3e0cc394d2ecaea0002e3303beb4465604a7d44670cd5752d44d107ca733bc2c

Sharing

Copy URL

Twitter E-mail

General

Target

3e0cc394d2ecaea0002e3303beb4465604a7d44670cd5752d44d107ca733bc2c
Size

3.3MB
MD5

cf3090e3b1ef89b074a1abc416b264f0
SHA1

c15b5c72185c43d1e3aa4e3727e579fccfba1906
SHA256

3e0cc394d2ecaea0002e3303beb4465604a7d44670cd5752d44d107ca733bc2c
SHA512

40bde43cef15b70df1c9e194df25b91abfa9d4b5c7bdb0d25b757404725f0ef0f705b985dde78522fc2bfb0bd1e419dc339a76c201ccafb3d48c02a00b606c2f
SSDEEP

98304:m0tFNMxDHrKZ6Qu9Pw98m887AbCs7CWjRs90:m0tFNMxDLKZx0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
3e0cc394d2ecaea0002e3303beb4465604a7d44670cd5752d44d107ca733bc2c

Files

3e0cc394d2ecaea0002e3303beb4465604a7d44670cd5752d44d107ca733bc2c
.exe windows:4 windows x86 arch:x86

b7484926c4f0d82aeddc1b9df8488851

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

winmm

timeGetTime
sndPlaySoundW
mciSendCommandW
mciGetErrorStringW
waveInStop

msvcrt

memcpy
memset
_stricmp
strncmp
_gcvt
sprintf
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3

comctl32

ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_DrawEx
ImageList_DrawIndirect
ImageList_EndDrag
ImageList_GetBkColor
ImageList_GetDragImage
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_Read
ImageList_Remove
ImageList_Replace
ImageList_SetBkColor
ImageList_SetIconSize
ImageList_SetImageCount
ImageList_Write
ord17
InitializeFlatSB
ImageList_Create
ImageList_BeginDrag
ImageList_Add
FlatSB_SetScrollProp
FlatSB_GetScrollInfo
FlatSB_GetScrollPos
FlatSB_SetScrollInfo
_TrackMouseEvent
FlatSB_SetScrollPos

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

kernel32

WriteFile
WritePrivateProfileStringW
GetStartupInfoA
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjectsEx
VirtualQueryEx
VirtualQuery
VirtualFree
VirtualAlloc
UnmapViewOfFile
UnhandledExceptionFilter
TlsSetValue
TlsGetValue
SuspendThread
Sleep
SizeofResource
SetVolumeLabelW
SetThreadPriority
SetThreadLocale
SetPriorityClass
SetLastError
SetFileTime
SetFilePointer
SetFileAttributesW
SetEvent
SetErrorMode
SetEndOfFile
SetCurrentDirectoryW
ResumeThread
LoadLibraryA
LeaveCriticalSection
ExitProcess
GetTickCount
EnterCriticalSection
InitializeCriticalSection
GetCommandLineA
IsValidCodePage
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcessHeap
GetConsoleCP
FindClose
CompareStringA
CompareStringW
CopyFileW
CreateDirectoryW
CreateEventW
CreateFileA
CreateFileMappingW
CreateFileW
CreateMutexW
ResetEvent
RemoveDirectoryW
ReleaseMutex
ReadFile
RaiseException
QueryPerformanceFrequency
QueryDosDeviceW
OpenFileMappingW
MultiByteToWideChar
MulDiv
MoveFileW
MapViewOfFile
lstrlenW
lstrcpynW
lstrcmpW
LockResource
LocalFree
LocalFileTimeToFileTime
LocalAlloc
LoadResource
LoadLibraryW
LoadLibraryExW
LoadLibraryExA
IsValidLocale
IsDBCSLeadByteEx
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GlobalUnlock
GlobalSize
GlobalMemoryStatus
GlobalLock
GlobalHandle
GlobalFree
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetWindowsDirectoryW
CreateProcessW
GetVolumeInformationW
GetVersionExW
GetVersionExA
GetVersion
GetUserDefaultLCID
GetTimeZoneInformation
GetThreadPriority
GetThreadLocale
GetTempPathW
GetTempPathA
GetTempFileNameW
GetTempFileNameA
GetSystemInfo
GetStringTypeExW
GetStringTypeExA
GetStdHandle
GetStartupInfoW
GetProfileStringW
GetProcAddress
GetPrivateProfileStringW
GetOEMCP
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetLogicalDriveStringsW
GetLogicalDrives
GetLocalTime
GetLocaleInfoW
GetLastError
GetFullPathNameW
GetFileType
GetFileTime
GetFileSize
GetFileAttributesW
GetFileAttributesExW
GetFileAttributesA
GetExitCodeThread
GetEnvironmentVariableW
GetDriveTypeW
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentDirectoryW
GetCPInfoExW
GetConsoleOutputCP
GetComputerNameW
GetComputerNameA
GetCommandLineW
FreeResource
FreeLibrary
FormatMessageW
FormatMessageA
FlushInstructionCache
FlushFileBuffers
FindResourceW
FindNextFileW
FindFirstFileW
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExitThread
EnumSystemLocalesW
EnumResourceNamesW
EnumCalendarInfoW
DosDateTimeToFileTime
DeleteFileW
DeleteCriticalSection
CreateThread
VirtualProtect

