92a14bb6101f073f095f3536cff95560N

Sharing

Copy URL Twitter E-mail

General

Target

92a14bb6101f073f095f3536cff95560N
Size

3.4MB
MD5

92a14bb6101f073f095f3536cff95560
SHA1

f367f6dcc3d188aa9ebc27e4f480942354b6dad0
SHA256

25329d757f2e027a259455873cbdbe2c9179e0e261383e5d04b5a441f418166b
SHA512

cd3079fb89888cd947de7b50c1e057604245969aa4998d3072812ba10168a81c5d01132c02bc11e7730d43b815cac0ce746722675ab71ce2529c61c0f4809fe5
SSDEEP

24576:qdEVaygLvzhM5ENaB6xFay4rFPC0ByT+UYNqAcz:6/ancz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
92a14bb6101f073f095f3536cff95560N

Files

92a14bb6101f073f095f3536cff95560N
.exe windows:4 windows x86 arch:x86

45dcacd806eed6b613e9f4af7b4f212d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

qryint32

ord2
ord5
ord4
bdFinish1
bdChooseDataSource1
bdSortOrder1
bdSortOrder2
ord3
bdFilterData2
bdChooseColumns1
bdFilterData1
bdChooseDataSource2
bdCreateNewDataSource4
bdChooseColumns2
bdCreateNewDataSource2
bdCreateNewDataSource1
bdCreateNewDataSource3
bdFinish2

kernel32

GetFileType
GetStdHandle
HeapCreate
HeapDestroy
WriteFile
CompareStringA
SetHandleCount
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetConsoleCtrlHandler
HeapReAlloc
FlushFileBuffers
SetStdHandle
SetFilePointer
CloseHandle
GetEnvironmentStrings
FreeEnvironmentStringsA
SetEnvironmentVariableA
CompareStringW
UnhandledExceptionFilter
FreeLibrary
lstrcmpiA
GetModuleHandleA
GetVersion
GetSystemDefaultLangID
SetErrorMode
GetProfileStringA
GetProfileIntA
GetTickCount
GlobalUnlock
GlobalFree
GlobalLock
GlobalAlloc
lstrlenA
MulDiv
MultiByteToWideChar
GetACP
GetCurrentThread
GlobalReAlloc
GlobalSize
FreeResource
SizeofResource
LockResource
LoadResource
FindResourceA
LocalAlloc
LocalFree
_lclose
OpenFile
lstrcmpA
GetFileAttributesA
GetProcAddress
LoadLibraryA
lstrlenW
HeapFree
_lcreat
_lread
_lwrite
_llseek
GetModuleFileNameA
GetTempPathA
DeleteFileA
WideCharToMultiByte
GetCurrentDirectoryA
GetLocalTime
FindClose
FindNextFileA
FindFirstFileA
EnumResourceLanguagesA
lstrcpynW
GlobalHandle
ExitProcess
GetLastError
GetFullPathNameA
GetDriveTypeA
MoveFileA
GetStartupInfoA
GetCommandLineA
RtlUnwind
GetStringTypeA
GetStringTypeW
RaiseException
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetCPInfo
GetOEMCP
HeapAlloc

