4b7b6cb333ab75b1485e9ea548433c73a07ece5c3b5ce1000e2d3f52400eb4ce

Sharing

Copy URL Twitter E-mail

General

Target

4b7b6cb333ab75b1485e9ea548433c73a07ece5c3b5ce1000e2d3f52400eb4ce
Size

11.9MB
MD5

0561948df6211b1dd133fbd8c89c3b67
SHA1

db2c3a35074c85e104e142955749296e885c3794
SHA256

4b7b6cb333ab75b1485e9ea548433c73a07ece5c3b5ce1000e2d3f52400eb4ce
SHA512

5e64489809dff1cb20f062fe45563e27f310a3116b2c88c2eda158ddc861a38bf2d2bc3afe63398b954e4cc442047a787dcf0133bac99308ae071aa1ea9a54b6
SSDEEP

196608:EuwxZU3KJV4dxjL55VpCw7zRQrHn7YALi/uWU90JAoEyrb:2x5Ibj6w7MHnLi1U90JAoEyX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b7b6cb333ab75b1485e9ea548433c73a07ece5c3b5ce1000e2d3f52400eb4ce

Files

4b7b6cb333ab75b1485e9ea548433c73a07ece5c3b5ce1000e2d3f52400eb4ce
.exe windows:4 windows x86 arch:x86

f29bdedf12a39bbfc1374b13a3b9e60f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
ExitProcess
GetProcessHeap
HeapReAlloc
CloseHandle
VirtualProtectEx
WideCharToMultiByte
LocalAlloc
lstrlenW
HeapFree
GetModuleFileNameA
LocalSize
IsBadReadPtr
VirtualAlloc
WriteFile
CreateFileA
ReadFile
GetFileSize
GetTickCount
GetTempPathA
Sleep
GetLocalTime
GetCurrentDirectoryA
FreeLibrary
LoadLibraryA
LCMapStringA
FlushFileBuffers
MapViewOfFile
LCMapStringW
IsBadCodePtr
SetUnhandledExceptionFilter
GetCommandLineA
GetVersion
RtlUnwind
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
GetModuleHandleA
SetStdHandle
RtlMoveMemory
LocalFree
GlobalAlloc
InterlockedIncrement
InterlockedDecrement
SetFilePointer
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
IsBadWritePtr
CreateFileMappingA
MultiByteToWideChar
GetProcAddress
LoadLibraryW
GlobalFree
GlobalUnlock
RaiseException
VirtualFree
HeapCreate
HeapDestroy
GlobalLock
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
GetSystemTime
GetLocalTime
RaiseException
HeapSize
GetACP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
SetEnvironmentVariableA
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
InterlockedExchange
RtlUnwind
CloseHandle
WaitForSingleObject
GetTickCount
GetCommandLineA
MulDiv
GetProcAddress
GetModuleHandleA
GetVolumeInformationA
SetCurrentDirectoryA
CopyFileA
DeleteFileA
GetFileAttributesA
SetFileAttributesA
FindClose
FindFirstFileA
GlobalUnlock
GlobalLock
GlobalAlloc
ExpandEnvironmentStringsA
Sleep
CreateEventA
CreateThread
WritePrivateProfileStringA
GetVersionExA
GetLastError
LoadLibraryA
FreeLibrary
GetFullPathNameA
GetUserDefaultLCID
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
GlobalReAlloc
FindNextFileA
lstrcpyA
WinExec
lstrlenA
lstrcatA
InitializeCriticalSection
DeleteCriticalSection
GlobalFree
GlobalSize
ExitProcess
GetCurrentThreadId
GetModuleFileNameA
lstrlenW
LockResource
LoadResource
FindResourceA
SetEvent
CreateFileA
WaitForMultipleObjects
ReadFile
WriteFile
GetProfileStringA
LeaveCriticalSection
EnterCriticalSection
ReleaseSemaphore
ResumeThread
CreateSemaphoreA
TerminateThread
Process32Next
Process32First
CreateToolhelp32Snapshot
SetFilePointer
GetFileSize
GetCurrentProcess
TerminateProcess
GetSystemDirectoryA
MultiByteToWideChar
SetLastError
GetTimeZoneInformation
GetVersion
WideCharToMultiByte
CreateMutexA
ReleaseMutex
OpenFileMappingA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
SuspendThread
InterlockedIncrement
InterlockedDecrement
LocalFree
FileTimeToSystemTime
FileTimeToLocalFileTime
lstrcpynA
DuplicateHandle
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
lstrcmpiA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
lstrcmpA
LocalAlloc
TlsAlloc
GlobalHandle
TlsFree
TlsSetValue
LocalReAlloc
TlsGetValue
GetFileTime
GetCurrentThread
GlobalFlags
SetErrorMode
GetProcessVersion
GetCPInfo
GetOEMCP
GetStartupInfoA

