5e3f13637b7d78f95b5df7978760a842f9d035f0d0dc32325a3f440f104af56cN

Sharing

Copy URL

Twitter E-mail

General

Target

5e3f13637b7d78f95b5df7978760a842f9d035f0d0dc32325a3f440f104af56cN
Size

4.0MB
MD5

a2ad73b993c16e51da2e348fea493d20
SHA1

1485821b511484d78143e59de31952e3ebf46f6b
SHA256

5e3f13637b7d78f95b5df7978760a842f9d035f0d0dc32325a3f440f104af56c
SHA512

4d5e0c80fa1543e6af931b7f2a09aa836b3caa252c4023e14c8f37ec64fd5bf12af92764f96d65d0116c80e9151f231776f0c98c81977a01a9c68ee8b2f8c7b5
SSDEEP

98304:hytuO3no55zLf9SpRIA2kqSDQVwe2Zfj2nAmzcQE0EITf:QtuO455P9ovq2He2mQ1ITf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e3f13637b7d78f95b5df7978760a842f9d035f0d0dc32325a3f440f104af56cN

Files

5e3f13637b7d78f95b5df7978760a842f9d035f0d0dc32325a3f440f104af56cN
.exe windows:4 windows x86 arch:x86

361a243cf7f9c3541da2e0949dd35c32

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundW

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

mpr

WNetCancelConnectionW
WNetCancelConnection2W
WNetUseConnectionW
WNetGetUniversalNameW
WNetAddConnection2W

comctl32

InitCommonControlsEx

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

setupapi

SetupDiCreateDeviceInfoList
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiOpenDeviceInfoW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW

wininet

FtpRemoveDirectoryW
FtpCreateDirectoryW
FtpDeleteFileW
FtpFindFirstFileW
FtpOpenFileW
InternetCloseHandle
InternetConnectW
InternetFindNextFileW
InternetGetLastResponseInfoW
InternetOpenW
InternetReadFile
InternetWriteFile

kernel32

RaiseException
ReadConsoleA
ReadConsoleW
ReadFile
ReleaseMutex
ReleaseSemaphore
ResetEvent
ResumeThread
SearchPathW
SetConsoleCtrlHandler
SetConsoleMode
SetEndOfFile
SetEnvironmentVariableA
SetEnvironmentVariableW
SetErrorMode
SetEvent
OutputDebugStringA
SetLastError
SetStdHandle
SetThreadAffinityMask
SetThreadExecutionState
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SuspendThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnlockFile
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
WriteFile
WriteProcessMemory
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
OpenProcess
OpenMutexW
OpenFileMappingW
OpenEventW
MultiByteToWideChar
MulDiv
MoveFileW
MoveFileExW
MapViewOfFile
lstrlenW
lstrlenA
lstrcpyW
lstrcmpW
lstrcmpiW
lstrcmpA
LockResource
LockFile
LocalReAlloc
LocalFree
LocalAlloc
LoadResource
LoadLibraryW
LoadLibraryExW
LCMapStringW
IsValidLocale
IsValidCodePage
IsProcessorFeaturePresent
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GlobalUnlock
GlobalSize
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalGetAtomNameW
GlobalFree
GlobalFlags
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetWindowsDirectoryW
GetVolumeInformationW
GetVersionExW
GetUserDefaultLCID
GetTimeZoneInformation
QueryPerformanceFrequency
GetThreadTimes
GetThreadPriority
GetTempPathW
GetTempFileNameW
GetSystemTimeAsFileTime
GetSystemTime
GetSystemInfo
GetSystemDirectoryW
GetStringTypeW
GetStdHandle
GetStartupInfoW
GetProfileIntW
GetProcessHeap
GetProcessAffinityMask
GetProcAddress
GetOverlappedResult
GetOEMCP
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetLocalTime
GetLocaleInfoW
GetLastError
GetFullPathNameW
GetFileType
GetFileTime
GetFileAttributesW
GetFileAttributesExW
GetExitCodeThread
GetExitCodeProcess
GetEnvironmentVariableW
GetEnvironmentStringsW
GetDriveTypeW
GetDateFormatW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryW
RtlUnwind
GetStartupInfoA
GetCPInfo
GetConsoleMode
GetConsoleCP
GetComputerNameW
GetCommandLineW
GetACP
FreeResource
FreeLibraryAndExitThread
FreeLibrary
FreeEnvironmentStringsW
FormatMessageW
FlushFileBuffers
FindResourceW
FindResourceExW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
ExpandEnvironmentStringsW
ExitThread
ExitProcess
EnumSystemLocalesW
DuplicateHandle
DeviceIoControl
DeleteFileW
DeleteCriticalSection
CreateThread
CreateProcessW
CreateMutexW
CreateFileW
CreateFileMappingW
CreateEventW
CopyFileW
CompareStringW
CloseHandle
CreateProcessA
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
GetTickCount
LeaveCriticalSection
LoadLibraryA
GetVersion
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
SetHandleCount
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
InterlockedDecrement
InterlockedIncrement
GetStringTypeA
LCMapStringA
QueryPerformanceCounter
PeekNamedPipe
GetTimeFormatW
OutputDebugStringW
SetFileAttributesW

