a0cc5f4f571c77534a89fc772282dd629718eeeeb58f9d1fcd71d2268a6c03e1N

Sharing

Copy URL Twitter E-mail

General

Target

a0cc5f4f571c77534a89fc772282dd629718eeeeb58f9d1fcd71d2268a6c03e1N
Size

9.6MB
MD5

e91af5b87763d123d725a191d9cfbdc0
SHA1

31d79055f2f9178f0e896336e85cc4d958c11972
SHA256

a0cc5f4f571c77534a89fc772282dd629718eeeeb58f9d1fcd71d2268a6c03e1
SHA512

99bf3122dce524e754c45b26745ecc5f6c4175e3e4fe8c2f841fba48a817ece52e1f13617aafd364580076e3a554e423240281dabc166fe0ce5b61127bea5e07
SSDEEP

196608:04dJeSVfhks6etTt60+Mg6AiQBhyQbEAkZQdnkW9AVSGfGIJXJaI6HMaJTtGb:FdJeSVft9tAMzyyu4JfdJX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0cc5f4f571c77534a89fc772282dd629718eeeeb58f9d1fcd71d2268a6c03e1N

Files

a0cc5f4f571c77534a89fc772282dd629718eeeeb58f9d1fcd71d2268a6c03e1N
.exe windows:5 windows x64 arch:x64

ce2219f0b0329208c7f2fcc172791373

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetShortPathNameW
GetUserDefaultLangID
CloseHandle
GetCurrentThreadId
GetEnvironmentVariableW
SystemTimeToFileTime
LocalFileTimeToFileTime
FindResourceW
LoadResource
LockResource
SizeofResource
CreateToolhelp32Snapshot
GetLogicalDriveStringsW
QueryDosDeviceW
FileTimeToLocalFileTime
FileTimeToSystemTime
ExpandEnvironmentStringsW
GetCurrentProcess
GetSystemDefaultLangID
MultiByteToWideChar
GetModuleHandleW
GetProcAddress
CreateRemoteThread
WaitForSingleObject
GetExitCodeThread
GetCurrentProcessId
OpenProcess
GetLastError
FormatMessageW
GetVolumeInformationW
FindFirstFileW
FindNextFileW
FindClose
WideCharToMultiByte
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
CreateProcessW
HeapCreate
CreateSemaphoreW
HeapDestroy
ExitProcess
InitializeSListHead
IsProcessorFeaturePresent
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStdHandle
WriteFile
GetModuleFileNameW
FreeLibrary
TerminateProcess
GetModuleHandleExW
EnterCriticalSection
DeleteCriticalSection
LeaveCriticalSection
HeapFree
SetLastError
HeapAlloc
GetCurrentThread
EnumSystemLocalesW
LoadLibraryExW
CompareStringW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
GetDateFormatW
GetLocaleInfoW
GetTempPathW
GetTimeFormatW
GetUserDefaultLCID
InitializeCriticalSectionAndSpinCount
IsValidLocale
LCMapStringW
OutputDebugStringW
GetFileType
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
IsValidCodePage
GetCommandLineA
GetCommandLineW
FindFirstFileExW
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetEnvironmentVariableW
SetConsoleCtrlHandler
GetProcessHeap
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
HeapSize
HeapReAlloc
ReadFile
ReadConsoleW
SetFilePointerEx
WriteConsoleW
CreateFileW
RtlUnwindEx
InterlockedFlushSList
InterlockedPushEntrySList
EncodePointer
RaiseException
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
RtlPcToFileHeader
RtlUnwind
GetFileSize
CreateThread
InitializeCriticalSection
Sleep
LoadLibraryW
DuplicateHandle
CreatePipe
PeekNamedPipe
GetExitCodeProcess
SetFilePointer
SetEndOfFile
GlobalHandle
GlobalUnlock
GlobalFree
GlobalAlloc
GlobalLock
lstrcpyA
lstrcpynA
GetTickCount
GetVersionExW
CreateDirectoryW
GetDriveTypeW
GetFileAttributesW
DeleteFileW
SetFileAttributesW
SetCurrentDirectoryW
CopyFileW
RemoveDirectoryW
GetCurrentDirectoryW
SetFileTime
MulDiv
GetLocalTime
SetEvent
CreateEventA
LoadLibraryA
SetThreadPriority
ReleaseSemaphore
GetFileInformationByHandle
CreateFileA
ResetEvent
QueryPerformanceFrequency
UnregisterWait
RegisterWaitForSingleObject
GetFileSizeEx

