2af4f395ecd1725dfdd1ec6535e566903b6b5251198cf0f9a8e81d56abe846c3N

Sharing

Copy URL

Twitter E-mail

General

Target

2af4f395ecd1725dfdd1ec6535e566903b6b5251198cf0f9a8e81d56abe846c3N
Size

784KB
MD5

03751b2a63e823c20fec333d77669540
SHA1

1f60c3097b1537ee4f78934f8a5eaabd91e438b5
SHA256

2af4f395ecd1725dfdd1ec6535e566903b6b5251198cf0f9a8e81d56abe846c3
SHA512

7d4c03f8f91b62679f3ac034f866009a1b6772a6d0bc97d46f663ab67c47767b806a2789242aa0a540105ffb129f7388b7e1a9d2d9da08679723d99ee6ce1bc0
SSDEEP

12288:AsR8WX0Xur8AN1kmbR2swlNuBe4r3oCEafzL2ITAi8IMdZlN:F/X0XurXJOee4r4CDzqIki8BP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2af4f395ecd1725dfdd1ec6535e566903b6b5251198cf0f9a8e81d56abe846c3N

Files

2af4f395ecd1725dfdd1ec6535e566903b6b5251198cf0f9a8e81d56abe846c3N
.exe windows:4 windows x86 arch:x86

52ab84827bcb1ee5fa023631e22ba2a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

LoadTypeLi

comdlg32

ChooseFontA
FindTextA
ReplaceTextA
GetFileTitleA

kernel32

GetTimeFormatA
GetStdHandle
InterlockedExchange
HeapFree
SetEvent
LCMapStringW
VirtualQuery
InterlockedIncrement
GetModuleFileNameA
CompareStringW
ResetEvent
GetTimeZoneInformation
VirtualAlloc
GetFileAttributesA
HeapReAlloc
LCMapStringA
CloseHandle
WriteConsoleW
FreeLibrary
SetUnhandledExceptionFilter
InterlockedDecrement
FreeEnvironmentStringsW
GetEnvironmentStrings
FormatMessageW
SetHandleCount
GetProcessHeap
GetModuleHandleA
LocalFileTimeToFileTime
CreateFileA
QueryPerformanceCounter
GetStringTypeA
GetTickCount
SetEnvironmentVariableA
WriteFile
IsValidCodePage
RtlUnwind
GetACP
SetEndOfFile
FreeEnvironmentStringsA
GetOEMCP
WideCharToMultiByte
TerminateThread
GetStringTypeW
GetDriveTypeA
CreateMutexA
DeleteCriticalSection
TerminateProcess
CreateThread
WriteConsoleA
lstrcmpA
LeaveCriticalSection
UnhandledExceptionFilter
GetConsoleCP
lstrlenW
HeapCreate
RaiseException
GetDateFormatA
GetCurrentDirectoryA
GetCurrentThread
GetModuleFileNameW
ReleaseMutex
GetLocaleInfoA
GetConsoleMode
TlsGetValue
OutputDebugStringW
CreateMutexW
CreateProcessA
GetLocaleInfoW
GetCurrentThreadId
LoadLibraryA
SetStdHandle
ExitThread
UnmapViewOfFile
GetProcAddress
GetFileAttributesW
GlobalReAlloc
GetCPInfo
TlsAlloc
EnterCriticalSection
GetCommandLineA
ResumeThread
GetStartupInfoW
GetSystemTimeAsFileTime
EnumSystemLocalesA
GetVersion
RemoveDirectoryW
ReadFile
GetFileType
CreateFileMappingW
CompareStringA
MultiByteToWideChar
TlsSetValue
lstrcmpW
GetLocalTime
lstrcmpiA
GetFileTime
InitializeCriticalSection
GetCurrentProcess
SetErrorMode
GetLastError
GetCurrentProcessId
GlobalAlloc
GetConsoleOutputCP
ConvertDefaultLocale
CreateFileW
SetCurrentDirectoryA
GetEnvironmentStringsW
GetCommandLineW
HeapDestroy
GetSystemTime
GlobalSize
lstrcpyW
HeapSize
GetSystemDirectoryA
IsDebuggerPresent
IsBadWritePtr
GlobalUnlock
GetVersionExA
LoadLibraryW
HeapAlloc
GetFullPathNameW
LocalAlloc
TlsFree
lstrcpyA
GetThreadLocale
FindFirstFileW
SizeofResource
FindFirstFileA
FileTimeToLocalFileTime
ExitProcess
GetDriveTypeW
GetUserDefaultLCID
MulDiv
GetStartupInfoA
Sleep
GlobalDeleteAtom
VirtualFree
SetFilePointer
FlushFileBuffers
SetLastError
FindNextFileW
IsValidLocale