user32

SetScrollPos
SetScrollRange
SetTimer
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowsHookExW
SetWindowTextW
ShowOwnedPopups
ShowScrollBar
ShowWindow
SubtractRect
SystemParametersInfoW
TabbedTextOutW
ToUnicodeEx
TrackPopupMenu
TranslateAcceleratorW
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnionRect
UpdateWindow
ValidateRect
WaitMessage
WinHelpW
wsprintfW
SetScrollInfo
SetRectEmpty
SetPropW
SetParent
SetMenuItemInfoW
SetMenuItemBitmaps
SetMenuDefaultItem
SetForegroundWindow
SetFocus
SetCursorPos
SetCursor
SetClipboardData
SetClassLongW
SetCapture
SetActiveWindow
SendMessageW
SendDlgItemMessageA
ScrollWindow
ScreenToClient
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PtInRect
PostThreadMessageW
PostQuitMessage
PostMessageW
PeekMessageW
OpenClipboard
OffsetRect
MoveWindow
ModifyMenuW
MessageBoxW
MessageBeep
MapWindowPoints
MapVirtualKeyW
MapVirtualKeyExW
MapDialogRect
LockWindowUpdate
LoadStringW
LoadMenuW
LoadImageW
LoadIconW
LoadCursorW
LoadBitmapW
LoadAcceleratorsW
KillTimer
IsZoomed
IsWindowVisible
IsWindowEnabled
IsRectEmpty
IsMenu
IsIconic
IsDialogMessageW
IsClipboardFormatAvailable
IsChild
IsCharLowerW
InvertRect
InvalidateRect
IntersectRect
InsertMenuW
InsertMenuItemW
InflateRect
HideCaret
GrayStringW
GetWindowThreadProcessId
GetWindowTextW
GetWindowTextLengthW
GetWindowRgn
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowDC
GetUserObjectInformationW
GetUpdateRect
GetTopWindow
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetProcessWindowStation
GetParent
GetNextDlgTabItem
GetNextDlgGroupItem
GetMessageW
GetMessageTime
GetMessagePos
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemCount
GetMenuDefaultItem
GetMenuCheckMarkDimensions
GetLastActivePopup
GetKeyState
GetKeyNameTextW
GetKeyboardState
GetKeyboardLayout
GetIconInfo
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetClassInfoExW
GetCapture
GetAsyncKeyState
FrameRect
FillRect
ExitWindowsEx
EqualRect
EndPaint
EndDialog
EndDeferWindowPos
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextExW
DrawStateW
DrawMenuBar
DrawIconEx
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DestroyAcceleratorTable
DeleteMenu
DefWindowProcW
DefMDIChildProcW
ReuseDDElParam
UnpackDDElParam
DefFrameProcW
CreateWindowExW
CreatePopupMenu
CreateMenu
CreateDialogIndirectParamW
CreateAcceleratorTableW
CopyRect
CopyImage
CopyIcon
CopyAcceleratorTableW
CloseClipboard
ClientToScreen
CheckMenuItem
CheckDlgButton
CharUpperW
CharUpperBuffW
CharNextW
CallWindowProcW
CallNextHookEx
BringWindowToTop
BeginPaint
BeginDeferWindowPos
AppendMenuW
AdjustWindowRectEx
MessageBoxA
GetSystemMetrics
GetActiveWindow
GetMenuItemID

