33b4db1c712f6edd18090eef006dd9773837979c1b1f4e85e311cbd0e7c6b184

Sharing

Copy URL Twitter E-mail

General

Target

33b4db1c712f6edd18090eef006dd9773837979c1b1f4e85e311cbd0e7c6b184
Size

2.8MB
MD5

60af7a8ae38c4917e782749c3fdcb89d
SHA1

021d5588a2e60476d57bc903d1abc0900cda9314
SHA256

33b4db1c712f6edd18090eef006dd9773837979c1b1f4e85e311cbd0e7c6b184
SHA512

e427879b9386f3a4ad5330042c4ecd2dedc4fd6a9452edba00719df8d30eace8434a97f3f95e6f53aa169d5688f9e35ab4fa25bdd72ff5191dc582420f79db2f
SSDEEP

49152:CzcYY0Yw4N9eFKCMGyZjj4rURwcNouFDHT/kukjuWTZhnnh:tYNYzN0pMGmj8rKwcNoEDHwTuWTj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33b4db1c712f6edd18090eef006dd9773837979c1b1f4e85e311cbd0e7c6b184

Files

33b4db1c712f6edd18090eef006dd9773837979c1b1f4e85e311cbd0e7c6b184
.exe windows:5 windows x86 arch:x86

34c0e846293eddf3b18a1ec2f48647f9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointerEx
ReadConsoleW
GetTimeZoneInformation
GetStringTypeW
EnumSystemLocalesW
IsValidLocale
LCMapStringW
GetConsoleMode
GetConsoleCP
GetACP
GetStdHandle
VirtualQuery
VirtualAlloc
GetSystemInfo
HeapQueryInformation
GetCommandLineA
GetFileType
SetStdHandle
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
RtlUnwind
OutputDebugStringW
FindFirstFileExW
IsValidCodePage
GetOEMCP
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
GetUserDefaultLCID
GetTempFileNameW
GetProfileIntW
GetTempPathW
SearchPathW
FindResourceExW
GetCPInfo
GetWindowsDirectoryW
SetErrorMode
VerifyVersionInfoW
VerSetConditionMask
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileAttributesExW
GetFileAttributesW
FileTimeToLocalFileTime
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
lstrcpyW
GlobalFlags
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
FileTimeToSystemTime
GlobalGetAtomNameW
ResumeThread
SetThreadPriority
CreateEventW
WaitForSingleObject
SetEvent
GetThreadLocale
lstrcmpiW
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
DeleteFileW
CompareStringA
lstrcmpA
GetCurrentThread
GetVersionExW
GetCurrentProcessId
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryA
LoadLibraryExW
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
GetModuleHandleA
OutputDebugStringA
SetLastError
FormatMessageW
MulDiv
LocalFree
GlobalFree
GlobalSize
GetCommandLineW
GetPrivateProfileIntW
ExitProcess
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
HeapFree
GlobalUnlock
GlobalLock
GlobalAlloc
FlushFileBuffers
FreeResource
GetModuleFileNameW
InitializeCriticalSection
PeekNamedPipe
InterlockedDecrement
InterlockedIncrement
AllocConsole
WriteFile
ReadFile
FindClose
FindNextFileW
FindFirstFileW
CopyFileW
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
CreatePipe
CreateMutexW
WritePrivateProfileStringW
GetModuleHandleW
CreateThread
Sleep
FreeLibrary
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
GetTickCount
CloseHandle
GetFileSizeEx
WriteConsoleW
CreateFileW
GetLastError
MultiByteToWideChar
GetProcAddress
GetCurrentProcess
TerminateProcess
LoadLibraryW
GetPrivateProfileStringW
GetCurrentDirectoryW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
QueryPerformanceFrequency

user32

BringWindowToTop
DeleteMenu
WindowFromPoint
SetCapture
WaitMessage
IntersectRect
GetAsyncKeyState
CopyImage
GetMenuItemInfoW
DestroyMenu
LoadImageW
DestroyIcon
InflateRect
InvalidateRect
TrackMouseEvent
RealChildWindowFromPoint
GetSysColorBrush
ShowOwnedPopups
GetCursorPos
CharUpperW
MapDialogRect
SetWindowContextHelpId
MessageBeep
IsZoomed
FillRect
ClientToScreen
ReleaseDC
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
GetWindowThreadProcessId
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
EqualRect
CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
LoadAcceleratorsW
BeginPaint
GetForegroundWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
IsIconic
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
CreateAcceleratorTableW
GetWindowPlacement
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
DefWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
RegisterWindowMessageW
OffsetRect
SetRectEmpty
SendDlgItemMessageA
UnhookWindowsHookEx
IsDialogMessageW
GetWindow
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
GetFocus
SetFocus
GetDlgCtrlID
DestroyAcceleratorTable
CopyAcceleratorTableW
EnumChildWindows
RegisterClipboardFormatW
MessageBoxW
SendMessageW
GetWindowRect
GetSystemMetrics
CheckDlgButton
ShowWindow
GetDesktopWindow
SetActiveWindow
IsWindowEnabled
GetActiveWindow
GetNextDlgTabItem
GetDlgItem
EndDialog
TranslateAcceleratorW
LoadMenuW
CreatePopupMenu
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
SetParent
MonitorFromPoint
SetLayeredWindowAttributes
EnumDisplayMonitors
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
IsRectEmpty
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetSystemMenu
SetWindowRgn
NotifyWinEvent
ModifyMenuW
PostThreadMessageW
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
EndPaint
GetWindowRgn
DestroyCursor
CreateMenu
GetDoubleClickTime
GetComboBoxInfo
GetUpdateRect
SubtractRect
LoadIconW
SetTimer
KillTimer
EnableWindow
PostQuitMessage
ReleaseCapture
MoveWindow
CallWindowProcW
SetWindowLongW
GetMessageW
TranslateMessage
DispatchMessageW
GetParent
GetWindowLongW
SetCursor
LoadCursorW
GetClientRect
PtInRect
SetWindowPos
AdjustWindowRect
SystemParametersInfoW
GetDC
LoadBitmapW
UnregisterClassW
FindWindowW
PostMessageW
SetForegroundWindow
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
AppendMenuW
RemoveMenu
MapVirtualKeyExW
IsCharLowerW
TranslateMDISysAccel
DefMDIChildProcW
MapVirtualKeyW
DefFrameProcW
DrawMenuBar
IsClipboardFormatAvailable
SetMenuDefaultItem
UpdateLayeredWindow
CharUpperBuffW
UnionRect
DrawIcon
FrameRect
CopyIcon
SetCursorPos
DrawFrameControl
DrawEdge
GetKeyNameTextW
InvertRect
HideCaret
EnableScrollBar
GetIconInfo
DrawIconEx
DrawFocusRect
GetMenuDefaultItem
GetNextDlgGroupItem
SetRect
InvalidateRgn
CharNextW
SetClassLongW
SetWindowPlacement
LockWindowUpdate

