c9670be36d02320002a7ea2191071bee03cdc0f3406e58979e294749ba2b3b1d[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

c9670be36d02320002a7ea2191071bee03cdc0f3406e58979e294749ba2b3b1d.exe
Size

6.6MB
MD5

82118659e267076d6176e0ac9c66476c
SHA1

80018f91a9b0aa8dfe446f2f2c821fbb98897818
SHA256

c9670be36d02320002a7ea2191071bee03cdc0f3406e58979e294749ba2b3b1d
SHA512

034d0fff137be870dfd858916424ba1cc03de6c92d70c7114434236da1a4411567434aae628221775e1eb029004b9547b65a48c6b89277ab921f248d2ccda268
SSDEEP

98304:vc7XrzBmnqB+99iIbRK0mHKO1dtPJkgY5AU2NVU12UHFLOAkGkzdnEVomFHKnP:v5nqQ9a02HkgJU2dUHFLOyomFHKnP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9670be36d02320002a7ea2191071bee03cdc0f3406e58979e294749ba2b3b1d.exe

Files

c9670be36d02320002a7ea2191071bee03cdc0f3406e58979e294749ba2b3b1d.exe
.exe windows:6 windows x64 arch:x64

ad95452722e16fd28f4512b3c849a8fb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetSystemTimeAsFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
ResetEvent
CreateThread
SetEvent
CreateEventW
SetThreadPriority
VirtualQuery
WideCharToMultiByte
CopyFileW
GetModuleHandleW
GetCurrentDirectoryW
GetSystemInfo
DeleteFileW
GlobalFlags
GetFileAttributesExW
MultiByteToWideChar
GetVersionExW
GetFileAttributesW
WaitForSingleObject
FindClose
GetModuleFileNameW
GetCurrentProcess
FindNextFileW
GetCommandLineW
SetLastError
FindFirstFileW
ReadFile
CreateDirectoryW
FreeLibrary
GetProcAddress
LoadLibraryW
ExitProcess
FindResourceW
LoadResource
LockResource
FreeResource
GetCurrentThreadId
InitializeCriticalSection
SizeofResource
GlobalReAlloc
MulDiv
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
GlobalSize
IsDebuggerPresent
GetTempPathW
GetSystemDirectoryW
GetWindowsDirectoryW
GetTickCount
MoveFileW
Sleep
SetFileAttributesW
TerminateProcess
OpenProcess
GetCurrentProcessId
Process32NextW
CloseHandle
Process32FirstW
CreateToolhelp32Snapshot
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
WriteConsoleW
GetStringTypeW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetTimeZoneInformation
LCMapStringW
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
SetFilePointerEx
GetStdHandle
GetFileType
SetStdHandle
HeapQueryInformation
QueryPerformanceFrequency
VirtualAlloc
FreeLibraryAndExitThread
ExitThread
GetCommandLineA
RtlPcToFileHeader
RtlUnwindEx
OutputDebugStringW
GetStartupInfoW
InitializeSListHead
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
HeapFree
RtlCaptureContext
WaitForSingleObjectEx
OutputDebugStringA
GetCurrentThread
GetModuleHandleExW
LoadLibraryExW
GlobalDeleteAtom
lstrcmpA
lstrcmpW
CreateActCtxW
ActivateActCtx
DeactivateActCtx
FindActCtxSectionStringW
QueryActCtxW
CompareStringA
ResumeThread
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
GlobalAddAtomW
LocalFree
FormatMessageW
EncodePointer
GlobalFindAtomW
CompareStringW
lstrcpyW
GlobalGetAtomNameW
VerSetConditionMask
VerifyVersionInfoW
CreateFileW
GetFileSize
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalHandle
LocalAlloc
LocalReAlloc
GetThreadLocale
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
FlushFileBuffers
GetFullPathNameW
GetVolumeInformationW
LockFile
SetEndOfFile
SetFilePointer
UnlockFile
WriteFile
DuplicateHandle
lstrcmpiW
VirtualProtect
SearchPathW
GetProfileIntW
SystemTimeToTzSpecificLocalTime
GetFileSizeEx
GetFileTime
SetErrorMode
FindResourceExW
GetTempFileNameW

