34301d3484952195316f4af45826a44117faabde47965451370ccebc28dac6b2N

Sharing

Copy URL Twitter E-mail

General

Target

34301d3484952195316f4af45826a44117faabde47965451370ccebc28dac6b2N
Size

688KB
MD5

0ddb1b4ef8bfc0481239b89e05ec82c0
SHA1

34aa5fa7a2ecc9b93d0a6ca6e6b18e33cd9e19d7
SHA256

34301d3484952195316f4af45826a44117faabde47965451370ccebc28dac6b2
SHA512

d7cce57ec993f5c18c00bdc90c55bea86d45387de5386e31eafb0577bbfd064e8eb5f9203bbe0ca4c32c72bb05b03d8db92057b519d5d4d2d98ad2b034438435
SSDEEP

12288:zfIN3ey3eCtFKZrXTDTjJItoIKJ6I1eMR0eW9O6cPT5hDYPAK:zgN3eGeCjKZjHTjJIKZJ/L6ej6cl+P9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34301d3484952195316f4af45826a44117faabde47965451370ccebc28dac6b2N

Files

34301d3484952195316f4af45826a44117faabde47965451370ccebc28dac6b2N
.exe windows:4 windows x86 arch:x86

6f8051cb902600cf11ccc1ba83facef7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegSetKeySecurity
RegDeleteKeyA
InitializeSecurityDescriptor
RegQueryInfoKeyA
RegCreateKeyA

winspool.drv

GetPrinterA
OpenPrinterW
ClosePrinter

wininet

InternetCloseHandle
InternetConnectA
InternetErrorDlg
InternetSetOptionA
InternetReadFile
HttpSendRequestExA
HttpOpenRequestA
HttpSendRequestA
InternetWriteFile
HttpEndRequestA

comctl32

ImageList_DrawEx
ImageList_DragLeave
ord17
ImageList_LoadImageA

kernel32

GetVersion
TlsAlloc
SetLastError
VirtualAlloc
TlsGetValue
GetLastError
GetCommandLineA
HeapAlloc
GetModuleFileNameA
FreeEnvironmentStringsA
TerminateProcess
SetHandleCount
HeapFree
HeapCreate
GetStdHandle
CreateMutexA
InterlockedDecrement
EnterCriticalSection
SetEnvironmentVariableA
InterlockedIncrement
GetLocalTime
UnhandledExceptionFilter
GetStartupInfoA
GetModuleHandleA
GetSystemTime
GetOEMCP
RtlUnwind
GetStringTypeA
IsBadWritePtr
LCMapStringW
GetCPInfo
GetTickCount
GetCurrentProcessId
DeleteCriticalSection
ExitProcess
HeapReAlloc
GetTimeZoneInformation
GetSystemTimeAsFileTime
CloseHandle
CompareStringA
GetACP
FlushFileBuffers
GetCurrentProcess
FreeEnvironmentStringsW
CompareStringW
WideCharToMultiByte
SetStdHandle
FatalAppExitA
LeaveCriticalSection
InterlockedExchange
VirtualFree
GetEnvironmentStringsW
SetFilePointer
GetStringTypeW
InitializeCriticalSection
TlsFree
GetFileType
HeapDestroy
LoadLibraryA
MultiByteToWideChar
GetCurrentThread
QueryPerformanceCounter
ReadFile
TlsSetValue
GetProcAddress
GetCurrentThreadId
WriteFile
VirtualQuery
GetEnvironmentStrings
LCMapStringA

