5531ad09e8b75ea9404c3f5a4504ca5f9c5140494f43133221db5396a9f277b0

Sharing

Copy URL Twitter E-mail

General

Target

5531ad09e8b75ea9404c3f5a4504ca5f9c5140494f43133221db5396a9f277b0
Size

2.9MB
MD5

eb822eea77bef6c421a220cb8d4e3aec
SHA1

834fce8e4190c4fcf45264bbe12b2bec9aa1231b
SHA256

5531ad09e8b75ea9404c3f5a4504ca5f9c5140494f43133221db5396a9f277b0
SHA512

01da0e7aeba6dded3910dd91851701f67a5208db111f3b0258273abd30d63f38b7db866bb16b0e0ada5eadaf369d10eac2cd8c493e339582ca5c8e30c29448b0
SSDEEP

49152:2GtxiFnl4PhAwa/R8OzlWwgCK6OS6NNz/wobnV+6IMyOiMJcn6QkEBId7Voj9ghY:2JFnlFwa/R8OzlWwgCK6P6NlxbnVuM05

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5531ad09e8b75ea9404c3f5a4504ca5f9c5140494f43133221db5396a9f277b0

Files

5531ad09e8b75ea9404c3f5a4504ca5f9c5140494f43133221db5396a9f277b0
.exe windows:5 windows x86 arch:x86

cc7ba93bb0c8d007b78c03140086a326

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringW
GetTimeZoneInformation
WriteConsoleW
CreateFileW
GetEnvironmentStringsW
GetDateFormatA
GetTimeFormatA
InterlockedCompareExchange
FreeEnvironmentStringsW
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetConsoleMode
GetConsoleCP
SetHandleCount
GetStdHandle
HeapCreate
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetLocaleInfoW
GetStringTypeW
LCMapStringW
IsProcessorFeaturePresent
GetFileType
SetStdHandle
HeapQueryInformation
HeapSize
HeapReAlloc
CreateThread
ExitThread
VirtualQuery
GetSystemInfo
VirtualAlloc
GetStartupInfoW
HeapSetInformation
GetCommandLineA
EncodePointer
DecodePointer
ExitProcess
RtlUnwind
HeapAlloc
RaiseException
HeapFree
GetSystemTimeAsFileTime
FindResourceExW
GetUserDefaultLCID
VirtualProtect
GetNumberFormatA
GetWindowsDirectoryA
GetFileTime
GetFileSizeEx
FileTimeToLocalFileTime
GetFileAttributesExA
SetErrorMode
GetTempPathA
GetTempFileNameA
SearchPathA
GetProfileIntA
GetTickCount
GetOEMCP
GetCPInfo
GetACP
FileTimeToSystemTime
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpiA
GetThreadLocale
DeleteFileA
GetCurrentDirectoryA
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
TlsGetValue
LocalAlloc
InterlockedIncrement
lstrcpyA
GlobalGetAtomNameA
GlobalFindAtomA
GetVersionExA
LoadLibraryW
lstrcmpW
InterlockedDecrement
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
CreateFileA
GetFileSize
GetFileAttributesA
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GlobalReAlloc
EnterCriticalSection
LeaveCriticalSection
FindResourceA
FreeResource
GetCurrentProcessId
GlobalAddAtomA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetModuleHandleA
WaitForSingleObject
ResumeThread
SetThreadPriority
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetModuleFileNameA
GetLocaleInfoA
CompareStringA
ActivateActCtx
DeactivateActCtx
InterlockedExchange
lstrcmpA
GetModuleHandleW
FreeLibrary
GetLastError
SetLastError
GlobalFree
CopyFileA
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
lstrlenW
MultiByteToWideChar
MulDiv
lstrlenA
LoadLibraryA
GetProcAddress
WideCharToMultiByte
CreateToolhelp32Snapshot
Process32First
Process32Next
CloseHandle
QueryPerformanceFrequency
QueryPerformanceCounter
Sleep
FindResourceW
LoadResource
LockResource
SetEnvironmentVariableA
SizeofResource
GetProcessHeap