gdi32

SetWindowOrgEx
SetViewportExtEx
EnumFontFamiliesW
EnumFontFamiliesExW
SetTextColor
SetTextAlign
SetROP2
Ellipse
SetRectRgn
SetPolyFillMode
SetPixelV
SetPaletteEntries
SetMapMode
SetDIBColorTable
SetBkMode
SetBkColor
SelectPalette
SelectObject
ScaleWindowExtEx
ScaleViewportExtEx
SaveDC
RoundRect
RestoreDC
RectVisible
Rectangle
RealizePalette
PtVisible
PtInRegion
Polyline
Polygon
PatBlt
OffsetWindowOrgEx
SetWindowExtEx
OffsetRgn
MoveToEx
LPtoDP
LineTo
IntersectClipRect
GetWindowOrgEx
GetWindowExtEx
GetViewportOrgEx
GetViewportExtEx
GetTextMetricsW
GetTextFaceW
GetTextExtentPoint32W
GetTextColor
GetTextCharsetInfo
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPaletteEntries
GetObjectW
GetObjectType
GetNearestPaletteIndex
GetDeviceCaps
CreatePen
CreatePatternBrush
CreatePalette
CreateHatchBrush
CreateFontIndirectW
CreateEllipticRgn
CreateDIBSection
CreateDIBitmap
GetClipBox
GetBoundsRect
GetBkColor
FrameRgn
OffsetViewportOrgEx
SetViewportOrgEx
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
CopyMetaFileW
CombineRgn
FillRgn
ExtTextOutW
ExtSelectClipRgn
ExtFloodFill
ExcludeClipRect
StretchBlt
BitBlt
DPtoLP
DeleteObject
DeleteDC
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgnIndirect
CreatePolygonRgn
Escape

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

StartServiceW
StartServiceCtrlDispatcherW
SetTokenInformation
SetServiceStatus
SetSecurityDescriptorSacl
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
SetFileSecurityW
RevertToSelf
ReportEventW
RegUnLoadKeyW
RegSetValueExW
RegSetKeySecurity
RegSaveKeyW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyW
RegOpenKeyExW
RegNotifyChangeKeyValue
RegLoadKeyW
RegisterServiceCtrlHandlerW
RegisterEventSourceW
RegGetKeySecurity
RegFlushKey
RegEnumValueW
RegEnumKeyW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyW
RegCreateKeyExW
RegCloseKey
OpenThreadToken
OpenServiceW
OpenSCManagerW
OpenProcessToken
LookupPrivilegeValueW
LookupAccountSidW
LookupAccountNameW
LogonUserW
LockServiceDatabase
IsValidSid
InitializeSecurityDescriptor
InitializeAcl
ImpersonateSelf
ImpersonateLoggedOnUser
GetUserNameW
GetTokenInformation
GetSidSubAuthorityCount
GetSidSubAuthority
GetSidIdentifierAuthority
GetSecurityDescriptorSacl
GetSecurityDescriptorOwner
GetSecurityDescriptorGroup
GetSecurityDescriptorDacl
GetSecurityDescriptorControl
GetLengthSid
GetFileSecurityW
GetAclInformation
GetAce
FreeSid
EqualSid
DuplicateTokenEx
DeregisterEventSource
DeleteService
CreateServiceW
CreateProcessAsUserW
ControlService
CloseServiceHandle
ChangeServiceConfigW
ChangeServiceConfig2W
AllocateAndInitializeSid
AdjustTokenPrivileges
AddAccessAllowedAce
UnlockServiceDatabase

shell32

DragFinish
ShellExecuteW
DragQueryFileW

ole32

StringFromGUID2
RevokeDragDrop
CLSIDFromString
CoInitialize
CoUninitialize
ReleaseStgMedium
RegisterDragDrop
OleLockRunning
OleTranslateAccelerator
OleGetClipboard
OleDuplicateData
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
DoDragDrop
CreateStreamOnHGlobal
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoRevokeClassObject
CoResumeClassObjects
CoReleaseServerProcess
CoRegisterClassObject
CoLockObjectExternal
CoDisconnectObject
CoCreateInstance
CoAddRefServerProcess
CoCreateGuid

shlwapi

PathFindFileNameW
PathRemoveFileSpecW
PathIsUNCW
PathFindExtensionW
PathStripToRootW

Sections

.text
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 216KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

361a243cf7f9c3541da2e0949dd35c32

Headers

File Characteristics

Imports

winmm

imm32

mpr

comctl32

version

setupapi

wininet

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

shlwapi

Sections

.text Size: 3.8MB - Virtual size: 3.8MB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 12KB - Virtual size: 4.0MB

.rsrc Size: 216KB - Virtual size: 213KB

.text
Size: 3.8MB - Virtual size: 3.8MB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 12KB - Virtual size: 4.0MB

.rsrc
Size: 216KB - Virtual size: 213KB