user32

GetDlgCtrlID
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
IsDialogMessageW
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW
BeginPaint
EndPaint
ClientToScreen
ScreenToClient
GetSysColor
FillRect
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
AppendMenuW
RemoveMenu
RegisterWindowMessageW
GetMessagePos
GetMessageTime
CallWindowProcW
GetClassInfoExW
IsMenu
IsChild
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetCapture
GetMenu
SetMenu
TrackPopupMenu
UpdateWindow
GetForegroundWindow
ScrollWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
AdjustWindowRectEx
MapWindowPoints
CopyRect
EqualRect
PtInRect
SetWindowLongPtrW
GetClassLongPtrW
GetClassNameW
GetTopWindow
SetScrollInfo
GetScrollInfo
WinHelpW
InflateRect
UnhookWindowsHookEx
BringWindowToTop
ReleaseCapture
LoadAcceleratorsW
TranslateAcceleratorW
LoadMenuW
CreatePopupMenu
DestroyMenu
InsertMenuItemW
InvalidateRect
SetRectEmpty
UnpackDDElParam
ReuseDDElParam
SetLayeredWindowAttributes
GetSysColorBrush
EnumDisplayMonitors
DrawStateW
TrackMouseEvent
CharUpperW
GetAsyncKeyState
SetCapture
KillTimer
GetSystemMenu
DeleteMenu
SetWindowRgn
WindowFromPoint
NotifyWinEvent
ModifyMenuW
PostThreadMessageW
WaitMessage
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
MapVirtualKeyW
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
EnumChildWindows
LockWindowUpdate
SetClassLongPtrW
CharNextW
InvalidateRgn
GetNextDlgGroupItem
GetNextDlgTabItem
RealChildWindowFromPoint
GetMenuItemInfoW
SendDlgItemMessageA
CreateDialogIndirectParamW
EndDialog
DrawEdge
DrawFrameControl
DrawFocusRect
DrawIconEx
UnionRect
GetIconInfo
GetKeyNameTextW
SetCursorPos
CharUpperBuffW
UpdateLayeredWindow
EnableScrollBar
GetMenuDefaultItem
SetMenuDefaultItem
CopyIcon
FrameRect
IsClipboardFormatAvailable
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsCharLowerW
MapVirtualKeyExW
SubtractRect
GetUpdateRect
GetDoubleClickTime
CreateMenu
DestroyCursor
GetComboBoxInfo
DrawIcon
GetWindowRgn
HideCaret
InvertRect
GetActiveWindow
GetDesktopWindow
MessageBoxW
CheckDlgButton
GetDlgItem
SetParent
GetLastActivePopup
IsWindowEnabled
EnableWindow
IsWindow
SetFocus
ReleaseDC
SetCursor
ShowOwnedPopups
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
CallNextHookEx
SetWindowsHookExW
GetCursorPos
ValidateRect
IsWindowVisible
DispatchMessageW
TranslateMessage
GetMessageW
PostQuitMessage
MapDialogRect
GetWindow
SetWindowContextHelpId
RegisterClipboardFormatW
SystemParametersInfoW
OffsetRect
MessageBeep
RedrawWindow
GetClientRect
GetWindowDC
GetSystemMetrics
GetDC
GetWindowRect
LoadImageW
GetParent
LoadCursorW
LoadIconW
ShowWindow
GetFocus
PeekMessageW
UnregisterClassW
MonitorFromPoint
SetPropW
GetWindowLongW
SetWindowPos
DestroyIcon
IsRectEmpty
IntersectRect
SetWindowLongW
IsZoomed
SetRect
IsIconic
GetKeyState
GetWindowThreadProcessId
MonitorFromWindow
SetActiveWindow
OpenClipboard
GetMonitorInfoW
CloseClipboard
EmptyClipboard
MoveWindow
SetClipboardData
SetForegroundWindow
CopyImage
DefWindowProcW
PostMessageW
DestroyWindow
GetPropW
CreateWindowExW
SendMessageW
RemovePropW
GetWindowLongPtrW
LoadStringW
GetClassInfoW
SetTimer
RegisterClassW

