3d66f91894b51fb59e01378aa6c14e6b361cf0fa527aac62aa050772718160f4

Sharing

Copy URL

Twitter E-mail

General

Target

3d66f91894b51fb59e01378aa6c14e6b361cf0fa527aac62aa050772718160f4
Size

11.2MB
MD5

92407c1b444fea4c776cfaa20d6e8748
SHA1

07352e80bfd6795fa422a73bfed701eb6b80021c
SHA256

3d66f91894b51fb59e01378aa6c14e6b361cf0fa527aac62aa050772718160f4
SHA512

80c4a92c46ce70a84d429e38f472a927390d821ae23fd1351660c17edace162c7c6808687c2c159b5a510157c26845265f0cb9116cb0be782dd3b6f28fe3464d
SSDEEP

196608:lBw2FtTJrPhdgN7GGVMp9GcBAhzE594ZPA6SNa0RX+n+74fR+tknEn:JFtd07kpB4zE5APfS4fRUk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d66f91894b51fb59e01378aa6c14e6b361cf0fa527aac62aa050772718160f4

Files

3d66f91894b51fb59e01378aa6c14e6b361cf0fa527aac62aa050772718160f4
.exe windows:4 windows x86 arch:x86

fb5dd3a997f89ed1bd7d96438637ba33

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ftd2xx

ord35
ord10
ord12
ord13
ord11
ord2
ord19
ord16
ord3
ord21
ord4
ord27
ord7
ord9
ord8
ord29
ord17

kernel32

GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
GetFileSize
LocalFileTimeToFileTime
SystemTimeToFileTime
SetErrorMode
GetCurrentDirectoryA
RtlUnwind
HeapFree
HeapAlloc
CreateThread
RaiseException
ExitProcess
TerminateProcess
GetStartupInfoA
GetTimeZoneInformation
GetACP
HeapSize
HeapReAlloc
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
TlsSetValue
GetProfileStringA
Sleep
GetLastError
GetVersionExA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
SizeofResource
LoadResource
FindResourceA
SetThreadPriority
GetCommState
SetCommMask
PurgeComm
SetupComm
CreateFileA
SetCommState
GetTickCount
CloseHandle
TerminateThread
EscapeCommFunction
WriteFile
ReadFile
ReleaseMutex
WaitForSingleObject
CreateMutexA
ExitThread
CreateEventA
GetExitCodeThread
SetEvent
GetCommModemStatus
SetCommTimeouts
SuspendThread
ResumeThread
GetCommandLineA
SetThreadLocale
DeleteFileA
CreateDirectoryA
GetLocalTime
GetSystemTime
InterlockedIncrement
InterlockedDecrement
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
GetModuleFileNameA
LocalFree
GetProcAddress
GetModuleHandleA
lstrcpyA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
GetCurrentThreadId
lstrcatA
GetVersion
LockResource
FreeLibrary
LoadLibraryA
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
SetLastError
MulDiv
lstrcpynA
lstrcmpA
DuplicateHandle
GetCurrentProcess
SetFilePointer
FlushFileBuffers
LockFile
TlsGetValue
UnlockFile
SetEndOfFile
MoveFileA
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
GetStringTypeExA
GetThreadLocale
GetShortPathNameA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetCurrentThread
GetFileAttributesA
GetTempFileNameA
SetFileTime
GetFileTime
GetDiskFreeSpaceA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LocalAlloc
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
LocalReAlloc

user32

IsDialogMessageA
SetWindowTextA
MoveWindow
GetNextDlgTabItem
LoadIconA
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
GetMenuCheckMarkDimensions
GetCursorPos
ValidateRect
GetActiveWindow
TranslateMessage
GetMessageA
CreateDialogIndirectParamA
EndDialog
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
InflateRect
CharUpperA
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
GetDesktopWindow
DestroyMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
PtInRect
IsZoomed
SetParent
IsRectEmpty
AppendMenuA
DeleteMenu
GetSystemMenu
WindowFromPoint
PostQuitMessage
ShowOwnedPopups
FindWindowA
FillRect
GetClassNameA
GetSysColorBrush
InvertRect
GetDCEx
LockWindowUpdate
InsertMenuA
DestroyIcon
PostMessageA
SendDlgItemMessageA
MapWindowPoints
DispatchMessageA
GetFocus
SetActiveWindow
IsWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
WinHelpA
wsprintfA
GetClassInfoA
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
DestroyWindow
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetWindow
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
GetLastActivePopup
IsWindowEnabled
MessageBoxA
GetDlgItem
LoadBitmapA
CreateWindowExA
GetForegroundWindow
LoadMenuA
SetMenu
PeekMessageA
GetKeyboardLayout
GetWindowLongA
SetForegroundWindow
ShowWindow
EnumWindows
SetWindowLongA
RedrawWindow
GetMenu
GetSubMenu
GetMenuStringA
GetMenuItemID
GetMenuItemCount
GetParent
SetCapture
UpdateWindow
GetWindowRect
SetRect
LoadCursorA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
CharNextA
SetCursor
ReleaseCapture
GetSysColor
ReleaseDC
GetDC
OpenClipboard
InvalidateRect
GetClientRect
DrawEdge
GetAsyncKeyState
IsClipboardFormatAvailable
GetClipboardData
CloseClipboard
KillTimer
EnableWindow
GetCapture
SetTimer
IsWindowVisible
IsWindowUnicode
LoadStringA
SendMessageA
EnableMenuItem
RegisterClassA

gdi32

GetTextExtentPointA
BitBlt
LPtoDP
GetTextMetricsA
GetTextExtentPoint32A
CreateFontA
GetCharWidthA
CreateCompatibleBitmap
CreateCompatibleDC
StretchDIBits
CreateFontIndirectA
CreateRectRgnIndirect
CombineRgn
SetRectRgn
PatBlt
GetMapMode
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreatePatternBrush
CreateSolidBrush
GetWindowExtEx
GetViewportExtEx
GetDeviceCaps
CreateRectRgn
DeleteObject
SetTextAlign
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
SetBkColor
SetTextColor
GetClipBox
GetObjectA
GetBitmapBits
CreateBitmap
SetPixel
CreateDIBitmap

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyA
RegQueryValueA
RegEnumKeyA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyA
RegSetValueA
RegCreateKeyExA

shell32

DragFinish
SHGetFileInfoA
DragQueryFileA
SHGetSpecialFolderPathA
ShellExecuteA
ExtractIconA

comctl32

ord17

ole32

CreateStreamOnHGlobal

olepro32

ord251

wsock32

accept
ioctlsocket
bind
htons
htonl
closesocket
recv
send
WSAAsyncSelect
inet_ntoa
socket
recvfrom
sendto
connect
WSASetLastError
WSAStartup
WSACleanup
gethostbyname
WSAGetLastError

Sections

.text
Size: 740KB - Virtual size: 737KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10.3MB - Virtual size: 10.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fb5dd3a997f89ed1bd7d96438637ba33

Headers

File Characteristics

Imports

ftd2xx

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

ole32

olepro32

wsock32

Sections

.text Size: 740KB - Virtual size: 737KB

.rdata Size: 72KB - Virtual size: 70KB

.data Size: 44KB - Virtual size: 60KB

.rsrc Size: 10.3MB - Virtual size: 10.3MB

.text
Size: 740KB - Virtual size: 737KB

.rdata
Size: 72KB - Virtual size: 70KB

.data
Size: 44KB - Virtual size: 60KB

.rsrc
Size: 10.3MB - Virtual size: 10.3MB