8e956328c2e0a88da2564a95616ff4538fa441fa65a8694b1832dd60da93d57bN

Sharing

Copy URL Twitter E-mail

General

Target

8e956328c2e0a88da2564a95616ff4538fa441fa65a8694b1832dd60da93d57bN
Size

7.0MB
MD5

8250062d83f227d1f312463c2fa15e20
SHA1

e514cef6cd5171eefde9444d55e441a69072f29d
SHA256

8e956328c2e0a88da2564a95616ff4538fa441fa65a8694b1832dd60da93d57b
SHA512

4286761d1fae54798d4a8e084181c4315cf034da52a309f5597c3e5bf2366dc4b8a6c4c2d899325a34f63e4a5ff6b1db45f3de32cb636e911eea7ccd00a080a3
SSDEEP

98304:MfQLwp65U2+MCoubZPAyi8ZcvdQre5iBrNFvn1W0Cd3n7c9sFLg1BGekYzgT:MfzUU2QNPAeZcvdQroiBjvnF6QbBmYW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e956328c2e0a88da2564a95616ff4538fa441fa65a8694b1832dd60da93d57bN

Files

8e956328c2e0a88da2564a95616ff4538fa441fa65a8694b1832dd60da93d57bN
.exe windows:6 windows x86 arch:x86

72c3899560b634cefa8d1c8c87d3a52a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW

libcrypto-3

AES_ecb_encrypt
AES_set_encrypt_key
SHA256

kernel32

lstrcmpW
CreateEventW
ResumeThread
GetVersionExW
GlobalDeleteAtom
EncodePointer
GetSystemDirectoryW
GlobalFindAtomW
GetLocaleInfoW
GetUserDefaultUILanguage
VirtualProtect
lstrcpyW
GetWindowsDirectoryW
VerSetConditionMask
VerifyVersionInfoW
GetProfileIntW
SearchPathW
GetTempFileNameW
GetUserDefaultLCID
ResetEvent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetFileSizeEx
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetOEMCP
GetACP
GlobalAddAtomW
GetTimeZoneInformation
SetFilePointerEx
EnumSystemLocalesW
IsValidLocale
LCMapStringW
GetTimeFormatW
GetDateFormatW
SetStdHandle
VirtualQuery
VirtualAlloc
GetCommandLineA
HeapQueryInformation
FindFirstFileExW
FreeLibraryAndExitThread
ExitThread
CreateThread
GetModuleHandleExW
ExitProcess
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
GetFileType
RtlUnwind
GetLogicalProcessorInformation
OpenEventA
QueryPerformanceFrequency
GetCPInfo
CompareStringEx
GetStringTypeW
GetLocaleInfoEx
LCMapStringEx
GlobalFlags
IsValidCodePage
GlobalGetAtomNameW
lstrcmpA
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
CompareStringW
InitializeCriticalSectionAndSpinCount
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FileTimeToLocalFileTime
GetModuleHandleA
MulDiv
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalAlloc
LoadLibraryExW
GetLocalTime
SetThreadPriority
WaitForMultipleObjects
SetEvent
CreateEventA
MoveFileW
GetPrivateProfileIntW
FindResourceExW
GetModuleFileNameA
FlushFileBuffers
GetTickCount
QueryPerformanceCounter
MapViewOfFile
CreateFileMappingW
FormatMessageA
GetSystemTimeAsFileTime
GetFileSize
LockFileEx
UnlockFile
HeapCompact
GetSystemInfo
DeleteFileA
WaitForSingleObjectEx
LoadLibraryA
CreateFileA
FlushViewOfFile
OutputDebugStringW
GetFileAttributesA
GetDiskFreeSpaceA
FormatMessageW
GetTempPathA
HeapValidate
UnmapViewOfFile
GetCurrentThreadId
WaitForSingleObject
GetTempPathW
UnlockFileEx
SetEndOfFile
GetFullPathNameA
LockFile
OutputDebugStringA
GetFileTime
GetDiskFreeSpaceW
GetFullPathNameW
HeapCreate
TryEnterCriticalSection
AreFileApisANSI
GetSystemTime
SystemTimeToFileTime
GetCurrentProcessId
LocalFree
GetCommandLineW
GetFileAttributesExW
WriteFile
DuplicateHandle
GetStdHandle
lstrcmpiW
GetCurrentDirectoryW
DeleteFileW
lstrcatW
GetPrivateProfileStringW
FindClose
CreateMutexW
FindNextFileW
SetSystemPowerState
SetLastError
WritePrivateProfileStringW
FindFirstFileW
ReadFile
SetFilePointer
GetNativeSystemInfo
GetCurrentProcess
GetModuleHandleW
CopyFileW
GetFileAttributesW
CloseHandle
CreateFileW
GetDiskFreeSpaceExW
GetDriveTypeW
GetVolumePathNamesForVolumeNameW
GetVolumeInformationW
FindVolumeClose
FindNextVolumeW
FindFirstVolumeW
DeviceIoControl
CreateDirectoryW
FreeLibrary
GetProcAddress
LoadLibraryW
InitializeCriticalSection
GetProcessHeap
DeleteCriticalSection
HeapDestroy
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
LeaveCriticalSection
EnterCriticalSection
HeapFree
WideCharToMultiByte
MultiByteToWideChar
InitializeCriticalSectionEx
GetModuleFileNameW
Sleep
FindResourceW
LoadResource
LockResource
SizeofResource
WriteConsoleW
GetEnvironmentStringsW
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

