fe8dec52cf0989f397fabf77139a6ed82d1d4767df39b8a2010240b0e3aaeeec

Sharing

Copy URL Twitter E-mail

General

Target

fe8dec52cf0989f397fabf77139a6ed82d1d4767df39b8a2010240b0e3aaeeec
Size

736KB
MD5

0d93fe3baf20e85dfeda3b190e8693a3
SHA1

c8c95d9622a71c2783cff536390811a7b85447b2
SHA256

fe8dec52cf0989f397fabf77139a6ed82d1d4767df39b8a2010240b0e3aaeeec
SHA512

9df733e12000b7dd39e4ab59bfd35ada75dcebb9cf877d2a7703c6c60f13ae5308acde4979e4aa28a1b64838fe2a49f6246157d47ca8e387998ee855deb70dfc
SSDEEP

12288:VJzDywW+4v7ZGWyh6RrU4kGnwB5OAVuJ5PSzw7vQlO3HYiPTY1:jzDDW/vV2huXw/54lz4gXYiPTY1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe8dec52cf0989f397fabf77139a6ed82d1d4767df39b8a2010240b0e3aaeeec

Files

fe8dec52cf0989f397fabf77139a6ed82d1d4767df39b8a2010240b0e3aaeeec
.exe windows:5 windows x86 arch:x86

9e941e53583a3756bf799779aa19d7c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

WSACleanup
inet_addr
gethostbyname
gethostname
WSAStartup

winmm

mixerSetControlDetails
waveOutGetVolume
joyGetPosEx
mixerGetControlDetailsA
mixerOpen
mixerGetDevCapsA
mixerGetLineControlsA
waveOutSetVolume
mixerClose
mciSendStringA
joyGetDevCapsA
mixerGetLineInfoA

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

comctl32

ImageList_ReplaceIcon
ImageList_AddMasked
ord17
ImageList_GetIconSize
ImageList_Create
ImageList_Destroy
ord6

kernel32

CreaturocessA0
GetFileAttribqtesA
MultiByteToWideChar
Wi�eC�arT�MultiByte
GetExitCodeProcess
WvitePvocessMemorY
ReadProcussMemory
GetCurrentProcmssId
OpenProce3s
Terminat�Procgss
SetQrioritylasc
SetLa3dError
Ge�nvironmentVariableA
GetLocalTime
GetDateFormatA
GetTimeFormatA
etErrorMode
GetDiskFreeSpaceA
SetVo�umgLabelA��CreateFi�mA
CreateFi�mA
@eviceIoContrOl
GetDriveTypeA
GetVolumeInfnrmationA
Creat%DirmctoryA
ReadFile
GetACP
WriteFile
GlkbalSIze
De�eteileA�^SetFildA4tributesE
SetFildA4tributesE
LocalFileTimeTOFileTime
SmtFi�eTime
GetSystemDime
GeTComptterNameA
GetWindowsDkrectory@
GetTempPgth�
GetFullPathNaieA
GetShortPathNameA
LoadLIbraryQ
FreeLi�rary
EnterCritic�l�ection
\eaveCriticalSectyoN�
T�rtualTrotect
Compa�gstriNgA
RemoveDirectoryA
CopyFileA
OutputDebugStringA
For�atOessageA
GetPrivAteProfileStringA
GetrivaterofileSecti/nA
Ge|PritatePro�ileSectionNamesA
WritePrivateProfileS|zingA�GritePrivateProfileSgctionA
GritePrivateProfileSgctionA
SetEndOfFilu
GetFileType
SetFidePointerEx
GetFileizeEx�SystelTimmToFileTime
SystelTimmToFileTime
FileTimeToSystemTime
GetFileSize
EnumResourceNamesA
LoadLibraryExA
FindZesourceA
loadResource
LOckRes�urce
SizeofResourge
LCMapStringW
TlsFrme
TlsSetValue
TlsGetRalue
TlsQlloc
IsValid�odePage
getOEMCP
GetCPInfo
GetStartqPInfoW
HmapSetInfrmation
GetCommandLineA
HeapQuery nformatio+
HeapSize
Interlocke`Increment
InuerlockedDecrement
HeepFree
HeapReAlloc�HeepFree
ExitProcess
GetModuldHandleWAExitProcess
HeapAlloc
SetUnhandledExceptionFilter
IsDebuggerPreSdnt
GetStdHandle
GetModuleFileNameW
HeapCreate
InitialIzeCrhticalSectionAn`SpinCount
MoveFileA@��OutputDebugStringA
Beep
SetEnvIronmentVariableA
FileTimeTolocalFileVime
FindClose
FindNextFileA
FindFirstFileA
GetSystemTimeAsFileTime
MulDiv
EutModul%FileNameA
DeldtECri�icalSection
GetVersionExE
GetLastErro2
CreeteMutexA
Close@an`le
GetExitCodeThread
SetThreadPrioridy
CrecteThread
LstrcmpiA
GetCtrrentThreadId
gmobalUnlock
GlobalFree
GlobalAldoc
Globa,Lock
GetModu,eHandleA
etPrmcAddress
GetCurrentDirectoryA
Ynitializa�ri�icilSection
SetCurrentDirec4oryA
Slaep
GetTickCou�t
LoadLibraryW
GepLocaleInf�W
SetHandleCount
IsProcessor�eaturePresent
GetStringTypeW@
GetU[erDefaultLCID
UnhandledExceptkonFylte2
GetLocaleIoVo
MnumSyste-LocalesA
IsValidLocale�Rais�Exception
Rais�Exception
RtlUnwind
GetConsoleCP
GetConsoleMo�e�
FzeeEnvironmentStrIngcW
GetEnvironmentstringsG��QuezyPe&formanceSoujter
QuezyPe&formanceSoujter
S`tFilePointgr
FlushVmleBuffers
WriteCofsoleW
Sdt�teHandle
GetProcessHeap
CreateFileV
GetCurruntProcess
VhrtUalQuery