user32

WindowFromPoint
WaitMessage
ValidateRect
UpdateWindow
UnregisterClassW
UnionRect
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
ToAscii
SystemParametersInfoW
SubtractRect
ShowWindow
ShowScrollBar
ShowOwnedPopups
ShowCaret
SetWindowTextW
SetWindowsHookExW
SetWindowRgn
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropW
SetParent
SetMenuItemInfoW
SetKeyboardState
SetForegroundWindow
SetFocus
SetCursorPos
SetClipboardData
SetClassLongW
SetCaretPos
SetCapture
SetActiveWindow
SendMessageW
SendMessageA
SendDlgItemMessageW
ScrollWindowEx
ScrollDC
ScreenToClient
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PtInRect
PostQuitMessage
PostMessageW
PeekMessageW
PeekMessageA
OpenClipboard
OffsetRect
OemToCharBuffW
OemToCharBuffA
MsgWaitForMultipleObjectsEx
MoveWindow
MessageBoxW
MessageBoxA
MessageBeep
MapWindowPoints
MapVirtualKeyW
LockWindowUpdate
LoadStringW
LoadMenuW
LoadKeyboardLayoutW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsRectEmpty
IsIconic
IsDialogMessageW
IsDialogMessageA
IsClipboardFormatAvailable
IsChild
IsCharAlphaW
IsCharAlphaNumericW
InvalidateRgn
InvalidateRect
IntersectRect
InsertMenuW
InsertMenuItemW
InflateRect
HideCaret
GetWindowThreadProcessId
GetWindowTextW
GetWindowRgn
GetWindowRect
GetWindowPlacement
GetWindowDC
GetUpdateRect
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetMessageTime
GetMessagePos
GetMessageExtraInfo
GetMenuStringW
GetMenuState
GetMenuItemRect
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetLastActivePopup
GetKeyNameTextW
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetIconInfo
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDCEx
GetCursorPos
GetClipboardFormatNameW
GetClipboardData
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetClassInfoExW
GetCaretPos
GetCapture
GetAsyncKeyState
GetActiveWindow
FrameRect
FindWindowW
FindWindowExW
FillRect
EqualRect
EnumWindows
EnumThreadWindows
EnumClipboardFormats
EnumChildWindows
EndPaint
EndDeferWindowPos
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextExW
DrawStateW
DrawMenuBar
DrawIconEx
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DestroyCaret
DeleteMenu
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreateWindowExW
CreatePopupMenu
CreateMenu
CreateIconIndirect
CreateCaret
CountClipboardFormats
CopyImage
CopyIcon
CloseClipboard
ClipCursor
ClientToScreen
ChildWindowFromPoint
CheckMenuItem
CharUpperW
CharUpperBuffW
CharUpperBuffA
CharNextW
CharNextA
CharLowerW
CharLowerBuffW
CharLowerBuffA
CallWindowProcW
CallNextHookEx
BeginPaint
BeginDeferWindowPos
GetKeyState
GetWindowLongW
GetParent
IsWindowEnabled

gdi32

DeleteDC
DeleteEnhMetaFile
DeleteObject
DPtoLP
Ellipse
EndDoc
EndPage
EndPath
EnumEnhMetaFile
EnumFontFamiliesExW
EnumFontFamiliesW
EnumFontsW
ExcludeClipRect
ExtCreatePen
ExtCreateRegion
ExtFloodFill
ExtSelectClipRgn
ExtTextOutA
ExtTextOutW
FillRgn
FrameRgn
GdiFlush
GetBitmapBits
GetBkColor
GetBkMode
GetBrushOrgEx
GetCharABCWidthsA
GetClipBox
GetClipRgn
GetCurrentObject
GetCurrentPositionEx
GetDeviceCaps
GetDIBColorTable
GetDIBits
GetEnhMetaFileBits
GetEnhMetaFileDescriptionW
GetEnhMetaFileHeader
GetEnhMetaFilePaletteEntries
GetFontData
GetGlyphOutlineW
GetMapMode
GetNearestColor
GetNearestPaletteIndex
GetObjectW
GetOutlineTextMetricsA
CreateSolidBrush
GetPaletteEntries
GetPixel
GetPolyFillMode
GetRgnBox
GetStockObject
CreateRoundRectRgn
GetSystemPaletteEntries
GetTextAlign
GetTextCharacterExtra
CreateRectRgnIndirect
GetTextColor
GetTextExtentExPointA
GetTextExtentExPointW
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextExtentPointW
GetTextMetricsW
GetViewportExtEx
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
GetWinMetaFileBits
IntersectClipRect
LineTo
LPtoDP
MaskBlt
MoveToEx
OffsetRgn
PatBlt
PathToRegion
Pie
PlayEnhMetaFile
PolyBezierTo
Polygon
Polyline
PolyPolyline
PtInRegion
PtVisible
RealizePalette
Rectangle
RectVisible
ResetDCW
ResizePalette
RestoreDC
RoundRect
SaveDC
SelectClipPath
SelectClipRgn
SelectObject
SelectPalette
SetAbortProc
SetArcDirection
SetBkColor
SetBkMode
SetBrushOrgEx
SetDIBColorTable
SetDIBits
SetEnhMetaFileBits
SetGraphicsMode
SetMapMode
SetMetaRgn
SetPixel
SetROP2
SetStretchBltMode
SetTextAlign
SetTextCharacterExtra
SetTextColor
SetTextJustification
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
SetWinMetaFileBits
SetWorldTransform
StartDocW
StartPage
StretchBlt
StretchDIBits
StrokeAndFillPath
StrokePath
TextOutW
TranslateCharsetInfo
UnrealizeObject
WidenPath
CreatePolygonRgn
CreatePenIndirect
GetStretchBltMode
CreatePatternBrush
CreatePalette
CreateICW
CreateHatchBrush
CreateHalftonePalette
CreateFontIndirectW
CreateEnhMetaFileW
CreateEllipticRgnIndirect
CreateDIBSection
CreateDIBitmap
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileW
CombineRgn
CloseFigure
CloseEnhMetaFile
ArcTo
Chord
BitBlt
BeginPath
AngleArc
GetOutlineTextMetricsW

winspool.drv

GetPrinterDriverW
DeviceCapabilitiesW
EnumFormsW
ClosePrinter
EnumPrintersW
OpenPrinterA
OpenPrinterW
SetPrinterA
GetPrinterA
GetPrinterW
StartDocPrinterW
StartPagePrinter
WritePrinter
EndPagePrinter
EndDocPrinter
DocumentPropertiesW

comdlg32

PageSetupDlgW
PrintDlgW
GetOpenFileNameW
GetSaveFileNameW
ChooseColorW
ChooseFontW

advapi32

RegQueryInfoKeyW
RegOpenKeyA
SetSecurityDescriptorSacl
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
RegFlushKey
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
LookupAccountSidW
LookupAccountSidA
LookupAccountNameW
IsValidSid
IsValidAcl
InitializeSecurityDescriptor
GetUserNameW
GetSidSubAuthorityCount
GetSidIdentifierAuthority
GetSecurityDescriptorSacl
GetSecurityDescriptorOwner
GetSecurityDescriptorGroup
GetSecurityDescriptorDacl
GetLengthSid
GetKernelObjectSecurity
FreeSid
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegSetValueExA
RegSetValueExW
SetKernelObjectSecurity
SetSecurityDescriptorDacl

shell32

Shell_NotifyIconW
ShellExecuteW
DragAcceptFiles
DragQueryFileW

ole32

ReleaseStgMedium
RegisterDragDrop
StringFromCLSID
StringFromGUID2
ProgIDFromCLSID
OleUninitialize
OleSetMenuDescriptor
OleSetClipboard
OleInitialize
OleGetClipboard
OleDraw
IsAccelerator
DoDragDrop
CreateStreamOnHGlobal
CreateDataAdviseHolder
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
CoRevokeClassObject
CoInitialize
CoGetMalloc
CoGetClassObject
CoCreateInstance
CoCreateGuid
CLSIDFromString
CLSIDFromProgID
RevokeDragDrop

oleaut32

SetErrorInfo
VariantInit
GetErrorInfo
SafeArrayAccessData
SafeArrayCreate
SafeArrayGetElement
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayRedim
SafeArrayUnaccessData
VariantCopyInd
SysAllocStringLen
SysFreeString
SysReAllocStringLen
SysStringLen
VariantChangeType
VariantChangeTypeEx
VariantClear

ws2_32

send

Sections

.text
Size: 444KB - Virtual size: 443KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 14.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls5
Size: 4KB - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 312KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ava127
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b7484926c4f0d82aeddc1b9df8488851

Headers

File Characteristics

Imports

winmm

msvcrt

comctl32

version

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

ws2_32

Sections

.text Size: 444KB - Virtual size: 443KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 4KB - Virtual size: 14.0MB

.tls5 Size: 4KB - Virtual size: 32B

.rsrc Size: 312KB - Virtual size: 312KB

.ava127 Size: 2.5MB - Virtual size: 2.5MB

.text
Size: 444KB - Virtual size: 443KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 4KB - Virtual size: 14.0MB

.tls5
Size: 4KB - Virtual size: 32B

.rsrc
Size: 312KB - Virtual size: 312KB

.ava127
Size: 2.5MB - Virtual size: 2.5MB