user32

CheckDlgButton
IsDlgButtonChecked
SendDlgItemMessageA
GetDlgItemInt
CharLowerA
GetDlgItemTextA
GetDialogBaseUnits
GetDoubleClickTime
IsChild
CheckRadioButton
ShowScrollBar
SetScrollInfo
GetScrollInfo
RegisterWindowMessageA
DdeNameService
GetLastActivePopup
WaitMessage
GetUpdateRect
GetDlgCtrlID
IsRectEmpty
GetUpdateRgn
ValidateRect
ExcludeUpdateRgn
InvertRect
FrameRect
SetParent
DdeEnableCallback
MessageBeep
GetMessageTime
RegisterClipboardFormatA
GetPriorityClipboardFormat
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardFormatNameA
DestroyCaret
SetCaretPos
CreateCaret
IsClipboardFormatAvailable
BeginPaint
EndPaint
GetWindowDC
VkKeyScanA
SetClassLongA
CreateDialogParamA
DestroyCursor
CharToOemA
EnumChildWindows
EndDeferWindowPos
BeginDeferWindowPos
DeferWindowPos
SetWindowsHookExA
UnhookWindowsHookEx
DefFrameProcA
GetMessagePos
PostQuitMessage
FlashWindow
FillRect
GetCaretPos
DdeUninitialize
SetMenu
ReplyMessage
IsDialogMessageA
TranslateMDISysAccel
EqualRect
GetSystemMetrics
LoadBitmapA
DestroyMenu
SetMessageQueue
MessageBoxA
IsIconic
CallNextHookEx
EndDialog
SetDlgItemTextA
WinHelpA
SetTimer
GetMessageA
TranslateMessage
IsCharAlphaA
DdeUnaccessData
InSendMessage
GetActiveWindow
IsWindowEnabled
GetAsyncKeyState
SetFocus
GetWindowRect
ScreenToClient
GetSysColor
DrawFocusRect
SetCapture
SetRect
PeekMessageA
PtInRect
GetKeyState
ReleaseCapture
CallWindowProcA
IsWindowVisible
SetWindowPos
CharUpperA
GetFocus
GetClassLongA
MoveWindow
ShowWindow
GetScrollPos
SetScrollRange
BringWindowToTop
DestroyWindow
GetScrollRange
UpdateWindow
ScrollWindow
SetScrollPos
IntersectRect
OffsetRect
GetWindowLongA
GetParent
DefWindowProcA
SetWindowLongA
GetClientRect
ShowCursor
IsCharAlphaNumericA
DdePostAdvise
InvalidateRect
ClientToScreen
SetForegroundWindow
DdeFreeDataHandle
DdeAddData
DdeAccessData
InsertMenuA
GetForegroundWindow
LoadIconA
DdeKeepStringHandle
SetCursor
GetCapture
GetCursorPos
WindowFromPoint
SendMessageA
DdeInitializeA
wsprintfA
DdeClientTransaction
DdeDisconnect
DdeFreeStringHandle
DdeCreateStringHandleA
DdeConnect
DdeQueryStringA
GetPropA
RemovePropA
SetPropA
EnumThreadWindows
DrawTextA
LoadCursorA
DialogBoxIndirectParamA
GetDC
ReleaseDC
InflateRect
TrackPopupMenu
InvalidateRgn
RegisterClassA
GetClassInfoExA
RegisterClassExA
GetClassInfoA
UnregisterClassA
SetActiveWindow
CreateWindowExA
ShowCaret
HideCaret
GetSystemMenu
RemoveMenu
GetMenuStringA
GetSubMenu
LoadMenuA
DrawMenuBar
ModifyMenuA
EnableMenuItem
DdeCreateDataHandle
DdeCmpStringHandles
DispatchMessageA
EnableWindow
GetWindowPlacement
GetMenuItemID
CheckMenuItem
DefMDIChildProcA
GetWindow
GetTopWindow
GetWindowTextA
DeleteMenu
GetDlgItem
PostMessageA
SetWindowTextA
IsWindow
GetMenu
IsZoomed
KillTimer
CreateMenu
GetMenuItemCount
AppendMenuA
SetClipboardData
GetClipboardData
GetWindowTextLengthA
DdeGetLastError
DdeGetData

