afb14441aaa3f4708534e29f9bc94752d0a705b7b6d8b497babb8db474169cc9

Sharing

Copy URL

Twitter E-mail

General

Target

afb14441aaa3f4708534e29f9bc94752d0a705b7b6d8b497babb8db474169cc9
Size

4.3MB
MD5

d95a6f6e7461cd5985425fde89f6d11c
SHA1

7524049ff62176fd1b83a9202f266d70803fd8ff
SHA256

afb14441aaa3f4708534e29f9bc94752d0a705b7b6d8b497babb8db474169cc9
SHA512

9ec85f5d79a24ae497bb98e7f9a313d629df62f422bcb2e4c147eef1edd02d18377e56d5867b2f095ae783532901bccc3038a2c933c28e87182166add723f0c4
SSDEEP

49152:hNTYfSil5AfsTBH6HlYMT1ozY81TZexty+0dLqKI8jeM3CW+Tx7TnCJPMvfgf0A2:hNTASiluE6dT2XsL9udl3mQB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
afb14441aaa3f4708534e29f9bc94752d0a705b7b6d8b497babb8db474169cc9

Files

afb14441aaa3f4708534e29f9bc94752d0a705b7b6d8b497babb8db474169cc9
.exe windows:5 windows x86 arch:x86

4caf49800a97238515a7273973d2d094

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

dsound

ord11

iphlpapi

GetAdaptersInfo

winmm

timeBeginPeriod
timeEndPeriod
timeGetTime

wininet

InternetOpenUrlW
InternetQueryDataAvailable
HttpAddRequestHeadersW
InternetOpenW
HttpSendRequestW
InternetSetOptionW
InternetQueryOptionW
InternetReadFile
HttpOpenRequestW
InternetCloseHandle
InternetConnectW
InternetCrackUrlW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

kernel32

ReadFile
GetConsoleCP
GetConsoleMode
GetCurrentDirectoryA
GetTimeZoneInformation
GetTimeFormatA
GetDateFormatA
FlushFileBuffers
CompareStringA
CompareStringW
CreateFileA
GetStringTypeA
SetFilePointer
GetUserDefaultLCID
LCMapStringA
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
GetProcessHeap
SetEnvironmentVariableA
GetStringTypeW
LCMapStringW
GetCurrentProcessId
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
VirtualAlloc
VirtualFree
GetStdHandle
WriteFile
GetCurrentThreadId
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
CreateDirectoryA
DeleteFileA
GetFullPathNameA
GetDriveTypeA
HeapReAlloc
GetSystemTimeAsFileTime
RtlUnwind
RaiseException
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoA
GetCommandLineA
InitializeCriticalSection
HeapFree
HeapCreate
HeapAlloc
HeapDestroy
FormatMessageW
LocalFree
ReleaseSemaphore
CreateSemaphoreW
CreateFileW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
CreateEventW
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
GetTickCount
ExpandEnvironmentStringsW
GetFileAttributesW
GetVersionExA
lstrlenW
GetCurrentProcess
SetThreadExecutionState
GetCommandLineW
GetVersionExW
GetModuleHandleW
ConvertThreadToFiber
DeleteFiber
CreateFiber
SwitchToFiber
FormatMessageA
ExitThread
CreateDirectoryW
FindNextFileW
GetFullPathNameW
WideCharToMultiByte
FindFirstFileW
MultiByteToWideChar
CreateMutexA
ReleaseMutex
WaitForSingleObject
InterlockedExchange
TerminateProcess
SetThreadPriority
GetExitCodeThread
GetSystemDirectoryW
SetLastError
CreateMutexW
GetLastError
CloseHandle
FreeLibrary
GlobalAlloc
GlobalLock
GlobalUnlock
Sleep
GetEnvironmentVariableA
LoadLibraryW
GetProcAddress
InterlockedDecrement
GetModuleFileNameW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetLocaleInfoA
GetShortPathNameW
MoveFileA
GlobalFree
InterlockedIncrement
GetModuleFileNameA
SetCurrentDirectoryA
QueryPerformanceCounter
QueryPerformanceFrequency
GetFileAttributesA
LoadLibraryA
ExitProcess
GetModuleHandleA
CreateThread
TryEnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
OutputDebugStringA
FindClose
FindNextFileA
FindFirstFileA
LeaveCriticalSection
EnterCriticalSection
CopyFileA
GetWindowsDirectoryA
GetThreadLocale
GetTempPathA
GetTempFileNameA
ExpandEnvironmentStringsA
SetErrorMode
LocalAlloc