gdi32

CreateHatchBrush
CreatePen
CreatePatternBrush
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetTextExtentPoint32W
GetTextMetricsW
CreateRectRgnIndirect
GetMapMode
PatBlt
DPtoLP
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetDIBits
RealizePalette
SetPixel
StretchBlt
SetDIBColorTable
CreateRoundRectRgn
GetRgnBox
OffsetRgn
GetTextColor
GetBkColor
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
LPtoDP
EnumFontFamiliesExW
Rectangle
RoundRect
ExtFloodFill
SetPaletteEntries
GetViewportOrgEx
GetWindowOrgEx
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetTextFaceW
SetPixelV
BitBlt
CreateBitmap
SetTextColor
SetBkColor
GetDeviceCaps
CreateDCW
CopyMetaFileW
CombineRgn
SetRectRgn
CreateRectRgn
DeleteDC
DeleteObject
CreateDIBSection
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectW
GetObjectW
CreateSolidBrush

msimg32

AlphaBlend
TransparentBlt

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegEnumKeyW
RegOpenKeyExW
RegQueryValueExW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW

shell32

Shell_NotifyIconW
ShellExecuteW
SHBrowseForFolderW
SHGetPathFromIDListW
CommandLineToArgvW
SHGetFileInfoW
DragQueryFileW
DragFinish
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetMalloc
SHAppBarMessage

comctl32

InitCommonControlsEx
_TrackMouseEvent

shlwapi

PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW
PathFileExistsW

uxtheme

IsAppThemed
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
GetCurrentThemeName
GetWindowTheme
DrawThemeBackground
CloseThemeData
OpenThemeData
DrawThemeParentBackground
DrawThemeText
GetThemeColor
GetThemeSysColor

ole32

CoFreeUnusedLibraries
OleInitialize
OleUninitialize
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
OleGetClipboard
DoDragDrop
OleIsCurrentClipboard
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CoInitialize
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
CoCreateInstance
CoInitializeEx
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemAlloc
CreateStreamOnHGlobal
CoTaskMemFree
CoRevokeClassObject
CoRegisterMessageFilter
OleFlushClipboard

oleaut32

VarBstrFromDate
OleCreateFontIndirect
VariantCopy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocString
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysFreeString
SafeArrayDestroy
LoadTypeLi

oledlg

OleUIBusyW

gdiplus

GdipSetSolidFillColor
GdipDrawString
GdipGetImageWidth
GdipLoadImageFromStreamICM
GdipGetImageHeight
GdipDisposeImage
GdipSetInterpolationMode
GdipDrawImageI
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageGraphicsContext
GdiplusStartup
GdiplusShutdown
GdipCloneImage
GdipLoadImageFromStream
GdipCreateBitmapFromHBITMAP
GdipDrawImageRectI
GdipReleaseDC
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateStringFormat
GdipDeleteStringFormat
GdipCreateFont
GdipGetGenericFontFamilySansSerif
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipCreateSolidFill
GdipDeleteBrush
GdipFree
GdipAlloc
GdipCloneBrush
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipDeleteFont
GdipLoadImageFromFile
GdipLoadImageFromFileICM
GdipDrawImageRect

dbghelp

ImageNtHeader

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 360KB - Virtual size: 359KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 707KB - Virtual size: 707KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

34c0e846293eddf3b18a1ec2f48647f9

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

dbghelp

oleacc

imm32

winmm

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 360KB - Virtual size: 359KB

.data Size: 23KB - Virtual size: 41KB

.rsrc Size: 707KB - Virtual size: 707KB

.reloc Size: 143KB - Virtual size: 143KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 360KB - Virtual size: 359KB

.data
Size: 23KB - Virtual size: 41KB

.rsrc
Size: 707KB - Virtual size: 707KB

.reloc
Size: 143KB - Virtual size: 143KB