987089d4f5be304e26d6bdc64543e20cf105dc032e13ee7dbe071b59f6fb287cd43ca8ca573fa379e68d6
SSDEEP

49152:h5c24dJgvLjAh+SPMofA5z3Fw6+ZEJh1HIvXeeSyZGSyuNz8bDLEYY6+kX5+3Dbc:hy24dIQVfA5z3Fw6ThWvXeeSyGSyuNKe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
880ee4530056e8de80f6a0945336d9410315ec3a48dc8c0f55a78802790d6e2c

Files

880ee4530056e8de80f6a0945336d9410315ec3a48dc8c0f55a78802790d6e2c
.exe windows:5 windows x86 arch:x86

778b98fa3f3a9cebe55061bf6665fbd7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

SetStdHandle
SetUnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
IsProcessorFeaturePresent
GetFullPathNameA
GetFileInformationByHandle
PeekNamedPipe
LCMapStringW
GetConsoleCP
GetProcessHeap
GetStringTypeW
GetDriveTypeW
SetEnvironmentVariableA
WriteConsoleW
GetFileAttributesA
lstrlenA
FindResourceW
LoadResource
VirtualQuery
TerminateThread
SizeofResource
GetVersionExW
HeapQueryInformation
MultiByteToWideChar
SetThreadLocale
GetLastError
GetProcAddress
LockResource
GetModuleFileNameA
OutputDebugStringA
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
GetCurrentProcess
GlobalLock
GlobalAlloc
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
MulDiv
GetModuleFileNameW
lstrcmpW
lstrlenW
GlobalUnlock
FlushInstructionCache
RaiseException
SetLastError
EnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
FreeLibrary
LoadLibraryExA
FormatMessageW
GlobalFree
GlobalHandle
LocalFree
WaitForSingleObject
Sleep
GetSystemInfo
VirtualAlloc
GetModuleHandleW
CreateThread
ExitThread
RtlUnwind
CreateFileA
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
SetConsoleCtrlHandler
ExitProcess
GetTimeZoneInformation
HeapReAlloc
FindFirstFileExA
GetDriveTypeA
GetDateFormatA
GetTimeFormatA
CreateDirectoryA
HeapAlloc
DecodePointer
EncodePointer
HeapFree
GetStartupInfoW
HeapSetInformation
GetCommandLineW
FindResourceExW
HeapSize
InterlockedCompareExchange
InterlockedPushEntrySList
VirtualFree
InterlockedPopEntrySList
OutputDebugStringW
CreateProcessA
CreateEventW
VirtualProtect
GetFileTime
GetFileSizeEx
FileTimeToLocalFileTime
GetFileAttributesExW
SetErrorMode
SearchPathW
GetProfileIntW
GetFileAttributesW
GetNumberFormatW
GetWindowsDirectoryW
GetTempPathW
GetTempFileNameW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
lstrcmpiW
DeleteFileW
GetCurrentDirectoryW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalReAlloc
TlsGetValue
LocalAlloc
FileTimeToSystemTime
GlobalGetAtomNameW
lstrcpyW
GetSystemDirectoryW
GlobalFlags
InitializeCriticalSection
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
lstrcmpA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
CloseHandle
LoadLibraryExW
InterlockedExchange
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryW
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
CopyFileW
GlobalSize
ReleaseActCtx
CreateActCtxW
FreeResource
ActivateActCtx
DeactivateActCtx
GetSystemTime
SystemTimeToFileTime
FlushConsoleInputBuffer
LoadLibraryA
GlobalMemoryStatus
GetCurrentProcessId
QueryPerformanceCounter
GetTickCount
GetStdHandle
GetFileType
WriteFile
GetVersion
GetModuleHandleA
ReadFile
SetFilePointer
CreateFileW
GetFileSize
GetSystemTimeAsFileTime