gdi32

SetRectRgn
SetBrushOrgEx
MoveToEx
DeleteMetaFile
IntersectClipRect
CreateBrushIndirect
CreatePenIndirect
CreatePen
CreateBitmap
GetWindowOrgEx
GetViewportExtEx
GetWindowExtEx
SetStretchBltMode
SetMapperFlags
GetViewportOrgEx
SetBkMode
EnumMetaFile
SetMapMode
SaveDC
RestoreDC
DeleteDC
CreateDCA
CreateICA
CloseMetaFile
CreateMetaFileA
CreateCompatibleDC
SelectClipRgn
GetTextFaceA
GetCharWidthA
GetBkColor
GetROP2
SetROP2
FillRgn
OffsetRgn
SetBkColor
GetTextExtentPoint32A
GetDIBits
CreatePalette
StretchDIBits
CreateDIBitmap
CreateSolidBrush
UnrealizeObject
CreatePolygonRgn
RectInRegion
PtInRegion
Polygon
CreateCompatibleBitmap
GetBitmapBits
Ellipse
StretchBlt
GetNearestColor
RectVisible
InvertRgn
GetClipBox
SetTextColor
GetCurrentObject
CreateFontIndirectA
SelectObject
TextOutA
GetTextColor
GetTextMetricsA
GetTextExtentPointA
ExcludeClipRect
Rectangle
GetObjectA
CombineRgn
CreateRectRgn
GetStockObject
SelectPalette
RealizePalette
LineTo
PatBlt
BitBlt
GetDeviceCaps
DeleteObject
CreatePatternBrush
ExtTextOutA

comctl32

PropertySheetA

comdlg32

CommDlgExtendedError
ChooseFontA
GetOpenFileNameA
GetSaveFileNameA

odbc32

ord10
ord52
ord2
ord1
ord71
ord15
ord63
ord54
ord41
ord9
ord14
ord22
ord57
ord23
ord3
ord51
ord50
ord42
ord5
ord58
ord72
ord12
ord19
ord47
ord66
ord20
ord67
ord45
ord11
ord16
ord18
ord40
ord4
ord13
ord6
ord8

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey

mso97rt

ord900
ord560
ord629
ord630
ord894
ord321
ord322
ord499
ord589
ord844
ord395
ord750
ord406
ord295
ord726
ord394
ord543
ord258
ord688

imm32

ImmGetCompositionStringA
ImmGetDefaultIMEWnd
ImmSetCompositionFontA
ImmReleaseContext
ImmGetContext

dbcs3032

ord4
ord8
ord23
ord14
ord17
ord29
ord26
ord11
ord35
ord20
ord24
ord5
ord2
ord13
ord10
ord6

Sections

.text
Size: 648KB - Virtual size: 648KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

QUIT_TEX
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

MAIN_TEX
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT_TEX
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ERROR_TE
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DDEQT_TE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DISPATCH
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

GRINIT_T
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

45dcacd806eed6b613e9f4af7b4f212d

Headers

File Characteristics

Imports

qryint32

kernel32

user32

gdi32

comctl32

comdlg32

odbc32

advapi32

mso97rt

imm32

dbcs3032

Sections

.text Size: 648KB - Virtual size: 648KB

QUIT_TEX Size: 2KB - Virtual size: 1KB

MAIN_TEX Size: 512B - Virtual size: 496B

INIT_TEX Size: 4KB - Virtual size: 4KB

ERROR_TE Size: 512B - Virtual size: 80B

DDEQT_TE Size: 5KB - Virtual size: 5KB

DISPATCH Size: 512B - Virtual size: 80B

GRINIT_T Size: 512B - Virtual size: 384B

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 30KB - Virtual size: 38KB

.idata Size: 11KB - Virtual size: 10KB

.rsrc Size: 17KB - Virtual size: 16KB

Size: 2.7MB - Virtual size: 2.7MB

.text
Size: 648KB - Virtual size: 648KB

QUIT_TEX
Size: 2KB - Virtual size: 1KB

MAIN_TEX
Size: 512B - Virtual size: 496B

INIT_TEX
Size: 4KB - Virtual size: 4KB

ERROR_TE
Size: 512B - Virtual size: 80B

DDEQT_TE
Size: 5KB - Virtual size: 5KB

DISPATCH
Size: 512B - Virtual size: 80B

GRINIT_T
Size: 512B - Virtual size: 384B

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 30KB - Virtual size: 38KB

.idata
Size: 11KB - Virtual size: 10KB

.rsrc
Size: 17KB - Virtual size: 16KB