GetKeyboardState
ToUnicodeEx
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
WaitMessage
PostThreadMessageW
GetComboBoxInfo
ReuseDDElParam
UnpackDDElParam
InsertMenuItemW
TranslateAcceleratorW
LoadAcceleratorsW
MonitorFromPoint
UpdateLayeredWindow
UnionRect
DrawIcon
FrameRect
CopyIcon
SetCursorPos
BringWindowToTop
GetSystemMenu
IsZoomed
DrawFrameControl
DrawEdge
SetParent
SetWindowRgn
SetClassLongW
DrawStateW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
LoadMenuW
GetKeyNameTextW
MapVirtualKeyW
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
MessageBeep
GetIconInfo
DrawIconEx
IsRectEmpty
DrawFocusRect
WindowFromPoint
ReleaseCapture
SetCapture
GetNextDlgGroupItem
GetMenuDefaultItem
CreatePopupMenu
TrackMouseEvent
MapDialogRect
GetAsyncKeyState
OffsetRect
CreateAcceleratorTableW
SendDlgItemMessageA
GetMenuItemInfoW
DestroyMenu
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
InvalidateRect
KillTimer
SetTimer
DeleteMenu
SetCursor
ShowOwnedPopups
SystemParametersInfoW
CopyImage
IntersectRect
InflateRect
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
LoadIconW
GetTopWindow
GetClassLongW
EqualRect
CopyRect
MapWindowPoints
AdjustWindowRectEx
GetClientRect
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
ScrollWindow
DestroyAcceleratorTable
LoadImageW
wsprintfW
SendMessageW
RedrawWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
CopyAcceleratorTableW
SetRect
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
IsClipboardFormatAvailable
GetUpdateRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SubtractRect
GetWindowRgn
DestroyCursor
SetRectEmpty
CreateMenu
TranslateMessage
PeekMessageW
DispatchMessageW
ShowWindow
PostMessageW
GetMessageW
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
AppendMenuW
RemoveMenu
CharUpperW
GetSystemMetrics
UnhookWindowsHookEx
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
LoadCursorW
EnableWindow
IsWindowEnabled
MessageBoxW
GetWindowLongW
GetParent
GetWindowThreadProcessId
RegisterClassW
GetLastActivePopup
GetWindowTextW
GetWindowTextLengthW
DestroyIcon
GetDlgCtrlID
GetFocus
SetWindowTextW
GetWindowRect
ClientToScreen
PtInRect
GetDesktopWindow
GetClassNameW
GetWindow
RealChildWindowFromPoint
IsWindowVisible
GetActiveWindow
GetKeyState
ValidateRect
GetCursorPos
SetWindowsHookExW
CallNextHookEx
SetFocus
SetScrollPos
GetScrollPos
IsWindow
MoveWindow
SetWindowPos
GetDlgItem
CheckDlgButton
SetWindowLongW
IsDialogMessageW
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW
GetWindowDC
BeginPaint
EndPaint
ScreenToClient
FillRect
PostQuitMessage
IsIconic
SetForegroundWindow
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadBitmapW
RegisterWindowMessageW
GetMessagePos
GetMessageTime
DefWindowProcW
CallWindowProcW
GetClassInfoW