user32

SendMessageW
OemToCharW
GetCursorPos
WindowFromPoint
IsWindowEnabled
GetClassLongPtrW
SetClassLongPtrW
SetWindowRgn
GetClassNameW
CallNextHookEx
GetWindowLongPtrW
SetWindowsHookExW
UnhookWindowsHookEx
ReleaseDC
EnumWindows
GetWindowThreadProcessId
FindWindowExW
FindWindowW
GetForegroundWindow
SetCursorPos
InvalidateRect
GetSysColor
GetWindow
IsWindow
DefWindowProcW
SetWindowLongPtrW
GetClientRect
FillRect
CallWindowProcW
GetParent
GetDC
SetWindowPos
BeginPaint
EndPaint
GetAsyncKeyState
KillTimer
ScreenToClient
SetTimer
RedrawWindow
DrawTextW
GetDlgCtrlID
GetWindowRect
OffsetRect
IsRectEmpty
MapWindowPoints
SubtractRect
FrameRect
InflateRect
ShowWindow
DrawFrameControl
PostMessageW
MessageBoxW
IsWindowVisible
EnableWindow
wsprintfA
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
SetFocus
GetIconInfo
UpdateWindow
ReleaseCapture
DrawStateW
SetCapture
GetSystemMetrics
CreateWindowExW
GetKeyState
GetPropW
ClipCursor
SetCursor
GetCapture
GetFocus
DrawFocusRect
GetMessagePos
LoadCursorW
SetPropW
ChildWindowFromPointEx
RegisterClassExW
DestroyWindow
MoveWindow
RemovePropW
GetSysColorBrush
SetRect
GetWindowLongW
ClientToScreen
SetScrollPos
GetWindowDC
SetScrollInfo
GetScrollPos
GetScrollRange
SystemParametersInfoW
EnumPropsExW
GetMenu
SetActiveWindow
IsZoomed
IsIconic
PeekMessageW
MsgWaitForMultipleObjects
GetMessageW
GetActiveWindow
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
RegisterClassW
AdjustWindowRectEx
UnregisterClassW
CreateAcceleratorTableW
DestroyIcon
LoadIconW
DestroyAcceleratorTable
DefFrameProcW
EnumChildWindows
SetForegroundWindow
TrackPopupMenu
IsChild
SetMenu
DestroyMenu
RegisterWindowMessageW
CopyImage
DrawIconEx
CreateIconFromResourceEx
CreateIconFromResource
CharLowerW
CharUpperW

gdi32

CreateRoundRectRgn
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteDC
DeleteObject
CreateRectRgn
CreateSolidBrush
CreatePatternBrush
SetBkMode
SetTextColor
SelectClipRgn
SetDCBrushColor
GetStockObject
SetBrushOrgEx
GetObjectType
GetObjectW
CreateDIBSection
GdiGetBatchLimit
GdiSetBatchLimit
GetTextExtentPoint32W
SetBkColor
ExcludeClipRect
CreateFontIndirectW
CreateRectRgnIndirect
GetClipRgn
ExtSelectClipRgn
CreatePen
MoveToEx
LineTo
GetDeviceCaps
GetDIBits
SetTextAlign
TextOutW
SetStretchBltMode
StretchBlt
GetTextMetricsW
GetPixel
CreateBitmap
SetPixel
CreateFontW

