b410636b8dfb2b02d7e29fd4326ae23541d320bc65cd23ad3587c65ae9ff8e0c

Sharing

Copy URL

Twitter E-mail

General

Target

b410636b8dfb2b02d7e29fd4326ae23541d320bc65cd23ad3587c65ae9ff8e0c
Size

9.0MB
MD5

e98c233d73b6c0d0a435fd20774223c9
SHA1

841be21aeb2690391c463be41182df2424a1c651
SHA256

b410636b8dfb2b02d7e29fd4326ae23541d320bc65cd23ad3587c65ae9ff8e0c
SHA512

a9db6a6b383af291efe8fff66f7603a878749b39cd90a865a3942329876d9a3e90446250d0fc2d625facbbe18d8f960bc32ab593a3d426e35a344ffca4baa11e
SSDEEP

196608:s73STvxTfg6AiQBhyQbEAkZQdnkW9AVSGfGIJXDaI6HMaJTtGb:s73ATfzyyu4JfdJX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b410636b8dfb2b02d7e29fd4326ae23541d320bc65cd23ad3587c65ae9ff8e0c

Files

b410636b8dfb2b02d7e29fd4326ae23541d320bc65cd23ad3587c65ae9ff8e0c
.exe windows:4 windows x86 arch:x86

391ffd93a83148a2faa87f0164e9b9e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetShortPathNameW
GetUserDefaultLangID
CloseHandle
GetCurrentThreadId
GetEnvironmentVariableW
SystemTimeToFileTime
LocalFileTimeToFileTime
FindResourceW
LoadResource
LockResource
SizeofResource
CreateToolhelp32Snapshot
GetLogicalDriveStringsW
QueryDosDeviceW
FileTimeToLocalFileTime
FileTimeToSystemTime
ExpandEnvironmentStringsW
GetCurrentProcess
GetSystemDefaultLangID
MultiByteToWideChar
GetModuleHandleW
GetProcAddress
CreateRemoteThread
WaitForSingleObject
GetExitCodeThread
GetCurrentProcessId
OpenProcess
GetLastError
FormatMessageW
GetVolumeInformationW
FindFirstFileW
FindNextFileW
FindClose
WideCharToMultiByte
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
CreateProcessW
HeapCreate
CreateSemaphoreW
HeapDestroy
ExitProcess
InitializeSListHead
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
GetSystemTimeAsFileTime
QueryPerformanceCounter
TerminateProcess
GetStdHandle
WriteFile
GetModuleFileNameW
FreeLibrary
GetModuleHandleExW
EnterCriticalSection
DeleteCriticalSection
LeaveCriticalSection
HeapFree
SetLastError
GetCurrentThread
HeapAlloc
EnumSystemLocalesW
LoadLibraryExW
CompareStringW
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
GetDateFormatW
GetLocaleInfoW
GetTempPathW
GetTimeFormatW
GetUserDefaultLCID
InitializeCriticalSectionAndSpinCount
IsValidLocale
LCMapStringW
OutputDebugStringW
GetFileType
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
IsValidCodePage
GetCommandLineA
GetCommandLineW
FindFirstFileExW
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetEnvironmentVariableW
SetConsoleCtrlHandler
GetProcessHeap
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
HeapSize
HeapReAlloc
ReadFile
ReadConsoleW
SetFilePointerEx
WriteConsoleW
CreateFileW
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
EncodePointer
RaiseException
GetFileSize
CreateThread
InitializeCriticalSection
Sleep
LoadLibraryW
DuplicateHandle
CreatePipe
PeekNamedPipe
GetExitCodeProcess
SetFilePointer
SetEndOfFile
GlobalHandle
GlobalUnlock
GlobalFree
GlobalAlloc
GlobalLock
lstrcpyA
lstrcpynA
GetTickCount
GetVersionExW
CreateDirectoryW
GetDriveTypeW
GetFileAttributesW
SetFileAttributesW
DeleteFileW
SetCurrentDirectoryW
CopyFileW
RemoveDirectoryW
GetCurrentDirectoryW
SetFileTime
MulDiv
GetLocalTime
SetEvent
CreateEventA
LoadLibraryA
ReleaseSemaphore
GetFileInformationByHandle
CreateFileA
ResetEvent
QueryPerformanceFrequency
SetThreadPriority
UnregisterWait
RegisterWaitForSingleObject
GetFileSizeEx
DecodePointer

