47e5336575f5e7bec44c38c1804e6563e1f563326740a8983f8e70ac9b40d1d0

Sharing

Copy URL Twitter E-mail

General

Target

47e5336575f5e7bec44c38c1804e6563e1f563326740a8983f8e70ac9b40d1d0
Size

4.7MB
MD5

d98fd0917ef67597523332dfdffac1eb
SHA1

6f618395d3d555e7642114845fde919233cb09b9
SHA256

47e5336575f5e7bec44c38c1804e6563e1f563326740a8983f8e70ac9b40d1d0
SHA512

7b4566c49f2a019905a9c1f08619e3f940d1f78f10eacd531a9f61aa0023a847ca223fd510e10d6264c4236f746fb60e1a494afe7ba1a1eb7c249a3fe146084f
SSDEEP

98304:xsoQg9kW88E1lCTvPaW8rBmMEC+tlbBCsBvbChYM:WoWlSCMMEJhlCSM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47e5336575f5e7bec44c38c1804e6563e1f563326740a8983f8e70ac9b40d1d0

Files

47e5336575f5e7bec44c38c1804e6563e1f563326740a8983f8e70ac9b40d1d0
.exe windows:4 windows x86 arch:x86

1c45b3a4ebc215474eb25dd126a8eb8c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetTempPathA
HeapFree
HeapReAlloc
GetProcessHeap
SetFileTime
WinExec
SystemTimeToFileTime
GetDiskFreeSpaceA
CreateProcessA
GetLogicalDrives
GetCommandLineW
GlobalDeleteAtom
GlobalAddAtomA
GetCurrentProcess
lstrlenW
OpenProcess
OpenFile
DuplicateHandle
GetCurrentProcessId
MoveFileA
CreateSemaphoreA
ReleaseSemaphore
SetErrorMode
LoadLibraryA
GetProcAddress
GetShortPathNameA
GetWindowsDirectoryA
GetTempFileNameA
FreeLibrary
lstrcpynA
OutputDebugStringA
SetVolumeLabelA
DeleteFileA
SetCurrentDirectoryA
CreateMutexA
SetFileAttributesA
ReleaseMutex
OpenFileMappingA
OpenMutexA
WaitForSingleObject
MapViewOfFile
GetComputerNameA
CreateFileMappingA
CompareFileTime
UnmapViewOfFile
GetVolumeInformationA
GetSystemInfo
GetSystemDirectoryA
GetModuleHandleA
GetLocaleInfoA
GetVersionExA
GlobalMemoryStatus
FileTimeToSystemTime
GetPrivateProfileStringA
GetFileInformationByHandle
LocalFree
GetCurrentThreadId
LocalAlloc
ReadFile
GlobalHandle
CreateFileA
GetCurrentDirectoryA
SetFilePointer
CloseHandle
LoadResource
GetLastError
FindResourceA
SizeofResource
GetTickCount
GetTimeZoneInformation
lstrcatA
GetModuleFileNameA
FindClose
FindNextFileA
FindFirstFileA
lstrcmpiA
lstrcmpA
MulDiv
GetFileAttributesA
GetDriveTypeA
CompareStringA
ord36
ord37
ord35
LeaveCriticalSection
CreateEventA
CreateThread
SetEvent
EnterCriticalSection
ExitThread
ResetEvent
InitializeCriticalSection
DeleteCriticalSection
Sleep
ReadProcessMemory
GetThreadSelectorEntry
GetCurrentThread
HeapCreate
HeapDestroy
WriteFile
SetEndOfFile
FlushFileBuffers
FileTimeToLocalFileTime
LocalFileTimeToFileTime
GetLocalTime
GetDateFormatA
GetUserDefaultLCID
GetTimeFormatA
GetProfileStringA
IsValidLocale
IsValidCodePage
IsDBCSLeadByte
IsBadWritePtr
IsBadReadPtr
HeapValidate
LockResource
GetStartupInfoA
GetCommandLineA
GetVersion
RtlUnwind
DebugBreak
GetStdHandle
InterlockedDecrement
InterlockedIncrement
VirtualFree
ExitProcess
TerminateProcess
VirtualAlloc
LCMapStringA
LCMapStringW
RaiseException
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetACP
CreateDirectoryA
MultiByteToWideChar
WideCharToMultiByte
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
GlobalSize
GetSystemTime
FreeResource
GetOEMCP
SetHandleCount
GetFileType
GetStringTypeA
GetStringTypeW
SetConsoleCtrlHandler
lstrlenA
SetStdHandle
SetUnhandledExceptionFilter
IsBadCodePtr
CompareStringW
SetEnvironmentVariableA
lstrcpyA