user32

MapWindowPoints
EndDeferWindowPos
EndPaint
DrawTextA
UpdateWindow
GetIconInfo
GetClassInfoExA
IsMenu
OffsetRect
wsprintfA
DrawFrameControl
IsWindowEnabled
SendDlgItemMessageA
GetClientRect
FillRect
SetWindowsHookExA
CharNextA
SetForegroundWindow
CharUpperA
CreateWindowExA
SetClipboardData
PostMessageA
PostQuitMessage
LoadStringA
BringWindowToTop
RegisterClassA
SetMenuItemBitmaps
MessageBoxA
GetDlgCtrlID
EnableMenuItem
ScreenToClient
ReleaseDC
GetMenuItemID
WindowFromPoint
GetSysColorBrush
GetWindowTextLengthA
PostThreadMessageA
ReleaseCapture
GetSystemMenu
SetTimer
CreateDialogIndirectParamA
SetRectEmpty
GetDlgItem
SetDlgItemInt
GetClassNameA
SetCursor
InvalidateRect
InflateRect
GetSubMenu
SetMenuDefaultItem
WaitMessage
GetActiveWindow
GetMessagePos
BeginPaint
GetWindowLongA
GetDCEx
DrawIcon
CloseClipboard
LoadImageA
MapDialogRect
GetMenuItemCount
SendMessageA
GetMenuCheckMarkDimensions
OpenClipboard
InsertMenuA
IsWindow
SetWindowTextA
GrayStringA
SetScrollPos
CopyIcon
GetWindowDC
RedrawWindow
TabbedTextOutA
IsRectEmpty
EmptyClipboard
CopyRect
IsChild
GetMenu
GetWindowThreadProcessId
GetClassLongA
DefWindowProcA
UnregisterClassA
SetWindowRgn
RegisterClassExA
GetMessageA
InvalidateRgn
DispatchMessageA
SetParent
TranslateMessage
AdjustWindowRectEx
EnableWindow
CheckMenuItem
ShowScrollBar
GetTopWindow
GetWindowTextA
GetKeyState
ValidateRect
ShowWindow
GetSystemMetrics
SetWindowPos
GetClassInfoA
GetDesktopWindow
BeginDeferWindowPos
GetCapture
SetWindowLongA
PeekMessageA
SetActiveWindow
GetLastActivePopup
SetFocus
DestroyIcon
UnionRect
SetCapture
SetRect
GetCursorPos
CopyImage
GetSysColor
DestroyWindow
GetMessageTime
GetFocus
MsgWaitForMultipleObjects
GetKeyboardLayout
MoveWindow
CreateCaret
ClientToScreen
EqualRect
DestroyMenu
LockWindowUpdate
KillTimer
GetMenuStringA
GetForegroundWindow

gdi32

DeleteDC
Chord
DeleteMetaFile
GetStockObject
GetObjectA
EndPage
DPtoLP
SetPixelV
LineTo
GetDeviceCaps
PolyPolygon
GetObjectType
OffsetViewportOrgEx
GetCharWidthA
OffsetClipRgn
SelectPalette
CreateDIBitmap
FlattenPath
GetOutlineTextMetricsA
GetArcDirection
CreateDCA
FrameRgn
PtInRegion
GetNearestPaletteIndex
CreatePenIndirect
ExtCreatePen
Polygon
GetCurrentObject
UpdateColors
GetPolyFillMode
StrokeAndFillPath
CreatePen
RestoreDC
StrokePath
GetBkMode
ResetDCA
SetRectRgn
CreateRectRgn
SaveDC
OffsetWindowOrgEx
GetStretchBltMode
PtVisible
GetROP2
EqualRgn
FillPath
SelectClipRgn
EndDoc
RectInRegion
GetRegionData
SetViewportOrgEx
GetPixel
SetStretchBltMode
CreateRoundRectRgn
SelectClipPath
CreateSolidBrush
CreateEllipticRgnIndirect
SetBkColor
GetWindowOrgEx
CreateHatchBrush
GetPaletteEntries
GetTextMetricsA
SetPolyFillMode
PathToRegion
PlayMetaFile
ResizePalette
SetTextAlign
GetPath
SetAbortProc
PolyPolyline
GetClipRgn
StartPage
RectVisible
DeleteObject
CombineRgn

shell32

ShellExecuteW
ShellExecuteExW
SHGetDesktopFolder
SHGetPathFromIDListW

ole32

CoUninitialize
CreateItemMoniker
OleIsCurrentClipboard
RevokeDragDrop
WriteClassStm
OleSetClipboard
DoDragDrop
OleUninitialize
CLSIDFromProgID
CLSIDFromString
CoFreeUnusedLibraries

Sections

.text
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 464KB - Virtual size: 461KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6f8051cb902600cf11ccc1ba83facef7

Headers

File Characteristics

Imports

advapi32

winspool.drv

wininet

comctl32

kernel32

user32

gdi32

shell32

ole32

Sections

.text Size: 72KB - Virtual size: 68KB

.rdata Size: 464KB - Virtual size: 461KB

.data Size: 92KB - Virtual size: 91KB

.rsrc Size: 56KB - Virtual size: 55KB

.text
Size: 72KB - Virtual size: 68KB

.rdata
Size: 464KB - Virtual size: 461KB

.data
Size: 92KB - Virtual size: 91KB

.rsrc
Size: 56KB - Virtual size: 55KB