user32

SendMessageW
OemToCharW
GetCursorPos
WindowFromPoint
IsWindowEnabled
GetClassLongW
SetClassLongW
SetWindowRgn
GetClassNameW
CallNextHookEx
GetWindowLongW
SetWindowsHookExW
UnhookWindowsHookEx
ReleaseDC
EnumWindows
GetWindowThreadProcessId
FindWindowExW
FindWindowW
GetForegroundWindow
SetCursorPos
InvalidateRect
GetSysColor
GetWindow
IsWindow
DefWindowProcW
SetWindowLongW
GetClientRect
FillRect
CallWindowProcW
GetParent
GetDC
SetWindowPos
BeginPaint
EndPaint
GetAsyncKeyState
KillTimer
ScreenToClient
SetTimer
RedrawWindow
DrawTextW
GetDlgCtrlID
GetWindowRect
OffsetRect
IsRectEmpty
MapWindowPoints
SubtractRect
FrameRect
InflateRect
ShowWindow
DrawFrameControl
PostMessageW
MessageBoxW
IsWindowVisible
EnableWindow
wsprintfA
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
SetFocus
GetIconInfo
UpdateWindow
ReleaseCapture
DrawStateW
SetCapture
GetSystemMetrics
CreateWindowExW
GetKeyState
GetPropW
ClipCursor
SetCursor
GetCapture
GetFocus
DrawFocusRect
GetMessagePos
LoadCursorW
SetPropW
ChildWindowFromPointEx
RegisterClassExW
DestroyWindow
MoveWindow
SystemParametersInfoW
RemovePropW
GetSysColorBrush
SetRect
ClientToScreen
SetScrollPos
GetWindowDC
SetScrollInfo
GetScrollPos
GetScrollRange
EnumPropsExW
GetMenu
SetActiveWindow
IsZoomed
IsIconic
PeekMessageW
MsgWaitForMultipleObjects
GetMessageW
GetActiveWindow
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
RegisterClassW
AdjustWindowRectEx
UnregisterClassW
CreateAcceleratorTableW
DestroyIcon
LoadIconW
DestroyAcceleratorTable
DefFrameProcW
EnumChildWindows
SetForegroundWindow
TrackPopupMenu
IsChild
SetMenu
DestroyMenu
RegisterWindowMessageW
CopyImage
DrawIconEx
CreateIconFromResourceEx
CreateIconFromResource
CharLowerW
CharUpperW

gdi32

CreateRoundRectRgn
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteDC
DeleteObject
CreateRectRgn
CreateSolidBrush
CreatePatternBrush
SetBkMode
SetTextColor
SelectClipRgn
SetDCBrushColor
GetStockObject
SetBrushOrgEx
GetObjectType
GetObjectW
CreateDIBSection
GdiGetBatchLimit
GdiSetBatchLimit
CreateFontIndirectW
GetTextExtentPoint32W
SetBkColor
ExcludeClipRect
CreateRectRgnIndirect
GetClipRgn
ExtSelectClipRgn
CreatePen
MoveToEx
LineTo
GetDeviceCaps
GetDIBits
SetTextAlign
TextOutW
SetStretchBltMode
StretchBlt
GetTextMetricsW
GetPixel
CreateBitmap
SetPixel
CreateFontW

advapi32

RegOpenKeyExW
RegOpenKeyW
RegConnectRegistryW
RegQueryValueExW
RegCloseKey
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
LookupAccountNameW
IsValidSid
RegEnumKeyExW
RegDeleteValueW
RegCreateKeyW
SystemFunction036

comctl32

ImageList_Create
InitCommonControlsEx
_TrackMouseEvent
ImageList_Replace
ImageList_Add
ImageList_ReplaceIcon
ImageList_Remove
ImageList_AddMasked
ImageList_Destroy
ImageList_GetIconSize

oleaut32

SafeArrayGetDim
SafeArrayGetUBound
SafeArrayGetElement

ole32

CoInitialize
CoCreateInstance
CoUninitialize
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
CoTaskMemFree
RevokeDragDrop
OleUninitialize
OleInitialize

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
ShellExecuteExW
Shell_NotifyIconW
SHGetFolderLocation

ws2_32

WSAStartup
gethostbyname
WSACleanup
closesocket

winmm

timeBeginPeriod

gdiplus

GdipDeleteFont
GdipDeleteGraphics
GdipDeletePath
GdipDeleteMatrix
GdipDeletePen
GdipDeleteStringFormat
GdipFree

imagehlp

MakeSureDirectoryPathExists
MapFileAndCheckSumW

uxtheme

SetWindowTheme
OpenThemeData
DrawThemeBackground
CloseThemeData

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 216KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6.9MB - Virtual size: 7.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 284KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.modplug
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

391ffd93a83148a2faa87f0164e9b9e9

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

comctl32

oleaut32

ole32

shell32

ws2_32

winmm

gdiplus

imagehlp

uxtheme

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 216KB - Virtual size: 216KB

.eh_fram Size: 7KB - Virtual size: 7KB

.gfids Size: 512B - Virtual size: 512B

.00cfg Size: 512B - Virtual size: 512B

.data Size: 6.9MB - Virtual size: 7.3MB

.rsrc Size: 284KB - Virtual size: 284KB

.modplug Size: - Virtual size: 20KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 216KB - Virtual size: 216KB

.eh_fram
Size: 7KB - Virtual size: 7KB

.gfids
Size: 512B - Virtual size: 512B

.00cfg
Size: 512B - Virtual size: 512B

.data
Size: 6.9MB - Virtual size: 7.3MB

.rsrc
Size: 284KB - Virtual size: 284KB

.modplug
Size: - Virtual size: 20KB