user32

RegisterClassA
UnregisterClassA
LoadCursorA
DrawEdge
EnumWindows
EnumDisplaySettingsA
GetActiveWindow
DrawFrameControl
LoadMenuA
ModifyMenuA
InsertMenuA
InsertMenuItemA
SetMenuItemInfoA
AppendMenuA
GetMenuState
DrawFocusRect
GetClassNameA
GetClassLongA
SetPropA
GetNextDlgGroupItem
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetMessagePos
GetQueueStatus
PeekMessageA
GetCapture
GetCursor
WindowFromPoint
GetDlgItemTextA
GetDesktopWindow
GetCursorPos
FrameRect
GetWindow
GetAsyncKeyState
GetSubMenu
CreateMenu
LoadStringA
GetMenuItemInfoA
GetPriorityClipboardFormat
SystemParametersInfoA
IsClipboardFormatAvailable
GetClipboardData
OpenClipboard
EmptyClipboard
CloseClipboard
CreateWindowExA
DestroyWindow
GetWindowWord
CallWindowProcA
GetWindowLongA
MapWindowPoints
FillRect
AdjustWindowRect
GetDialogBaseUnits
IsWindow
GetKeyState
HideCaret
ShowCaret
GetWindowTextLengthA
GetClientRect
SetDlgItemTextA
IsWindowVisible
GetParent
LoadBitmapA
SendDlgItemMessageA
GetMenuStringA
CreatePopupMenu
SetFocus
GetSysColor
InvalidateRect
GetMenuItemID
DeleteMenu
GetMenuItemCount
CheckMenuItem
GetWindowTextA
RegisterClipboardFormatA
wsprintfA
CharLowerA
EndDialog
GetDlgCtrlID
PostMessageA
ScreenToClient
SetWindowTextA
GetWindowContextHelpId
MessageBoxA
GetMenu
EndPaint
BeginPaint
IsWindowEnabled
GetScrollInfo
ChildWindowFromPoint
KillTimer
RemovePropA
CallNextHookEx
TranslateAcceleratorA
SetActiveWindow
EnumChildWindows
CharUpperA
SetParent
SetScrollInfo
SetClassLongA
OffsetRect
IsZoomed
LoadIconA
GetClassInfoA
CreateDialogIndirectParamA
PtInRect
SubtractRect
DefWindowProcA
GetFocus
CheckRadioButton
GetWindowDC
IsChild
SetWindowPos
ClientToScreen
GetUpdateRect
GetKeyboardLayoutNameA
CopyAcceleratorTableA
DrawMenuBar
RemoveMenu
GetTopWindow
IsIconic
CreateDialogParamA
MapVirtualKeyA
GetKeyNameTextA
LoadAcceleratorsA
IsMenu
CharUpperBuffA
WindowFromDC
DialogBoxIndirectParamA
PostQuitMessage
GetMenuContextHelpId
GetDCEx
GetIconInfo
WaitForInputIdle
DdeConnect
DdeClientTransaction
DdeDisconnect
DdeFreeDataHandle
DdeFreeStringHandle
DdeUninitialize
DdeInitializeA
DdeCreateStringHandleA
CreateAcceleratorTableA
GetMessageTime
SetWindowContextHelpId
GetCaretBlinkTime
ScrollDC
DefFrameProcA
VkKeyScanA
SetForegroundWindow
FindWindowA
SetWindowsHookExA
TranslateMDISysAccel
UnhookWindowsHookEx
InvertRect
GetSystemMenu
SetCursorPos
WaitMessage
SetRectEmpty
EnumThreadWindows
AttachThreadInput
AdjustWindowRectEx
GetUpdateRgn
IsRectEmpty
GetForegroundWindow
GetWindowThreadProcessId
ChildWindowFromPointEx
RegisterWindowMessageA
SetClipboardViewer
ChangeClipboardChain
SetWindowWord
MapDialogRect
DrawTextA
DefMDIChildProcA
TrackPopupMenu
EnableMenuItem
EnableScrollBar
ScrollWindow
SetTimer
DrawIcon
DestroyIcon
ScrollWindowEx
SetCursor
SetWindowPlacement
GetWindowPlacement
WinHelpA
GetPropA
SetClipboardData
IsDialogMessageA
EnableWindow
DestroyMenu
GetDlgItem
SetWindowLongA
UpdateWindow
MoveWindow
ShowCursor
SendMessageA
ValidateRect
InvalidateRgn
ValidateRgn
CreateIconFromResourceEx
LookupIconIdFromDirectoryEx
GetKeyboardLayoutList
FlashWindow
GetWindowRect
CheckDlgButton
ReleaseDC
GetDC
RedrawWindow
IntersectRect
SetCapture
ReleaseCapture
IsDlgButtonChecked
ShowWindow
GetDoubleClickTime
LoadMenuIndirectA
MessageBeep
GetSystemMetrics
InflateRect