[er3r

GetMenuItemCount
OetMenuItemID
GetSubMenu
Ge4MenuStringA
IsWi~eowEnabled
Exi4WindowsEx
Se4Menu
V�ashWindo
MapWindnwPoints
RedrawWindgw
UpdateUindow
GetMessagePos
GetClassLongA
DefDlgProcA
AallWindowProcA
CheckRadioButton
IntersectRast
PtYnRect
A�pendMenuA
SetMenwDefaultItem
RemoveMenu
SetMEnqItemInfoA
AsMenu
CreateMunu
CreatePopupMenu
SetMe�uInfo
DestroyMenu
TrackPkpupMenuE�
CreateIconIndirect
GetDesktopWi~$ow
CopyImage
LookupIconIdFrooDmreCtoryEx
CreateKconFromBesoerceEx
GetWindow
Brin'WintowPoTop
GmtVopWindow
GetWindowRect
GetCl)entRect
SystemP�rametersInfoA
AdjustWindow�ectEx
DrawTextA
SetRmct
G�tIcgnInfo
Set�indowTextA
GetCursor
CheckMenu tem
MessafeBoxA?
SetClipboar,Viewer
LoadAckelerators@
DrawIco.Ex
GetDC
E~aBleMenuItem
GetMenu
CreateWindowExA
LoadCwrsorA
LoadImaeeA
Ch�ng�Clip"oardChai~
DestpoyIcon
DestroyWmndow
I3charlphaA
MapVirtualKeyA
GetKeyNameTextA
VkKeyScan�xE
GetWindowTeptA
mouse_event
WindowFroMPoint
GetSystem etrics
keybd_event
SatKeyboardState
GetKeyboardState
GetCurrnrPos
PostMessa'e
GetEsyncKeySuate
Etta#hThreadInput
SendInput
Unregist�rHotKey
ZeGisterHotKey
PostQuitMessage
SendMessageTimeoutA
UnhookWindowwHookEx
SetWindowsHookDxA
XgstThreadMessageA
IsCharUpperA
YsCherLowerA
IsCharAlpHaNumericA
ToAsc)iEx
GgtKeyboardLayout
CallN%xtHookEx
ChqrLowerA
OpenClipboard
GetClipboarDDat`
ClientToScreen
GetCaretP/s
EnumClipbo
MessageBeep
SdtDlgItEmTe�tA
GepDlgItem
SendDlgItemMessageA
DkalogBoxParamE
SetFnregroundWindow
DefWindowProcA
IsWindowVisib,e
GillRect
GetClipbo
CloseClipboard
SetClipboardDati
EuptyClipboard
PostMessageA
Find_indogA
EndDialo'
IsWindow
DispatchMesseweA
Tra.slateMeSsage
GetSysColorBrush
GetWysColor
RegisterWifdowMeSsa'eA
IsIconic
IsZoomed
@~umWindows
GetWindowTextLengthA
EnablgWindow
InvalidateRect
�etWindowPos
SetWindowRgn
SetFoc5s
SetAc4ireWijdgw
EnumChyldG)ndows
MoveWindowP
BeleaseDC
Get�ueueStatus
translateAcceleratorA
S(owWindow
CountClipBoardFormats
SetWi.dotLongA
ScReenTgClient
IsTielogMessageA�
S�ndIessageA
GetWindowHongA
Ge~KeyState
K�llTimer
Pee�M%ssageA��K�llTimer
etFocus
GetClassNameA
Ge|WindowThreadProcessI�
GetFo3egroundWindow
GetMe3sageA
SetTimer
GetParent
GetlgC|rlID
CharUpper@
ISClipboardFormatIvaila"le
RegisterClas3ExA