user32

DdeQueryStringA
DdeUninitialize
DdeFreeDataHandle
DdeGetData
DdeCreateDataHandle
DdeGetLastError
DdeInitializeA
DdeDisconnect
DdeClientTransaction
DdeCreateStringHandleA
DdeNameService
DdeConnect
DdePostAdvise
LoadCursorA
SetWindowTextA
GetSysColor
VkKeyScanA
FillRect
GetWindowLongA
SetWindowLongA
GetScrollInfo
SetScrollInfo
ScrollWindow
WindowFromPoint
SetParent
UpdateWindow
DeferWindowPos
CallWindowProcA
IsWindowEnabled
GetFocus
EndDeferWindowPos
BeginDeferWindowPos
GetMessageTime
GetMenuItemInfoA
GetMenuItemCount
GetActiveWindow
SetWindowsHookExA
RegisterHotKey
UnregisterHotKey
PtInRect
TrackPopupMenu
GetUpdateRgn
InflateRect
CreateIconIndirect
LoadIconA
LoadBitmapA
DestroyIcon
EndPaint
DrawIcon
BeginPaint
GetUpdateRect
UnregisterClassA
KillTimer
BringWindowToTop
GetDesktopWindow
DrawMenuBar
EnableMenuItem
SetWindowRgn
FlashWindow
CreateDialogIndirectParamA
UnionRect
keybd_event
HideCaret
GetWindowTextLengthA
DrawTextA
CopyRect
DrawFocusRect
OffsetRect
MapWindowPoints
GetMessagePos
ValidateRect
CreateAcceleratorTableA
TranslateAcceleratorA
DrawFrameControl
DrawIconEx
DestroyCursor
GetClassNameA
GetWindowTextA
GetMenuState
CheckMenuItem
CheckMenuRadioItem
ModifyMenuA
GetWindowDC
SetMenuItemInfoA
CreatePopupMenu
RemoveMenu
InsertMenuA
AppendMenuA
CreateMenu
GetSubMenu
InsertMenuItemA
ChildWindowFromPoint
DefFrameProcA
DdeFreeStringHandle
DefMDIChildProcA
GetMenuStringA
DrawEdge
DrawStateA
ShowCursor
RegisterClipboardFormatA
ChangeDisplaySettingsA
EnumDisplaySettingsA
DefWindowProcA
PeekMessageA
PostThreadMessageA
GetWindow
MoveWindow
CallWindowProcW
GetCapture
EnumDisplaySettingsW
SystemParametersInfoA
PeekMessageW
TranslateAcceleratorW
DispatchMessageW
DestroyAcceleratorTable
RegisterClassW
SetRect
CreateWindowExW
ScreenToClient
AdjustWindowRectEx
DestroyMenu
UnregisterClassW
GetWindowLongW
SetWindowLongW
SetMenu
GetWindowPlacement
GetMenu
SetWindowPlacement
SetWindowPos
IsIconic
AdjustWindowRect
IsZoomed
IsWindowVisible
GetAsyncKeyState
GetClassLongW
GetWindowRect
ClipCursor
MessageBoxW
SystemParametersInfoW
UnhookWindowsHookEx
SetWindowsHookExW
CallNextHookEx
GetIconInfo
GetDC
ReleaseDC
GetWindowInfo
DefWindowProcW
GetSystemMenu
SetMenuItemInfoW
SetFocus
SetCapture
ReleaseCapture
GetCursorPos
FindWindowW
GetKeyState
EnumChildWindows
MonitorFromPoint
LoadIconW
SetTimer
SetCursor
LoadCursorW
RedrawWindow
GetForegroundWindow
IsClipboardFormatAvailable
GetClipboardData
OpenClipboard
EmptyClipboard
CloseClipboard
SetClipboardData
SetForegroundWindow
PostQuitMessage
ShowWindow
GetSystemMetrics
ClientToScreen
SetCursorPos
SetClassLongW
TrackMouseEvent
PostMessageW
GetParent
SendMessageW
DestroyWindow
DispatchMessageA
TranslateMessage
IsDialogMessageA
IsWindow
GetMessageA
CheckDlgButton
LoadImageA
GetClientRect
GetDlgItem
CreateDialogParamA
EnableWindow
InvalidateRect
PostMessageA
RegisterClassA
MessageBeep
CreateWindowExA
TranslateMDISysAccel
MessageBoxA
SendMessageA