gdi32

RealizePalette
GetDIBits
CreatePatternBrush
DeleteObject
GetPixel
CreateRectRgn
SetRectRgn
CombineRgn
CloseMetaFile
SelectObject
DeleteMetaFile
RoundRect
SetTextAlign
ExtTextOutA
SetTextColor
GetStockObject
SetBkMode
SetWindowExtEx
SetWindowOrgEx
Rectangle
DeleteDC
GetTextExtentPoint32A
CreateMetaFileA
CreateCompatibleDC
StretchDIBits
CreateFontA
SelectPalette
GetDeviceCaps
PatBlt
Polyline
LineTo
CreateDIBSection
Ellipse
GetTextMetricsA
MoveToEx
CreatePen
GetClipBox
GetTextColor
CreateBitmap
PlayMetaFileRecord
GetObjectA
SetPixel
CreatePenIndirect
SetBkColor
CreateBrushIndirect
GetDCOrgEx
GetCurrentObject
SelectClipRgn
BitBlt
GetGlyphOutlineA
SetStretchBltMode
StretchBlt
CreateCompatibleBitmap
CreateFontIndirectA
CreateSolidBrush
SetROP2
GetBkColor
CreatePalette
CreateDIBitmap
GetTextAlign
GetCharWidthA
PolyPolyline
GetMetaFileBitsEx
GetPaletteEntries
SetMetaFileBitsEx
OffsetRgn
GetCurrentPositionEx
ExtSelectClipRgn
CreatePolygonRgn
GetNearestColor
GetRgnBox
SetViewportOrgEx
CreateICA
CreateDCA
GetTextFaceA
GetKerningPairsA
EnumFontFamiliesA
GetSystemPaletteEntries
GetNearestPaletteIndex
OffsetWindowOrgEx
Arc
Pie
CreateEllipticRgnIndirect
CreateRoundRectRgn
FrameRgn
PaintRgn
InvertRgn
CloseFigure
EndPath
PathToRegion
BeginPath
UnrealizeObject
CreateDIBPatternBrushPt
GetBkMode
GetStretchBltMode
GetTextCharacterExtra
SetTextCharacterExtra
GetMapMode
GetGraphicsMode
SetGraphicsMode
GetWorldTransform
SetWorldTransform
GetViewportOrgEx
GetRegionData
ExtCreateRegion
GetBoundsRect
FillRgn
GetPolyFillMode
GetROP2
GetWindowExtEx
GetViewportExtEx
SetViewportExtEx
DPtoLP
RectInRegion
PtVisible
GetWindowOrgEx
SetBoundsRect
SetDIBitsToDevice
OffsetClipRgn
EqualRgn
PtInRegion
SetBrushOrgEx
ExcludeClipRect
GetOutlineTextMetricsA
SetDIBits
RectVisible
GdiFlush
SetBitmapBits
AnimatePalette
SetPaletteEntries
CreateRectRgnIndirect
Escape
EndDoc
StartPage
EndPage
SetAbortProc
StartDocA
GetFontData
ExtEscape
GetRasterizerCaps
TextOutA
SetPolyFillMode
CreatePolyPolygonRgn
PolyPolygon
GetClipRgn
IntersectClipRect
Polygon
PolylineTo
LPtoDP
SaveDC
RestoreDC
SetMapMode