advapi32

RegOpenKeyExW
RegOpenKeyW
RegConnectRegistryW
RegQueryValueExW
RegCloseKey
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
LookupAccountNameW
IsValidSid
RegEnumKeyExW
RegDeleteValueW
RegCreateKeyW
SystemFunction036

comctl32

ImageList_Create
InitCommonControlsEx
_TrackMouseEvent
ImageList_Replace
ImageList_Add
ImageList_ReplaceIcon
ImageList_Remove
ImageList_AddMasked
ImageList_Destroy
ImageList_GetIconSize

oleaut32

SafeArrayGetDim
SafeArrayGetUBound
SafeArrayGetElement

ole32

CoInitialize
CoCreateInstance
CoUninitialize
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
CoTaskMemFree
RevokeDragDrop
OleUninitialize
OleInitialize

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
ShellExecuteExW
Shell_NotifyIconW
SHGetFolderLocation

ws2_32

WSAStartup
gethostbyname
WSACleanup
closesocket

winmm

timeBeginPeriod

gdiplus

GdipDeleteFont
GdipDeleteGraphics
GdipDeletePath
GdipDeleteMatrix
GdipDeletePen
GdipDeleteStringFormat
GdipFree

imagehlp

MakeSureDirectoryPathExists
MapFileAndCheckSumW

uxtheme

SetWindowTheme
OpenThemeData
DrawThemeBackground
CloseThemeData

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 335KB - Virtual size: 334KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gehcont
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gxfg
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6.9MB - Virtual size: 7.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 284KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.debug_l
Size: 512B - Virtual size: 123B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.debug_i
Size: 512B - Virtual size: 46B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.debug_a
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.debug_a
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.debug_s
Size: 512B - Virtual size: 155B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.debug_f
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.modplug
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ce2219f0b0329208c7f2fcc172791373

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

comctl32

oleaut32

ole32

shell32

ws2_32

winmm

gdiplus

imagehlp

uxtheme

Sections

.text Size: 2.0MB - Virtual size: 2.0MB

.rdata Size: 335KB - Virtual size: 334KB

.pdata Size: 78KB - Virtual size: 77KB

.gehcont Size: 512B - Virtual size: 96B

.00cfg Size: 512B - Virtual size: 32B

.gxfg Size: 54KB - Virtual size: 53KB

_RDATA Size: 512B - Virtual size: 348B

.data Size: 6.9MB - Virtual size: 7.4MB

.rsrc Size: 284KB - Virtual size: 283KB

.debug_l Size: 512B - Virtual size: 123B

.debug_i Size: 512B - Virtual size: 46B

.debug_a Size: 512B - Virtual size: 20B

.debug_a Size: 512B - Virtual size: 48B

.debug_s Size: 512B - Virtual size: 155B

.debug_f Size: 512B - Virtual size: 72B

.modplug Size: - Virtual size: 20KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 2.0MB - Virtual size: 2.0MB

.rdata
Size: 335KB - Virtual size: 334KB

.pdata
Size: 78KB - Virtual size: 77KB

.gehcont
Size: 512B - Virtual size: 96B

.00cfg
Size: 512B - Virtual size: 32B

.gxfg
Size: 54KB - Virtual size: 53KB

_RDATA
Size: 512B - Virtual size: 348B

.data
Size: 6.9MB - Virtual size: 7.4MB

.rsrc
Size: 284KB - Virtual size: 283KB

.debug_l
Size: 512B - Virtual size: 123B

.debug_i
Size: 512B - Virtual size: 46B

.debug_a
Size: 512B - Virtual size: 20B

.debug_a
Size: 512B - Virtual size: 48B

.debug_s
Size: 512B - Virtual size: 155B

.debug_f
Size: 512B - Virtual size: 72B

.modplug
Size: - Virtual size: 20KB

.reloc
Size: 3KB - Virtual size: 3KB