gdi32

SetBkColor
SetBkMode
GetTextMetricsA
GdiFlush
GetStockObject
GetObjectW
CreateCompatibleDC
SelectObject
GetDIBits
DeleteObject
DeleteDC
RealizePalette
SelectPalette
GetTextExtentPoint32A
CreateRectRgn
ExcludeClipRect
CreateFontIndirectA
GetDeviceCaps
GetObjectA
GetPaletteEntries
BitBlt
CreateCompatibleBitmap
CreateBitmap
CreateICA
OffsetRgn
ExtCreateRegion
GetRegionData
CreatePen
CreateSolidBrush
SelectClipRgn
CombineRgn
CreateRectRgnIndirect
RectInRegion
SetTextAlign
SetStretchBltMode
GetClipBox
ExtSelectClipRgn
ExtFloodFill
GetPixel
SetPixel
Polyline
PolyBezier
TextOutA
SetROP2
GetCharABCWidthsA
GetTextExtentExPointA
SetWindowOrgEx
SetViewportOrgEx
SetWindowExtEx
SetViewportExtEx
SetMapMode
GetBkColor
GetTextColor
Arc
Pie
Polygon
SetPolyFillMode
PolyPolygon
Rectangle
RoundRect
Ellipse
SetBrushOrgEx
MaskBlt
StretchBlt
StretchDIBits
ExtCreatePen
CreateHatchBrush
CreatePatternBrush
GetNearestPaletteIndex
CreatePalette
LineTo
MoveToEx
RestoreDC
SaveDC
GetRgnBox
EqualRgn
PtInRegion
PatBlt
CreateDIBSection
CreateDIBitmap
GetDIBColorTable
EnumFontFamiliesExA
GetSystemPaletteEntries
GetEnhMetaFileA
CopyEnhMetaFileA
DeleteEnhMetaFile
SetAbortProc
EndDoc
StartPage
EndPage
StartDocA
CreateDCA
SetTextColor

advapi32

RegCloseKey
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyExW

shell32

SHBrowseForFolderA
ExtractIconExA
ExtractIconA
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
DragAcceptFiles
DragFinish
DragQueryPoint
DragQueryFileA
ShellExecuteA
ShellExecuteW
SHGetSpecialFolderPathW
CommandLineToArgvW
ExtractIconW
ShellExecuteExA

ole32

CoCreateInstance
OleUninitialize
OleInitialize
CoLockObjectExternal
RevokeDragDrop
OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
ReleaseStgMedium
OleGetClipboard
CoInitialize
CoCreateGuid
RegisterDragDrop

comctl32

ord16
ord17
ImageList_GetIconSize
ImageList_Draw
ImageList_GetImageCount
ord6
ImageList_Destroy
ImageList_Add
ImageList_BeginDrag
ImageList_Create
ImageList_ReplaceIcon
ImageList_SetDragCursorImage
ImageList_DragLeave
ImageList_DragEnter
ImageList_DragMove
ImageList_EndDrag

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

comdlg32

CommDlgExtendedError
GetOpenFileNameA
GetSaveFileNameA
ChooseColorA
ChooseFontA
PrintDlgA
PageSetupDlgA

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 965KB - Virtual size: 965KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 153KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 268KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4caf49800a97238515a7273973d2d094

Headers

DLL Characteristics

File Characteristics

Imports

dsound

iphlpapi

winmm

wininet

version

kernel32

user32

gdi32

advapi32

shell32

ole32

comctl32

winspool.drv

comdlg32

Sections

.text Size: 3.0MB - Virtual size: 3.0MB

.rdata Size: 965KB - Virtual size: 965KB

.data Size: 153KB - Virtual size: 272KB

.rsrc Size: 12KB - Virtual size: 11KB

.reloc Size: 268KB - Virtual size: 267KB

.text
Size: 3.0MB - Virtual size: 3.0MB

.rdata
Size: 965KB - Virtual size: 965KB

.data
Size: 153KB - Virtual size: 272KB

.rsrc
Size: 12KB - Virtual size: 11KB

.reloc
Size: 268KB - Virtual size: 267KB