user32

SetCapture
KillTimer
SetTimer
GetSystemMenu
DeleteMenu
InvalidateRect
SetRect
DrawIconEx
SetWindowRgn
DrawFocusRect
DrawFrameControl
DrawEdge
MoveWindow
SetWindowTextA
IsDialogMessageA
CheckDlgButton
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
UpdateWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowContextHelpId
MapDialogRect
SetWindowPos
DestroyIcon
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
CopyImage
OpenClipboard
IntersectRect
SetRectEmpty
IsRectEmpty
WindowFromPoint
MapVirtualKeyA
GetKeyNameTextA
UnhookWindowsHookEx
GetWindowRect
PtInRect
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetNextDlgTabItem
EndDialog
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
ScreenToClient
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
ShowOwnedPopups
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
OffsetRect
IsCharLowerA
CharUpperBuffA
GetUpdateRect
MessageBeep
RedrawWindow
SendMessageA
GetClassNameA
GetDlgItem
ShowWindow
InvalidateRgn
IsZoomed
PostQuitMessage
GetSysColor
SystemParametersInfoA
DestroyMenu
GetMenuItemInfoA
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
RemoveMenu
GetParent
PostMessageA
InflateRect
LoadCursorW
LoadCursorA
ReleaseCapture
NotifyWinEvent
GetAsyncKeyState
CharUpperA
SetLayeredWindowAttributes
GetWindowRgn
CreateMenu
GetSysColorBrush
FillRect
CopyRect
LoadImageA
GetSystemMetrics
LoadIconW
EnableWindow
GetClientRect
IsIconic
LoadMenuW
DestroyCursor
HideCaret
InvertRect
SubtractRect
MapVirtualKeyExA
GetWindow
DrawIcon
GetSubMenu
FrameRect
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
IsClipboardFormatAvailable
GetDoubleClickTime
CopyIcon
SetCursorPos
UnregisterClassA
MonitorFromPoint
CharNextA
GetMenuDefaultItem
SetMenuDefaultItem
UpdateLayeredWindow
EnableScrollBar
RegisterClipboardFormatA
EnumChildWindows
LockWindowUpdate
IsMenu
UnpackDDElParam
ReuseDDElParam
LoadMenuA
LoadAcceleratorsA
InsertMenuItemA
BringWindowToTop
TranslateAcceleratorA
SetClassLongA
SetParent
CreatePopupMenu
CreateAcceleratorTableA
LoadAcceleratorsW
DestroyAcceleratorTable
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
CopyAcceleratorTableA
PostThreadMessageA
WaitMessage
RealChildWindowFromPoint
GetNextDlgGroupItem
UnionRect
GetIconInfo
DrawStateA
EnumDisplayMonitors

gdi32

GetLayout
SetLayout
DeleteObject
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
GetStockObject
SelectPalette
GetObjectType
CreatePen
CreateSolidBrush
CreateHatchBrush
CreateRectRgnIndirect
PatBlt
SetDIBColorTable
GetDIBits
RealizePalette
CreateCompatibleBitmap
CombineRgn
StretchBlt
SetTextAlign
CreateDIBSection
CreateEllipticRgn
CreatePolygonRgn
GetBkColor
GetTextColor
Polyline
Ellipse
Polygon
CreateRoundRectRgn
GetTextMetricsA
Rectangle
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
SetRectRgn
GetMapMode
DPtoLP
OffsetRgn
GetRgnBox
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
ExtFloodFill
SetPaletteEntries
GetWindowOrgEx
LPtoDP
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetViewportOrgEx
EnumFontFamiliesExA
SetPixelV
GetTextFaceA
LineTo
MoveToEx
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateBitmap
GetTextExtentPoint32A
ExtTextOutA
BitBlt
CreateCompatibleDC
CreateDCA
CopyMetaFileA
GetDeviceCaps
SetPixel
CreateFontIndirectA
GetObjectA

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegCloseKey
RegEnumKeyExA
RegEnumValueA
RegQueryValueA

shell32

SHAppBarMessage
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListA
SHGetFileInfoA
ShellExecuteA
DragQueryFileA
DragFinish
SHBrowseForFolderA

comctl32

ImageList_GetIconSize

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathRemoveFileSpecW

ole32

OleUninitialize
CoInitializeEx
OleGetClipboard
OleLockRunning
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoFreeUnusedLibraries
CLSIDFromString
CLSIDFromProgID
CreateStreamOnHGlobal
CoCreateGuid
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
OleInitialize
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
CoRegisterMessageFilter
CoRevokeClassObject
CoGetClassObject
CoTaskMemFree
CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

VariantCopy
SysStringLen
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
OleCreateFontIndirect
SysAllocString
VariantChangeType
VariantClear
SysAllocStringByteLen
SysAllocStringLen
VariantInit
SysFreeString

oledlg

ord8

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageRectI

wininet

InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 291KB - Virtual size: 291KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cc7ba93bb0c8d007b78c03140086a326

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

wininet

oleacc

imm32

winmm

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 291KB - Virtual size: 291KB

.data Size: 28KB - Virtual size: 59KB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 291KB - Virtual size: 291KB

.data
Size: 28KB - Virtual size: 59KB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB