795cb5df613fecf6c409ee0c1230ae65b09e38859d5aff65e0abb7add0920445

Sharing

Copy URL Twitter E-mail

General

Target

795cb5df613fecf6c409ee0c1230ae65b09e38859d5aff65e0abb7add0920445
Size

5.2MB
MD5

1286d9fd06631e9f69c26b2fdd12fdea
SHA1

045e54f02fbc41aae76149f8007c93fbaad4e9d1
SHA256

795cb5df613fecf6c409ee0c1230ae65b09e38859d5aff65e0abb7add0920445
SHA512

4d1d7aa7fde4a8530a3579bba818605497f333dca11596e8eead32ebb256940260cbdee4aa6b086c83911af03c2828dea8dc0f78dd38d6d341f38bb7ce90c875
SSDEEP

98304:W0KGoYr2Q7Ex9pRpu0QF1GZgBU0E2CxOIsuf1DdEFtcNQfptyWkvZVBGrhLU29Oj:3KEaVdE0QuEy2CxORuEfty+vhQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
795cb5df613fecf6c409ee0c1230ae65b09e38859d5aff65e0abb7add0920445

Files

795cb5df613fecf6c409ee0c1230ae65b09e38859d5aff65e0abb7add0920445
.exe windows:5 windows x86 arch:x86

51e16a7e00350b27a0daedb342e55130

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceFrequency
HeapQueryInformation
GetCommandLineA
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
SetStdHandle
VirtualQuery
VirtualAlloc
GetSystemInfo
RtlUnwind
OutputDebugStringW
GetFileType
GetStdHandle
ExitProcess
GetACP
GetStringTypeW
LCMapStringW
GetTimeZoneInformation
GetDriveTypeW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
GetTempPathW
GetTempFileNameW
GetProfileIntW
SearchPathW
GetWindowsDirectoryW
FindResourceExW
SetErrorMode
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
VerifyVersionInfoW
VerSetConditionMask
GetCurrentDirectoryW
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GlobalFlags
GlobalGetAtomNameW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GetThreadLocale
lstrcmpiW
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
GetPrivateProfileIntW
lstrcmpA
GetVersionExW
GetCurrentThread
ResumeThread
SuspendThread
SetThreadPriority
WaitForSingleObject
SetEvent
GetCurrentProcessId
GlobalFindAtomW
GlobalAddAtomW
LoadLibraryW
LoadLibraryA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetModuleHandleA
FreeResource
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
OutputDebugStringA
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetProcAddress
FindNextFileW
FindFirstFileW
FindClose
FileTimeToLocalFileTime
FormatMessageW
MulDiv
LocalFree
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
SetLastError
RaiseException
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
DecodePointer
GetTickCount
WideCharToMultiByte
CopyFileW
DeleteFileW
CreateFileW
RemoveDirectoryW
CreateDirectoryW
WritePrivateProfileStringW
GetCommandLineW
CreateEventW
InterlockedExchange
lstrcpyW
GetSystemTime
ReadFile
Sleep
GetModuleFileNameW
CreateMutexW
CloseHandle
GetModuleHandleW
MultiByteToWideChar
GetPrivateProfileStringW
FindResourceW
SizeofResource
LoadResource
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetLastError
LockResource
WriteConsoleW

user32

OffsetRect
SetRectEmpty
SendDlgItemMessageA
CopyImage
RealChildWindowFromPoint
LoadCursorW
GetSysColorBrush
MapVirtualKeyW
GetKeyNameTextW
CharUpperW
MapDialogRect
SetWindowContextHelpId
SetCursor
ShowOwnedPopups
TranslateMessage
GetMessageW
GetMenuItemInfoW
DestroyMenu
IntersectRect
LoadMenuW
GetWindowThreadProcessId
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
IsDialogMessageW
SetWindowTextW
IsWindowEnabled
CheckDlgButton
MoveWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
GetWindowLongW
EqualRect
MapWindowPoints
MessageBoxW
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
GetForegroundWindow
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
SetFocus
GetDlgCtrlID
GetDlgItem
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
GetNextDlgGroupItem
EmptyClipboard
GetWindowPlacement
SetWindowPos
DrawIconEx
RegisterClipboardFormatW
DrawEdge
SendMessageW
EnableWindow
GetDC
ReleaseDC
SetWindowRgn
DestroyWindow
IsChild
IsMenu
IsWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
TrackMouseEvent
IsZoomed
SetCapture
ReleaseCapture
KillTimer
DeleteMenu
MessageBeep
WindowFromPoint
NotifyWinEvent
GetMenuDefaultItem
SetMenuDefaultItem
IsRectEmpty
UpdateLayeredWindow
EnableScrollBar
UnionRect
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
MonitorFromPoint
SetLayeredWindowAttributes
EnumDisplayMonitors
WaitMessage
CharNextW
CopyAcceleratorTableW
RemovePropW
SetRect
InvalidateRect
GetWindowRect
PtInRect
GetParent
PostMessageW
FindWindowW
SetWindowsHookExW
UnhookWindowsHookEx
UpdateWindow
DestroyCursor
SetWindowLongW
GetSubMenu
GetMenuItemID
GetMenuItemCount
ModifyMenuW
GetClientRect
CopyRect
InflateRect
ShowWindow
RegisterDeviceNotificationW
IsIconic
GetAsyncKeyState
GetSystemMetrics
GetSystemMenu
CreatePopupMenu
AppendMenuW
DrawIcon
SetForegroundWindow
InvalidateRgn
GetCursorPos
ClientToScreen
GetDesktopWindow
LoadIconW
SystemParametersInfoW
DrawStateW
DestroyIcon
SetTimer
UnregisterClassW
PostQuitMessage
GetMenuStringW
GetMenuState
InsertMenuW
RemoveMenu
DrawTextW
DrawTextExW
DrawFrameControl
DrawFocusRect
SetClassLongW
SetParent
LoadImageW
OpenClipboard
CloseClipboard
BeginDeferWindowPos
SetClipboardData
GrayStringW
TabbedTextOutW
GetWindowDC
BeginPaint
EndPaint
ScreenToClient
GetSysColor
FillRect
GetFocus
CharUpperBuffW
LockWindowUpdate
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
LoadAcceleratorsW
CreateAcceleratorTableW
DestroyAcceleratorTable
BringWindowToTop
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
SetCursorPos
CopyIcon
FrameRect
PostThreadMessageW
GetIconInfo
HideCaret
InvertRect
IsClipboardFormatAvailable
GetDoubleClickTime
GetWindowRgn
SubtractRect
CreateMenu
GetUpdateRect
GetComboBoxInfo
MapVirtualKeyExW
IsCharLowerW
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
SetWindowPlacement