gdi32

SaveDC
RestoreDC
SelectClipRgn
ExtSelectClipRgn
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
PtVisible
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
RectVisible
LineTo
IntersectClipRect
GetViewportExtEx
GetObjectType
GetClipBox
ExcludeClipRect
SetDIBColorTable
GetWindowExtEx
SetPixel
CreateHatchBrush
GetWindowOrgEx
CreatePatternBrush
GetPixel
CreateRectRgn
CreateSolidBrush
CreateBitmap
CombineRgn
GetViewportOrgEx
GetTextExtentPoint32W
CreateFontIndirectW
Escape
CreatePen
CreateDIBSection
SelectObject
CreateCompatibleBitmap
DeleteDC
SetPixelV
GetTextFaceW
GetNearestPaletteIndex
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
LPtoDP
SetPaletteEntries
ExtFloodFill
GetPaletteEntries
RoundRect
EnumFontFamiliesExW
Rectangle
Polyline
Polygon
CreatePolygonRgn
Ellipse
CreateEllipticRgn
DPtoLP
SetRectRgn
GetMapMode
GetBkColor
GetTextColor
OffsetRgn
GetRgnBox
CreateRoundRectRgn
PatBlt
GetTextMetricsW
GetTextCharsetInfo
EnumFontFamiliesW
CreateRectRgnIndirect
CreateDIBitmap
CreateDCW
CopyMetaFileW
CreateCompatibleDC
DeleteObject
GetObjectW
CreatePalette
SelectPalette
GetSystemPaletteEntries
GetDeviceCaps
GetDIBits
GetStockObject
RealizePalette
StretchBlt
BitBlt

advapi32

RegDeleteKeyW
RegEnumKeyW
RegEnumKeyExW
RegEnumValueW
RegOpenKeyExW
RegCreateKeyW
RegSetValueExW
RegCloseKey
RegQueryValueExW
RegCreateKeyExW
RegQueryValueW
RegDeleteValueW

shell32

ShellExecuteW
DragQueryFileW
DragFinish
SHGetMalloc
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetDesktopFolder
SHGetFileInfoW
SHAppBarMessage
SHGetPathFromIDListW
SHGetSpecialFolderPathW

ole32

OleDuplicateData
ReleaseStgMedium
CoGetClassObject
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CoDisconnectObject
CreateStreamOnHGlobal
DoDragDrop
OleGetClipboard
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
CoTaskMemFree
CoTaskMemAlloc
CoInitialize
CoCreateGuid
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoUninitialize
CoInitializeEx
CLSIDFromProgID
CLSIDFromString
CoCreateInstance

oleaut32

SafeArrayDestroy
SysStringLen
SysAllocStringLen
VarBstrFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantInit
LoadTypeLi
SysFreeString
OleCreateFontIndirect
VariantClear
VariantChangeType
VariantCopy
SysAllocString

comctl32

ImageList_AddMasked
ImageList_Create
ImageList_Destroy
InitCommonControlsEx

ws2_32

WSACleanup

msimg32

AlphaBlend
TransparentBlt

shlwapi

PathFindFileNameW
PathIsUNCW
PathStripToRootW
PathRemoveFileSpecW
StrFormatKBSizeW
PathFindExtensionW

uxtheme

DrawThemeParentBackground
DrawThemeText
OpenThemeData
GetThemeSysColor
IsAppThemed
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
GetCurrentThemeName
GetThemeColor
DrawThemeBackground
CloseThemeData
GetWindowTheme

oledlg

OleUIBusyW

gdiplus

GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdiplusStartup
GdipGetImageHeight
GdipGetImagePaletteSize
GdipCloneImage
GdipBitmapUnlockBits
GdipCreateBitmapFromStream
GdipSetInterpolationMode
GdiplusShutdown
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipGetImageWidth
GdipAlloc
GdipDrawImageRectI
GdipDisposeImage
GdipGetImagePixelFormat
GdipFree
GdipBitmapLockBits
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipGetImagePalette
GdipSetCompositingMode
GdipCreateFromHDC

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 567KB - Virtual size: 566KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ad95452722e16fd28f4512b3c849a8fb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

ws2_32

msimg32

shlwapi

uxtheme

oledlg

gdiplus

oleacc

imm32

winmm

winspool.drv

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.rdata Size: 567KB - Virtual size: 566KB

.data Size: 32KB - Virtual size: 62KB

.pdata Size: 90KB - Virtual size: 89KB

_RDATA Size: 512B - Virtual size: 244B

.rsrc Size: 4.1MB - Virtual size: 4.1MB

.reloc Size: 60KB - Virtual size: 60KB

.text
Size: 1.9MB - Virtual size: 1.9MB

.rdata
Size: 567KB - Virtual size: 566KB

.data
Size: 32KB - Virtual size: 62KB

.pdata
Size: 90KB - Virtual size: 89KB

_RDATA
Size: 512B - Virtual size: 244B

.rsrc
Size: 4.1MB - Virtual size: 4.1MB

.reloc
Size: 60KB - Virtual size: 60KB