user32

EnumWindows
GetClassNameA
GetWindowLongA
GetWindowRect
GetDC
UpdateLayeredWindow
ReleaseDC
IsWindow
CallWindowProcA
TrackMouseEvent
ShowWindow
EnumChildWindows
GetCursorPos
GetClipboardData
GetMessageA
TranslateMessage
DispatchMessageA
OpenClipboard
GetSystemMetrics
GetPropA
SetPropA
CreateWindowExA
PeekMessageA
wsprintfA
SendMessageA
CloseClipboard
GetAncestor
MessageBoxA
GetWindowRect
SetForegroundWindow
DestroyMenu
TrackPopupMenu
UnregisterClassA
ReleaseDC
IsRectEmpty
FillRect
GetDC
SetCursor
LoadCursorA
SetCursorPos
SetActiveWindow
GetSysColor
SetWindowLongA
GetWindowLongA
RedrawWindow
EnableWindow
IsWindowVisible
OffsetRect
PtInRect
DestroyIcon
IntersectRect
InflateRect
SetRect
SetScrollPos
SetScrollRange
GetScrollRange
SetCapture
GetCapture
ReleaseCapture
SetTimer
KillTimer
WinHelpA
LoadBitmapA
CopyRect
ChildWindowFromPointEx
ScreenToClient
GetMessagePos
SetWindowRgn
DestroyAcceleratorTable
GetWindow
GetActiveWindow
SetFocus
IsIconic
PeekMessageA
SetMenu
GetMenu
DeleteMenu
GetSystemMenu
DefWindowProcA
GetClassInfoA
IsZoomed
PostQuitMessage
CopyAcceleratorTableA
GetKeyState
TranslateAcceleratorA
IsWindowEnabled
ShowWindow
SystemParametersInfoA
LoadImageA
EnumDisplaySettingsA
ClientToScreen
GetSystemMetrics
EnableMenuItem
GetSubMenu
GetDlgCtrlID
CreateAcceleratorTableA
CreateMenu
ModifyMenuA
AppendMenuA
CreatePopupMenu
DrawIconEx
CreateIconFromResource
CreateIconFromResourceEx
RegisterClipboardFormatA
SetRectEmpty
DispatchMessageA
GetMessageA
WindowFromPoint
DrawFocusRect
DrawEdge
DrawFrameControl
LoadIconA
TranslateMessage
EqualRect
GetClassNameA
GetDlgItem
GetWindowTextA
GetForegroundWindow
GetWindowTextLengthA
CharUpperA
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
DestroyWindow
CreateDialogIndirectParamA
EndDialog
GetNextDlgTabItem
GetWindowPlacement
RegisterWindowMessageA
GetLastActivePopup
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
UnhookWindowsHookEx
SetPropA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
CreateWindowExA
GetMenuItemID
GetMenuItemCount
RegisterClassA
GetScrollPos
AdjustWindowRectEx
MapWindowPoints
SendDlgItemMessageA
ScrollWindowEx
IsDialogMessageA
SetWindowTextA
MoveWindow
CheckMenuItem
SetMenuItemBitmaps
GetMenuState
GetMenuCheckMarkDimensions
LoadStringA
GetSysColorBrush
EmptyClipboard
SetClipboardData
OpenClipboard
GetClipboardData
CloseClipboard
wsprintfA
UpdateWindow
ValidateRect
InvalidateRect
GetClientRect
GetFocus
GetParent
GetTopWindow
PostMessageA
IsWindow
SetParent
DestroyCursor
SendMessageA
SetWindowPos
MessageBoxA
GetDesktopWindow
GetCursorPos
IsChild