user32

CharUpperBuffW
CopyIcon
UnpackDDElParam
ReuseDDElParam
InsertMenuItemW
TranslateAcceleratorW
FrameRect
RegisterClipboardFormatW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
GetNextDlgGroupItem
GetIconInfo
HideCaret
InvertRect
LockWindowUpdate
BringWindowToTop
SetCursorPos
SetRect
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
MapVirtualKeyW
ToUnicodeEx
CopyAcceleratorTableW
DrawFocusRect
DrawFrameControl
DrawEdge
DrawIconEx
SetClassLongW
SetParent
WaitMessage
CopyImage
UnregisterClassW
CreatePopupMenu
IsMenu
MonitorFromPoint
UpdateLayeredWindow
EnableScrollBar
UnionRect
IsRectEmpty
CharUpperW
IsZoomed
GetAsyncKeyState
NotifyWinEvent
MessageBeep
WindowFromPoint
SetWindowRgn
GetSystemMenu
DeleteMenu
OffsetRect
IntersectRect
SetLayeredWindowAttributes
EnumDisplayMonitors
SetRectEmpty
GetSysColorBrush
RealChildWindowFromPoint
ShowOwnedPopups
SetCursor
PostQuitMessage
SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
InflateRect
ShowWindow
IsDialogMessageW
CheckDlgButton
SendDlgItemMessageW
WinHelpW
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
BeginDeferWindowPos
UnregisterClassA
GetTopWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
SetMenu
SetScrollRange
GetScrollRange
ShowScrollBar
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
GetMenu
CopyRect
GetMessageW
TranslateMessage
DispatchMessageW
IsWindowVisible
GetKeyState
PeekMessageW
ValidateRect
GetMenuStringW
AppendMenuW
GetMenuItemID
InsertMenuW
GetMenuItemCount
RemoveMenu
SetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
GetWindowRect
PtInRect
GetWindowDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
GetScrollPos
SetScrollPos
UpdateWindow
DrawStateW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
MessageBoxA
GetProcessWindowStation
GetUserObjectInformationW
SetTimer
TrackPopupMenu
LoadImageW
KillTimer
GetSubMenu
SetForegroundWindow
GetMenuDefaultItem
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
CreateMenu
IsClipboardFormatAvailable
GetWindowRgn
DestroyCursor
LoadMenuW
GetCursorPos
SetMenuDefaultItem
DestroyIcon
DialogBoxIndirectParamW
GetActiveWindow
MessageBoxW
EndPaint
ClientToScreen
DestroyWindow
GetWindowTextLengthW
SubtractRect
MapVirtualKeyExW
GetKeyNameTextW
IsCharLowerW
GetDoubleClickTime
EndDeferWindowPos
GetUpdateRect
DestroyAcceleratorTable
ScreenToClient
MapDialogRect
CharNextW
RegisterWindowMessageW
FillRect
IsChild
SetCapture
GetFocus
GetParent
InvalidateRgn
LoadCursorW
CreateAcceleratorTableW
SetFocus
BeginPaint
GetClassInfoExW
GetDC
SetWindowContextHelpId
RegisterClassExW
InvalidateRect
GetWindowLongW
GetWindowTextW
GetClassNameW
ReleaseDC
GetDlgItem
SetWindowLongW
EndDialog
RedrawWindow
GetDesktopWindow
GetSysColor
SetWindowPos
IsWindow
CreateWindowExW
ReleaseCapture
SetDlgItemTextW
SetWindowTextW
CallWindowProcW
DefWindowProcW
GetWindow
MoveWindow
IsIconic
PostMessageW
DrawIcon
GetClientRect
LoadIconW
GetSystemMetrics
SendMessageW
EnableWindow
SendDlgItemMessageA
PostThreadMessageW

gdi32

GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectType
CreatePen
CreateHatchBrush
CopyMetaFileW
CreateDCW
CreateFontIndirectW
GetTextExtentPoint32W
CreateDIBitmap
CreateRectRgnIndirect
GetTextMetricsW
EnumFontFamiliesW
GetTextCharsetInfo
SetRectRgn
SetTextAlign
PatBlt
DPtoLP
CreateRoundRectRgn
CreateDIBSection
CreatePolygonRgn
GetBkColor
GetTextColor
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
GetRgnBox
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
EnumFontFamiliesExW
ExtFloodFill
SetPaletteEntries
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetTextFaceW
SetPixelV
LineTo
MoveToEx
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateBitmap
BitBlt
DeleteDC
GetDeviceCaps
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectW
CombineRgn
CreateSolidBrush
GetStockObject

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegEnumValueW
ReportEventA
RegisterEventSourceA
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegEnumKeyExW
DeregisterEventSource
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW

shell32

DragQueryFileW
SHGetFileInfoW
SHGetDesktopFolder
SHGetPathFromIDListW
SHBrowseForFolderW
Shell_NotifyIconW
DragFinish
SHAppBarMessage
ShellExecuteW
SHGetSpecialFolderLocation

comctl32

InitCommonControlsEx
ImageList_GetIconSize

shlwapi

PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFindExtensionW
PathRemoveFileSpecW

ole32

RevokeDragDrop
OleUninitialize
CoGetClassObject
CoTaskMemAlloc
CoTaskMemFree
ReleaseStgMedium
OleDuplicateData
CoCreateGuid
CoInitialize
CoUninitialize
DoDragDrop
CoInitializeEx
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
OleInitialize
StringFromGUID2
CreateStreamOnHGlobal
CLSIDFromString
CLSIDFromProgID
OleLockRunning
CoCreateInstance

oleaut32

SysAllocString
VarBstrFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantChangeType
LoadRegTypeLi
OleCreateFontIndirect
SysAllocStringLen
VariantInit
LoadTypeLi
VariantClear
SysStringLen
SysFreeString

gdiplus

GdipDrawImageI
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipFree
GdipAlloc

ws2_32

WSASetLastError
connect
send
recv
gethostname
accept
socket
listen
getpeername
shutdown
htons
bind
getsockname
ntohs
getnameinfo
getaddrinfo
freeaddrinfo
closesocket
WSACreateEvent
WSAAddressToStringW
getsockopt
WSAEventSelect
inet_addr
gethostbyname
WSACleanup
WSACloseEvent
WSAStartup
setsockopt
WSAIoctl
getprotobyname
ioctlsocket
WSAWaitForMultipleEvents
WSAResetEvent
WSAEnumNetworkEvents
WSAGetLastError
WSASetEvent
select

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundW

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 544KB - Virtual size: 544KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 62KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 216KB - Virtual size: 215KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

778b98fa3f3a9cebe55061bf6665fbd7

Headers

DLL Characteristics

File Characteristics

Imports

version

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

gdiplus

ws2_32

oleacc

imm32

winmm

Sections

.text Size: 2.0MB - Virtual size: 2.0MB

.rdata Size: 544KB - Virtual size: 544KB

.data Size: 62KB - Virtual size: 101KB

.rsrc Size: 26KB - Virtual size: 25KB

.reloc Size: 216KB - Virtual size: 215KB

.text
Size: 2.0MB - Virtual size: 2.0MB

.rdata
Size: 544KB - Virtual size: 544KB

.data
Size: 62KB - Virtual size: 101KB

.rsrc
Size: 26KB - Virtual size: 25KB

.reloc
Size: 216KB - Virtual size: 215KB