gdi32

CopyMetaFileW
CreateBitmap
CreateHatchBrush
CreatePen
CreatePatternBrush
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
MoveToEx
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
TextOutW
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectW
CreateRectRgnIndirect
GetMapMode
PatBlt
SetRectRgn
DPtoLP
GetTextMetricsW
CreateRoundRectRgn
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetTextColor
GetRgnBox
EnumFontFamiliesExW
RealizePalette
SetPixel
OffsetRgn
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
LPtoDP
ExtFloodFill
SetPaletteEntries
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
SetPixelV
GetTextFaceW
GetBkColor
GetDIBColorTable
AddFontMemResourceEx
GetDeviceCaps
CreateDCW
Rectangle
CreateSolidBrush
GetObjectW
SetDIBColorTable
CreateDIBSection
StretchBlt
SelectObject
GetTextExtentPointW
GetPixel
DeleteObject
DeleteDC
CreateRectRgn
CreateCompatibleDC
CombineRgn
OffsetWindowOrgEx
GetTextExtentPoint32W
BitBlt

msimg32

TransparentBlt
AlphaBlend

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegQueryValueW
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegEnumKeyExW
RegEnumValueW
RegCloseKey
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW

shell32

DragFinish
Shell_NotifyIconW
SHGetFileInfoW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
ShellExecuteW
DragQueryFileW
SHAppBarMessage
SHGetDesktopFolder

comctl32

ImageList_ReplaceIcon
_TrackMouseEvent
ImageList_GetIcon
InitCommonControlsEx
ImageList_GetIconSize

shlwapi

PathFindFileNameW
PathIsUNCW
PathStripToRootW
PathRemoveFileSpecW
PathFindExtensionW
StrFormatKBSizeW

uxtheme

GetWindowTheme
GetThemePartSize
IsAppThemed
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor

ole32

IsAccelerator
CoRevokeClassObject
CoRegisterMessageFilter
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CreateStreamOnHGlobal
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CoInitializeEx
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoInitialize

oleaut32

VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysFreeString
SafeArrayDestroy
SysAllocString
VariantCopy
VarBstrFromDate
OleCreateFontIndirect
LoadTypeLi
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime

oledlg

OleUIBusyW

gdiplus

GdipGetImagePixelFormat
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromStream
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI

hid

HidP_GetCaps
HidD_GetHidGuid
HidD_GetPreparsedData
HidD_FreePreparsedData
HidD_GetFeature
HidD_SetFeature
HidD_GetProductString
HidD_GetAttributes

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

winmm

mixerOpen
PlaySoundW
mixerClose
mixerGetNumDevs

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 363KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.giats
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

51e16a7e00350b27a0daedb342e55130

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

hid

setupapi

oleacc

winmm

imm32

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 363KB - Virtual size: 362KB

.data Size: 23KB - Virtual size: 174KB

.gfids Size: 105KB - Virtual size: 104KB

.giats Size: 512B - Virtual size: 16B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 2.8MB - Virtual size: 2.8MB

.reloc Size: 153KB - Virtual size: 153KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 363KB - Virtual size: 362KB

.data
Size: 23KB - Virtual size: 174KB

.gfids
Size: 105KB - Virtual size: 104KB

.giats
Size: 512B - Virtual size: 16B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 2.8MB - Virtual size: 2.8MB

.reloc
Size: 153KB - Virtual size: 153KB