gdi32

DeleteObject
CreateCompatibleDC
SelectObject
DeleteDC
CreateDIBSection
DPtoLP
GetCurrentObject
RoundRect
GetTextExtentPoint32A
GetDeviceCaps
GetTextColor
CreateRoundRectRgn
CreateEllipticRgn
PathToRegion
GetObjectA
BeginPath
GetWindowOrgEx
GetViewportOrgEx
GetWindowExtEx
GetDIBits
RealizePalette
SelectPalette
LPtoDP
CreatePalette
GetSystemPaletteEntries
CreateDIBitmap
DeleteObject
SelectClipRgn
CreatePolygonRgn
GetClipRgn
SetStretchBltMode
CreateRectRgnIndirect
SetBkColor
GetStockObject
CreateFontIndirectA
CreateSolidBrush
FillRgn
CreateRectRgn
Rectangle
Ellipse
CreateCompatibleDC
BitBlt
StartPage
StartDocA
DeleteDC
EndDoc
StretchBlt
EndPage
GetBkMode
GetBkColor
GetROP2
GetStretchBltMode
GetPolyFillMode
CreateCompatibleBitmap
CreateDCA
CreateBitmap
SelectObject
PatBlt
CombineRgn
EndPath
GetTextMetricsA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetViewportExtEx
ExtSelectClipRgn
LineTo
MoveToEx
ExcludeClipRect
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetTextColor
SetMapMode
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
CreatePen

gdiplus

GdiplusStartup
GdipLoadImageFromStream
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipCreateFromHDC
GdipSetSolidFillColor
GdipDrawRectangleI
GdipGetImageWidth
GdipGetImageHeight
GdipSetSmoothingMode
GdipDeletePen
GdipCreateSolidFill
GdipDeleteBrush
GdipSetTextRenderingHint
GdipGetRegionBounds
GdipLoadImageFromFile
GdipDisposeImage

ole32

CLSIDFromProgID
OleInitialize
OleUninitialize
CLSIDFromString
CoCreateInstance
OleRun
CreateStreamOnHGlobal
CLSIDFromString

imm32

ImmSetCompositionWindow
ImmGetContext
ImmReleaseContext
ImmGetCompositionStringW
ImmAssociateContext

shell32

SHAppBarMessage
ShellExecuteA
ShellExecuteA
Shell_NotifyIconA

shlwapi

PathFileExistsA

winmm

PlaySoundA
waveOutOpen
midiStreamProperty
midiStreamOpen
midiOutUnprepareHeader
waveOutGetNumDevs
waveOutClose
waveOutReset
waveOutPause
waveOutWrite
waveOutPrepareHeader
waveOutUnprepareHeader
midiStreamRestart
midiStreamClose
midiOutReset
midiStreamStop
midiStreamOut
waveOutRestart
midiOutPrepareHeader

iphlpapi

GetAdaptersInfo

ws2_32

inet_addr
inet_ntoa
gethostbyname
WSAStartup
WSACleanup
ntohl
ntohs
accept
getpeername
select
recv
send
closesocket
connect
WSAAsyncSelect
htons
socket
recvfrom
ioctlsocket

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

comdlg32

ChooseColorA
GetSaveFileNameA
GetOpenFileNameA
GetFileTitleA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueA
RegEnumKeyA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegOpenKeyA
RegCreateKeyExA
RegCloseKey

oleaut32

VariantCopy
VariantClear
VariantChangeType
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetElement
VariantCopyInd
VariantInit
SysAllocString
SafeArrayDestroy
SafeArrayCreate
SafeArrayPutElement
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
LHashValOfNameSys

comctl32

ImageList_Destroy
ord17

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 428KB - Virtual size: 751KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f29bdedf12a39bbfc1374b13a3b9e60f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

gdiplus

ole32

imm32

shell32

shlwapi

winmm

iphlpapi

ws2_32

winspool.drv

comdlg32

advapi32

oleaut32

comctl32

Sections

.text Size: 3.1MB - Virtual size: 3.1MB

.rdata Size: 4.0MB - Virtual size: 4.0MB

.data Size: 428KB - Virtual size: 751KB

.rsrc Size: 44KB - Virtual size: 42KB

.text
Size: 3.1MB - Virtual size: 3.1MB

.rdata
Size: 4.0MB - Virtual size: 4.0MB

.data
Size: 428KB - Virtual size: 751KB

.rsrc
Size: 44KB - Virtual size: 42KB