winspool.drv

EnumPrinterDriversA
DocumentPropertiesA
ClosePrinter
EnumPrintersA
OpenPrinterA

comdlg32

PrintDlgA
GetFileTitleA
ChooseColorA
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyA
RegEnumKeyA
RegQueryValueA
GetUserNameA

shell32

Shell_NotifyIconA
DragFinish
SHAppBarMessage
SHBrowseForFolderA
SHGetSpecialFolderLocation
ShellExecuteA
SHGetMalloc
DragQueryFileA
SHGetPathFromIDListA

ole32

OleSetContainedObject
ReadFmtUserTypeStg
OleCreateLinkToFile
OleCreate
OleGetIconOfClass
OleCreateFromFile
OleRun
OleCreateLinkFromData
OleGetClipboard
OleQueryLinkFromData
OleSetClipboard
ReleaseStgMedium
OleSave
OleCreateFromData
OleQueryCreateFromData
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
RegisterDragDrop
RevokeDragDrop
CoTaskMemFree
DoDragDrop
OleCreateStaticFromData
StgCreateDocfile
CoTaskMemAlloc
OleConvertOLESTREAMToIStorage
ProgIDFromCLSID
CoIsOle1Class
StringFromCLSID
OleUninitialize
OleInitialize
MkParseDisplayName
CreateBindCtx
CreateGenericComposite
CreateItemMoniker
CreateFileMoniker
StgCreateDocfileOnILockBytes
OleLoad
CoFreeUnusedLibraries

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

winmm

timeEndPeriod
timeSetEvent
sndPlaySoundA
waveOutGetDevCapsA
waveOutGetNumDevs
ord2
timeGetDevCaps
timeBeginPeriod
timeKillEvent

oledlg

ord1
ord7
ord5
ord3
ord4

comctl32

ImageList_Destroy
ord17
ImageList_Draw
ImageList_GetImageCount
ImageList_Create
ImageList_GetImageInfo
ImageList_GetIcon
ImageList_AddMasked
ImageList_DrawEx
ImageList_GetIconSize
ImageList_Add

mpr

WNetGetUniversalNameA
WNetEnumResourceA
WNetCloseEnum
WNetCancelConnection2A
WNetOpenEnumA
WNetAddConnection2A

wsock32

sendto
closesocket
getsockopt
recvfrom
socket
bind
getsockname
WSAAsyncSelect
WSACleanup
setsockopt
WSAGetLastError
WSAStartup

Exports

Exports

_getcurrenttaskcompatflags@4
_setcurrenttaskcompatflags@4

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1c45b3a4ebc215474eb25dd126a8eb8c

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

version

winmm

oledlg

comctl32

mpr

wsock32

Exports

Exports

Sections

.text Size: 2.8MB - Virtual size: 2.8MB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 24KB - Virtual size: 70KB

.idata Size: 16KB - Virtual size: 16KB

.rsrc Size: 1.5MB - Virtual size: 1.5MB

.reloc Size: 166KB - Virtual size: 165KB

.text
Size: 2.8MB - Virtual size: 2.8MB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 24KB - Virtual size: 70KB

.idata
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

.reloc
Size: 166KB - Virtual size: 165KB