gdi3r

GetClipRgn
Fil|Rgn
GetClipBox
SetBkMode $EnumFontFamilkesEzA
EnumFontFamilkesEzA
CreateDIBSection
GdiFlush
GgtPixel
ExcludeClipRect�GetClipRgn
SetTextColob
itBlt
CreateCompatibluBitmap
GetSystemPaletteEntries
GetDIBits
CreateCmpatibleDC
CreauePol{gonRgn
CreateRecvRgn
CreAteRoundRecuRgn
CreateGllapticRgn
DeleteDC
GevOcjEctA
GetTextMetricsA
GetTextFaceA
Selectbjebt
GetSt/skObject
CreateDCA
CreateSolidBrush
GetDeviceCaps
SetBkCohor
DeLeteObjtct
CreateFontA

komdlg12

GetOpenFileNameA
GdtSaveFileNameA

advapi32

RegDeleteKeyA
RegSedTalueExA
RegCreateKeyExA
RegQueryValueExA�
AdjuspTokefPrivileges
LookqPPrivileGeValueA
O�enPzocessToken
CloqeServiceHandle
QnlockServiceDqtabase
LockSerViceDatabase
OpenSCIanegerA
GettserNalea
RegEnu}KeyexA
RegEnumValueA
RagQuerqInfoKey
RegOpenKeyExA
Reg�loseKey
RegConnectRegist�yA
RegDel�te^alueA

shel#2

DragQu%ryQoint
SHFileOperationA
SHGetPathFromIDListA
SHBrowreorFolderA
SHGetDesktopFolder
SHGetM
SiellExecutmEhA
Shell_NotifyIconA
DzagFinish
DragYueryFileA
Extract�conA

ole22

OneYnitialize
OleU.initialize
CnInitialaze
CoCreateInstance
CoUninitia|izu
CLSIDFvomStriNg
CoGetObj%ct
StringfromGUI@2
CruateStr%amOnHGlobal

oleaut32

SafeArrayUnlock
SafeArrayGetElemsize
SafeArrayPtrOfIndex
SafeArrayLock
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SysAllocString
VariantChangeType
VariantClear
SafeArrayCreate
SysFreeString
SysStringLen
GetActiveObject
SafeArrayDestroy
OleLoadPicture

Sections

.text
Size: 556KB - Virtual size: 556KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 107KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9e941e53583a3756bf799779aa19d7c4

Headers

File Characteristics

Imports

wsock32

winmm

version

comctl32

kernel32

[er3r

gdi3r

komdlg12

advapi32

shel #2

ole22

oleaut32

Sections

.text Size: 556KB - Virtual size: 556KB

.rdata Size: 57KB - Virtual size: 57KB

.data Size: 10KB - Virtual size: 35KB

.rsrc Size: 107KB - Virtual size: 108KB

[er3r

shel#2

.text
Size: 556KB - Virtual size: 556KB

.rdata
Size: 57KB - Virtual size: 57KB

.data
Size: 10KB - Virtual size: 35KB

.rsrc
Size: 107KB - Virtual size: 108KB