867b40c38d1969dce13b56bef104f90ea431a53db2d3d761810ea5ff04a582ae

Sharing

Copy URL Twitter E-mail

General

Target

867b40c38d1969dce13b56bef104f90ea431a53db2d3d761810ea5ff04a582ae
Size

452KB
MD5

6bca9a72176ed4eab20bafce46a6ba84
SHA1

ce5b3a7250e810509602cd77973158eeb765d9ac
SHA256

867b40c38d1969dce13b56bef104f90ea431a53db2d3d761810ea5ff04a582ae
SHA512

b546cfd034e007135f3501fafce026098b29b0ee8202ab79fec03b51386812a3e8dacbf330b5b79f58aa0a1f99cc7c23b5a506cb9fc520448d21e4786329c709
SSDEEP

3072:rL/nmLiFthEhJkfEL0BT9CjRQFaU3jwy9ovBvu:rL/KijhYJkfEL0BTAUzSu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
867b40c38d1969dce13b56bef104f90ea431a53db2d3d761810ea5ff04a582ae

Files

867b40c38d1969dce13b56bef104f90ea431a53db2d3d761810ea5ff04a582ae
.exe windows:4 windows x86 arch:x86

daa1ca79b0a073fd6833fae491b163f6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
CreateFileW
SetFilePointer
FlushFileBuffers
SetEndOfFile
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
ExitProcess
TerminateProcess
HeapFree
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GetStringTypeA
GetStringTypeW
GetCPInfo
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
GetProcessVersion
GlobalAddAtomW
GlobalFindAtomW
GetModuleHandleW
GetModuleHandleA
lstrcpyW
lstrcatW
WritePrivateProfileStringW
GetModuleFileNameW
GlobalFlags
lstrcmpiW
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
GlobalHandle
GlobalUnlock
GlobalFree
TlsAlloc
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetVersion
InitializeCriticalSection
lstrcpynW
SetLastError
GlobalLock
lstrcmpW
GlobalAlloc
InterlockedExchange
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
LocalFree
lstrlenA
lstrlenW
InterlockedDecrement
InterlockedIncrement
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
CreateSemaphoreW
CreateThread
WaitForSingleObject
ReleaseMutex
GetSystemInfo
GetVersionExW
GetComputerNameW
WideCharToMultiByte
MultiByteToWideChar
ReleaseSemaphore
PeekNamedPipe
WriteFile
Sleep
GetSystemDirectoryW
CreatePipe
GetStartupInfoW
CreateProcessW
ReadFile
GetLastError
OpenProcess
HeapDestroy
CloseHandle

user32

CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
LoadIconW
ShowWindow
LoadCursorW
GetSysColorBrush
DestroyMenu
GetSubMenu
GetMenuItemID
GetDlgItem
DefWindowProcW
DestroyWindow
CreateWindowExW
SetPropW
GetPropW
CallWindowProcW
RemovePropW
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongW
SetWindowPos
RegisterWindowMessageW
GetTopWindow
SystemParametersInfoW
IsIconic
GetWindowPlacement
GetSystemMetrics
GrayStringW
DrawTextW
TabbedTextOutW
ReleaseDC
GetDC
GetMenuItemCount
GetLastActivePopup
IsWindowEnabled
MessageBoxW
EnableWindow
GetWindowTextW
SetWindowTextW
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetWindowLongW
GetClassNameW
GetMenuCheckMarkDimensions
LoadBitmapW
GetMenuState
ModifyMenuW
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
SetCursor
GetMessageW
TranslateMessage
DispatchMessageW
GetCapture
WinHelpW
GetClassInfoW
wsprintfW
PostQuitMessage
GetActiveWindow
SendMessageW
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageW
GetCursorPos
SetWindowsHookExW
LoadStringW
UnhookWindowsHookEx
PostMessageW
RegisterClassW
GetMenu

gdi32

SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
SetTextColor
GetDeviceCaps
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
GetObjectW
SetBkColor
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
DeleteObject

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

RegSetValueExW
GetUserNameW
RegOpenKeyExW
RegCreateKeyExW
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

comctl32

ord17

ws2_32

ntohs
gethostbyaddr
WSAGetLastError
inet_addr
htons
getservbyname
htonl
WSASetLastError
WSACleanup
WSAStartup
gethostname
gethostbyname
inet_ntoa
getservbyport

wininet

InternetQueryOptionW
HttpOpenRequestA
InternetConnectA
InternetReadFile
InternetOpenW
InternetSetOptionW
InternetCloseHandle
HttpSendRequestA

psapi

EnumProcesses
GetModuleBaseNameW
EnumProcessModules

Sections

.text
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.shell
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

daa1ca79b0a073fd6833fae491b163f6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

comctl32

ws2_32

wininet

psapi

Sections

.text Size: 92KB - Virtual size: 89KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 8KB - Virtual size: 22KB

.rsrc Size: 4KB - Virtual size: 160B

.shell Size: 320KB - Virtual size: 320KB

.text
Size: 92KB - Virtual size: 89KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 8KB - Virtual size: 22KB

.rsrc
Size: 4KB - Virtual size: 160B

.shell
Size: 320KB - Virtual size: 320KB