user32

DrawIcon
KillTimer
GetScrollInfo
CreateWindowExA
GetClassInfoExA
RegisterClassExA
DefWindowProcA
IsChild
SetMenuItemBitmaps
MessageBeep
GetKeyboardLayout
GetTopWindow
MapVirtualKeyA
GetScrollRange
DeleteMenu
GetDC
MapWindowPoints
GetMessageA
BeginPaint
DrawMenuBar
IntersectRect
GetParent
RegisterClassA
AdjustWindowRectEx
GrayStringA
RegisterHotKey
GetMenu
GetClassLongA
DrawIconEx
GetClipboardData
MapDialogRect
GetCursorPos
SetCapture
DrawEdge
ModifyMenuA
LoadAcceleratorsA
GetClassNameA
IsZoomed
IsWindowVisible
GetForegroundWindow
FindWindowA
InsertMenuItemA
GetKeyNameTextA
BringWindowToTop
SetScrollRange
GetDlgItem
ReleaseDC
TranslateAcceleratorA
CreatePopupMenu
MessageBoxA
DestroyAcceleratorTable
SetFocus
PostQuitMessage
DrawTextA
LoadMenuA
SendDlgItemMessageA
SetWindowLongA
EndDialog
ClientToScreen
GetSubMenu
GetWindowTextA
CallWindowProcA
UnionRect
CloseClipboard
GetMenuCheckMarkDimensions
GetClientRect
EnableMenuItem
PeekMessageA
SetRect
LoadCursorA
UnhookWindowsHookEx
CheckMenuItem
SetActiveWindow
GetSysColor
LoadStringA
SetWindowRgn
SetDlgItemTextA
DrawStateA
EndDeferWindowPos
HideCaret
SystemParametersInfoA
GetMessageTime
GetSystemMenu
SetClipboardData
WaitMessage
UnregisterHotKey
InvalidateRect
InflateRect
SetMenuItemInfoA
SetClassLongA
CallNextHookEx
GetMenuItemInfoA
GetSysColorBrush
GetWindowThreadProcessId
PtInRect
CreateCaret
RemoveMenu
SetCursorPos
DispatchMessageA
ShowWindow
MoveWindow
SetWindowPos
WindowFromPoint
AppendMenuA
UpdateWindow
SetPropA
DestroyCaret
InsertMenuA
IsClipboardFormatAvailable
GetKeyState
OpenClipboard
InvalidateRgn
GetMenuStringA
DestroyWindow
RemovePropA
CharNextA
LoadIconA
PostMessageA
ScreenToClient
EnableWindow
CreateAcceleratorTableA
DestroyIcon
CopyRect
IsRectEmpty
IsDialogMessageA
wsprintfA
SetWindowsHookExA
CharUpperA
UnpackDDElParam
DrawTextExA
SetWindowPlacement
LoadImageA
GetMessagePos
GetFocus
OffsetRect
CreateDialogParamA
WinHelpA
GetClassInfoA
GetWindowRect
LoadBitmapA
DestroyCursor
GetScrollPos
GetSystemMetrics
BeginDeferWindowPos
IsWindow
GetWindowLongA
ShowCaret
GetDesktopWindow
SetRectEmpty
ShowOwnedPopups
SetCursor
ReleaseCapture
RedrawWindow
IsIconic
EmptyClipboard
GetWindowPlacement
TranslateMessage
GetActiveWindow
GetWindowTextLengthA
ValidateRect
IsMenu
GetUpdateRect
DrawFocusRect
CreateDialogIndirectParamA
SetForegroundWindow
RegisterWindowMessageA
DeferWindowPos
TrackPopupMenu
SetScrollPos
GetWindow
SetScrollInfo
SendMessageA
GetLastActivePopup
EndPaint
SetWindowTextA
SetMenuDefaultItem
GetDlgCtrlID
GetMenuItemID
FillRect
EqualRect
GetPropA
EnumChildWindows
GetAsyncKeyState
SetMenu
SetParent
DestroyMenu
GetWindowDC
SetTimer
LockWindowUpdate
ShowScrollBar
GetCapture
GetIconInfo
PostThreadMessageA
GetMenuItemCount

ole32

CoUninitialize
CoInitialize
StgCreateDocfileOnILockBytes
DoDragDrop
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoGetClassObject
StringFromGUID2
OleIsCurrentClipboard
CoCreateInstance
CoInitializeSecurity
RegisterDragDrop
CoCreateGuid
CreateStreamOnHGlobal
CLSIDFromProgID
OleRegGetMiscStatus
CLSIDFromString
CoTaskMemRealloc
CreateILockBytesOnHGlobal
OleRegEnumVerbs

advapi32

RegCreateKeyExA
RegEnumValueA
RegOpenKeyA
RegCloseKey
RegDeleteKeyA
DeleteService
RegSetValueExA
InitializeSecurityDescriptor

wininet

InternetConnectA
HttpOpenRequestA

winmm

mixerGetNumDevs
mixerSetControlDetails
waveInAddBuffer
waveInGetNumDevs
waveOutClose
waveInUnprepareHeader
waveInClose
waveOutWrite
waveInGetDevCapsW
waveOutUnprepareHeader
waveOutReset
waveInStop
waveOutGetNumDevs
mixerOpen
waveOutGetPosition
mixerClose
waveInReset
waveInStart
waveInOpen
waveInPrepareHeader
waveOutPrepareHeader
waveOutGetDevCapsW
waveOutOpen

comctl32

ImageList_Destroy
ImageList_GetIcon
ord17
ImageList_GetIconSize
DestroyPropertySheetPage
InitCommonControlsEx
ImageList_Create
_TrackMouseEvent
ImageList_ReplaceIcon
CreatePropertySheetPageW
PropertySheetW
ImageList_GetImageInfo
ImageList_LoadImageW
ImageList_GetImageCount
ImageList_Draw
ImageList_DrawEx
ImageList_AddMasked

Sections

.text
Size: 124KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 476KB - Virtual size: 472KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 116KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

52ab84827bcb1ee5fa023631e22ba2a7

Headers

File Characteristics

Imports

oleaut32

comdlg32

kernel32

user32

ole32

advapi32

wininet

winmm

comctl32

Sections

.text Size: 124KB - Virtual size: 121KB

.rdata Size: 476KB - Virtual size: 472KB

.data Size: 116KB - Virtual size: 113KB

.rsrc Size: 64KB - Virtual size: 62KB

.text
Size: 124KB - Virtual size: 121KB

.rdata
Size: 476KB - Virtual size: 472KB

.data
Size: 116KB - Virtual size: 113KB

.rsrc
Size: 64KB - Virtual size: 62KB