gdi32

SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
CreateFontIndirectW
CreateRectRgnIndirect
PatBlt
SetRectRgn
DPtoLP
GetTextExtentPoint32W
GetTextMetricsW
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
SetWindowExtEx
LPtoDP
Rectangle
GetRgnBox
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceW
SetViewportOrgEx
SetViewportExtEx
ExtTextOutW
TextOutW
MoveToEx
GetObjectW
ExcludeClipRect
GetClipBox
GetObjectType
CreateRoundRectRgn
GetPixel
SetTextAlign
SetTextColor
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SetBkColor
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
DeleteDC
CopyMetaFileW
CreateDCW
GetDeviceCaps
DeleteObject
BitBlt
CreateBitmap
CreateCompatibleDC
CreateHatchBrush
CreatePen
CreatePatternBrush
CreateRectRgn
CreateSolidBrush
Escape

msimg32

TransparentBlt
AlphaBlend

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
RegCreateKeyExW
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
InitiateSystemShutdownExW

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
ShellExecuteW
SHGetFileInfoW
SHGetDesktopFolder
SHBrowseForFolderW
SHAppBarMessage
DragFinish
DragQueryFileW

shlwapi

PathIsDirectoryW
StrCmpNIW
StrCmpW
PathIsUNCW
PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW
StrFormatKBSizeW

uxtheme

GetCurrentThemeName
IsAppThemed
GetThemePartSize
GetThemeSysColor
GetWindowTheme
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
IsThemeBackgroundPartiallyTransparent

ole32

OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CoInitialize
CoDisconnectObject
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
OleInitialize
OleUninitialize
CoCreateInstance
CoUninitialize
CoInitializeEx
CreateStreamOnHGlobal

oleaut32

VariantCopy
VariantTimeToSystemTime
SystemTimeToVariantTime
LoadTypeLi
SysAllocStringLen
SysStringLen
SysAllocString
VariantChangeType
VarBstrFromDate
VariantClear
VariantInit
SysFreeString

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDrawImageRectI
GdipDisposeImage
GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

Sections

.text
Size: - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 663KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.85!
Size: - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.oUE
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.YTS
Size: 6.2MB - Virtual size: 6.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 754KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

72c3899560b634cefa8d1c8c87d3a52a

Headers

DLL Characteristics

File Characteristics

Imports

setupapi

libcrypto-3

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

shlwapi

uxtheme

ole32

oleaut32

gdiplus

version

oleacc

imm32

winmm

Sections

.text Size: - Virtual size: 2.5MB

.rdata Size: - Virtual size: 1.1MB

.data Size: - Virtual size: 663KB

.data1 Size: - Virtual size: 80B

_RDATA Size: - Virtual size: 1KB

.85! Size: - Virtual size: 1.7MB

.oUE Size: 3KB - Virtual size: 2KB

.YTS Size: 6.2MB - Virtual size: 6.2MB

.reloc Size: 1KB - Virtual size: 1KB

.rsrc Size: 754KB - Virtual size: 2.0MB

.text
Size: - Virtual size: 2.5MB

.rdata
Size: - Virtual size: 1.1MB

.data
Size: - Virtual size: 663KB

.data1
Size: - Virtual size: 80B

_RDATA
Size: - Virtual size: 1KB

.85!
Size: - Virtual size: 1.7MB

.oUE
Size: 3KB - Virtual size: 2KB

.YTS
Size: 6.2MB - Virtual size: 6.2MB

.reloc
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 754KB - Virtual size: 2.0MB