d3465a0b629c67035aa6b12d51892598ac3d6c7b1920dde93e0824a0bd79a073

Sharing

Copy URL Twitter E-mail

General

Target

d3465a0b629c67035aa6b12d51892598ac3d6c7b1920dde93e0824a0bd79a073
Size

2.5MB
MD5

7c4e32553b116929ee6565c2c53a8878
SHA1

6f2b2091f122f52563df993cfdf25e649b186462
SHA256

d3465a0b629c67035aa6b12d51892598ac3d6c7b1920dde93e0824a0bd79a073
SHA512

e29df17d76ea5c19f3bf399c5893af2f444e405225e7bd45f79398e8f5ef34e17bfa95cb5265ab0af827f5e2c48564c4acd800be51f4922eaaa73bd21fda8e57
SSDEEP

49152:P/lAb7HtqGv4X8GfydBzOR46D/pmGySx6g05B+QS6v+fAyaEHmm:VO7HsGv4X8IybORfD/pmXg0mQS6v+ffR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3465a0b629c67035aa6b12d51892598ac3d6c7b1920dde93e0824a0bd79a073

Files

d3465a0b629c67035aa6b12d51892598ac3d6c7b1920dde93e0824a0bd79a073
.exe windows:6 windows x86 arch:x86

a8ba286ffd14adbe2d5b6bf38f07ccb1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrFormatKBSizeW
PathStripToRootW
PathIsUNCW
PathRemoveFileSpecW
PathFindFileNameW
PathFindExtensionW

kernel32

AreFileApisANSI
ExitThread
IsDebuggerPresent
IsProcessorFeaturePresent
HeapQueryInformation
VirtualAlloc
VirtualQuery
SetStdHandle
GetFileType
GetConsoleCP
SetFilePointerEx
GetStdHandle
GetStartupInfoW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
ReadConsoleW
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
GetModuleHandleExW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetStringTypeW
WriteConsoleW
LCMapStringW
OutputDebugStringW
GetFileInformationByHandle
PeekNamedPipe
SetEnvironmentVariableA
ReadConsoleInputA
CreateDirectoryA
RtlUnwind
GetCommandLineA
GetTimeZoneInformation
SetConsoleMode
CreateFileA
CloseHandle
GetLastError
GetExitCodeProcess
CreateProcessA
GetFirmwareEnvironmentVariableA
GetCurrentProcess
SetFirmwareEnvironmentVariableA
ExitProcess
HeapReAlloc
FindResourceW
LoadResource
HeapAlloc
HeapFree
GetModuleHandleW
GetProcessHeap
SizeofResource
MultiByteToWideChar
InitializeCriticalSectionEx
RaiseException
HeapSize
LockResource
DecodePointer
DeleteCriticalSection
CreateMutexW
WideCharToMultiByte
Sleep
GetVersionExW
GetProcAddress
GetSystemInfo
GetCurrentProcessId
GetModuleFileNameW
SetLastError
GlobalAlloc
GlobalSize
GlobalLock
GlobalUnlock
GlobalFree
LocalFree
MulDiv
FormatMessageW
CopyFileW
GetCurrentThread
GetCurrentThreadId
FreeLibrary
PeekConsoleInputA
GetNumberOfConsoleInputEvents
GetConsoleMode
GetSystemTimeAsFileTime
lstrlenA
FormatMessageA
LocalSize
CreateNamedPipeA
DeviceIoControl
SetConsoleCtrlHandler
SetThreadExecutionState
SetProcessAffinityMask
GetModuleFileNameA
GetVersionExA
CreateMutexA
DeleteFileA
GetCurrentDirectoryA
CreateThread
IsWow64Process
GetWindowsDirectoryA
GetSystemDirectoryA
GetFullPathNameA
SearchPathW
GetProfileIntW
GetTickCount
GetTempPathW
GetTempFileNameW
VerifyVersionInfoW
VerSetConditionMask
lstrcpyW
GetWindowsDirectoryW
GetFileTime
GetFileSizeEx
GetFileAttributesExW
LoadLibraryExW
GlobalDeleteAtom
lstrcmpA
GetFileAttributesW
FileTimeToLocalFileTime
FindResourceExW
lstrcmpiW
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
FindClose
CreateFileW
DeleteFileW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GetCurrentDirectoryW
GlobalFlags
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
FileTimeToSystemTime
GlobalGetAtomNameW
SetErrorMode
VirtualProtect
GlobalFindAtomW
LoadLibraryA
GetSystemDirectoryW
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
EncodePointer
LoadLibraryW
GetModuleHandleA
FreeResource
OutputDebugStringA
ResumeThread
SuspendThread
SetThreadPriority
CreateEventW
WaitForSingleObject
SetEvent
GlobalAddAtomW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcmpW

user32

SystemParametersInfoA
BlockInput
GetMessageA
DispatchMessageA
DefWindowProcA
RegisterClassExA
CreateWindowExA
ExitWindowsEx
GetWindowRgn
DestroyCursor
CreateMenu
SubtractRect
GetUpdateRect
IsClipboardFormatAvailable
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
FrameRect
CharUpperBuffW
RegisterClipboardFormatW
ModifyMenuW
SetMenuDefaultItem
CopyIcon
GetDoubleClickTime
SetClassLongW
SetCursorPos
CopyAcceleratorTableW
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
LockWindowUpdate
SetRect
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
PostThreadMessageW
IsZoomed
GetComboBoxInfo
MonitorFromPoint
UpdateLayeredWindow
IsMenu
SetWindowRgn
DrawFrameControl
DrawEdge
DrawStateW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
SetParent
UnionRect
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
GetIconInfo
DrawIconEx
IsRectEmpty
DrawFocusRect
GetNextDlgGroupItem
GetMenuDefaultItem
ReuseDDElParam
UnpackDDElParam
LoadImageW
OffsetRect
SetRectEmpty
InsertMenuItemW
CreatePopupMenu
TranslateAcceleratorW
LoadAcceleratorsW
BringWindowToTop
CharUpperW
DestroyIcon
ReleaseCapture
SetCapture
WaitMessage
DeleteMenu
CopyImage
RealChildWindowFromPoint
LoadCursorW
GetSysColorBrush
IntersectRect
WindowFromPoint
SystemParametersInfoW
InflateRect
GetMenuItemInfoW
DestroyMenu
MapDialogRect
GetAsyncKeyState
ClientToScreen
EndPaint
BeginPaint
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
SendDlgItemMessageA
ReleaseDC
GetDC
MapVirtualKeyW
GetKeyNameTextW
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
UnhookWindowsHookEx
GetTopWindow
GetClassNameW
GetClassLongW
PtInRect
EqualRect
CopyRect
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
GetForegroundWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
MessageBoxA
UnregisterClassW
LoadStringW
FindWindowW
SetForegroundWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
IsDialogMessageW
GetWindow
SetWindowLongW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
SetFocus
GetDlgCtrlID
IsDlgButtonChecked
CheckDlgButton
SetWindowPos
MoveWindow
ShowWindow
GetDesktopWindow
SetActiveWindow
GetNextDlgTabItem
GetDlgItem
EndDialog
CreateDialogIndirectParamW
DestroyWindow
IsWindow
CallNextHookEx
SetWindowsHookExW
GetCursorPos
ValidateRect
GetKeyState
GetLastActivePopup
IsIconic
EnableWindow
UpdateWindow
SendMessageW
GetSystemMetrics
PeekMessageW
AppendMenuW
LoadIconW
GetClientRect
DrawIcon
PostQuitMessage
GetWindowRect
GetSystemMenu
KillTimer
SetTimer
GetSysColor
InvalidateRect
FillRect
MessageBeep
IsWindowEnabled
MessageBoxW
GetWindowLongW
GetParent
GetWindowThreadProcessId
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
RemoveMenu
GetFocus
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadBitmapW
LoadMenuW
PostMessageW
ShowOwnedPopups
SetCursor
GetMessageW
TranslateMessage
DispatchMessageW
IsWindowVisible
GetActiveWindow
TrackMouseEvent

gdi32

SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetTextExtentPoint32W
CombineRgn
SetRectRgn
DPtoLP
GetTextMetricsW
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
SelectObject
GetBkColor
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
GetRgnBox
OffsetRgn
CreateRoundRectRgn
RoundRect
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
GetWindowOrgEx
LPtoDP
GetViewportOrgEx
GetTextFaceW
ExtSelectClipRgn
SelectClipRgn
SaveDC
ExcludeClipRect
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
CopyMetaFileW
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
Rectangle
CreateSolidBrush
CreateFontIndirectW
RealizePalette
GetObjectW
Escape
DeleteObject
DeleteDC
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
PatBlt
CreateRectRgnIndirect
SetTextColor
SetBkColor
CreateBitmap
GetDeviceCaps
CreateDCW
GetClipBox

msimg32

TransparentBlt
AlphaBlend

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

QueryServiceStatusEx
OpenServiceA
OpenSCManagerA
DeleteService
CreateServiceA
ControlService
CloseServiceHandle
RegOpenKeyExA
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
StartServiceA

shell32

ShellExecuteA
SHGetFileInfoW
ShellExecuteW
DragQueryFileW
DragFinish
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHBrowseForFolderW
SHAppBarMessage

uxtheme

GetWindowTheme
GetThemeSysColor
IsAppThemed
GetThemePartSize
DrawThemeText
DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
DrawThemeParentBackground
OpenThemeData
CloseThemeData
GetCurrentThemeName
GetThemeColor

ole32

OleLockRunning
DoDragDrop
CreateStreamOnHGlobal
CoDisconnectObject
CoInitialize
CoCreateGuid
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoInitializeEx
CoInitializeSecurity
CoUninitialize
CoSetProxyBlanket
CoCreateInstance
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor

oleaut32

SysFreeString
SysAllocStringLen
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantChangeType
VariantCopy
VarBstrFromDate
LoadTypeLi
VariantInit
VariantClear
SysAllocString

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipDrawImageRectI

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundW

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 381KB - Virtual size: 381KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 129KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a8ba286ffd14adbe2d5b6bf38f07ccb1

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

uxtheme

ole32

oleaut32

oleacc

gdiplus

imm32

winmm

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 381KB - Virtual size: 381KB

.data Size: 36KB - Virtual size: 124KB

.rsrc Size: 129KB - Virtual size: 128KB

.reloc Size: 149KB - Virtual size: 148KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 381KB - Virtual size: 381KB

.data
Size: 36KB - Virtual size: 124KB

.rsrc
Size: 129KB - Virtual size: 128KB

.reloc
Size: 149KB - Virtual size: 148KB